0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 963.687261][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 963.720191][T16882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.098205][T11188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.189976][T16924] chnl_net:caif_netlink_parms(): no params data found [ 964.322781][T11188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.482936][T11188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.577776][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 964.586677][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 964.652927][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.667018][T11188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.679023][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.688077][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.696171][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 964.704189][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.775292][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.802089][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.812072][T16383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.821666][T16383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.831112][T16383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.841340][T16383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.849639][T16383] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 964.858022][T16383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 964.882111][T16924] device bridge_slave_0 entered promiscuous mode [ 964.893116][T16882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.032904][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.040034][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.066148][T16924] device bridge_slave_1 entered promiscuous mode [ 965.192516][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.288020][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.368648][T16924] team0: Port device team_slave_0 added [ 965.385202][T16924] team0: Port device team_slave_1 added [ 965.505552][T11188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.663167][ T5120] Bluetooth: hci0: command 0x0409 tx timeout [ 965.712868][T11188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.767616][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.782569][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.842241][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.896863][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 965.938375][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 965.981781][T11188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.053807][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.060800][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.101035][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.152355][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 966.160812][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 966.198088][T11188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.221487][T16882] device veth0_vlan entered promiscuous mode [ 966.235600][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 966.255823][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 966.321558][T16882] device veth1_vlan entered promiscuous mode [ 966.437625][T16924] device hsr_slave_0 entered promiscuous mode [ 966.444865][T16924] device hsr_slave_1 entered promiscuous mode [ 966.451616][T16924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 966.459810][T16924] Cannot create hsr debugfs directory [ 966.490712][T16938] chnl_net:caif_netlink_parms(): no params data found [ 966.628875][T16882] device veth0_macvtap entered promiscuous mode [ 966.680299][T16940] chnl_net:caif_netlink_parms(): no params data found [ 966.743469][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 966.752685][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 966.761666][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 966.782619][ T5120] Bluetooth: hci1: command 0x0409 tx timeout [ 966.872271][T16882] device veth1_macvtap entered promiscuous mode [ 966.942130][ T5120] Bluetooth: hci3: command 0x0409 tx timeout [ 966.963994][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.989251][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.002842][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.012773][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.023517][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.034389][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.045090][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.055068][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.065604][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.075495][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.086040][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.095941][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.107272][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.120401][T16882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.204389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 967.215797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 967.247720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 967.272869][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.287432][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.298066][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.308837][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.319067][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.329846][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.345943][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.356998][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.367325][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.378099][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.388229][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.401199][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.413219][T16882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.431347][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.481772][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.497666][T16938] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.519366][T16938] device bridge_slave_0 entered promiscuous mode [ 967.537167][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.563031][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 967.575785][T16882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.612073][T16882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.620830][T16882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.650305][T16882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.692476][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.706989][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.724776][T16938] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.742108][ T5120] Bluetooth: hci0: command 0x041b tx timeout [ 967.749520][T16938] device bridge_slave_1 entered promiscuous mode [ 967.799324][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.807536][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.831012][T16940] device bridge_slave_0 entered promiscuous mode [ 967.863609][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.910328][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.943318][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.971129][T16940] device bridge_slave_1 entered promiscuous mode [ 968.055478][T16938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.123392][T16924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.186875][T16938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.241385][T16940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.270848][T16924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.405364][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.416602][T16940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.445463][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.484944][T16924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.527075][T16938] team0: Port device team_slave_0 added [ 968.546094][T16938] team0: Port device team_slave_1 added [ 968.782823][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 968.852952][T16924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.863566][ T5120] Bluetooth: hci1: command 0x041b tx timeout [ 968.923473][T16938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.930464][T16938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.001938][T16938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.022009][ T5120] Bluetooth: hci3: command 0x041b tx timeout [ 969.044073][T16940] team0: Port device team_slave_0 added [ 969.071709][T16938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.102738][T16938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.191946][T16938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.249548][T16940] team0: Port device team_slave_1 added [ 969.362929][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.462304][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.470398][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.498213][T16940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.529741][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.572245][T16940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.603492][T16938] device hsr_slave_0 entered promiscuous mode [ 969.620248][T16938] device hsr_slave_1 entered promiscuous mode [ 969.627204][T16938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.635451][T16938] Cannot create hsr debugfs directory [ 969.641193][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 969.656188][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.709989][T16940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.721633][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.813938][T16940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.825074][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 970.034010][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:17:59 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:17:59 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:17:59 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:17:59 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 970.455421][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.522634][T16924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 970.593762][T16924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 970.608271][T16924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 970.653324][T16924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.708401][T16940] device hsr_slave_0 entered promiscuous mode [ 970.733533][T16940] device hsr_slave_1 entered promiscuous mode [ 970.770216][T16940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.799524][T16940] Cannot create hsr debugfs directory [ 970.942985][ T5120] Bluetooth: hci1: command 0x040f tx timeout 00:18:00 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 971.102512][ T5120] Bluetooth: hci3: command 0x040f tx timeout [ 971.744512][T17019] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 971.755890][T17019] CPU: 0 PID: 17019 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 971.766366][T17019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 971.776455][T17019] Call Trace: [ 971.779756][T17019] [ 971.782710][T17019] dump_stack_lvl+0xd1/0x138 [ 971.787345][T17019] dump_header+0x10b/0x85f [ 971.791801][T17019] oom_kill_process.cold+0x10/0x15 [ 971.796949][T17019] out_of_memory+0x35c/0x14a0 [ 971.801668][T17019] ? oom_killer_disable+0x280/0x280 [ 971.806894][T17019] ? mark_held_locks+0x9f/0xe0 [ 971.811703][T17019] mem_cgroup_out_of_memory+0x206/0x270 [ 971.817284][T17019] ? mem_cgroup_margin+0x130/0x130 [ 971.822442][T17019] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 971.828305][T17019] memory_max_write+0x2f9/0x3c0 [ 971.833207][T17019] ? mem_cgroup_force_empty_write+0x160/0x160 [ 971.839318][T17019] ? lock_release+0x810/0x810 [ 971.844041][T17019] cgroup_file_write+0x1e2/0x770 [ 971.849031][T17019] ? mem_cgroup_force_empty_write+0x160/0x160 [ 971.855148][T17019] ? kill_css+0x370/0x370 [ 971.859523][T17019] ? __virt_addr_valid+0x61/0x2e0 [ 971.864616][T17019] ? kill_css+0x370/0x370 [ 971.868996][T17019] kernfs_fop_write_iter+0x3f1/0x600 [ 971.874345][T17019] vfs_write+0x9ed/0xdd0 [ 971.878640][T17019] ? kernel_write+0x630/0x630 [ 971.883369][T17019] ? __fget_files+0x26a/0x440 [ 971.888110][T17019] ksys_write+0x12b/0x250 [ 971.892493][T17019] ? __ia32_sys_read+0xb0/0xb0 [ 971.897308][T17019] ? syscall_enter_from_user_mode+0x26/0xb0 [ 971.903248][T17019] do_syscall_64+0x39/0xb0 [ 971.903378][ T5120] Bluetooth: hci0: command 0x0419 tx timeout [ 971.907699][T17019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 971.919611][T17019] RIP: 0033:0x7f135be8c0c9 [ 971.924064][T17019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 971.943726][T17019] RSP: 002b:00007f135a9fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 971.952171][T17019] RAX: ffffffffffffffda RBX: 00007f135bfabf80 RCX: 00007f135be8c0c9 [ 971.960158][T17019] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 971.968151][T17019] RBP: 00007f135bee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 971.976131][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.984107][T17019] R13: 00007ffe474d39df R14: 00007f135a9fe300 R15: 0000000000022000 [ 971.992102][T17019] [ 972.090932][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.282608][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.289629][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 972.297696][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 972.348000][T17019] memory: usage 10744kB, limit 0kB, failcnt 1088 [ 972.354665][T17019] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 972.363235][T17019] Memory cgroup stats for /syz4: [ 972.363444][T17019] anon 147456 [ 972.363444][T17019] file 10412032 [ 972.363444][T17019] kernel 307200 [ 972.363444][T17019] kernel_stack 32768 [ 972.363444][T17019] pagetables 81920 [ 972.363444][T17019] sec_pagetables 0 [ 972.363444][T17019] percpu 64 [ 972.363444][T17019] sock 0 [ 972.363444][T17019] vmalloc 0 [ 972.363444][T17019] shmem 10412032 [ 972.363444][T17019] zswap 0 [ 972.363444][T17019] zswapped 0 [ 972.363444][T17019] file_mapped 172032 [ 972.363444][T17019] file_dirty 0 [ 972.363444][T17019] file_writeback 0 [ 972.363444][T17019] swapcached 0 [ 972.363444][T17019] anon_thp 0 [ 972.363444][T17019] file_thp 0 [ 972.363444][T17019] shmem_thp 0 [ 972.363444][T17019] inactive_anon 147456 [ 972.363444][T17019] active_anon 10412032 [ 972.363444][T17019] inactive_file 0 [ 972.363444][T17019] active_file 0 [ 972.363444][T17019] unevictable 0 [ 972.363444][T17019] slab_reclaimable 40176 [ 972.363444][T17019] slab_unreclaimable 125400 [ 972.363444][T17019] slab 165576 [ 972.382971][T16383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 972.478941][T16383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 972.492647][T16383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 972.499611][T17019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17018,uid=0 [ 972.526101][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 972.533965][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 972.542498][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 972.543694][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 972.556370][T17019] Memory cgroup out of memory: Killed process 17019 (syz-executor.4) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 972.558377][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.577926][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.581771][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state 00:18:01 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 972.623522][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 972.643221][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 972.651827][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.659371][T16165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.679451][T16882] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 972.692378][T16882] CPU: 1 PID: 16882 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 972.702833][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 972.712914][T16882] Call Trace: [ 972.716196][T16882] [ 972.719136][T16882] dump_stack_lvl+0xd1/0x138 [ 972.723744][T16882] dump_header+0x10b/0x85f [ 972.728170][T16882] oom_kill_process.cold+0x10/0x15 [ 972.733292][T16882] out_of_memory+0x35c/0x14a0 [ 972.737981][T16882] ? find_held_lock+0x2d/0x110 [ 972.742760][T16882] ? oom_killer_disable+0x280/0x280 [ 972.747974][T16882] ? find_held_lock+0x2d/0x110 [ 972.752771][T16882] mem_cgroup_out_of_memory+0x206/0x270 [ 972.758320][T16882] ? mem_cgroup_margin+0x130/0x130 [ 972.763436][T16882] ? lock_downgrade+0x6e0/0x6e0 [ 972.768306][T16882] try_charge_memcg+0xefb/0x12f0 [ 972.773257][T16882] ? mem_cgroup_handle_over_high+0x520/0x520 [ 972.779246][T16882] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 972.784973][T16882] ? lock_downgrade+0x6e0/0x6e0 [ 972.789833][T16882] ? lock_downgrade+0x6e0/0x6e0 [ 972.794720][T16882] __memcg_kmem_charge_page+0x16e/0x3b0 [ 972.800281][T16882] __alloc_pages+0x1f3/0x5b0 [ 972.804890][T16882] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 972.811677][T16882] ? find_held_lock+0x2d/0x110 [ 972.816465][T16882] alloc_pages+0x1aa/0x270 [ 972.820905][T16882] pte_alloc_one+0x1a/0x230 [ 972.825425][T16882] __pte_alloc+0x6d/0x260 [ 972.829768][T16882] ? pmd_install+0x160/0x160 [ 972.834369][T16882] ? _raw_spin_unlock+0x28/0x40 [ 972.839258][T16882] ? __pmd_alloc+0x30c/0x5d0 [ 972.844130][T16882] copy_page_range+0x17a8/0x3b40 [ 972.849119][T16882] ? mas_store+0x206/0x2e0 [ 972.853548][T16882] ? handle_mm_fault+0x850/0x850 [ 972.858511][T16882] ? anon_vma_fork+0xba/0x630 [ 972.863216][T16882] dup_mmap+0xc10/0x10b0 [ 972.867474][T16882] ? replace_mm_exe_file+0x4b0/0x4b0 [ 972.872779][T16882] ? lock_downgrade+0x6e0/0x6e0 [ 972.877643][T16882] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 972.883472][T16882] ? mm_init+0x8e0/0xc10 [ 972.887736][T16882] copy_process+0x440f/0x7520 [ 972.892428][T16882] ? _raw_spin_unlock+0x28/0x40 [ 972.897288][T16882] ? wp_page_reuse+0x197/0x570 [ 972.902076][T16882] ? __cleanup_sighand+0xb0/0xb0 [ 972.907019][T16882] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 972.912407][T16882] ? rwlock_bug.part.0+0x90/0x90 [ 972.917354][T16882] ? lock_chain_count+0x20/0x20 [ 972.922214][T16882] kernel_clone+0xeb/0x990 [ 972.926643][T16882] ? create_io_thread+0xf0/0xf0 [ 972.931508][T16882] ? find_held_lock+0x2d/0x110 [ 972.936320][T16882] __do_sys_clone+0xba/0x100 [ 972.940922][T16882] ? kernel_clone+0x990/0x990 [ 972.945620][T16882] ? syscall_enter_from_user_mode+0x26/0xb0 [ 972.951528][T16882] do_syscall_64+0x39/0xb0 [ 972.955963][T16882] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 972.961867][T16882] RIP: 0033:0x7f135be89dfb [ 972.966291][T16882] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 972.985914][T16882] RSP: 002b:00007ffe474d3c20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 972.994344][T16882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f135be89dfb [ 973.002317][T16882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 973.010303][T16882] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555fe5400 [ 973.018275][T16882] R10: 0000555555fe56d0 R11: 0000000000000246 R12: 0000000000000001 [ 973.026249][T16882] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe474d3d00 [ 973.034239][T16882] [ 973.045691][ T5119] Bluetooth: hci1: command 0x0419 tx timeout [ 973.062634][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 973.122292][T16882] memory: usage 10472kB, limit 0kB, failcnt 1107 [ 973.128680][T16882] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 973.162967][T16882] Memory cgroup stats for /syz4: [ 973.163177][T16882] anon 49152 [ 973.163177][T16882] file 10412032 [ 973.163177][T16882] kernel 225280 [ 973.163177][T16882] kernel_stack 32768 [ 973.163177][T16882] pagetables 20480 [ 973.163177][T16882] sec_pagetables 0 [ 973.163177][T16882] percpu 128 [ 973.163177][T16882] sock 0 [ 973.163177][T16882] vmalloc 0 [ 973.163177][T16882] shmem 10412032 [ 973.163177][T16882] zswap 0 [ 973.163177][T16882] zswapped 0 [ 973.163177][T16882] file_mapped 172032 [ 973.163177][T16882] file_dirty 0 [ 973.163177][T16882] file_writeback 0 [ 973.163177][T16882] swapcached 0 [ 973.163177][T16882] anon_thp 0 [ 973.163177][T16882] file_thp 0 [ 973.163177][T16882] shmem_thp 0 [ 973.163177][T16882] inactive_anon 49152 [ 973.163177][T16882] active_anon 10412032 [ 973.163177][T16882] inactive_file 0 [ 973.163177][T16882] active_file 0 [ 973.163177][T16882] unevictable 0 [ 973.163177][T16882] slab_reclaimable 39144 [ 973.163177][T16882] slab_unreclaimable 112776 [ 973.163177][T16882] slab 151920 [ 973.260163][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 973.293073][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 973.301344][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 973.320434][T16882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16882,uid=0 [ 973.336234][T16882] Memory cgroup out of memory: Killed process 16882 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 973.345374][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 973.393948][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 973.423385][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 973.452704][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 973.762801][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.771697][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.780114][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.788293][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.802770][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 973.811097][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 973.857130][T16924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.870076][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 973.985962][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 974.001874][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 974.011577][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:18:03 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 974.622491][ T5120] Bluetooth: hci4: command 0x0409 tx timeout [ 974.752775][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 974.760326][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 974.806349][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.982670][T17030] chnl_net:caif_netlink_parms(): no params data found [ 975.025530][T16938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 975.041529][T16938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 975.054874][T16938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.069839][T16938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 975.476184][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.485194][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 975.723693][T17030] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.730828][T17030] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.740656][T17030] device bridge_slave_0 entered promiscuous mode [ 975.853469][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 975.872121][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 975.895864][T17030] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.903411][ T5120] Bluetooth: hci2: command 0x0409 tx timeout [ 975.923417][T17030] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.931789][T17030] device bridge_slave_1 entered promiscuous mode [ 975.955603][T17045] chnl_net:caif_netlink_parms(): no params data found [ 975.986117][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 976.003522][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 976.112991][T16924] device veth0_vlan entered promiscuous mode [ 976.220572][T17030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.282669][T16938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.320629][T16924] device veth1_vlan entered promiscuous mode [ 976.330991][T17030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.504325][T17030] team0: Port device team_slave_0 added [ 976.510739][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 976.519178][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 976.563948][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 976.572069][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 976.702043][ T5120] Bluetooth: hci4: command 0x041b tx timeout [ 976.708773][T16938] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.724108][T17030] team0: Port device team_slave_1 added [ 976.757237][T16924] device veth0_macvtap entered promiscuous mode [ 976.784593][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 976.803404][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 976.842383][T16940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 976.904533][T17045] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.911676][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.921543][T17045] device bridge_slave_0 entered promiscuous mode [ 976.930846][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 976.952491][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.961329][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.982662][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.989808][T15894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.017791][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 977.032958][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 977.041505][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.048726][T15894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.070120][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 977.081626][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 977.090440][T16940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 977.106975][T16940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 977.120775][T16940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 977.145262][T17030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.162151][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.207810][T17030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.227870][T17030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.241941][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.279834][T17030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.297474][T16924] device veth1_macvtap entered promiscuous mode [ 977.305028][T17045] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.313329][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.321770][T17045] device bridge_slave_1 entered promiscuous mode [ 977.358248][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 977.367038][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.377426][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 977.454485][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 977.508189][T17030] device hsr_slave_0 entered promiscuous mode [ 977.518623][T17030] device hsr_slave_1 entered promiscuous mode [ 977.530625][T17030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.552900][T17030] Cannot create hsr debugfs directory [ 977.561152][T17045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.604168][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 977.620246][T16938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 977.632347][T16938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.653538][T17045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.673481][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.685815][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.696775][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.707449][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.717659][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.728572][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.738736][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.752808][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.762799][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.773334][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.783338][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.794749][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.804709][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.815534][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.827963][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.853628][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 977.869008][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 977.877541][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 977.886703][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 977.896485][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 977.907007][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.916677][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 977.965993][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.978378][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.988541][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.992293][ T5120] Bluetooth: hci2: command 0x041b tx timeout [ 978.000031][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.015254][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.025971][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.036118][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.046868][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.057085][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.071019][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.082762][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.094317][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.104619][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.115350][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.127124][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.150779][T17045] team0: Port device team_slave_0 added [ 978.165300][T17045] team0: Port device team_slave_1 added [ 978.178241][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 978.191685][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 978.223077][T16924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.231827][T16924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.241103][T16924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.250223][T16924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.400183][T17045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.425026][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.472064][T17045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.546950][T17045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.557529][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.652093][T17045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.782204][ T5119] Bluetooth: hci4: command 0x040f tx timeout [ 978.785740][T16940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.810689][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.829923][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.892991][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 978.922475][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 978.930063][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 979.045726][T17045] device hsr_slave_0 entered promiscuous mode [ 979.062527][T17045] device hsr_slave_1 entered promiscuous mode [ 979.086798][T17045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.102088][T17045] Cannot create hsr debugfs directory [ 979.115665][T16938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.161244][T16940] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.183461][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.192570][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.384048][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 979.413170][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.423202][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.589808][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.612579][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.652317][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.659484][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.693143][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.722165][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.731310][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.738479][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.009768][T17122] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 980.032106][T17122] CPU: 0 PID: 17122 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 980.042585][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 980.052670][T17122] Call Trace: [ 980.055980][T17122] [ 980.058938][T17122] dump_stack_lvl+0xd1/0x138 [ 980.063583][T17122] dump_header+0x10b/0x85f [ 980.068040][T17122] oom_kill_process.cold+0x10/0x15 [ 980.073187][T17122] out_of_memory+0x35c/0x14a0 [ 980.077917][T17122] ? oom_killer_disable+0x280/0x280 [ 980.083157][T17122] ? mark_held_locks+0x9f/0xe0 [ 980.087967][T17122] mem_cgroup_out_of_memory+0x206/0x270 [ 980.093548][T17122] ? mem_cgroup_margin+0x130/0x130 [ 980.098722][T17122] memory_max_write+0x2f9/0x3c0 [ 980.103616][T17122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 980.109727][T17122] ? lock_release+0x810/0x810 [ 980.114434][T17122] cgroup_file_write+0x1e2/0x770 [ 980.119389][T17122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 980.126432][T17122] ? kill_css+0x370/0x370 [ 980.130785][T17122] ? kill_css+0x370/0x370 [ 980.135127][T17122] kernfs_fop_write_iter+0x3f1/0x600 [ 980.140464][T17122] vfs_write+0x9ed/0xdd0 [ 980.144728][T17122] ? kernel_write+0x630/0x630 [ 980.149443][T17122] ksys_write+0x12b/0x250 [ 980.153784][T17122] ? __ia32_sys_read+0xb0/0xb0 [ 980.158574][T17122] ? syscall_enter_from_user_mode+0x26/0xb0 [ 980.164489][T17122] do_syscall_64+0x39/0xb0 [ 980.168941][T17122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 980.174850][T17122] RIP: 0033:0x7f25a188c0c9 [ 980.179272][T17122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 980.198886][T17122] RSP: 002b:00007f25a25b0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.207310][T17122] RAX: ffffffffffffffda RBX: 00007f25a19abf80 RCX: 00007f25a188c0c9 [ 980.215287][T17122] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 980.223262][T17122] RBP: 00007f25a18e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 980.231237][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.239212][T17122] R13: 00007ffc6c1b2bff R14: 00007f25a25b0300 R15: 0000000000022000 [ 980.247212][T17122] [ 980.261311][ T5120] Bluetooth: hci2: command 0x040f tx timeout [ 980.289554][T17122] memory: usage 10796kB, limit 0kB, failcnt 293 [ 980.296343][T17122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 980.307418][T17122] Memory cgroup stats for /syz0: [ 980.308157][T17122] anon 135168 [ 980.308157][T17122] file 10477568 [ 980.308157][T17122] kernel 368640 [ 980.308157][T17122] kernel_stack 98304 [ 980.308157][T17122] pagetables 77824 [ 980.308157][T17122] sec_pagetables 0 [ 980.308157][T17122] percpu 64 [ 980.308157][T17122] sock 0 [ 980.308157][T17122] vmalloc 0 [ 980.308157][T17122] shmem 10477568 [ 980.308157][T17122] zswap 0 [ 980.308157][T17122] zswapped 0 [ 980.308157][T17122] file_mapped 237568 [ 980.308157][T17122] file_dirty 0 [ 980.308157][T17122] file_writeback 0 [ 980.308157][T17122] swapcached 0 [ 980.308157][T17122] anon_thp 0 [ 980.308157][T17122] file_thp 0 [ 980.308157][T17122] shmem_thp 0 [ 980.308157][T17122] inactive_anon 2232320 [ 980.308157][T17122] active_anon 8380416 [ 980.308157][T17122] inactive_file 0 [ 980.308157][T17122] active_file 0 [ 980.308157][T17122] unevictable 0 [ 980.308157][T17122] slab_reclaimable 36536 [ 980.308157][T17122] slab_unreclaimable 123336 [ 980.308157][T17122] slab 159872 [ 980.409994][T17122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17121,uid=0 [ 980.428957][T17122] Memory cgroup out of memory: Killed process 17121 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 980.452480][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 980.460679][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.470692][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.480120][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 980.495201][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 980.504831][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 980.515017][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.581852][T16940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.612099][T16940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.662751][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 980.670830][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 980.692857][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 980.701577][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.733454][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.753944][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 980.862146][ T5120] Bluetooth: hci4: command 0x0419 tx timeout [ 980.872718][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 980.881743][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.916310][T16938] device veth0_vlan entered promiscuous mode [ 980.965018][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.983997][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.998250][T16938] device veth1_vlan entered promiscuous mode [ 981.036568][T11188] device hsr_slave_0 left promiscuous mode [ 981.050345][T11188] device hsr_slave_1 left promiscuous mode [ 981.089765][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.122291][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.139245][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.158209][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.184764][T11188] device bridge_slave_1 left promiscuous mode [ 981.191062][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.215257][T11188] device bridge_slave_0 left promiscuous mode [ 981.221533][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.255582][T11188] device hsr_slave_0 left promiscuous mode [ 981.282734][T11188] device hsr_slave_1 left promiscuous mode [ 981.289373][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.313029][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.322975][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.330550][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.354815][T11188] device bridge_slave_1 left promiscuous mode [ 981.361053][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.385712][T11188] device bridge_slave_0 left promiscuous mode [ 981.402094][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.428274][T11188] device hsr_slave_0 left promiscuous mode [ 981.442060][T11188] device hsr_slave_1 left promiscuous mode [ 981.448891][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.473025][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.483011][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.490466][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.500331][T11188] device bridge_slave_1 left promiscuous mode [ 981.522226][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.537618][T11188] device bridge_slave_0 left promiscuous mode [ 981.552099][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.582506][T11188] device hsr_slave_0 left promiscuous mode [ 981.602154][T11188] device hsr_slave_1 left promiscuous mode [ 981.612450][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.619924][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.630030][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.637773][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.647615][T11188] device bridge_slave_1 left promiscuous mode [ 981.654159][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.684050][T11188] device bridge_slave_0 left promiscuous mode [ 981.690313][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.732527][T11188] device hsr_slave_0 left promiscuous mode [ 981.739037][T11188] device hsr_slave_1 left promiscuous mode [ 981.747076][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.754885][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.764674][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.772282][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.782833][T11188] device bridge_slave_1 left promiscuous mode [ 981.789070][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.800509][T11188] device bridge_slave_0 left promiscuous mode [ 981.807104][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.823568][T11188] device hsr_slave_0 left promiscuous mode [ 981.842378][T11188] device hsr_slave_1 left promiscuous mode [ 981.852407][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.859876][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.888839][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.915087][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.925458][T11188] device bridge_slave_1 left promiscuous mode [ 981.931738][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.963388][T11188] device bridge_slave_0 left promiscuous mode [ 981.969590][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.029920][T11188] device veth1_macvtap left promiscuous mode [ 982.043947][T11188] device veth0_macvtap left promiscuous mode [ 982.050104][T11188] device veth1_vlan left promiscuous mode [ 982.056559][T11188] device veth0_vlan left promiscuous mode [ 982.064553][T11188] device veth1_macvtap left promiscuous mode [ 982.070626][T11188] device veth0_macvtap left promiscuous mode [ 982.077451][T11188] device veth1_vlan left promiscuous mode [ 982.083433][T11188] device veth0_vlan left promiscuous mode [ 982.092440][T11188] device veth1_macvtap left promiscuous mode [ 982.098512][T11188] device veth0_macvtap left promiscuous mode [ 982.105406][T11188] device veth1_vlan left promiscuous mode [ 982.111256][T11188] device veth0_vlan left promiscuous mode [ 982.133818][T11188] device veth1_macvtap left promiscuous mode [ 982.139924][T11188] device veth0_macvtap left promiscuous mode [ 982.162240][T11188] device veth1_vlan left promiscuous mode [ 982.168141][T11188] device veth0_vlan left promiscuous mode [ 982.178537][T11188] device veth1_macvtap left promiscuous mode [ 982.202018][T11188] device veth0_macvtap left promiscuous mode [ 982.208264][T11188] device veth1_vlan left promiscuous mode [ 982.214564][T11188] device veth0_vlan left promiscuous mode [ 982.232950][T11188] device veth1_macvtap left promiscuous mode [ 982.239039][T11188] device veth0_macvtap left promiscuous mode [ 982.261707][T11188] device veth1_vlan left promiscuous mode [ 982.269107][T11188] device veth0_vlan left promiscuous mode [ 982.302098][ T5120] Bluetooth: hci2: command 0x0419 tx timeout [ 983.872954][T11188] team0 (unregistering): Port device team_slave_1 removed [ 983.897371][T11188] team0 (unregistering): Port device team_slave_0 removed [ 983.914049][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.939198][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.093423][T11188] bond0 (unregistering): Released all slaves [ 984.300752][T11188] team0 (unregistering): Port device team_slave_1 removed [ 984.317841][T11188] team0 (unregistering): Port device team_slave_0 removed [ 984.333730][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.351131][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.543019][T11188] bond0 (unregistering): Released all slaves [ 984.848431][T11188] team0 (unregistering): Port device team_slave_1 removed [ 984.866234][T11188] team0 (unregistering): Port device team_slave_0 removed [ 984.881773][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.899707][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.056791][T11188] bond0 (unregistering): Released all slaves [ 985.346900][T11188] team0 (unregistering): Port device team_slave_1 removed [ 985.384945][T11188] team0 (unregistering): Port device team_slave_0 removed [ 985.426590][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.455153][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.632237][T11188] bond0 (unregistering): Released all slaves [ 985.934899][T11188] team0 (unregistering): Port device team_slave_1 removed [ 985.964780][T11188] team0 (unregistering): Port device team_slave_0 removed [ 985.980731][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.998561][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.142844][T11188] bond0 (unregistering): Released all slaves [ 986.444979][T11188] team0 (unregistering): Port device team_slave_1 removed [ 986.477412][T11188] team0 (unregistering): Port device team_slave_0 removed [ 986.525794][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.568683][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.751831][T11188] bond0 (unregistering): Released all slaves [ 986.890168][T16938] device veth0_macvtap entered promiscuous mode [ 986.922214][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 986.930270][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 986.945420][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 986.954487][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 987.089521][T16938] device veth1_macvtap entered promiscuous mode [ 987.130383][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 987.139123][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 987.147435][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 987.155433][T17030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 987.173304][T17030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 987.184924][T17030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 987.229665][T16938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.259674][T16938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.281789][T16938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.308838][T16938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.333759][T16938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.426889][T17030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 987.465119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 987.475291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.487102][T16938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.498699][T16938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.508953][T16938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.521088][T16938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.551404][T16938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.571255][T16940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.732291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.741141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.786765][T16938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.812543][T16938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.821865][T16938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.840709][T16938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.089151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.122700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.262498][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.282556][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 988.313833][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 988.323300][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 988.345318][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.363363][T16940] device veth0_vlan entered promiscuous mode [ 988.363730][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.410871][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.442026][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.467343][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 988.484863][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 988.506986][T17030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.534412][T16940] device veth1_vlan entered promiscuous mode [ 988.581866][T17030] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.599860][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 988.613703][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 988.639184][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 988.663828][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 988.693468][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.746623][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.782824][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.789969][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.893748][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 988.913437][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 988.960599][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.991345][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.998557][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.007092][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 989.016792][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.026528][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.053360][T16940] device veth0_macvtap entered promiscuous mode [ 989.074601][T17153] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 989.100241][T17045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 989.122312][T17153] CPU: 1 PID: 17153 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 989.132804][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 989.142899][T17153] Call Trace: [ 989.146217][T17153] [ 989.149182][T17153] dump_stack_lvl+0xd1/0x138 [ 989.153826][T17153] dump_header+0x10b/0x85f [ 989.158285][T17153] oom_kill_process.cold+0x10/0x15 [ 989.163444][T17153] out_of_memory+0x35c/0x14a0 [ 989.168176][T17153] ? oom_killer_disable+0x280/0x280 [ 989.173416][T17153] ? mark_held_locks+0x9f/0xe0 [ 989.178243][T17153] mem_cgroup_out_of_memory+0x206/0x270 [ 989.183846][T17153] ? mem_cgroup_margin+0x130/0x130 [ 989.189010][T17153] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 989.194873][T17153] memory_max_write+0x2f9/0x3c0 [ 989.199778][T17153] ? mem_cgroup_force_empty_write+0x160/0x160 [ 989.205901][T17153] ? lock_release+0x810/0x810 [ 989.210624][T17153] cgroup_file_write+0x1e2/0x770 [ 989.215617][T17153] ? mem_cgroup_force_empty_write+0x160/0x160 [ 989.221735][T17153] ? kill_css+0x370/0x370 [ 989.226112][T17153] ? __virt_addr_valid+0x61/0x2e0 [ 989.231209][T17153] ? kill_css+0x370/0x370 [ 989.235581][T17153] kernfs_fop_write_iter+0x3f1/0x600 [ 989.240932][T17153] vfs_write+0x9ed/0xdd0 [ 989.245230][T17153] ? kernel_write+0x630/0x630 [ 989.249956][T17153] ? __fget_files+0x26a/0x440 [ 989.254695][T17153] ksys_write+0x12b/0x250 [ 989.259073][T17153] ? __ia32_sys_read+0xb0/0xb0 [ 989.263895][T17153] ? syscall_enter_from_user_mode+0x30/0xb0 [ 989.269841][T17153] do_syscall_64+0x39/0xb0 [ 989.274308][T17153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 989.280250][T17153] RIP: 0033:0x7f382428c0c9 [ 989.284695][T17153] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 989.306254][T17153] RSP: 002b:00007f3824ff9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 989.314718][T17153] RAX: ffffffffffffffda RBX: 00007f38243abf80 RCX: 00007f382428c0c9 [ 989.322726][T17153] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 989.330735][T17153] RBP: 00007f38242e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 989.338744][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.346752][T17153] R13: 00007ffc9c788f8f R14: 00007f3824ff9300 R15: 0000000000022000 [ 989.354797][T17153] [ 989.362769][T17153] memory: usage 8716kB, limit 0kB, failcnt 248 [ 989.364766][T17045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 989.369226][T17153] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 989.384458][T17153] Memory cgroup stats for /syz3: [ 989.386324][T17153] anon 139264 [ 989.386324][T17153] file 8347648 [ 989.386324][T17153] kernel 364544 [ 989.386324][T17153] kernel_stack 98304 [ 989.386324][T17153] pagetables 77824 [ 989.386324][T17153] sec_pagetables 0 [ 989.386324][T17153] percpu 64 [ 989.386324][T17153] sock 0 [ 989.386324][T17153] vmalloc 0 [ 989.386324][T17153] shmem 8347648 [ 989.386324][T17153] zswap 0 [ 989.386324][T17153] zswapped 0 [ 989.386324][T17153] file_mapped 204800 [ 989.386324][T17153] file_dirty 0 [ 989.386324][T17153] file_writeback 0 [ 989.386324][T17153] swapcached 0 [ 989.386324][T17153] anon_thp 0 [ 989.386324][T17153] file_thp 0 [ 989.386324][T17153] shmem_thp 0 [ 989.386324][T17153] inactive_anon 8228864 [ 989.386324][T17153] active_anon 258048 [ 989.386324][T17153] inactive_file 0 [ 989.386324][T17153] active_file 0 [ 989.386324][T17153] unevictable 0 [ 989.386324][T17153] slab_reclaimable 35904 [ 989.386324][T17153] slab_unreclaimable 127888 [ 989.386324][T17153] slab 163792 [ 989.502061][T17153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17151,uid=0 [ 989.503426][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.528644][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 989.532148][T17153] Memory cgroup out of memory: Killed process 17153 (syz-executor.3) total-vm:56720kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 989.539502][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 989.570069][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 989.583014][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 989.591627][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 989.604117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 989.613566][T16940] device veth1_macvtap entered promiscuous mode [ 989.626387][T17045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 989.650432][T17030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.681062][T17030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 989.711143][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.725907][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.735973][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.746898][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.756886][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.767891][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.779674][T16940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.789837][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 989.803683][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 989.824827][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.833910][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.843411][T17045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 989.871705][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.892328][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.918158][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.945429][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.962223][T16940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.986628][T16940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.012581][T16940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.043830][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 990.054285][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 990.096307][T16940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.107896][T16940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.129883][T16940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.142354][T16940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.352989][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.375013][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.399082][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.399654][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 990.432253][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.455341][T17030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.478062][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.507191][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 990.516568][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.532716][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.553371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.561507][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.568954][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.569575][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.602463][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.609606][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.632883][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.652621][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.672350][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.679485][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.727609][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 990.739793][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 990.748806][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 990.768023][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 990.777441][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 990.803154][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 990.823202][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 990.843090][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 990.863639][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 990.886225][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 990.902788][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 990.916429][T17045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 991.312892][T17195] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 991.356907][T17195] CPU: 0 PID: 17195 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 991.367394][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 991.377489][T17195] Call Trace: [ 991.380792][T17195] [ 991.383751][T17195] dump_stack_lvl+0xd1/0x138 [ 991.388393][T17195] dump_header+0x10b/0x85f [ 991.392859][T17195] oom_kill_process.cold+0x10/0x15 [ 991.398014][T17195] out_of_memory+0x35c/0x14a0 [ 991.402733][T17195] ? oom_killer_disable+0x280/0x280 [ 991.407975][T17195] mem_cgroup_out_of_memory+0x206/0x270 [ 991.413556][T17195] ? mem_cgroup_margin+0x130/0x130 [ 991.418728][T17195] memory_max_write+0x2f9/0x3c0 [ 991.423626][T17195] ? mem_cgroup_force_empty_write+0x160/0x160 [ 991.429744][T17195] ? lock_release+0x810/0x810 [ 991.434462][T17195] cgroup_file_write+0x1e2/0x770 [ 991.439441][T17195] ? mem_cgroup_force_empty_write+0x160/0x160 [ 991.445552][T17195] ? kill_css+0x370/0x370 [ 991.449923][T17195] ? __virt_addr_valid+0x61/0x2e0 [ 991.455030][T17195] ? kill_css+0x370/0x370 [ 991.459415][T17195] kernfs_fop_write_iter+0x3f1/0x600 [ 991.464751][T17195] vfs_write+0x9ed/0xdd0 [ 991.469038][T17195] ? kernel_write+0x630/0x630 [ 991.473761][T17195] ? __fget_files+0x26a/0x440 [ 991.478496][T17195] ksys_write+0x12b/0x250 [ 991.482863][T17195] ? __ia32_sys_read+0xb0/0xb0 [ 991.487676][T17195] ? syscall_enter_from_user_mode+0x26/0xb0 [ 991.493626][T17195] do_syscall_64+0x39/0xb0 [ 991.498103][T17195] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 991.504039][T17195] RIP: 0033:0x7faa9b48c0c9 [ 991.508487][T17195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 991.528137][T17195] RSP: 002b:00007faa9c27f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 991.536596][T17195] RAX: ffffffffffffffda RBX: 00007faa9b5ac050 RCX: 00007faa9b48c0c9 [ 991.544613][T17195] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 991.552627][T17195] RBP: 00007faa9b4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 991.560650][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.568664][T17195] R13: 00007ffc370694df R14: 00007faa9c27f300 R15: 0000000000022000 [ 991.576707][T17195] [ 991.621668][T17195] memory: usage 8676kB, limit 0kB, failcnt 164 [ 991.628120][T17195] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 991.635965][T17195] Memory cgroup stats for /syz2: [ 991.636181][T17195] anon 126976 [ 991.636181][T17195] file 8388608 [ 991.636181][T17195] kernel 368640 [ 991.636181][T17195] kernel_stack 98304 [ 991.636181][T17195] pagetables 81920 [ 991.636181][T17195] sec_pagetables 0 [ 991.636181][T17195] percpu 64 [ 991.636181][T17195] sock 0 [ 991.636181][T17195] vmalloc 0 [ 991.636181][T17195] shmem 8380416 [ 991.636181][T17195] zswap 0 [ 991.636181][T17195] zswapped 0 [ 991.636181][T17195] file_mapped 237568 [ 991.636181][T17195] file_dirty 0 [ 991.636181][T17195] file_writeback 0 [ 991.636181][T17195] swapcached 0 [ 991.636181][T17195] anon_thp 0 [ 991.636181][T17195] file_thp 0 [ 991.636181][T17195] shmem_thp 0 [ 991.636181][T17195] inactive_anon 126976 [ 991.636181][T17195] active_anon 8380416 [ 991.636181][T17195] inactive_file 4096 [ 991.636181][T17195] active_file 4096 [ 991.636181][T17195] unevictable 0 [ 991.636181][T17195] slab_reclaimable 37688 [ 991.636181][T17195] slab_unreclaimable 122040 [ 991.636181][T17195] slab 159728 [ 991.792125][T17195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17191,uid=0 00:18:20 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:20 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:20 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) 00:18:20 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 991.833228][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 991.856055][T17195] Memory cgroup out of memory: Killed process 17195 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 991.857899][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 991.963082][T16938] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 991.970935][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.001981][T16938] CPU: 1 PID: 16938 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 992.012458][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 992.022542][T16938] Call Trace: [ 992.025849][T16938] [ 992.028806][T16938] dump_stack_lvl+0xd1/0x138 [ 992.033440][T16938] dump_header+0x10b/0x85f [ 992.037899][T16938] oom_kill_process.cold+0x10/0x15 [ 992.043049][T16938] out_of_memory+0x35c/0x14a0 [ 992.047767][T16938] ? find_held_lock+0x2d/0x110 [ 992.052572][T16938] ? oom_killer_disable+0x280/0x280 [ 992.057809][T16938] ? find_held_lock+0x2d/0x110 [ 992.062617][T16938] mem_cgroup_out_of_memory+0x206/0x270 [ 992.068189][T16938] ? mem_cgroup_margin+0x130/0x130 [ 992.073327][T16938] ? lock_downgrade+0x6e0/0x6e0 [ 992.078225][T16938] try_charge_memcg+0xefb/0x12f0 [ 992.083214][T16938] ? mem_cgroup_handle_over_high+0x520/0x520 [ 992.089235][T16938] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 992.094987][T16938] ? lock_downgrade+0x6e0/0x6e0 [ 992.099875][T16938] ? lock_downgrade+0x6e0/0x6e0 [ 992.104774][T16938] __memcg_kmem_charge_page+0x16e/0x3b0 [ 992.110364][T16938] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 992.116557][T16938] copy_process+0x4e3/0x7520 [ 992.121183][T16938] ? _raw_spin_unlock+0x28/0x40 [ 992.126077][T16938] ? wp_page_reuse+0x197/0x570 [ 992.130890][T16938] ? do_wp_page+0x844/0x3370 [ 992.135531][T16938] ? __cleanup_sighand+0xb0/0xb0 [ 992.140501][T16938] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 992.145927][T16938] ? rwlock_bug.part.0+0x90/0x90 [ 992.150911][T16938] ? lock_chain_count+0x20/0x20 [ 992.155809][T16938] kernel_clone+0xeb/0x990 [ 992.160268][T16938] ? create_io_thread+0xf0/0xf0 [ 992.165169][T16938] ? find_held_lock+0x2d/0x110 [ 992.169986][T16938] __do_sys_clone+0xba/0x100 [ 992.174607][T16938] ? kernel_clone+0x990/0x990 [ 992.179343][T16938] ? syscall_enter_from_user_mode+0x26/0xb0 [ 992.185299][T16938] do_syscall_64+0x39/0xb0 [ 992.189771][T16938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 992.195716][T16938] RIP: 0033:0x7f3824289dfb [ 992.200170][T16938] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 992.219818][T16938] RSP: 002b:00007ffc9c7891d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.228277][T16938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3824289dfb [ 992.236284][T16938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 992.244282][T16938] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556f24400 [ 992.252292][T16938] R10: 0000555556f246d0 R11: 0000000000000246 R12: 0000000000000001 [ 992.260301][T16938] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc9c7892b0 [ 992.268443][T16938] [ 992.289459][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 992.298524][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 992.306090][T16938] memory: usage 8328kB, limit 0kB, failcnt 267 [ 992.306110][T16938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.306124][T16938] Memory cgroup stats for /syz3: [ 992.306345][T16938] anon 40960 [ 992.306345][T16938] file 8347648 [ 992.306345][T16938] kernel 139264 [ 992.306345][T16938] kernel_stack 0 [ 992.306345][T16938] pagetables 8192 [ 992.306345][T16938] sec_pagetables 0 [ 992.306345][T16938] percpu 0 [ 992.306345][T16938] sock 0 [ 992.306345][T16938] vmalloc 0 [ 992.306345][T16938] shmem 8347648 [ 992.306345][T16938] zswap 0 [ 992.306345][T16938] zswapped 0 [ 992.306345][T16938] file_mapped 180224 [ 992.306345][T16938] file_dirty 0 [ 992.306345][T16938] file_writeback 0 [ 992.306345][T16938] swapcached 0 [ 992.306345][T16938] anon_thp 0 [ 992.306345][T16938] file_thp 0 [ 992.306345][T16938] shmem_thp 0 [ 992.306345][T16938] inactive_anon 8130560 [ 992.306345][T16938] active_anon 258048 [ 992.306345][T16938] inactive_file 0 [ 992.306345][T16938] active_file 0 [ 992.306345][T16938] unevictable 0 [ 992.306345][T16938] slab_reclaimable 33328 [ 992.306345][T16938] slab_unreclaimable 81016 [ 992.306345][T16938] slab 114344 [ 992.306398][T16938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 992.442020][T17030] device veth0_vlan entered promiscuous mode [ 992.447687][T16938] ,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16938,uid=0 [ 992.478181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 992.491761][T16938] Memory cgroup out of memory: Killed process 16938 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 992.518349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 992.528379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 992.545890][T16924] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 992.572656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 992.590034][T16924] CPU: 0 PID: 16924 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 992.600684][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 992.613460][T16924] Call Trace: [ 992.616774][T16924] [ 992.619747][T16924] dump_stack_lvl+0xd1/0x138 [ 992.624396][T16924] dump_header+0x10b/0x85f [ 992.628861][T16924] oom_kill_process.cold+0x10/0x15 [ 992.634020][T16924] out_of_memory+0x35c/0x14a0 [ 992.638744][T16924] ? oom_killer_disable+0x280/0x280 [ 992.643992][T16924] ? find_held_lock+0x2d/0x110 [ 992.648819][T16924] mem_cgroup_out_of_memory+0x206/0x270 [ 992.654409][T16924] ? mem_cgroup_margin+0x130/0x130 [ 992.659557][T16924] ? lock_downgrade+0x6e0/0x6e0 [ 992.664468][T16924] try_charge_memcg+0xefb/0x12f0 [ 992.669457][T16924] ? mem_cgroup_handle_over_high+0x520/0x520 [ 992.675479][T16924] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 992.681244][T16924] ? lock_downgrade+0x6e0/0x6e0 [ 992.686143][T16924] ? lock_downgrade+0x6e0/0x6e0 [ 992.691027][T16924] ? rcu_read_unlock+0x9/0x60 [ 992.695767][T16924] obj_cgroup_charge+0x2af/0x5e0 [ 992.700753][T16924] ? copy_process+0x3aa/0x7520 [ 992.705554][T16924] kmem_cache_alloc_node+0xb7/0x460 [ 992.710802][T16924] copy_process+0x3aa/0x7520 [ 992.715429][T16924] ? _raw_spin_unlock+0x28/0x40 [ 992.720324][T16924] ? wp_page_reuse+0x197/0x570 [ 992.725141][T16924] ? do_wp_page+0x844/0x3370 [ 992.729788][T16924] ? __cleanup_sighand+0xb0/0xb0 [ 992.734761][T16924] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 992.740186][T16924] ? rwlock_bug.part.0+0x90/0x90 [ 992.745162][T16924] ? lock_chain_count+0x20/0x20 [ 992.750055][T16924] kernel_clone+0xeb/0x990 [ 992.754524][T16924] ? create_io_thread+0xf0/0xf0 [ 992.759419][T16924] ? find_held_lock+0x2d/0x110 [ 992.764241][T16924] __do_sys_clone+0xba/0x100 [ 992.768867][T16924] ? kernel_clone+0x990/0x990 [ 992.773608][T16924] ? syscall_enter_from_user_mode+0x26/0xb0 [ 992.779550][T16924] do_syscall_64+0x39/0xb0 [ 992.784021][T16924] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 992.789949][T16924] RIP: 0033:0x7f25a1889dfb [ 992.794385][T16924] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 992.814023][T16924] RSP: 002b:00007ffc6c1b2e40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.822477][T16924] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f25a1889dfb [ 992.830486][T16924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 992.838490][T16924] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557342400 [ 992.846499][T16924] R10: 00005555573426d0 R11: 0000000000000246 R12: 0000000000000001 [ 992.854504][T16924] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc6c1b2f20 [ 992.862534][T16924] [ 992.868767][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.875196][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.891043][T16924] memory: usage 10380kB, limit 0kB, failcnt 312 [ 992.897617][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 992.897666][T16924] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.911779][T16924] Memory cgroup stats for /syz0: [ 992.912140][T16924] anon 40960 [ 992.912140][T16924] file 10477568 [ 992.912140][T16924] kernel 110592 [ 992.912140][T16924] kernel_stack 0 [ 992.912140][T16924] pagetables 8192 [ 992.912140][T16924] sec_pagetables 0 [ 992.912140][T16924] percpu 0 [ 992.912140][T16924] sock 0 [ 992.912140][T16924] vmalloc 0 [ 992.912140][T16924] shmem 10477568 [ 992.912140][T16924] zswap 0 [ 992.912140][T16924] zswapped 0 [ 992.912140][T16924] file_mapped 208896 [ 992.912140][T16924] file_dirty 0 [ 992.912140][T16924] file_writeback 0 [ 992.912140][T16924] swapcached 0 [ 992.912140][T16924] anon_thp 0 [ 992.912140][T16924] file_thp 0 [ 992.912140][T16924] shmem_thp 0 [ 992.912140][T16924] inactive_anon 2138112 [ 992.912140][T16924] active_anon 8380416 [ 992.912140][T16924] inactive_file 0 [ 992.912140][T16924] active_file 0 [ 992.912140][T16924] unevictable 0 [ 992.912140][T16924] slab_reclaimable 33192 [ 992.912140][T16924] slab_unreclaimable 59008 [ 992.912140][T16924] slab 92200 [ 992.922828][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 993.014011][T16924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16924,uid=0 [ 993.048245][T16924] Memory cgroup out of memory: Killed process 16924 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 993.056673][T17030] device veth1_vlan entered promiscuous mode [ 993.071667][T16940] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 993.102707][T16940] CPU: 0 PID: 16940 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 993.113185][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 993.123264][T16940] Call Trace: [ 993.124108][T17045] device veth0_vlan entered promiscuous mode [ 993.126542][T16940] [ 993.126554][T16940] dump_stack_lvl+0xd1/0x138 [ 993.140152][T16940] dump_header+0x10b/0x85f [ 993.144607][T16940] oom_kill_process.cold+0x10/0x15 [ 993.149765][T16940] out_of_memory+0x35c/0x14a0 [ 993.154501][T16940] ? oom_killer_disable+0x280/0x280 [ 993.159742][T16940] ? find_held_lock+0x2d/0x110 [ 993.161027][T17045] device veth1_vlan entered promiscuous mode [ 993.164528][T16940] mem_cgroup_out_of_memory+0x206/0x270 [ 993.164558][T16940] ? mem_cgroup_margin+0x130/0x130 [ 993.164578][T16940] ? lock_downgrade+0x6e0/0x6e0 [ 993.186095][T16940] try_charge_memcg+0xefb/0x12f0 [ 993.191083][T16940] ? mem_cgroup_handle_over_high+0x520/0x520 [ 993.197118][T16940] ? lock_downgrade+0x6e0/0x6e0 [ 993.202023][T16940] charge_memcg+0x90/0x3b0 [ 993.206489][T16940] __mem_cgroup_charge+0x2b/0x90 [ 993.208477][T17045] device veth0_macvtap entered promiscuous mode [ 993.211451][T16940] ? copy_mc_to_kernel+0x3e/0x90 [ 993.222650][T16940] do_wp_page+0x7ec/0x3370 [ 993.227124][T16940] ? lock_release+0x810/0x810 [ 993.231835][T16940] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 993.237254][T16940] ? do_raw_spin_lock+0x124/0x2b0 [ 993.242314][T16940] ? rwlock_bug.part.0+0x90/0x90 [ 993.242735][T17045] device veth1_macvtap entered promiscuous mode [ 993.247261][T16940] ? lock_chain_count+0x20/0x20 [ 993.247294][T16940] __handle_mm_fault+0x1f58/0x3c90 [ 993.263501][T16940] ? vm_iomap_memory+0x190/0x190 [ 993.268514][T16940] handle_mm_fault+0x1b6/0x850 [ 993.273330][T16940] do_user_addr_fault+0x475/0x1210 [ 993.278481][T16940] ? rcu_read_lock_sched_held+0x3e/0x70 [ 993.284080][T16940] exc_page_fault+0x98/0x170 [ 993.288706][T16940] asm_exc_page_fault+0x26/0x30 [ 993.293596][T16940] RIP: 0033:0x7faa9b489eb0 [ 993.298048][T16940] Code: 89 e8 5d 41 5c 41 5d c3 66 90 48 c7 c2 b8 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 85 ed 74 14 48 83 3d 3a 81 0f 00 00 74 05 5b 16 fd ff e8 16 bf fc ff 44 89 e6 bf 02 00 00 00 e8 99 cb fc [ 993.314110][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.317664][T16940] RSP: 002b:00007ffc37069720 EFLAGS: 00010202 [ 993.334169][T16940] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 00007faa9b489dfb [ 993.342181][T16940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 993.350183][T16940] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555610e400 [ 993.358185][T16940] R10: 000055555610e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 993.366193][T16940] R13: 0000000000000007 R14: 0000000000000001 R15: 00007ffc37069800 [ 993.374224][T16940] [ 993.380534][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.388971][T16940] memory: usage 8492kB, limit 0kB, failcnt 220 [ 993.396802][T16940] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.403890][T16940] Memory cgroup stats for /syz2: [ 993.403960][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.404075][T16940] anon 45056 [ 993.404075][T16940] file 8388608 [ 993.404075][T16940] kernel 262144 [ 993.404075][T16940] kernel_stack 32768 [ 993.404075][T16940] pagetables 57344 [ 993.404075][T16940] sec_pagetables 0 [ 993.404075][T16940] percpu 128 [ 993.404075][T16940] sock 0 [ 993.404075][T16940] vmalloc 0 [ 993.404075][T16940] shmem 8380416 [ 993.404075][T16940] zswap 0 [ 993.404075][T16940] zswapped 0 [ 993.404075][T16940] file_mapped 208896 [ 993.404075][T16940] file_dirty 0 [ 993.404075][T16940] file_writeback 0 [ 993.404075][T16940] swapcached 0 [ 993.404075][T16940] anon_thp 0 [ 993.404075][T16940] file_thp 0 [ 993.404075][T16940] shmem_thp 0 [ 993.404075][T16940] inactive_anon 45056 [ 993.404075][T16940] active_anon 8380416 [ 993.404075][T16940] inactive_file 4096 [ 993.404075][T16940] active_file 4096 [ 993.404075][T16940] unevictable 0 [ 993.404075][T16940] slab_reclaimable 30824 [ 993.404075][T16940] slab_unreclaimable 113992 [ 993.404075][T16940] slab 144816 [ 993.408911][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.419398][T16940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg= [ 993.517706][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.544812][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.555254][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.565905][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.577716][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.582799][T16940] /syz2,task=syz-executor.2,pid=16940,uid=0 [ 993.601993][T16940] Memory cgroup out of memory: Killed process 16940 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 993.726296][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 993.743219][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.773956][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 993.802365][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 993.823060][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 993.831771][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 993.852819][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 993.860973][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 00:18:22 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 993.884636][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 993.990826][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 994.003901][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 994.023328][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 994.031190][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 994.038811][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 994.048442][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.056445][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 994.057130][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 00:18:23 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 994.103113][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 994.353148][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.386272][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.399429][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.417234][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.439636][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.465073][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.486222][T17045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.521941][T17045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.562088][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.592679][T17045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.622520][T17045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.631279][T17045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.681454][T17045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.706645][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 994.724009][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.752892][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 994.761688][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 994.813505][T17030] device veth0_macvtap entered promiscuous mode [ 994.865913][T17030] device veth1_macvtap entered promiscuous mode [ 994.987370][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.998864][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.020608][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.050272][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.066015][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.077004][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.103621][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.121929][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.131828][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.171941][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.190375][T17030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.225136][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.242888][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.251195][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.289533][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.332046][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.359933][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.382727][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.402040][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.424322][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.452483][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.481954][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.519521][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.550265][T17030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.580067][T17030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.599503][T17030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.626998][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.635501][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.645595][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.653886][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.699904][T17030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.710467][T17030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.719890][T17030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.729982][T17030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.742413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 995.812279][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.852629][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.948939][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.142115][ T5119] Bluetooth: hci0: command 0x0409 tx timeout [ 996.156240][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.231427][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.271793][T17224] chnl_net:caif_netlink_parms(): no params data found 00:18:25 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 996.369883][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.478091][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.538900][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.617475][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.780267][T17224] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.837654][T17224] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.852193][T16383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 996.861501][T16383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 996.870628][T16383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 996.879161][T16383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 996.887261][T16383] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 996.894845][T16383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 996.949123][T17224] device bridge_slave_0 entered promiscuous mode [ 996.969039][T17224] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.976694][T17224] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.985561][T17224] device bridge_slave_1 entered promiscuous mode [ 997.118881][T17224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.171573][T17224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.192518][T17268] syz-executor.5 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 997.254790][T17268] CPU: 1 PID: 17268 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 997.265265][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 997.275434][T17268] Call Trace: [ 997.278735][T17268] [ 997.281688][T17268] dump_stack_lvl+0xd1/0x138 [ 997.286330][T17268] dump_header+0x10b/0x85f [ 997.290781][T17268] oom_kill_process.cold+0x10/0x15 [ 997.295928][T17268] out_of_memory+0x35c/0x14a0 [ 997.300634][T17268] ? find_held_lock+0x2d/0x110 [ 997.305453][T17268] ? oom_killer_disable+0x280/0x280 [ 997.310707][T17268] ? find_held_lock+0x2d/0x110 [ 997.315534][T17268] mem_cgroup_out_of_memory+0x206/0x270 [ 997.321128][T17268] ? mem_cgroup_margin+0x130/0x130 [ 997.326285][T17268] ? lock_downgrade+0x6e0/0x6e0 [ 997.331198][T17268] try_charge_memcg+0xefb/0x12f0 [ 997.336193][T17268] ? mem_cgroup_handle_over_high+0x520/0x520 [ 997.342223][T17268] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 997.347987][T17268] ? lock_downgrade+0x6e0/0x6e0 [ 997.352883][T17268] ? lock_downgrade+0x6e0/0x6e0 [ 997.357772][T17268] ? rcu_read_unlock+0x9/0x60 [ 997.362515][T17268] obj_cgroup_charge+0x2af/0x5e0 [ 997.367495][T17268] ? __alloc_file+0x21/0x270 [ 997.372134][T17268] kmem_cache_alloc+0xb5/0x430 [ 997.376947][T17268] __alloc_file+0x21/0x270 [ 997.381412][T17268] alloc_empty_file+0x71/0x170 [ 997.386226][T17268] path_openat+0xe1/0x2a50 [ 997.390700][T17268] ? path_lookupat+0x840/0x840 [ 997.395526][T17268] do_filp_open+0x1ba/0x410 [ 997.400082][T17268] ? may_open_dev+0xf0/0xf0 [ 997.404629][T17268] ? find_held_lock+0x2d/0x110 [ 997.409454][T17268] ? do_raw_spin_lock+0x124/0x2b0 [ 997.414517][T17268] ? rwlock_bug.part.0+0x90/0x90 [ 997.419505][T17268] ? _raw_spin_unlock+0x28/0x40 [ 997.424400][T17268] ? alloc_fd+0x2d8/0x6d0 [ 997.428776][T17268] do_sys_openat2+0x16d/0x4c0 [ 997.433493][T17268] ? build_open_flags+0x6f0/0x6f0 [ 997.438558][T17268] ? xfd_validate_state+0x5d/0x180 [ 997.443717][T17268] __x64_sys_openat+0x143/0x1f0 [ 997.448604][T17268] ? __ia32_sys_open+0x1c0/0x1c0 [ 997.453584][T17268] ? syscall_enter_from_user_mode+0x26/0xb0 [ 997.459533][T17268] do_syscall_64+0x39/0xb0 [ 997.464093][T17268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 997.470034][T17268] RIP: 0033:0x7f0d87c8c0c9 [ 997.474480][T17268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 997.494141][T17268] RSP: 002b:00007f0d889f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 997.502604][T17268] RAX: ffffffffffffffda RBX: 00007f0d87dac050 RCX: 00007f0d87c8c0c9 [ 997.510608][T17268] RDX: 0000000000200002 RSI: 0000000020000480 RDI: ffffffffffffffff [ 997.518619][T17268] RBP: 00007f0d87ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 997.526627][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.534631][T17268] R13: 00007ffece69a2ef R14: 00007f0d889f6300 R15: 0000000000022000 [ 997.542664][T17268] [ 997.556874][T17268] memory: usage 10492kB, limit 0kB, failcnt 345 [ 997.563458][T17268] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 997.570517][T17268] Memory cgroup stats for /syz5: [ 997.570716][T17268] anon 131072 [ 997.570716][T17268] file 10186752 [ 997.570716][T17268] kernel 372736 [ 997.570716][T17268] kernel_stack 98304 [ 997.570716][T17268] pagetables 81920 [ 997.570716][T17268] sec_pagetables 0 [ 997.570716][T17268] percpu 64 [ 997.570716][T17268] sock 0 [ 997.570716][T17268] vmalloc 0 [ 997.570716][T17268] shmem 10186752 [ 997.570716][T17268] zswap 0 [ 997.570716][T17268] zswapped 0 [ 997.570716][T17268] file_mapped 294912 [ 997.570716][T17268] file_dirty 0 [ 997.570716][T17268] file_writeback 0 [ 997.570716][T17268] swapcached 0 [ 997.570716][T17268] anon_thp 0 [ 997.570716][T17268] file_thp 0 [ 997.570716][T17268] shmem_thp 0 [ 997.570716][T17268] inactive_anon 1945600 [ 997.570716][T17268] active_anon 8372224 [ 997.570716][T17268] inactive_file 0 [ 997.570716][T17268] active_file 0 [ 997.570716][T17268] unevictable 0 [ 997.570716][T17268] slab_reclaimable 43696 [ 997.570716][T17268] slab_unreclaimable 124552 [ 997.570716][T17268] slab 168248 [ 997.682019][T17268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17263,uid=0 00:18:26 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:26 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) 00:18:26 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:26 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 997.713402][T17224] team0: Port device team_slave_0 added [ 997.715426][T17268] Memory cgroup out of memory: Killed process 17268 (syz-executor.5) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 997.733977][T17224] team0: Port device team_slave_1 added [ 997.824376][T17224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.835307][T17224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.862529][T17224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.901414][T17224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.932495][T17224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.963600][T17030] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 998.026331][T17030] CPU: 1 PID: 17030 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 998.036818][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 998.046910][T17030] Call Trace: [ 998.050216][T17030] [ 998.053167][T17030] dump_stack_lvl+0xd1/0x138 [ 998.057798][T17030] dump_header+0x10b/0x85f [ 998.062247][T17030] oom_kill_process.cold+0x10/0x15 [ 998.067401][T17030] out_of_memory+0x35c/0x14a0 [ 998.072121][T17030] ? find_held_lock+0x2d/0x110 [ 998.077022][T17030] ? oom_killer_disable+0x280/0x280 [ 998.082262][T17030] ? find_held_lock+0x2d/0x110 [ 998.087071][T17030] mem_cgroup_out_of_memory+0x206/0x270 [ 998.092639][T17030] ? mem_cgroup_margin+0x130/0x130 [ 998.097755][T17030] ? lock_downgrade+0x6e0/0x6e0 [ 998.102627][T17030] try_charge_memcg+0xefb/0x12f0 [ 998.107584][T17030] ? mem_cgroup_handle_over_high+0x520/0x520 [ 998.113581][T17030] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 998.119395][T17030] ? lock_downgrade+0x6e0/0x6e0 [ 998.124270][T17030] obj_cgroup_charge+0x2af/0x5e0 [ 998.129222][T17030] kmem_cache_alloc_lru+0x145/0x760 [ 998.134430][T17030] ? __d_alloc+0x32/0x980 [ 998.138796][T17030] __d_alloc+0x32/0x980 [ 998.142961][T17030] ? __lock_acquire+0x166e/0x56d0 [ 998.147999][T17030] d_alloc+0x4e/0x240 [ 998.151994][T17030] d_alloc_parallel+0xe8/0x1410 [ 998.156871][T17030] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 998.162861][T17030] ? __d_lookup_rcu+0x4c0/0x4c0 [ 998.167731][T17030] ? lockdep_init_map_type+0x21e/0x800 [ 998.173200][T17030] ? lockdep_init_map_type+0x21e/0x800 [ 998.178675][T17030] __lookup_slow+0x193/0x460 [ 998.183284][T17030] ? __lookup_hash+0x180/0x180 [ 998.188090][T17030] ? azx_position_ok.cold+0x1ae/0x281 [ 998.193488][T17030] ? azx_position_ok.cold+0x1ae/0x281 [ 998.198966][T17030] ? lookup_fast+0x14e/0x520 [ 998.203589][T17030] walk_component+0x33f/0x5a0 [ 998.208298][T17030] path_lookupat+0x1ba/0x840 [ 998.212917][T17030] filename_lookup+0x1d2/0x590 [ 998.217719][T17030] ? may_linkat+0x500/0x500 [ 998.222240][T17030] ? __might_fault+0xd9/0x180 [ 998.226945][T17030] ? __phys_addr_symbol+0x30/0x70 [ 998.231983][T17030] ? __check_object_size+0x2e2/0x5a0 [ 998.237287][T17030] ? strncpy_from_user+0x28b/0x3c0 [ 998.242417][T17030] ? getname_flags.part.0+0x1dd/0x4f0 [ 998.247811][T17030] user_path_at_empty+0x46/0x60 [ 998.252681][T17030] __x64_sys_umount+0xfc/0x190 [ 998.257458][T17030] ? path_umount+0x10b0/0x10b0 [ 998.262237][T17030] ? syscall_enter_from_user_mode+0x26/0xb0 [ 998.268149][T17030] do_syscall_64+0x39/0xb0 [ 998.272588][T17030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 998.278502][T17030] RIP: 0033:0x7f0d87c8d537 [ 998.282925][T17030] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 998.302536][T17030] RSP: 002b:00007ffece699448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 998.310963][T17030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d87c8d537 [ 998.318935][T17030] RDX: 00007ffece69951a RSI: 000000000000000a RDI: 00007ffece699510 [ 998.326916][T17030] RBP: 00007ffece699510 R08: 00000000ffffffff R09: 00007ffece6992e0 [ 998.334908][T17030] R10: 0000555556cf9873 R11: 0000000000000246 R12: 00007f0d87ce6b24 [ 998.342900][T17030] R13: 00007ffece69a5d0 R14: 0000555556cf9810 R15: 00007ffece69a610 [ 998.350894][T17030] [ 998.356210][ T5119] Bluetooth: hci0: command 0x041b tx timeout [ 998.382045][T17224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.422233][T17030] memory: usage 10108kB, limit 0kB, failcnt 372 [ 998.472029][T17030] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 998.478938][T17030] Memory cgroup stats for /syz5: [ 998.479117][T17030] anon 40960 [ 998.479117][T17030] file 10186752 [ 998.479117][T17030] kernel 122880 [ 998.479117][T17030] kernel_stack 0 [ 998.479117][T17030] pagetables 8192 [ 998.479117][T17030] sec_pagetables 0 [ 998.479117][T17030] percpu 64 [ 998.479117][T17030] sock 0 [ 998.479117][T17030] vmalloc 0 [ 998.479117][T17030] shmem 10186752 [ 998.479117][T17030] zswap 0 [ 998.479117][T17030] zswapped 0 [ 998.479117][T17030] file_mapped 262144 [ 998.479117][T17030] file_dirty 0 [ 998.479117][T17030] file_writeback 0 [ 998.479117][T17030] swapcached 0 [ 998.479117][T17030] anon_thp 0 [ 998.479117][T17030] file_thp 0 [ 998.479117][T17030] shmem_thp 0 [ 998.479117][T17030] inactive_anon 1855488 [ 998.479117][T17030] active_anon 8372224 [ 998.479117][T17030] inactive_file 0 [ 998.479117][T17030] active_file 0 [ 998.479117][T17030] unevictable 0 [ 998.479117][T17030] slab_reclaimable 42752 [ 998.479117][T17030] slab_unreclaimable 59240 [ 998.479117][T17030] slab 101992 [ 998.734852][T17224] device hsr_slave_0 entered promiscuous mode [ 998.772752][T17224] device hsr_slave_1 entered promiscuous mode [ 998.886282][T17265] chnl_net:caif_netlink_parms(): no params data found [ 998.942279][ T5119] Bluetooth: hci1: command 0x0409 tx timeout [ 998.942810][T17030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17030,uid=0 [ 999.022876][T17030] Memory cgroup out of memory: Killed process 17030 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 999.073756][T17282] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 999.105406][T17282] CPU: 0 PID: 17282 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 999.115882][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 999.125974][T17282] Call Trace: [ 999.129280][T17282] [ 999.132240][T17282] dump_stack_lvl+0xd1/0x138 [ 999.136883][T17282] dump_header+0x10b/0x85f [ 999.141339][T17282] oom_kill_process.cold+0x10/0x15 [ 999.146489][T17282] out_of_memory+0x35c/0x14a0 [ 999.151205][T17282] ? oom_killer_disable+0x280/0x280 [ 999.156439][T17282] ? find_held_lock+0x2d/0x110 [ 999.161253][T17282] mem_cgroup_out_of_memory+0x206/0x270 [ 999.166842][T17282] ? mem_cgroup_margin+0x130/0x130 [ 999.171991][T17282] ? lock_downgrade+0x6e0/0x6e0 [ 999.176905][T17282] try_charge_memcg+0xefb/0x12f0 [ 999.181894][T17282] ? mem_cgroup_handle_over_high+0x520/0x520 [ 999.187939][T17282] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 999.193715][T17282] ? lock_downgrade+0x6e0/0x6e0 [ 999.198606][T17282] ? lock_downgrade+0x6e0/0x6e0 [ 999.203494][T17282] ? rcu_read_unlock+0x9/0x60 [ 999.208230][T17282] obj_cgroup_charge+0x2af/0x5e0 [ 999.213210][T17282] ? copy_process+0x3aa/0x7520 [ 999.218017][T17282] kmem_cache_alloc_node+0xb7/0x460 [ 999.223259][T17282] copy_process+0x3aa/0x7520 [ 999.227886][T17282] ? find_held_lock+0x2d/0x110 [ 999.232710][T17282] ? __cleanup_sighand+0xb0/0xb0 [ 999.237689][T17282] ? lock_downgrade+0x6e0/0x6e0 [ 999.242571][T17282] ? folio_flags.constprop.0+0x53/0x150 [ 999.248165][T17282] ? folio_add_lru+0x37b/0x680 [ 999.252978][T17282] kernel_clone+0xeb/0x990 [ 999.257440][T17282] ? create_io_thread+0xf0/0xf0 [ 999.262326][T17282] ? find_held_lock+0x2d/0x110 [ 999.267147][T17282] __do_sys_clone+0xba/0x100 [ 999.271767][T17282] ? kernel_clone+0x990/0x990 [ 999.276482][T17282] ? syscall_enter_from_user_mode+0x26/0xb0 [ 999.282415][T17282] do_syscall_64+0x39/0xb0 [ 999.286878][T17282] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 999.292810][T17282] RIP: 0033:0x7fa61068d4f1 [ 999.297254][T17282] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 999.316898][T17282] RSP: 002b:00007ffed786b878 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 999.325350][T17282] RAX: ffffffffffffffda RBX: 00007fa6114a8700 RCX: 00007fa61068d4f1 [ 999.333355][T17282] RDX: 00007fa6114a89d0 RSI: 00007fa6114a82f0 RDI: 00000000003d0f00 [ 999.341358][T17282] RBP: 00007ffed786bac0 R08: 00007fa6114a8700 R09: 00007fa6114a8700 [ 999.349358][T17282] R10: 00007fa6114a89d0 R11: 0000000000000206 R12: 00007ffed786b92e [ 999.357456][T17282] R13: 00007ffed786b92f R14: 00007fa6114a8300 R15: 0000000000022000 [ 999.365520][T17282] [ 999.503032][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.823925][T17282] memory: usage 8600kB, limit 0kB, failcnt 989 [ 999.832585][T17282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 999.871353][T17282] Memory cgroup stats for /syz1: [ 999.871574][T17282] anon 143360 [ 999.871574][T17282] file 8376320 [ 999.871574][T17282] kernel 286720 [ 999.871574][T17282] kernel_stack 65536 [ 999.871574][T17282] pagetables 81920 [ 999.871574][T17282] sec_pagetables 0 [ 999.871574][T17282] percpu 64 [ 999.871574][T17282] sock 0 [ 999.871574][T17282] vmalloc 0 [ 999.871574][T17282] shmem 8376320 [ 999.871574][T17282] zswap 0 [ 999.871574][T17282] zswapped 0 [ 999.871574][T17282] file_mapped 233472 [ 999.871574][T17282] file_dirty 0 [ 999.871574][T17282] file_writeback 0 [ 999.871574][T17282] swapcached 0 [ 999.871574][T17282] anon_thp 0 [ 999.871574][T17282] file_thp 0 [ 999.871574][T17282] shmem_thp 0 [ 999.871574][T17282] inactive_anon 143360 [ 999.871574][T17282] active_anon 8376320 [ 999.871574][T17282] inactive_file 0 [ 999.871574][T17282] active_file 0 [ 999.871574][T17282] unevictable 0 [ 999.871574][T17282] slab_reclaimable 39872 [ 999.871574][T17282] slab_unreclaimable 73320 [ 999.871574][T17282] slab 113192 00:18:29 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1000.234921][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.322009][T17282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17282,uid=0 [ 1000.373742][T17282] Memory cgroup out of memory: Killed process 17282 (syz-executor.1) total-vm:54672kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1000.392276][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 1000.437549][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:29 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1000.701515][T17045] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1000.788026][T17045] CPU: 1 PID: 17045 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1000.798509][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1000.808585][T17045] Call Trace: [ 1000.811881][T17045] [ 1000.814886][T17045] dump_stack_lvl+0xd1/0x138 [ 1000.819534][T17045] dump_header+0x10b/0x85f [ 1000.823994][T17045] oom_kill_process.cold+0x10/0x15 [ 1000.829147][T17045] out_of_memory+0x35c/0x14a0 [ 1000.833862][T17045] ? find_held_lock+0x2d/0x110 [ 1000.838665][T17045] ? oom_killer_disable+0x280/0x280 [ 1000.843891][T17045] ? find_held_lock+0x2d/0x110 [ 1000.848698][T17045] mem_cgroup_out_of_memory+0x206/0x270 [ 1000.854277][T17045] ? mem_cgroup_margin+0x130/0x130 [ 1000.859418][T17045] ? lock_downgrade+0x6e0/0x6e0 [ 1000.864318][T17045] try_charge_memcg+0xefb/0x12f0 [ 1000.869299][T17045] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1000.875310][T17045] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1000.881062][T17045] ? lock_downgrade+0x6e0/0x6e0 [ 1000.885943][T17045] ? lock_downgrade+0x6e0/0x6e0 [ 1000.890813][T17045] ? rcu_read_unlock+0x9/0x60 [ 1000.895540][T17045] obj_cgroup_charge+0x2af/0x5e0 [ 1000.900516][T17045] ? copy_process+0x43a0/0x7520 [ 1000.905397][T17045] kmem_cache_alloc+0xb5/0x430 [ 1000.910197][T17045] copy_process+0x43a0/0x7520 [ 1000.914902][T17045] ? _raw_spin_unlock+0x28/0x40 [ 1000.919794][T17045] ? wp_page_reuse+0x197/0x570 [ 1000.924613][T17045] ? __cleanup_sighand+0xb0/0xb0 [ 1000.929575][T17045] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1000.934987][T17045] ? rwlock_bug.part.0+0x90/0x90 [ 1000.939966][T17045] ? lock_chain_count+0x20/0x20 [ 1000.944861][T17045] kernel_clone+0xeb/0x990 [ 1000.946463][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1000.949318][T17045] ? create_io_thread+0xf0/0xf0 [ 1000.949358][T17045] ? find_held_lock+0x2d/0x110 [ 1000.958810][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1000.961243][T17045] __do_sys_clone+0xba/0x100 [ 1000.967078][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1000.972899][T17045] ? kernel_clone+0x990/0x990 [ 1000.972945][T17045] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1000.978493][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1000.984444][T17045] do_syscall_64+0x39/0xb0 [ 1000.984486][T17045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1000.990232][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1000.995018][T17045] RIP: 0033:0x7fa610689dfb [ 1000.995044][T17045] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1000.995065][T17045] RSP: 002b:00007ffed786bb70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.995088][T17045] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa610689dfb [ 1000.995103][T17045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1000.995117][T17045] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555572ec400 [ 1000.995131][T17045] R10: 00005555572ec6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1000.995146][T17045] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffed786bc50 [ 1000.995178][T17045] [ 1001.003215][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1001.032013][T16383] Bluetooth: hci1: command 0x041b tx timeout [ 1001.062595][T17045] memory: usage 8420kB, limit 0kB, failcnt 1044 [ 1001.143852][T17224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.225679][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.284977][T17265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.312230][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.332095][T17265] device bridge_slave_0 entered promiscuous mode [ 1001.364656][T17224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.425265][T17265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.451959][T17045] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1001.452008][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.458834][T17045] Memory cgroup stats for /syz1 [ 1001.476111][T17265] device bridge_slave_1 entered promiscuous mode [ 1001.494702][T17045] : [ 1001.494885][T17045] anon 45056 [ 1001.494885][T17045] file 8380416 [ 1001.494885][T17045] kernel 151552 [ 1001.494885][T17045] kernel_stack 32768 [ 1001.494885][T17045] pagetables 8192 [ 1001.494885][T17045] sec_pagetables 0 [ 1001.494885][T17045] percpu 64 [ 1001.494885][T17045] sock 0 [ 1001.494885][T17045] vmalloc 0 [ 1001.494885][T17045] shmem 8376320 [ 1001.494885][T17045] zswap 0 [ 1001.494885][T17045] zswapped 0 [ 1001.494885][T17045] file_mapped 208896 [ 1001.494885][T17045] file_dirty 0 [ 1001.494885][T17045] file_writeback 0 [ 1001.494885][T17045] swapcached 0 [ 1001.494885][T17045] anon_thp 0 [ 1001.494885][T17045] file_thp 0 [ 1001.494885][T17045] shmem_thp 0 [ 1001.494885][T17045] inactive_anon 45056 [ 1001.494885][T17045] active_anon 8376320 [ 1001.494885][T17045] inactive_file 4096 [ 1001.494885][T17045] active_file 0 [ 1001.494885][T17045] unevictable 0 [ 1001.494885][T17045] slab_reclaimable 34016 [ 1001.494885][T17045] slab_unreclaimable 63544 [ 1001.494885][T17045] slab 97560 [ 1001.609273][T17224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.732337][T17045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17045,uid=0 [ 1001.811968][T17045] Memory cgroup out of memory: Killed process 17045 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1001.870889][T17224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.929439][T17265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.135659][T17265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.255091][T16379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.269088][T16379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.282547][T16379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.283278][T11188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.302782][T16383] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1002.310480][T16383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.472282][T16383] Bluetooth: hci0: command 0x0419 tx timeout [ 1002.498778][T11188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.650835][T17265] team0: Port device team_slave_0 added [ 1002.684777][T17265] team0: Port device team_slave_1 added [ 1002.757026][T11188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.973177][T11188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.022782][T17265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.029783][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.102097][T16383] Bluetooth: hci1: command 0x040f tx timeout [ 1003.102322][T17265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.182332][T16383] Bluetooth: hci3: command 0x0409 tx timeout [ 1003.250461][T17265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.261920][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.381792][T17265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.556916][T17224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1003.622788][T17224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1003.639782][T17265] device hsr_slave_0 entered promiscuous mode [ 1003.655912][T17265] device hsr_slave_1 entered promiscuous mode [ 1003.682778][T17265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.690392][T17265] Cannot create hsr debugfs directory [ 1003.724385][T17224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1003.792658][T17224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1003.843335][T17312] chnl_net:caif_netlink_parms(): no params data found [ 1003.943297][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.088888][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.343208][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.382147][T16383] Bluetooth: hci2: command 0x0409 tx timeout [ 1004.532836][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.731409][T17312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.762148][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.770486][T17312] device bridge_slave_0 entered promiscuous mode [ 1004.846084][T17224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.876060][T17312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.886237][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.903906][T17312] device bridge_slave_1 entered promiscuous mode [ 1004.952885][T17324] chnl_net:caif_netlink_parms(): no params data found [ 1004.973658][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1004.981646][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1005.003199][T17224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.084956][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1005.097543][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1005.106771][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.113941][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.122447][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1005.133333][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1005.141946][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.149046][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.157387][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1005.166469][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1005.179311][T17312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.188537][T16383] Bluetooth: hci1: command 0x0419 tx timeout [ 1005.262111][T16383] Bluetooth: hci3: command 0x041b tx timeout [ 1005.283920][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1005.302230][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1005.323895][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1005.343388][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1005.353327][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1005.363759][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1005.387276][T17312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.426115][T17224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.456632][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1005.554349][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1005.563209][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1005.898989][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.922067][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.930426][T17324] device bridge_slave_0 entered promiscuous mode [ 1005.954397][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.961522][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.008463][T17324] device bridge_slave_1 entered promiscuous mode [ 1006.027201][T17312] team0: Port device team_slave_0 added [ 1006.206962][T17312] team0: Port device team_slave_1 added [ 1006.377700][T17324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.407505][T17312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.421924][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.462155][T16383] Bluetooth: hci2: command 0x041b tx timeout [ 1006.503977][T17312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.618065][T17324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.666552][T17312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.674691][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.731928][T17312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.766176][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1006.782155][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1006.844670][T17324] team0: Port device team_slave_0 added [ 1006.933420][T17324] team0: Port device team_slave_1 added [ 1006.945315][T17224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.017976][T17312] device hsr_slave_0 entered promiscuous mode [ 1007.063356][T17312] device hsr_slave_1 entered promiscuous mode [ 1007.092104][T17312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1007.099725][T17312] Cannot create hsr debugfs directory [ 1007.307661][T17324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.322078][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.351984][T16383] Bluetooth: hci3: command 0x040f tx timeout [ 1007.399883][T17324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.541301][T17324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.555412][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.583051][T17324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.632686][T17265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1007.706580][T17265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1007.746571][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1007.755650][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.765837][T17265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1007.813545][T17324] device hsr_slave_0 entered promiscuous mode [ 1007.824302][T17324] device hsr_slave_1 entered promiscuous mode [ 1007.830842][T17324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1007.840374][T17324] Cannot create hsr debugfs directory [ 1007.847898][T17265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1007.959079][T17224] device veth0_vlan entered promiscuous mode [ 1008.023728][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1008.043519][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1008.072960][T17224] device veth1_vlan entered promiscuous mode [ 1008.173507][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1008.181556][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1008.204241][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1008.286281][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1008.297024][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1008.306993][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1008.357553][T17224] device veth0_macvtap entered promiscuous mode [ 1008.384544][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1008.430185][T17224] device veth1_macvtap entered promiscuous mode [ 1008.542412][T16383] Bluetooth: hci2: command 0x040f tx timeout [ 1008.633976][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.649794][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.660463][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.671249][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.681456][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.693043][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.703564][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.714951][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.725173][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.736063][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.746275][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.757118][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.769287][T17224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.823126][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1008.832412][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1008.852211][T17265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.860724][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.879900][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.904082][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.921967][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.931825][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.960544][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.982038][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.001979][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.011830][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.049150][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.071976][T17224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.092350][T17224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.113483][T17224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.158588][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1009.183559][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1009.235230][T17224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.249496][T17224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.271925][T17224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.280662][T17224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.297312][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.350114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1009.358286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1009.415939][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1009.426614][T16383] Bluetooth: hci3: command 0x0419 tx timeout [ 1009.434182][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1009.443291][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.450388][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.459845][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1009.470588][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1009.479647][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.486833][T16165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.495301][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1009.565720][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1009.628112][T11188] device hsr_slave_0 left promiscuous mode [ 1009.648460][T11188] device hsr_slave_1 left promiscuous mode [ 1009.662605][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.682067][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.702230][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.709679][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.736662][T11188] device bridge_slave_1 left promiscuous mode [ 1009.743563][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.753303][T11188] device bridge_slave_0 left promiscuous mode [ 1009.759546][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.774521][T11188] device hsr_slave_0 left promiscuous mode [ 1009.781077][T11188] device hsr_slave_1 left promiscuous mode [ 1009.788094][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.795952][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.806413][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.814245][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.824969][T11188] device bridge_slave_1 left promiscuous mode [ 1009.831191][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.843739][T11188] device bridge_slave_0 left promiscuous mode [ 1009.849986][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.864454][T11188] device hsr_slave_0 left promiscuous mode [ 1009.870987][T11188] device hsr_slave_1 left promiscuous mode [ 1009.878093][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.885978][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.895924][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.904392][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.914204][T11188] device bridge_slave_1 left promiscuous mode [ 1009.920429][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.930473][T11188] device bridge_slave_0 left promiscuous mode [ 1009.937117][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.962176][T11188] device hsr_slave_0 left promiscuous mode [ 1009.968754][T11188] device hsr_slave_1 left promiscuous mode [ 1010.003724][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.011213][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.036965][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.045360][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.057931][T11188] device bridge_slave_1 left promiscuous mode [ 1010.066024][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.075195][T11188] device bridge_slave_0 left promiscuous mode [ 1010.081443][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.132316][T11188] device veth1_macvtap left promiscuous mode [ 1010.138401][T11188] device veth0_macvtap left promiscuous mode [ 1010.157968][T11188] device veth1_vlan left promiscuous mode [ 1010.172134][T11188] device veth0_vlan left promiscuous mode [ 1010.183797][T11188] device veth1_macvtap left promiscuous mode [ 1010.189882][T11188] device veth0_macvtap left promiscuous mode [ 1010.208503][T11188] device veth1_vlan left promiscuous mode [ 1010.221481][T11188] device veth0_vlan left promiscuous mode [ 1010.244189][T11188] device veth1_macvtap left promiscuous mode [ 1010.262022][T11188] device veth0_macvtap left promiscuous mode [ 1010.268126][T11188] device veth1_vlan left promiscuous mode [ 1010.288277][T11188] device veth0_vlan left promiscuous mode [ 1010.333078][T11188] device veth1_macvtap left promiscuous mode [ 1010.339138][T11188] device veth0_macvtap left promiscuous mode [ 1010.349309][T11188] device veth1_vlan left promiscuous mode [ 1010.362179][T11188] device veth0_vlan left promiscuous mode [ 1010.626981][T16383] Bluetooth: hci2: command 0x0419 tx timeout [ 1011.422841][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1011.438670][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1011.453493][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.469921][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.624151][T11188] bond0 (unregistering): Released all slaves [ 1011.958506][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1011.976122][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1012.002304][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.052135][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.215222][T11188] bond0 (unregistering): Released all slaves [ 1012.533609][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1012.564885][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1012.612952][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.643183][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.852913][T11188] bond0 (unregistering): Released all slaves [ 1013.124226][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1013.165651][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1013.192873][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.220086][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.382976][T11188] bond0 (unregistering): Released all slaves [ 1013.489049][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1013.498246][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1013.536331][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1013.552781][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1013.581326][T17265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1013.631963][T17265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1013.677860][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1013.686751][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1013.702839][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1013.711457][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1013.748044][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1013.776189][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.815811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.870653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1013.878260][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.893759][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.925159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1014.064500][T17324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1014.205913][T17324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1014.240969][T17324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1014.388383][T17324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.418765][T17312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1014.419968][T17423] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1014.454553][T17423] CPU: 0 PID: 17423 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1014.465041][T17423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1014.473474][T17312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1014.475103][T17423] Call Trace: [ 1014.475116][T17423] [ 1014.475127][T17423] dump_stack_lvl+0xd1/0x138 [ 1014.492645][T17423] dump_header+0x10b/0x85f [ 1014.497110][T17423] oom_kill_process.cold+0x10/0x15 [ 1014.502290][T17423] out_of_memory+0x35c/0x14a0 [ 1014.507015][T17423] ? oom_killer_disable+0x280/0x280 [ 1014.512261][T17423] mem_cgroup_out_of_memory+0x206/0x270 [ 1014.517846][T17423] ? mem_cgroup_margin+0x130/0x130 [ 1014.523019][T17423] memory_max_write+0x2f9/0x3c0 [ 1014.527916][T17423] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1014.534027][T17423] ? lock_release+0x810/0x810 [ 1014.538745][T17423] cgroup_file_write+0x1e2/0x770 [ 1014.543723][T17423] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1014.549836][T17423] ? kill_css+0x370/0x370 [ 1014.554199][T17423] ? __virt_addr_valid+0x61/0x2e0 [ 1014.559270][T17423] ? kill_css+0x370/0x370 [ 1014.563620][T17423] kernfs_fop_write_iter+0x3f1/0x600 [ 1014.568936][T17423] vfs_write+0x9ed/0xdd0 [ 1014.573201][T17423] ? kernel_write+0x630/0x630 [ 1014.577897][T17423] ? __fget_files+0x26a/0x440 [ 1014.582604][T17423] ksys_write+0x12b/0x250 [ 1014.586947][T17423] ? __ia32_sys_read+0xb0/0xb0 [ 1014.591728][T17423] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1014.597645][T17423] do_syscall_64+0x39/0xb0 [ 1014.602089][T17423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1014.608007][T17423] RIP: 0033:0x7f6af3a8c0c9 [ 1014.612431][T17423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1014.632052][T17423] RSP: 002b:00007f6af4854168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.640479][T17423] RAX: ffffffffffffffda RBX: 00007f6af3bac050 RCX: 00007f6af3a8c0c9 [ 1014.648463][T17423] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1014.656457][T17423] RBP: 00007f6af3ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1014.664436][T17423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.672431][T17423] R13: 00007ffe0c1216af R14: 00007f6af4854300 R15: 0000000000022000 [ 1014.680429][T17423] [ 1014.692111][T17312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.702388][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1014.710512][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1014.718914][T17423] memory: usage 10684kB, limit 0kB, failcnt 1124 [ 1014.725869][T17265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.741429][T17312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.749259][T17423] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1014.802703][T17423] Memory cgroup stats for /syz4: [ 1014.802911][T17423] anon 135168 [ 1014.802911][T17423] file 10412032 [ 1014.802911][T17423] kernel 372736 [ 1014.802911][T17423] kernel_stack 98304 [ 1014.802911][T17423] pagetables 81920 [ 1014.802911][T17423] sec_pagetables 0 [ 1014.802911][T17423] percpu 64 [ 1014.802911][T17423] sock 0 [ 1014.802911][T17423] vmalloc 0 [ 1014.802911][T17423] shmem 10412032 [ 1014.802911][T17423] zswap 0 [ 1014.802911][T17423] zswapped 0 [ 1014.802911][T17423] file_mapped 172032 [ 1014.802911][T17423] file_dirty 0 [ 1014.802911][T17423] file_writeback 0 [ 1014.802911][T17423] swapcached 0 [ 1014.802911][T17423] anon_thp 0 [ 1014.802911][T17423] file_thp 0 [ 1014.802911][T17423] shmem_thp 0 [ 1014.802911][T17423] inactive_anon 135168 [ 1014.802911][T17423] active_anon 10412032 [ 1014.802911][T17423] inactive_file 0 [ 1014.802911][T17423] active_file 0 [ 1014.802911][T17423] unevictable 0 [ 1014.802911][T17423] slab_reclaimable 40560 [ 1014.802911][T17423] slab_unreclaimable 122688 [ 1014.802911][T17423] slab 163248 [ 1014.886047][T17312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.911238][T17423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17224,uid=0 [ 1014.934502][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1014.952670][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.968250][T17423] Memory cgroup out of memory: Killed process 17224 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1015.060382][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1015.073086][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1015.092871][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1015.113023][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1015.136112][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1015.152868][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1015.176670][T17312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.258538][T17265] device veth0_vlan entered promiscuous mode [ 1015.292116][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1015.300920][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1015.322917][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.330046][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.350170][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1015.362584][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 00:18:44 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:44 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:18:44 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1015.372633][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.379757][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.446550][T17265] device veth1_vlan entered promiscuous mode [ 1015.472973][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1015.482854][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1015.501522][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1015.533275][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1015.584137][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.644889][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1015.662841][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1015.683407][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1015.742573][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1015.763742][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1015.783023][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1015.801319][T17312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.849198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1015.859497][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1015.879158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.902799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.911559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1015.932686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1015.944574][T17265] device veth0_macvtap entered promiscuous mode [ 1015.958053][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.996519][T17265] device veth1_macvtap entered promiscuous mode [ 1016.023046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1016.033464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1016.092611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1016.101481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1016.132851][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.140006][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.167993][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.186752][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.197726][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.242046][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.282236][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.321930][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.354084][T17265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.390605][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1016.399576][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1016.432740][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1016.441255][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.448429][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.482578][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1016.491501][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1016.528255][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1016.552820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1016.561682][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1016.583661][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1016.611067][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.679739][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.702030][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.743405][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.772027][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.801981][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.823184][T17265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.835721][T17324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1016.856382][T17324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.886375][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1016.894869][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1016.912722][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1016.921419][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.930887][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1016.940164][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1016.949368][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1016.959476][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1016.984514][T17265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.002083][T17265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.011496][T17265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.052103][T17265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.073744][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1017.081280][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1017.101654][T17312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.190294][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1017.214396][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1017.299756][T17312] device veth0_vlan entered promiscuous mode [ 1017.322766][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1017.331230][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1017.368014][T17312] device veth1_vlan entered promiscuous mode [ 1017.407629][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1017.417361][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1017.443367][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1017.482787][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.490873][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.539834][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.555942][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1017.582966][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1017.590999][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1017.597980][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.622916][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1017.635194][T17312] device veth0_macvtap entered promiscuous mode [ 1017.675583][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1017.702880][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1017.712835][T17312] device veth1_macvtap entered promiscuous mode [ 1017.794280][T17324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.801658][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1017.838977][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1017.873364][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1017.912990][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.954532][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.002661][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.013435][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1018.024539][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1018.035709][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1018.044603][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1018.053155][T16379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1018.172053][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.192001][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.232053][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.254410][T17476] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1018.264808][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.282577][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.310893][T17312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.320160][T17476] CPU: 1 PID: 17476 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1018.330631][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1018.340725][T17476] Call Trace: [ 1018.344294][T17476] [ 1018.347250][T17476] dump_stack_lvl+0xd1/0x138 [ 1018.351909][T17476] dump_header+0x10b/0x85f [ 1018.356363][T17476] oom_kill_process.cold+0x10/0x15 [ 1018.361532][T17476] out_of_memory+0x35c/0x14a0 [ 1018.366279][T17476] ? oom_killer_disable+0x280/0x280 [ 1018.371533][T17476] mem_cgroup_out_of_memory+0x206/0x270 [ 1018.377116][T17476] ? mem_cgroup_margin+0x130/0x130 [ 1018.382267][T17476] memory_max_write+0x2f9/0x3c0 [ 1018.387140][T17476] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1018.393231][T17476] ? lock_release+0x810/0x810 [ 1018.397926][T17476] cgroup_file_write+0x1e2/0x770 [ 1018.402926][T17476] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1018.409008][T17476] ? kill_css+0x370/0x370 [ 1018.413355][T17476] ? __virt_addr_valid+0x61/0x2e0 [ 1018.418409][T17476] ? kill_css+0x370/0x370 [ 1018.422766][T17476] kernfs_fop_write_iter+0x3f1/0x600 [ 1018.428095][T17476] vfs_write+0x9ed/0xdd0 [ 1018.432362][T17476] ? kernel_write+0x630/0x630 [ 1018.437114][T17476] ? __fget_files+0x26a/0x440 [ 1018.441825][T17476] ksys_write+0x12b/0x250 [ 1018.446174][T17476] ? __ia32_sys_read+0xb0/0xb0 [ 1018.450982][T17476] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1018.456903][T17476] do_syscall_64+0x39/0xb0 [ 1018.461348][T17476] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1018.467261][T17476] RIP: 0033:0x7f929888c0c9 [ 1018.471683][T17476] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1018.491301][T17476] RSP: 002b:00007f9299632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.499734][T17476] RAX: ffffffffffffffda RBX: 00007f92989ac050 RCX: 00007f929888c0c9 [ 1018.507713][T17476] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1018.515697][T17476] RBP: 00007f92988e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1018.523681][T17476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.531662][T17476] R13: 00007fff1455a00f R14: 00007f9299632300 R15: 0000000000022000 [ 1018.539663][T17476] [ 1018.563781][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1018.573702][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1018.595126][T16383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1018.605752][T17476] memory: usage 8712kB, limit 0kB, failcnt 284 [ 1018.607096][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.613100][T17476] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1018.630757][T17476] Memory cgroup stats for /syz3: [ 1018.630972][T17476] anon 135168 [ 1018.630972][T17476] file 8347648 [ 1018.630972][T17476] kernel 364544 [ 1018.630972][T17476] kernel_stack 98304 [ 1018.630972][T17476] pagetables 81920 [ 1018.630972][T17476] sec_pagetables 0 [ 1018.630972][T17476] percpu 64 [ 1018.630972][T17476] sock 0 [ 1018.630972][T17476] vmalloc 0 [ 1018.630972][T17476] shmem 8347648 [ 1018.630972][T17476] zswap 0 [ 1018.630972][T17476] zswapped 0 [ 1018.630972][T17476] file_mapped 204800 [ 1018.630972][T17476] file_dirty 0 [ 1018.630972][T17476] file_writeback 0 [ 1018.630972][T17476] swapcached 0 [ 1018.630972][T17476] anon_thp 0 [ 1018.630972][T17476] file_thp 0 [ 1018.630972][T17476] shmem_thp 0 [ 1018.630972][T17476] inactive_anon 8224768 [ 1018.630972][T17476] active_anon 258048 [ 1018.630972][T17476] inactive_file 0 [ 1018.630972][T17476] active_file 0 [ 1018.630972][T17476] unevictable 0 [ 1018.630972][T17476] slab_reclaimable 35904 [ 1018.630972][T17476] slab_unreclaimable 125792 [ 1018.630972][T17476] slab 161696 [ 1018.694144][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.727272][T16383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1018.746410][T16383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1018.756628][T16383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1018.764412][T16383] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1018.771768][T16383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.837928][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.849046][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.858979][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.869657][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.879570][T17312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.890044][T17312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.923476][T17312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.991109][T16379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.002348][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1019.009707][T17476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17265,uid=0 [ 1019.013714][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1019.036217][T16379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.044592][T16379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1019.053981][T16379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1019.063167][T16379] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1019.070448][T16379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1019.078482][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1019.087632][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1019.107080][T17476] Memory cgroup out of memory: Killed process 17265 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1019.168604][T17312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.188688][T17312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.201831][T17312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.231931][T17312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.319355][T17324] device veth0_vlan entered promiscuous mode [ 1019.409751][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1019.434272][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1019.445998][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1019.454791][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1019.515926][T17324] device veth1_vlan entered promiscuous mode 00:18:48 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1019.574890][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 00:18:48 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1019.778919][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1019.805285][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1019.857663][T17324] device veth0_macvtap entered promiscuous mode [ 1019.947574][T17324] device veth1_macvtap entered promiscuous mode [ 1020.074716][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.122253][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.142626][T16379] Bluetooth: hci0: command 0x0409 tx timeout [ 1020.160349][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.231916][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.241789][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.314315][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.352134][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.371951][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.391948][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.420684][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.439796][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.457087][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.471666][T17324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.481155][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1020.490302][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1020.532700][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1020.540709][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1020.566613][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1020.645903][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.689715][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.706859][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.727873][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.739436][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.754539][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.767104][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.777648][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.787957][T17324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.799125][T17324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.810593][T17324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.825336][T17477] chnl_net:caif_netlink_parms(): no params data found [ 1020.862415][T16383] Bluetooth: hci4: command 0x0409 tx timeout [ 1020.881233][T17473] chnl_net:caif_netlink_parms(): no params data found [ 1020.890717][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1020.900624][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1020.912235][T17324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.920965][T17324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.930663][T17324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.939846][T17324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.963539][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.992217][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.021509][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1021.084920][T17483] chnl_net:caif_netlink_parms(): no params data found [ 1021.111961][T16383] Bluetooth: hci5: command 0x0409 tx timeout [ 1021.290297][T17473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.297673][T17473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.306984][T17473] device bridge_slave_0 entered promiscuous mode [ 1021.353495][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.360859][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.408814][T17477] device bridge_slave_0 entered promiscuous mode [ 1021.418950][T17473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.445526][T17473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.470042][T17520] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1021.473680][T17473] device bridge_slave_1 entered promiscuous mode [ 1021.480801][T17520] CPU: 0 PID: 17520 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1021.496991][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1021.507054][T17520] Call Trace: [ 1021.510339][T17520] [ 1021.513286][T17520] dump_stack_lvl+0xd1/0x138 [ 1021.517905][T17520] dump_header+0x10b/0x85f [ 1021.522338][T17520] oom_kill_process.cold+0x10/0x15 [ 1021.527482][T17520] out_of_memory+0x35c/0x14a0 [ 1021.532179][T17520] ? oom_killer_disable+0x280/0x280 [ 1021.537401][T17520] mem_cgroup_out_of_memory+0x206/0x270 [ 1021.542960][T17520] ? mem_cgroup_margin+0x130/0x130 [ 1021.548103][T17520] memory_max_write+0x2f9/0x3c0 [ 1021.552970][T17520] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1021.559054][T17520] ? lock_release+0x810/0x810 [ 1021.563746][T17520] cgroup_file_write+0x1e2/0x770 [ 1021.568702][T17520] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1021.574782][T17520] ? kill_css+0x370/0x370 [ 1021.579127][T17520] ? __virt_addr_valid+0x61/0x2e0 [ 1021.584183][T17520] ? kill_css+0x370/0x370 [ 1021.588527][T17520] kernfs_fop_write_iter+0x3f1/0x600 [ 1021.593842][T17520] vfs_write+0x9ed/0xdd0 [ 1021.598104][T17520] ? kernel_write+0x630/0x630 [ 1021.602800][T17520] ? __fget_files+0x26a/0x440 [ 1021.607508][T17520] ksys_write+0x12b/0x250 [ 1021.611851][T17520] ? __ia32_sys_read+0xb0/0xb0 [ 1021.616639][T17520] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1021.622556][T17520] do_syscall_64+0x39/0xb0 [ 1021.626994][T17520] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1021.632901][T17520] RIP: 0033:0x7fef2d28c0c9 [ 1021.637324][T17520] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1021.656943][T17520] RSP: 002b:00007fef2dfb2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1021.665375][T17520] RAX: ffffffffffffffda RBX: 00007fef2d3ac050 RCX: 00007fef2d28c0c9 [ 1021.673380][T17520] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1021.681362][T17520] RBP: 00007fef2d2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1021.689338][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.697324][T17520] R13: 00007ffe9f108b3f R14: 00007fef2dfb2300 R15: 0000000000022000 [ 1021.705325][T17520] [ 1021.730582][T17520] memory: usage 8712kB, limit 0kB, failcnt 288 [ 1021.752524][T17520] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1021.762251][T17520] Memory cgroup stats for /syz2: [ 1021.762448][T17520] anon 131072 [ 1021.762448][T17520] file 8388608 [ 1021.762448][T17520] kernel 335872 [ 1021.762448][T17520] kernel_stack 98304 [ 1021.762448][T17520] pagetables 77824 [ 1021.762448][T17520] sec_pagetables 0 [ 1021.762448][T17520] percpu 64 [ 1021.762448][T17520] sock 0 [ 1021.762448][T17520] vmalloc 0 [ 1021.762448][T17520] shmem 8380416 [ 1021.762448][T17520] zswap 0 [ 1021.762448][T17520] zswapped 0 [ 1021.762448][T17520] file_mapped 237568 [ 1021.762448][T17520] file_dirty 8192 [ 1021.762448][T17520] file_writeback 0 [ 1021.762448][T17520] swapcached 0 [ 1021.762448][T17520] anon_thp 0 [ 1021.762448][T17520] file_thp 0 [ 1021.762448][T17520] shmem_thp 0 [ 1021.762448][T17520] inactive_anon 131072 [ 1021.762448][T17520] active_anon 8380416 [ 1021.762448][T17520] inactive_file 4096 [ 1021.762448][T17520] active_file 4096 [ 1021.762448][T17520] unevictable 0 [ 1021.762448][T17520] slab_reclaimable 37688 [ 1021.762448][T17520] slab_unreclaimable 95328 [ 1021.762448][T17520] slab 133016 [ 1021.883806][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.890949][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.894631][T17520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17312,uid=0 [ 1021.915724][T17520] Memory cgroup out of memory: Killed process 17312 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1021.941027][T17477] device bridge_slave_1 entered promiscuous mode [ 1022.084471][T16379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1022.093308][T16379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1022.101272][T16379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1022.109810][T16379] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1022.117153][T16379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1022.220110][T17473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.240439][T16383] Bluetooth: hci0: command 0x041b tx timeout [ 1022.283348][T17483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.290483][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.307117][T17483] device bridge_slave_0 entered promiscuous mode [ 1022.374606][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.415535][T17473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.511168][T17483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.531090][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.545659][T17483] device bridge_slave_1 entered promiscuous mode [ 1022.567981][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.653101][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.708742][T17473] team0: Port device team_slave_0 added [ 1022.961223][T16383] Bluetooth: hci4: command 0x041b tx timeout [ 1023.095316][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.127339][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.182079][ T5119] Bluetooth: hci5: command 0x041b tx timeout [ 1023.247357][T17473] team0: Port device team_slave_1 added [ 1023.295941][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:52 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1023.423259][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1023.487221][T17477] team0: Port device team_slave_0 added [ 1023.504989][T17477] team0: Port device team_slave_1 added 00:18:52 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1023.613379][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.674388][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.684847][T17483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.696568][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.782679][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.789671][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.877025][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.953710][T17473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.960702][T17473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.048939][T17473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.126941][T17483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.142431][ T5119] Bluetooth: hci1: command 0x0409 tx timeout [ 1024.150777][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1024.205751][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.257731][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.271951][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.313545][T16383] Bluetooth: hci0: command 0x040f tx timeout [ 1024.342127][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.364189][T17473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.371175][T17473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.501912][T17473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.705609][T17483] team0: Port device team_slave_0 added [ 1024.779348][T17483] team0: Port device team_slave_1 added [ 1024.806172][T17473] device hsr_slave_0 entered promiscuous mode [ 1024.825563][T17473] device hsr_slave_1 entered promiscuous mode [ 1024.848684][T17473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.875577][T17473] Cannot create hsr debugfs directory [ 1024.900239][T17477] device hsr_slave_0 entered promiscuous mode [ 1024.930201][T17477] device hsr_slave_1 entered promiscuous mode [ 1024.964302][T17477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.975824][T17477] Cannot create hsr debugfs directory [ 1025.032814][T16383] Bluetooth: hci4: command 0x040f tx timeout [ 1025.168713][T17560] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1025.202684][T17560] CPU: 1 PID: 17560 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1025.213172][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1025.223251][T17560] Call Trace: [ 1025.226549][T17560] [ 1025.229502][T17560] dump_stack_lvl+0xd1/0x138 [ 1025.234149][T17560] dump_header+0x10b/0x85f [ 1025.238619][T17560] oom_kill_process.cold+0x10/0x15 [ 1025.243785][T17560] out_of_memory+0x35c/0x14a0 [ 1025.248512][T17560] ? oom_killer_disable+0x280/0x280 [ 1025.253750][T17560] ? mark_held_locks+0x9f/0xe0 [ 1025.258557][T17560] mem_cgroup_out_of_memory+0x206/0x270 [ 1025.264145][T17560] ? mem_cgroup_margin+0x130/0x130 [ 1025.269314][T17560] memory_max_write+0x2f9/0x3c0 [ 1025.274214][T17560] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1025.280320][T17560] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1025.286433][T17560] cgroup_file_write+0x1e2/0x770 [ 1025.291405][T17560] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1025.297503][T17560] ? kill_css+0x370/0x370 [ 1025.301878][T17560] ? kill_css+0x370/0x370 [ 1025.306241][T17560] kernfs_fop_write_iter+0x3f1/0x600 [ 1025.311578][T17560] vfs_write+0x9ed/0xdd0 [ 1025.315857][T17560] ? kernel_write+0x630/0x630 [ 1025.320580][T17560] ? __fget_files+0x26a/0x440 [ 1025.325308][T17560] ksys_write+0x12b/0x250 [ 1025.329669][T17560] ? __ia32_sys_read+0xb0/0xb0 [ 1025.334487][T17560] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1025.340469][T17560] do_syscall_64+0x39/0xb0 [ 1025.345029][T17560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1025.350956][T17560] RIP: 0033:0x7f08de48c0c9 [ 1025.355397][T17560] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1025.375044][T17560] RSP: 002b:00007f08df217168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1025.383498][T17560] RAX: ffffffffffffffda RBX: 00007f08de5abf80 RCX: 00007f08de48c0c9 [ 1025.391514][T17560] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1025.399524][T17560] RBP: 00007f08de4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1025.407532][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.415536][T17560] R13: 00007ffc5290fe4f R14: 00007f08df217300 R15: 0000000000022000 [ 1025.423572][T17560] [ 1025.427316][T16383] Bluetooth: hci5: command 0x040f tx timeout [ 1025.457482][T17483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.472134][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.521953][T17483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.598391][T17483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.611938][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.616006][T17560] memory: usage 10776kB, limit 0kB, failcnt 329 [ 1025.702180][T17483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.732006][T17560] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1025.738916][T17560] Memory cgroup stats for /syz0: [ 1025.739119][T17560] anon 139264 [ 1025.739119][T17560] file 10477568 [ 1025.739119][T17560] kernel 270336 [ 1025.739119][T17560] kernel_stack 32768 [ 1025.739119][T17560] pagetables 81920 [ 1025.739119][T17560] sec_pagetables 0 [ 1025.739119][T17560] percpu 64 [ 1025.739119][T17560] sock 0 [ 1025.739119][T17560] vmalloc 0 [ 1025.739119][T17560] shmem 10477568 [ 1025.739119][T17560] zswap 0 [ 1025.739119][T17560] zswapped 0 [ 1025.739119][T17560] file_mapped 237568 [ 1025.739119][T17560] file_dirty 0 [ 1025.739119][T17560] file_writeback 0 [ 1025.739119][T17560] swapcached 0 [ 1025.739119][T17560] anon_thp 0 [ 1025.739119][T17560] file_thp 0 [ 1025.739119][T17560] shmem_thp 0 [ 1025.739119][T17560] inactive_anon 2236416 [ 1025.739119][T17560] active_anon 8380416 [ 1025.739119][T17560] inactive_file 0 [ 1025.739119][T17560] active_file 0 [ 1025.739119][T17560] unevictable 0 [ 1025.739119][T17560] slab_reclaimable 39112 [ 1025.739119][T17560] slab_unreclaimable 86472 [ 1025.739119][T17560] slab 125584 [ 1025.857809][T11188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.938649][T17530] chnl_net:caif_netlink_parms(): no params data found [ 1026.001596][T11188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.032123][T16383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.042076][T16383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.050218][T16383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.060639][T17560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17559,uid=0 [ 1026.079422][T16383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.089523][T16383] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1026.096960][T16383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.138851][T17483] device hsr_slave_0 entered promiscuous mode [ 1026.168320][T17483] device hsr_slave_1 entered promiscuous mode [ 1026.183005][T17560] Memory cgroup out of memory: Killed process 17560 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1026.212255][T17483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.219861][T17483] Cannot create hsr debugfs directory [ 1026.225438][T16383] Bluetooth: hci1: command 0x041b tx timeout 00:18:55 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1026.316380][T17324] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1026.332206][T17324] CPU: 1 PID: 17324 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1026.342672][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1026.352741][T17324] Call Trace: [ 1026.356028][T17324] [ 1026.358981][T17324] dump_stack_lvl+0xd1/0x138 [ 1026.363608][T17324] dump_header+0x10b/0x85f [ 1026.368058][T17324] oom_kill_process.cold+0x10/0x15 [ 1026.373201][T17324] out_of_memory+0x35c/0x14a0 [ 1026.377910][T17324] ? find_held_lock+0x2d/0x110 [ 1026.382693][T17324] ? oom_killer_disable+0x280/0x280 [ 1026.387908][T17324] ? find_held_lock+0x2d/0x110 [ 1026.392704][T17324] mem_cgroup_out_of_memory+0x206/0x270 [ 1026.398263][T17324] ? mem_cgroup_margin+0x130/0x130 [ 1026.403382][T17324] ? lock_downgrade+0x6e0/0x6e0 [ 1026.408256][T17324] try_charge_memcg+0xefb/0x12f0 [ 1026.413212][T17324] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1026.419204][T17324] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1026.424931][T17324] ? lock_downgrade+0x6e0/0x6e0 [ 1026.429799][T17324] ? lock_downgrade+0x6e0/0x6e0 [ 1026.434671][T17324] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1026.440237][T17324] __alloc_pages+0x1f3/0x5b0 [ 1026.444846][T17324] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1026.451636][T17324] ? find_held_lock+0x2d/0x110 [ 1026.456427][T17324] alloc_pages+0x1aa/0x270 [ 1026.460862][T17324] pte_alloc_one+0x1a/0x230 [ 1026.465381][T17324] __pte_alloc+0x6d/0x260 [ 1026.469727][T17324] ? pmd_install+0x160/0x160 [ 1026.474335][T17324] ? _raw_spin_unlock+0x28/0x40 [ 1026.479203][T17324] ? __pmd_alloc+0x30c/0x5d0 [ 1026.483817][T17324] copy_page_range+0x17a8/0x3b40 [ 1026.488813][T17324] ? mas_store+0x206/0x2e0 [ 1026.493242][T17324] ? handle_mm_fault+0x850/0x850 [ 1026.498311][T17324] ? anon_vma_fork+0xba/0x630 [ 1026.503015][T17324] dup_mmap+0xc10/0x10b0 [ 1026.507281][T17324] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1026.512575][T17324] ? lock_downgrade+0x6e0/0x6e0 [ 1026.517441][T17324] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1026.523277][T17324] ? mm_init+0x8e0/0xc10 [ 1026.527532][T17324] copy_process+0x440f/0x7520 [ 1026.532225][T17324] ? _raw_spin_unlock+0x28/0x40 [ 1026.537092][T17324] ? wp_page_reuse+0x197/0x570 [ 1026.541894][T17324] ? __cleanup_sighand+0xb0/0xb0 [ 1026.546841][T17324] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1026.552235][T17324] ? rwlock_bug.part.0+0x90/0x90 [ 1026.557181][T17324] ? lock_chain_count+0x20/0x20 [ 1026.562048][T17324] kernel_clone+0xeb/0x990 [ 1026.566505][T17324] ? create_io_thread+0xf0/0xf0 [ 1026.571377][T17324] ? find_held_lock+0x2d/0x110 [ 1026.576171][T17324] __do_sys_clone+0xba/0x100 [ 1026.580778][T17324] ? kernel_clone+0x990/0x990 [ 1026.585482][T17324] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1026.591490][T17324] do_syscall_64+0x39/0xb0 [ 1026.595931][T17324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1026.601839][T17324] RIP: 0033:0x7f08de489dfb [ 1026.606270][T17324] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1026.625882][T17324] RSP: 002b:00007ffc52910090 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1026.634304][T17324] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08de489dfb [ 1026.642282][T17324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1026.650259][T17324] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555c0f400 [ 1026.658235][T17324] R10: 0000555555c0f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1026.666216][T17324] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc52910170 [ 1026.674218][T17324] [ 1026.679281][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 1026.684970][T17324] memory: usage 10500kB, limit 0kB, failcnt 348 [ 1026.693782][T11188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.715681][T17324] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1026.722891][T17324] Memory cgroup stats for /syz0: [ 1026.723087][T17324] anon 45056 [ 1026.723087][T17324] file 10477568 [ 1026.723087][T17324] kernel 192512 [ 1026.723087][T17324] kernel_stack 32768 [ 1026.723087][T17324] pagetables 20480 [ 1026.723087][T17324] sec_pagetables 0 [ 1026.723087][T17324] percpu 128 [ 1026.723087][T17324] sock 0 [ 1026.723087][T17324] vmalloc 0 [ 1026.723087][T17324] shmem 10477568 [ 1026.723087][T17324] zswap 0 [ 1026.723087][T17324] zswapped 0 [ 1026.723087][T17324] file_mapped 208896 [ 1026.723087][T17324] file_dirty 0 [ 1026.723087][T17324] file_writeback 0 [ 1026.723087][T17324] swapcached 0 [ 1026.723087][T17324] anon_thp 0 [ 1026.723087][T17324] file_thp 0 [ 1026.723087][T17324] shmem_thp 0 [ 1026.723087][T17324] inactive_anon 2142208 [ 1026.723087][T17324] active_anon 8380416 [ 1026.723087][T17324] inactive_file 0 [ 1026.723087][T17324] active_file 0 [ 1026.723087][T17324] unevictable 0 [ 1026.723087][T17324] slab_reclaimable 35504 [ 1026.723087][T17324] slab_unreclaimable 85032 [ 1026.723087][T17324] slab 120536 [ 1026.966707][T11188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.082095][T17324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17324,uid=0 [ 1027.102036][ T5119] Bluetooth: hci4: command 0x0419 tx timeout [ 1027.155263][T17324] Memory cgroup out of memory: Killed process 17324 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1027.240499][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.274912][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.313206][T17530] device bridge_slave_0 entered promiscuous mode [ 1027.411769][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.422789][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.438742][T17530] device bridge_slave_1 entered promiscuous mode 00:18:56 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1027.478407][T17477] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.512252][ T5119] Bluetooth: hci5: command 0x0419 tx timeout [ 1027.669595][T17477] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.746490][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:18:56 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1027.850321][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.915001][T17477] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.084057][T17477] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.142085][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 1028.203036][T11188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.278102][T17530] team0: Port device team_slave_0 added [ 1028.302223][ T5119] Bluetooth: hci1: command 0x040f tx timeout [ 1028.336947][T17530] team0: Port device team_slave_1 added [ 1028.367942][T11188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.663582][T11188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.722113][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.739515][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.781442][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.804163][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.811183][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.850650][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.867238][T17575] chnl_net:caif_netlink_parms(): no params data found [ 1028.886040][T11188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.024443][T17530] device hsr_slave_0 entered promiscuous mode [ 1029.042281][T17530] device hsr_slave_1 entered promiscuous mode [ 1029.049076][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1029.072028][T17530] Cannot create hsr debugfs directory [ 1029.370011][T17477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1029.433155][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.440306][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.473288][T17575] device bridge_slave_0 entered promiscuous mode [ 1029.493326][T17477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1029.654342][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.672138][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.692258][T17575] device bridge_slave_1 entered promiscuous mode [ 1029.755064][T17477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1029.910335][T17477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1030.014553][T17575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.131710][T16383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1030.142634][T16383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1030.161625][T16383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1030.170126][T16383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1030.178892][T16383] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1030.186545][T16383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1030.221959][T16383] Bluetooth: hci3: command 0x041b tx timeout [ 1030.288340][T17575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.382019][T16383] Bluetooth: hci1: command 0x0419 tx timeout [ 1030.638603][T17575] team0: Port device team_slave_0 added [ 1030.737615][T17575] team0: Port device team_slave_1 added [ 1030.912628][T17473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1030.923831][T17575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.942021][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.968465][T17575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.994366][T17575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.001348][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.061983][T17575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.109243][T17473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.227023][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.296567][T17473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1031.333528][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.486411][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.503380][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.511425][T17473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1031.657696][T17575] device hsr_slave_0 entered promiscuous mode [ 1031.665766][T17575] device hsr_slave_1 entered promiscuous mode [ 1031.672717][T17575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.680299][T17575] Cannot create hsr debugfs directory [ 1031.840987][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.849750][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.860043][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.867235][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.874947][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.884413][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.893047][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.900121][T16163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.979199][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.987532][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1032.022811][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1032.086143][T17620] chnl_net:caif_netlink_parms(): no params data found [ 1032.108142][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1032.128653][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1032.153500][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.164230][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.182841][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1032.191315][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.222063][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 1032.240235][T17477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.302041][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 1032.311356][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.523662][T17483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1032.743225][T17483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1032.785896][T17473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.837134][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.872035][T17620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.912121][T17620] device bridge_slave_0 entered promiscuous mode [ 1032.927502][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.972247][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.981367][T17620] device bridge_slave_1 entered promiscuous mode [ 1033.003713][T17483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1033.025534][T17483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1033.172463][T17473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.337765][T17620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.402689][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.410678][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.478396][T17620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.495967][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1033.512138][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1033.519675][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1033.543101][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1033.551680][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.558871][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.589925][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1033.600610][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1033.622909][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.630034][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.663151][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.755820][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1033.772912][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1033.792445][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1033.813051][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1033.921500][T17620] team0: Port device team_slave_0 added [ 1033.942579][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1033.952901][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1033.973120][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1033.992562][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.018653][T17473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1034.043572][T17473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1034.104658][T17620] team0: Port device team_slave_1 added [ 1034.123683][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1034.144602][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.302099][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 1034.324053][T17620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.331043][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.383081][T16383] Bluetooth: hci3: command 0x0419 tx timeout [ 1034.439129][T17620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.520595][T17575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.588646][T17620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.610834][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.649180][T17620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.665338][T17530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1034.700474][T17575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.952953][T17575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.016288][T17483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.043964][T17530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1035.122344][T17530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1035.213036][T17575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.292511][T17620] device hsr_slave_0 entered promiscuous mode [ 1035.314561][T17620] device hsr_slave_1 entered promiscuous mode [ 1035.332870][T17620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.341337][T17620] Cannot create hsr debugfs directory [ 1035.354233][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1035.370381][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1035.401590][T17483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.422948][T17530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1035.475294][T11188] device hsr_slave_0 left promiscuous mode [ 1035.491259][T11188] device hsr_slave_1 left promiscuous mode [ 1035.509162][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.539224][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.570860][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.588182][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.607549][T11188] device bridge_slave_1 left promiscuous mode [ 1035.626312][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.643364][T11188] device bridge_slave_0 left promiscuous mode [ 1035.649629][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.692886][T11188] device hsr_slave_0 left promiscuous mode [ 1035.699396][T11188] device hsr_slave_1 left promiscuous mode [ 1035.720240][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.728369][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.738383][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.752333][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.763479][T11188] device bridge_slave_1 left promiscuous mode [ 1035.769697][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.779128][T11188] device bridge_slave_0 left promiscuous mode [ 1035.801635][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.820748][T11188] device hsr_slave_0 left promiscuous mode [ 1035.828267][T11188] device hsr_slave_1 left promiscuous mode [ 1035.851338][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.860695][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.870886][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.878789][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.888564][T11188] device bridge_slave_1 left promiscuous mode [ 1035.911199][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.923362][T11188] device bridge_slave_0 left promiscuous mode [ 1035.929585][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.964155][T11188] device hsr_slave_0 left promiscuous mode [ 1035.970654][T11188] device hsr_slave_1 left promiscuous mode [ 1036.011481][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.019291][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.029318][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.036912][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.053332][T11188] device bridge_slave_1 left promiscuous mode [ 1036.059573][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.082788][T11188] device bridge_slave_0 left promiscuous mode [ 1036.089039][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.144359][T11188] device veth1_macvtap left promiscuous mode [ 1036.150443][T11188] device veth0_macvtap left promiscuous mode [ 1036.158670][T11188] device veth1_vlan left promiscuous mode [ 1036.164563][T11188] device veth0_vlan left promiscuous mode [ 1036.172771][T11188] device veth1_macvtap left promiscuous mode [ 1036.178830][T11188] device veth0_macvtap left promiscuous mode [ 1036.185393][T11188] device veth1_vlan left promiscuous mode [ 1036.191250][T11188] device veth0_vlan left promiscuous mode [ 1036.199708][T11188] device veth1_macvtap left promiscuous mode [ 1036.206712][T11188] device veth0_macvtap left promiscuous mode [ 1036.213488][T11188] device veth1_vlan left promiscuous mode [ 1036.219357][T11188] device veth0_vlan left promiscuous mode [ 1036.228795][T11188] device veth1_macvtap left promiscuous mode [ 1036.235174][T11188] device veth0_macvtap left promiscuous mode [ 1036.241304][T11188] device veth1_vlan left promiscuous mode [ 1036.247699][T11188] device veth0_vlan left promiscuous mode [ 1036.382128][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 1037.419843][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1037.464455][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1037.496674][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.541177][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.705092][T11188] bond0 (unregistering): Released all slaves [ 1037.957906][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1037.974306][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1038.007195][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.041588][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.188678][T11188] bond0 (unregistering): Released all slaves [ 1038.462142][ T5119] Bluetooth: hci2: command 0x0419 tx timeout [ 1038.493800][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1038.528577][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1038.562988][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.601757][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.790541][T11188] bond0 (unregistering): Released all slaves [ 1038.959087][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1039.001676][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1039.041661][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.075575][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.251446][T11188] bond0 (unregistering): Released all slaves [ 1039.325819][T17473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.343065][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.350639][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.415561][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1039.431220][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1039.452738][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.459881][T16673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.468278][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.477251][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.547833][T17477] device veth0_vlan entered promiscuous mode [ 1039.585430][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1039.602720][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1039.611696][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1039.627355][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.634524][T16856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.643914][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.652872][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.662549][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.671062][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.690653][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.699092][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.763171][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1039.780984][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1039.812734][T17477] device veth1_vlan entered promiscuous mode [ 1039.869398][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.882723][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1039.904094][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1040.050581][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1040.061625][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1040.071283][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1040.080705][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1040.091146][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1040.112832][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1040.121276][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1040.143540][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.161019][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.178602][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1040.197445][T17477] device veth0_macvtap entered promiscuous mode [ 1040.220030][T17483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1040.249903][T17483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1040.258640][T17575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1040.317141][T17620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.394909][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.432357][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1040.441264][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1040.463871][T17477] device veth1_macvtap entered promiscuous mode [ 1040.476771][T17473] device veth0_vlan entered promiscuous mode [ 1040.492904][T17575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1040.509774][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.620968][T17620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.687959][T17473] device veth1_vlan entered promiscuous mode [ 1040.723978][T17575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1040.765074][T17477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.792766][T17477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.804093][T17477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.814782][T17477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.844183][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.902941][T17620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.942926][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1040.950817][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1040.982789][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.991552][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1041.039944][T17575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1041.055163][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.083977][T17477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.104273][T17477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.131965][T17477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.151989][T17477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.172786][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.225256][T17620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.306072][T17473] device veth0_macvtap entered promiscuous mode [ 1041.319786][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1041.329725][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.338905][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.348228][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.357426][T17024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.364626][T17024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.372710][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.381714][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.391269][T17024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.398422][T17024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.406391][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1041.415244][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1041.426549][T17477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.451960][T17477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.460714][T17477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.478781][T17477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.584848][T17473] device veth1_macvtap entered promiscuous mode [ 1041.610139][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.618726][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1041.627638][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1041.636733][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1041.646259][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1041.757060][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1041.776018][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1041.786078][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1041.794227][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1041.810054][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.819341][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1041.828441][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1041.846078][T17483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.877068][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.888955][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.899422][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.910272][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.920611][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.931732][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.951692][T17473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.010264][T17530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.025641][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1042.035129][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1042.048414][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1042.058895][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1042.076331][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1042.094555][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.095864][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.113628][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.138159][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.141955][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.162468][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.175168][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.187083][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.200615][T17473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.235115][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1042.259451][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1042.282951][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1042.325513][T17473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.338918][T17473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.362390][T17473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.371196][T17473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.499319][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.516709][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.543841][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.551522][T17620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1042.585736][T17620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1042.611405][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.645760][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.662690][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1042.670621][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1042.712044][T17620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1042.739717][T17620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.814547][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1042.841283][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1042.868826][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.876029][T16672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.938460][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1042.947405][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1042.964263][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1042.982458][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.989600][T13271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.022893][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1043.043566][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1043.088526][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1043.118941][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1043.118979][T17728] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1043.162451][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1043.168307][T17728] CPU: 1 PID: 17728 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1043.169977][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1043.180152][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1043.180167][T17728] Call Trace: [ 1043.180174][T17728] [ 1043.180183][T17728] dump_stack_lvl+0xd1/0x138 [ 1043.180221][T17728] dump_header+0x10b/0x85f [ 1043.180248][T17728] oom_kill_process.cold+0x10/0x15 [ 1043.180277][T17728] out_of_memory+0x35c/0x14a0 [ 1043.223265][T17728] ? find_held_lock+0x2d/0x110 [ 1043.228078][T17728] ? oom_killer_disable+0x280/0x280 [ 1043.233310][T17728] ? find_held_lock+0x2d/0x110 [ 1043.238115][T17728] mem_cgroup_out_of_memory+0x206/0x270 [ 1043.243688][T17728] ? mem_cgroup_margin+0x130/0x130 [ 1043.248821][T17728] ? lock_downgrade+0x6e0/0x6e0 [ 1043.253717][T17728] try_charge_memcg+0xefb/0x12f0 [ 1043.258694][T17728] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1043.264711][T17728] ? lock_downgrade+0x6e0/0x6e0 [ 1043.269602][T17728] charge_memcg+0x90/0x3b0 [ 1043.273989][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1043.274034][T17728] __mem_cgroup_charge+0x2b/0x90 [ 1043.286205][T17728] ? copy_mc_to_kernel+0x3e/0x90 [ 1043.291183][T17728] do_wp_page+0x7ec/0x3370 [ 1043.295657][T17728] ? lock_release+0x810/0x810 [ 1043.300371][T17728] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1043.305801][T17728] ? do_raw_spin_lock+0x124/0x2b0 [ 1043.310873][T17728] ? rwlock_bug.part.0+0x90/0x90 [ 1043.315858][T17728] ? lock_chain_count+0x20/0x20 [ 1043.320761][T17728] __handle_mm_fault+0x1f58/0x3c90 [ 1043.325938][T17728] ? vm_iomap_memory+0x190/0x190 [ 1043.330961][T17728] handle_mm_fault+0x1b6/0x850 [ 1043.335783][T17728] do_user_addr_fault+0x475/0x1210 [ 1043.340943][T17728] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1043.346546][T17728] exc_page_fault+0x98/0x170 [ 1043.351180][T17728] asm_exc_page_fault+0x26/0x30 [ 1043.356075][T17728] RIP: 0033:0x7f8be443b923 [ 1043.360527][T17728] Code: a0 06 00 00 49 8d 85 10 03 00 00 49 89 85 10 05 00 00 48 8b 05 36 9e c9 00 c7 00 01 00 00 00 41 c7 85 1c 06 00 00 ff ff ff ff 05 33 de c9 00 01 00 00 00 e8 be 5b 05 00 48 85 c0 0f 84 55 01 [ 1043.380178][T17728] RSP: 002b:00007ffe479a0010 EFLAGS: 00010246 [ 1043.386461][T17728] RAX: 00007f8be50da7e8 RBX: 0000000000021000 RCX: 00007f8be448c1d7 [ 1043.399079][T17728] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8be524b700 [ 1043.407799][T17728] RBP: 00007ffe479a00e0 R08: 00000000ffffffff R09: 00007f8be524b700 [ 1043.417290][T17728] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe479a0200 [ 1043.425822][T17728] R13: 00007f8be524b700 R14: 0000000000000000 R15: 0000000000022000 [ 1043.434463][T17728] [ 1043.454558][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.476033][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.490379][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.499144][T17728] memory: usage 10496kB, limit 0kB, failcnt 408 [ 1043.506473][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1043.512801][T17728] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1043.515549][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1043.525547][T17728] Memory cgroup stats for /syz5: [ 1043.545638][T17728] anon 135168 [ 1043.545638][T17728] file 10186752 [ 1043.545638][T17728] kernel 372736 [ 1043.545638][T17728] kernel_stack 98304 [ 1043.545638][T17728] pagetables 81920 [ 1043.545638][T17728] sec_pagetables 0 [ 1043.545638][T17728] percpu 64 [ 1043.545638][T17728] sock 0 [ 1043.545638][T17728] vmalloc 0 [ 1043.545638][T17728] shmem 10186752 [ 1043.545638][T17728] zswap 0 [ 1043.545638][T17728] zswapped 0 [ 1043.545638][T17728] file_mapped 294912 [ 1043.545638][T17728] file_dirty 0 [ 1043.545638][T17728] file_writeback 0 [ 1043.545638][T17728] swapcached 0 [ 1043.545638][T17728] anon_thp 0 [ 1043.545638][T17728] file_thp 0 [ 1043.545638][T17728] shmem_thp 0 [ 1043.545638][T17728] inactive_anon 1949696 [ 1043.545638][T17728] active_anon 8372224 [ 1043.545638][T17728] inactive_file 0 [ 1043.545638][T17728] active_file 0 [ 1043.545638][T17728] unevictable 0 [ 1043.545638][T17728] slab_reclaimable 43696 [ 1043.545638][T17728] slab_unreclaimable 123168 [ 1043.545638][T17728] slab 166864 [ 1043.545789][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1043.550636][T17728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17728,uid=0 [ 1043.684734][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1043.707912][T17728] Memory cgroup out of memory: Killed process 17728 (syz-executor.5) total-vm:56852kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 00:19:12 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1043.782344][T17575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.802912][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1043.823000][T17477] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1043.846497][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1043.851997][T17477] CPU: 0 PID: 17477 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1043.864161][T17477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1043.873021][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1043.874216][T17477] Call Trace: [ 1043.874227][T17477] [ 1043.888235][T17477] dump_stack_lvl+0xd1/0x138 [ 1043.892868][T17477] dump_header+0x10b/0x85f [ 1043.897297][T17477] oom_kill_process.cold+0x10/0x15 [ 1043.902437][T17477] out_of_memory+0x35c/0x14a0 [ 1043.907131][T17477] ? find_held_lock+0x2d/0x110 [ 1043.911917][T17477] ? oom_killer_disable+0x280/0x280 [ 1043.917135][T17477] ? find_held_lock+0x2d/0x110 [ 1043.921919][T17477] mem_cgroup_out_of_memory+0x206/0x270 [ 1043.927479][T17477] ? mem_cgroup_margin+0x130/0x130 [ 1043.932597][T17477] ? lock_downgrade+0x6e0/0x6e0 [ 1043.937653][T17477] try_charge_memcg+0xefb/0x12f0 [ 1043.942618][T17477] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1043.948610][T17477] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1043.954335][T17477] ? lock_downgrade+0x6e0/0x6e0 [ 1043.959197][T17477] ? lock_downgrade+0x6e0/0x6e0 [ 1043.964069][T17477] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1043.969633][T17477] __alloc_pages+0x1f3/0x5b0 [ 1043.974247][T17477] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1043.981036][T17477] ? find_held_lock+0x2d/0x110 [ 1043.985824][T17477] alloc_pages+0x1aa/0x270 [ 1043.990255][T17477] pte_alloc_one+0x1a/0x230 [ 1043.994773][T17477] __pte_alloc+0x6d/0x260 [ 1043.999117][T17477] ? pmd_install+0x160/0x160 [ 1044.003722][T17477] ? _raw_spin_unlock+0x28/0x40 [ 1044.008595][T17477] ? __pmd_alloc+0x30c/0x5d0 [ 1044.013210][T17477] copy_page_range+0x17a8/0x3b40 [ 1044.018201][T17477] ? mas_store+0x206/0x2e0 [ 1044.022636][T17477] ? handle_mm_fault+0x850/0x850 [ 1044.028644][T17477] ? anon_vma_fork+0xba/0x630 [ 1044.033341][T17477] dup_mmap+0xc10/0x10b0 [ 1044.037606][T17477] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1044.042899][T17477] ? lock_downgrade+0x6e0/0x6e0 [ 1044.047767][T17477] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1044.053604][T17477] ? mm_init+0x8e0/0xc10 [ 1044.057857][T17477] copy_process+0x440f/0x7520 [ 1044.062542][T17477] ? _raw_spin_unlock+0x28/0x40 [ 1044.067421][T17477] ? wp_page_reuse+0x197/0x570 [ 1044.072231][T17477] ? __cleanup_sighand+0xb0/0xb0 [ 1044.077178][T17477] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1044.082581][T17477] ? rwlock_bug.part.0+0x90/0x90 [ 1044.087536][T17477] ? lock_chain_count+0x20/0x20 [ 1044.092398][T17477] kernel_clone+0xeb/0x990 [ 1044.096839][T17477] ? create_io_thread+0xf0/0xf0 [ 1044.101731][T17477] ? find_held_lock+0x2d/0x110 [ 1044.106554][T17477] __do_sys_clone+0xba/0x100 [ 1044.111165][T17477] ? kernel_clone+0x990/0x990 [ 1044.115877][T17477] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1044.121793][T17477] do_syscall_64+0x39/0xb0 [ 1044.126253][T17477] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1044.132164][T17477] RIP: 0033:0x7f8be4489dfb [ 1044.136583][T17477] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1044.156209][T17477] RSP: 002b:00007ffe479a02b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1044.164664][T17477] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8be4489dfb [ 1044.172649][T17477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1044.180637][T17477] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555765400 [ 1044.188618][T17477] R10: 00005555557656d0 R11: 0000000000000246 R12: 0000000000000001 [ 1044.196611][T17477] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe479a0390 [ 1044.204625][T17477] [ 1044.213196][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1044.221650][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1044.231547][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.262228][T17477] memory: usage 10252kB, limit 0kB, failcnt 430 [ 1044.268528][T17477] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1044.287312][T17530] device veth0_vlan entered promiscuous mode [ 1044.300953][T17477] Memory cgroup stats for /syz5: [ 1044.301144][T17477] anon 45056 [ 1044.301144][T17477] file 10186752 [ 1044.301144][T17477] kernel 262144 [ 1044.301144][T17477] kernel_stack 32768 [ 1044.301144][T17477] pagetables 53248 [ 1044.301144][T17477] sec_pagetables 0 [ 1044.301144][T17477] percpu 128 [ 1044.301144][T17477] sock 0 [ 1044.301144][T17477] vmalloc 0 [ 1044.301144][T17477] shmem 10186752 [ 1044.301144][T17477] zswap 0 [ 1044.301144][T17477] zswapped 0 [ 1044.301144][T17477] file_mapped 262144 [ 1044.301144][T17477] file_dirty 0 [ 1044.301144][T17477] file_writeback 0 [ 1044.301144][T17477] swapcached 0 [ 1044.301144][T17477] anon_thp 0 [ 1044.301144][T17477] file_thp 0 [ 1044.301144][T17477] shmem_thp 0 [ 1044.301144][T17477] inactive_anon 1859584 [ 1044.301144][T17477] active_anon 8372224 [ 1044.301144][T17477] inactive_file 0 [ 1044.301144][T17477] active_file 0 [ 1044.301144][T17477] unevictable 0 [ 1044.301144][T17477] slab_reclaimable 37600 [ 1044.301144][T17477] slab_unreclaimable 113200 [ 1044.301144][T17477] slab 150800 [ 1044.338449][T17483] device veth0_vlan entered promiscuous mode [ 1044.456612][T17477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17477,uid=0 [ 1044.473561][T17477] Memory cgroup out of memory: Killed process 17477 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1044.538703][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.561993][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.566531][T17483] device veth1_vlan entered promiscuous mode [ 1044.577349][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.589023][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.598079][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.607522][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.616559][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1044.627332][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1044.641173][T17530] device veth1_vlan entered promiscuous mode [ 1044.729202][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.742763][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1044.750682][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1044.764116][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.772407][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.024914][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1045.053055][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 00:19:14 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1045.074636][T17756] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1045.077740][T17483] device veth0_macvtap entered promiscuous mode [ 1045.135487][T17756] CPU: 0 PID: 17756 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1045.145964][T17756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1045.156050][T17756] Call Trace: [ 1045.159353][T17756] [ 1045.162307][T17756] dump_stack_lvl+0xd1/0x138 [ 1045.163620][T17483] device veth1_macvtap entered promiscuous mode [ 1045.166919][T17756] dump_header+0x10b/0x85f [ 1045.166953][T17756] oom_kill_process.cold+0x10/0x15 [ 1045.182719][T17756] out_of_memory+0x35c/0x14a0 [ 1045.187437][T17756] ? find_held_lock+0x2d/0x110 [ 1045.192240][T17756] ? oom_killer_disable+0x280/0x280 [ 1045.197474][T17756] ? find_held_lock+0x2d/0x110 [ 1045.202284][T17756] mem_cgroup_out_of_memory+0x206/0x270 [ 1045.207859][T17756] ? mem_cgroup_margin+0x130/0x130 [ 1045.212989][T17756] ? lock_downgrade+0x6e0/0x6e0 [ 1045.217892][T17756] try_charge_memcg+0xefb/0x12f0 [ 1045.222864][T17756] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1045.228870][T17756] ? lock_downgrade+0x6e0/0x6e0 [ 1045.233762][T17756] charge_memcg+0x90/0x3b0 [ 1045.238194][T17756] __mem_cgroup_charge+0x2b/0x90 [ 1045.243158][T17756] ? _compound_head+0x5d/0x150 [ 1045.247936][T17756] __handle_mm_fault+0x187d/0x3c90 [ 1045.253071][T17756] ? vm_iomap_memory+0x190/0x190 [ 1045.258046][T17756] handle_mm_fault+0x1b6/0x850 [ 1045.262843][T17756] do_user_addr_fault+0x475/0x1210 [ 1045.267985][T17756] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1045.273557][T17756] exc_page_fault+0x98/0x170 [ 1045.278163][T17756] asm_exc_page_fault+0x26/0x30 [ 1045.283026][T17756] RIP: 0033:0x7ff11e43b8cf [ 1045.287444][T17756] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 1045.307054][T17756] RSP: 002b:00007ffe57a56360 EFLAGS: 00010246 [ 1045.313124][T17756] RAX: 00007ff11f1a2000 RBX: 0000000000021000 RCX: 00007ff11e48c1d7 [ 1045.321099][T17756] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff11f1a3000 [ 1045.329073][T17756] RBP: 00007ffe57a56430 R08: 00000000ffffffff R09: 00007ff11f1c2700 [ 1045.337048][T17756] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe57a56550 [ 1045.345024][T17756] R13: 00007ff11f1c2700 R14: 0000000000000000 R15: 0000000000022000 [ 1045.353016][T17756] [ 1045.385645][T17620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.425362][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.442737][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1045.459240][T17756] memory: usage 8596kB, limit 0kB, failcnt 1063 [ 1045.475059][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1045.482181][T17756] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1045.489378][T17756] Memory cgroup stats for /syz1: [ 1045.489556][T17756] anon 114688 [ 1045.489556][T17756] file 8376320 [ 1045.489556][T17756] kernel 311296 [ 1045.489556][T17756] kernel_stack 65536 [ 1045.489556][T17756] pagetables 77824 [ 1045.489556][T17756] sec_pagetables 0 [ 1045.489556][T17756] percpu 64 [ 1045.489556][T17756] sock 0 [ 1045.489556][T17756] vmalloc 0 [ 1045.489556][T17756] shmem 8376320 [ 1045.489556][T17756] zswap 0 [ 1045.489556][T17756] zswapped 0 [ 1045.489556][T17756] file_mapped 233472 [ 1045.489556][T17756] file_dirty 0 [ 1045.489556][T17756] file_writeback 0 [ 1045.489556][T17756] swapcached 0 [ 1045.489556][T17756] anon_thp 0 [ 1045.489556][T17756] file_thp 0 [ 1045.489556][T17756] shmem_thp 0 [ 1045.489556][T17756] inactive_anon 114688 [ 1045.489556][T17756] active_anon 8376320 [ 1045.489556][T17756] inactive_file 0 [ 1045.489556][T17756] active_file 0 [ 1045.489556][T17756] unevictable 0 [ 1045.489556][T17756] slab_reclaimable 39872 [ 1045.489556][T17756] slab_unreclaimable 100032 [ 1045.489556][T17756] slab 139904 00:19:14 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1045.503782][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1045.735729][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.762019][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.792688][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.832500][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.863344][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.892084][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.927697][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.968948][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.002560][T17483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.039711][T17620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.064126][T17530] device veth0_macvtap entered promiscuous mode [ 1046.099855][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1046.109888][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1046.135903][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1046.175218][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1046.212818][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1046.237527][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1046.261137][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1046.272056][T17756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17756,uid=0 [ 1046.308177][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.319705][T17756] Memory cgroup out of memory: Killed process 17756 (syz-executor.1) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1046.351909][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.361761][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.412692][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.444545][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.473070][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.491912][T17483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.511911][T17483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.543268][T17483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.607562][T17530] device veth1_macvtap entered promiscuous mode [ 1046.619252][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1046.630014][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1046.642238][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1046.662539][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.683203][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.690335][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.714751][T17483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.731921][T17483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.740663][T17483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.771936][T17483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.815587][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.845741][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.861910][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.892383][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.911927][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.931906][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.941752][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.972776][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.996426][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.009513][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.034873][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.054092][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1047.082196][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.089768][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.122261][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1047.131135][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1047.172528][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.179688][T16164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.214901][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1047.232837][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1047.286388][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.303526][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.322003][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.351951][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.378776][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.393488][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.412050][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.446544][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.468197][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.482681][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.503586][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.533485][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.541274][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1047.561390][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1047.571754][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1047.581766][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1047.591708][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1047.651618][T17530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.660986][T17530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.671221][T17530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.680447][T17530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.692472][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1047.701174][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1047.711369][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1047.720551][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1047.730088][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1047.739439][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1047.773118][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1047.856313][T16383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.871955][T16383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.880732][T16383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.889153][T16383] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1047.897007][T16383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.910554][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1047.920243][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1047.947478][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.968663][T17575] device veth0_vlan entered promiscuous mode [ 1047.979909][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.013735][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1048.032392][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1048.079318][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1048.079451][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.103904][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.111388][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.111819][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1048.142076][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1048.159057][T17575] device veth1_vlan entered promiscuous mode [ 1048.174904][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1048.289981][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.300276][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.353619][T17575] device veth0_macvtap entered promiscuous mode [ 1048.362239][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1048.371738][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1048.390387][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1048.414542][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1048.424936][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1048.452372][T17575] device veth1_macvtap entered promiscuous mode [ 1048.490034][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.517119][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.535143][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1048.556545][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1048.623738][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.634479][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.644394][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.657098][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.668140][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.679022][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.690000][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.701104][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.717852][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.733035][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.737508][T17789] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1048.756584][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.774801][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.794632][T17789] CPU: 0 PID: 17789 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1048.804471][T17575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.805074][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1048.822440][T17789] Call Trace: [ 1048.825736][T17789] [ 1048.828687][T17789] dump_stack_lvl+0xd1/0x138 [ 1048.833323][T17789] dump_header+0x10b/0x85f [ 1048.837781][T17789] oom_kill_process.cold+0x10/0x15 [ 1048.842937][T17789] out_of_memory+0x35c/0x14a0 [ 1048.847657][T17789] ? oom_killer_disable+0x280/0x280 [ 1048.852889][T17789] ? find_held_lock+0x2d/0x110 [ 1048.857697][T17789] mem_cgroup_out_of_memory+0x206/0x270 [ 1048.863360][T17789] ? mem_cgroup_margin+0x130/0x130 [ 1048.868517][T17789] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1048.874374][T17789] memory_max_write+0x2f9/0x3c0 [ 1048.879343][T17789] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1048.885462][T17789] ? lock_release+0x810/0x810 [ 1048.890177][T17789] cgroup_file_write+0x1e2/0x770 [ 1048.895151][T17789] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1048.901252][T17789] ? kill_css+0x370/0x370 [ 1048.905616][T17789] ? __virt_addr_valid+0x61/0x2e0 [ 1048.910692][T17789] ? kill_css+0x370/0x370 [ 1048.915227][T17789] kernfs_fop_write_iter+0x3f1/0x600 [ 1048.920651][T17789] vfs_write+0x9ed/0xdd0 [ 1048.924932][T17789] ? kernel_write+0x630/0x630 [ 1048.929659][T17789] ? __fget_files+0x26a/0x440 [ 1048.934390][T17789] ksys_write+0x12b/0x250 [ 1048.938752][T17789] ? __ia32_sys_read+0xb0/0xb0 [ 1048.943557][T17789] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1048.949495][T17789] do_syscall_64+0x39/0xb0 [ 1048.953952][T17789] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1048.959877][T17789] RIP: 0033:0x7fa4ca28c0c9 [ 1048.964314][T17789] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1048.983957][T17789] RSP: 002b:00007fa4cb06d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1048.992401][T17789] RAX: ffffffffffffffda RBX: 00007fa4ca3ac050 RCX: 00007fa4ca28c0c9 [ 1049.000397][T17789] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1049.008396][T17789] RBP: 00007fa4ca2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1049.016395][T17789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.024395][T17789] R13: 00007ffd996c899f R14: 00007fa4cb06d300 R15: 0000000000022000 [ 1049.032428][T17789] [ 1049.042662][T17789] memory: usage 10852kB, limit 0kB, failcnt 1143 [ 1049.049121][T17789] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1049.059288][T17789] Memory cgroup stats for /syz4: [ 1049.059502][T17789] anon 135168 [ 1049.059502][T17789] file 10412032 [ 1049.059502][T17789] kernel 344064 [ 1049.059502][T17789] kernel_stack 98304 [ 1049.059502][T17789] pagetables 81920 [ 1049.059502][T17789] sec_pagetables 0 [ 1049.059502][T17789] percpu 64 [ 1049.059502][T17789] sock 0 [ 1049.059502][T17789] vmalloc 0 [ 1049.059502][T17789] shmem 10412032 [ 1049.059502][T17789] zswap 0 [ 1049.059502][T17789] zswapped 0 [ 1049.059502][T17789] file_mapped 172032 [ 1049.059502][T17789] file_dirty 0 [ 1049.059502][T17789] file_writeback 0 [ 1049.059502][T17789] swapcached 0 [ 1049.059502][T17789] anon_thp 0 [ 1049.059502][T17789] file_thp 0 [ 1049.059502][T17789] shmem_thp 0 [ 1049.059502][T17789] inactive_anon 81920 [ 1049.059502][T17789] active_anon 10412032 [ 1049.059502][T17789] inactive_file 0 [ 1049.059502][T17789] active_file 0 [ 1049.059502][T17789] unevictable 0 [ 1049.059502][T17789] slab_reclaimable 40176 [ 1049.059502][T17789] slab_unreclaimable 95328 [ 1049.059502][T17789] slab 135504 [ 1049.186014][T11188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.255692][T17620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.278306][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1049.289493][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1049.310520][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.311668][T17789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17483,uid=0 [ 1049.334685][T17789] Memory cgroup out of memory: Killed process 17483 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1049.377535][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.390128][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.430605][T17789] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1049.449979][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.452835][T17789] CPU: 1 PID: 17789 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1049.470262][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1049.471374][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.480326][T17789] Call Trace: [ 1049.480338][T17789] [ 1049.480349][T17789] dump_stack_lvl+0xd1/0x138 [ 1049.480391][T17789] dump_header+0x10b/0x85f [ 1049.491602][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.494154][T17789] oom_kill_process.cold+0x10/0x15 [ 1049.494192][T17789] out_of_memory+0x35c/0x14a0 [ 1049.494229][T17789] ? oom_killer_disable+0x280/0x280 [ 1049.497783][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.501706][T17789] ? find_held_lock+0x2d/0x110 [ 1049.525703][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.530876][T17789] mem_cgroup_out_of_memory+0x206/0x270 [ 1049.541688][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.546033][T17789] ? mem_cgroup_margin+0x130/0x130 [ 1049.546074][T17789] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1049.570137][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.571825][T17789] memory_max_write+0x2f9/0x3c0 [ 1049.571867][T17789] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1049.571901][T17789] ? lock_release+0x810/0x810 [ 1049.577498][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.582783][T17789] cgroup_file_write+0x1e2/0x770 [ 1049.582822][T17789] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1049.582853][T17789] ? kill_css+0x370/0x370 [ 1049.593213][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.597457][T17789] ? __virt_addr_valid+0x61/0x2e0 [ 1049.597509][T17789] ? kill_css+0x370/0x370 [ 1049.618234][T17575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.618587][T17789] kernfs_fop_write_iter+0x3f1/0x600 [ 1049.626279][T17575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.629568][T17789] vfs_write+0x9ed/0xdd0 [ 1049.636078][T17575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.643682][T17789] ? kernel_write+0x630/0x630 [ 1049.643725][T17789] ? __fget_files+0x26a/0x440 [ 1049.643769][T17789] ksys_write+0x12b/0x250 [ 1049.704005][T17789] ? __ia32_sys_read+0xb0/0xb0 [ 1049.708820][T17789] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1049.714772][T17789] do_syscall_64+0x39/0xb0 [ 1049.719253][T17789] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1049.725192][T17789] RIP: 0033:0x7fa4ca28c0c9 [ 1049.729645][T17789] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1049.749291][T17789] RSP: 002b:00007fa4cb06d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1049.757747][T17789] RAX: ffffffffffffffda RBX: 00007fa4ca3ac050 RCX: 00007fa4ca28c0c9 [ 1049.765758][T17789] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1049.773782][T17789] RBP: 00007fa4ca2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1049.781794][T17789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.789806][T17789] R13: 00007ffd996c899f R14: 00007fa4cb06d300 R15: 0000000000022000 [ 1049.797840][T17789] [ 1049.816388][T17789] memory: usage 10608kB, limit 0kB, failcnt 1177 [ 1049.824447][T17789] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1049.842451][T17789] Memory cgroup stats for /syz4: [ 1049.842666][T17789] anon 118784 [ 1049.842666][T17789] file 10412032 [ 1049.842666][T17789] kernel 266240 [ 1049.842666][T17789] kernel_stack 32768 [ 1049.842666][T17789] pagetables 73728 [ 1049.842666][T17789] sec_pagetables 0 [ 1049.842666][T17789] percpu 64 [ 1049.842666][T17789] sock 0 [ 1049.842666][T17789] vmalloc 0 [ 1049.842666][T17789] shmem 10412032 [ 1049.842666][T17789] zswap 0 [ 1049.842666][T17789] zswapped 0 [ 1049.842666][T17789] file_mapped 172032 [ 1049.842666][T17789] file_dirty 0 [ 1049.842666][T17789] file_writeback 0 [ 1049.842666][T17789] swapcached 0 [ 1049.842666][T17789] anon_thp 0 [ 1049.842666][T17789] file_thp 0 [ 1049.842666][T17789] shmem_thp 0 [ 1049.842666][T17789] inactive_anon 118784 [ 1049.842666][T17789] active_anon 10412032 [ 1049.842666][T17789] inactive_file 0 [ 1049.842666][T17789] active_file 0 [ 1049.842666][T17789] unevictable 0 [ 1049.842666][T17789] slab_reclaimable 40176 [ 1049.842666][T17789] slab_unreclaimable 95328 [ 1049.842666][T17789] slab 135504 [ 1049.946653][T11188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.967934][T17789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17786,uid=0 [ 1049.991958][T16383] Bluetooth: hci4: command 0x0409 tx timeout [ 1050.000782][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.020585][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.029155][T17789] Memory cgroup out of memory: Killed process 17789 (syz-executor.4) total-vm:54804kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1050.051516][T17575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.062387][T17575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.071116][T17575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.082998][T17575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.097778][T17793] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1050.112126][T17793] CPU: 0 PID: 17793 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1050.122596][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1050.132678][T17793] Call Trace: [ 1050.135978][T17793] [ 1050.138928][T17793] dump_stack_lvl+0xd1/0x138 [ 1050.143563][T17793] dump_header+0x10b/0x85f [ 1050.148017][T17793] oom_kill_process.cold+0x10/0x15 [ 1050.153173][T17793] out_of_memory+0x35c/0x14a0 [ 1050.157903][T17793] ? oom_killer_disable+0x280/0x280 [ 1050.163139][T17793] ? find_held_lock+0x2d/0x110 [ 1050.167966][T17793] mem_cgroup_out_of_memory+0x206/0x270 [ 1050.173558][T17793] ? mem_cgroup_margin+0x130/0x130 [ 1050.178724][T17793] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1050.184583][T17793] memory_max_write+0x2f9/0x3c0 [ 1050.189473][T17793] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1050.195566][T17793] ? lock_release+0x810/0x810 [ 1050.200264][T17793] cgroup_file_write+0x1e2/0x770 [ 1050.205222][T17793] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1050.211301][T17793] ? kill_css+0x370/0x370 [ 1050.215645][T17793] ? __virt_addr_valid+0x61/0x2e0 [ 1050.220738][T17793] ? kill_css+0x370/0x370 [ 1050.225108][T17793] kernfs_fop_write_iter+0x3f1/0x600 [ 1050.230441][T17793] vfs_write+0x9ed/0xdd0 [ 1050.234712][T17793] ? kernel_write+0x630/0x630 [ 1050.239422][T17793] ? __fget_files+0x26a/0x440 [ 1050.244134][T17793] ksys_write+0x12b/0x250 [ 1050.248482][T17793] ? __ia32_sys_read+0xb0/0xb0 [ 1050.253267][T17793] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1050.259209][T17793] do_syscall_64+0x39/0xb0 [ 1050.263650][T17793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1050.269582][T17793] RIP: 0033:0x7fbac008c0c9 [ 1050.274029][T17793] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1050.293661][T17793] RSP: 002b:00007fbac0d33168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1050.302105][T17793] RAX: ffffffffffffffda RBX: 00007fbac01ac050 RCX: 00007fbac008c0c9 [ 1050.310086][T17793] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1050.318081][T17793] RBP: 00007fbac00e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1050.326065][T17793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.334057][T17793] R13: 00007ffd9f9824df R14: 00007fbac0d33300 R15: 0000000000022000 [ 1050.342081][T17793] [ 1050.353879][T17793] memory: usage 8688kB, limit 0kB, failcnt 303 [ 1050.360237][T17793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1050.368606][T17793] Memory cgroup stats for /syz3: [ 1050.368826][T17793] anon 139264 [ 1050.368826][T17793] file 8347648 [ 1050.368826][T17793] kernel 339968 [ 1050.368826][T17793] kernel_stack 98304 [ 1050.368826][T17793] pagetables 81920 [ 1050.368826][T17793] sec_pagetables 0 [ 1050.368826][T17793] percpu 64 [ 1050.368826][T17793] sock 0 [ 1050.368826][T17793] vmalloc 0 [ 1050.368826][T17793] shmem 8347648 [ 1050.368826][T17793] zswap 0 [ 1050.368826][T17793] zswapped 0 [ 1050.368826][T17793] file_mapped 204800 [ 1050.368826][T17793] file_dirty 0 [ 1050.368826][T17793] file_writeback 0 [ 1050.368826][T17793] swapcached 0 [ 1050.368826][T17793] anon_thp 0 [ 1050.368826][T17793] file_thp 0 [ 1050.368826][T17793] shmem_thp 0 [ 1050.368826][T17793] inactive_anon 8228864 [ 1050.368826][T17793] active_anon 258048 [ 1050.368826][T17793] inactive_file 0 [ 1050.368826][T17793] active_file 0 [ 1050.368826][T17793] unevictable 0 [ 1050.368826][T17793] slab_reclaimable 35904 [ 1050.368826][T17793] slab_unreclaimable 98768 [ 1050.368826][T17793] slab 134672 [ 1050.472126][T17793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17791,uid=0 [ 1050.503742][T11188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.512900][T17793] Memory cgroup out of memory: Killed process 17791 (syz-executor.3) total-vm:54804kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1050.539873][T17780] chnl_net:caif_netlink_parms(): no params data found [ 1050.741332][T17530] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1050.752168][T17530] CPU: 0 PID: 17530 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1050.762621][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1050.772691][T17530] Call Trace: [ 1050.775984][T17530] [ 1050.778928][T17530] dump_stack_lvl+0xd1/0x138 [ 1050.783555][T17530] dump_header+0x10b/0x85f [ 1050.787997][T17530] oom_kill_process.cold+0x10/0x15 [ 1050.793138][T17530] out_of_memory+0x35c/0x14a0 [ 1050.797848][T17530] ? find_held_lock+0x2d/0x110 [ 1050.802643][T17530] ? oom_killer_disable+0x280/0x280 [ 1050.807852][T17530] ? find_held_lock+0x2d/0x110 [ 1050.812642][T17530] mem_cgroup_out_of_memory+0x206/0x270 [ 1050.818198][T17530] ? mem_cgroup_margin+0x130/0x130 [ 1050.823328][T17530] ? lock_downgrade+0x6e0/0x6e0 [ 1050.828199][T17530] try_charge_memcg+0xefb/0x12f0 [ 1050.833156][T17530] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1050.839153][T17530] ? lock_downgrade+0x6e0/0x6e0 [ 1050.844021][T17530] charge_memcg+0x90/0x3b0 [ 1050.848450][T17530] __mem_cgroup_charge+0x2b/0x90 [ 1050.853398][T17530] ? _compound_head+0x5d/0x150 [ 1050.858172][T17530] __handle_mm_fault+0x187d/0x3c90 [ 1050.863308][T17530] ? vm_iomap_memory+0x190/0x190 [ 1050.868305][T17530] handle_mm_fault+0x1b6/0x850 [ 1050.873103][T17530] do_user_addr_fault+0x475/0x1210 [ 1050.879273][T17530] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1050.884840][T17530] exc_page_fault+0x98/0x170 [ 1050.889442][T17530] asm_exc_page_fault+0x26/0x30 [ 1050.894303][T17530] RIP: 0033:0x7fbac005a7d5 [ 1050.898721][T17530] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 1050.918332][T17530] RSP: 002b:00007ffd9f981480 EFLAGS: 00010206 [ 1050.924404][T17530] RAX: 00000000000187c1 RBX: 00007fbac01885e0 RCX: 0000555555652840 [ 1050.932386][T17530] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1050.940357][T17530] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fbac0188640 [ 1050.948329][T17530] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 1050.956303][T17530] R13: 0000000000008040 R14: 0000000000000804 R15: 000055555564a800 [ 1050.964299][T17530] [ 1051.024100][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1051.034296][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.060064][T11188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.088560][T17530] memory: usage 8312kB, limit 0kB, failcnt 339 [ 1051.095934][T17530] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1051.106151][T17530] Memory cgroup stats for /syz3: [ 1051.106363][T17530] anon 36864 [ 1051.106363][T17530] file 8347648 [ 1051.106363][T17530] kernel 118784 [ 1051.106363][T17530] kernel_stack 0 [ 1051.106363][T17530] pagetables 8192 [ 1051.106363][T17530] sec_pagetables 0 [ 1051.106363][T17530] percpu 64 [ 1051.106363][T17530] sock 0 [ 1051.106363][T17530] vmalloc 0 [ 1051.106363][T17530] shmem 8347648 [ 1051.106363][T17530] zswap 0 [ 1051.106363][T17530] zswapped 0 [ 1051.106363][T17530] file_mapped 180224 [ 1051.106363][T17530] file_dirty 0 [ 1051.106363][T17530] file_writeback 0 [ 1051.106363][T17530] swapcached 0 [ 1051.106363][T17530] anon_thp 0 [ 1051.106363][T17530] file_thp 0 [ 1051.106363][T17530] shmem_thp 0 [ 1051.106363][T17530] inactive_anon 8126464 [ 1051.106363][T17530] active_anon 258048 [ 1051.106363][T17530] inactive_file 0 [ 1051.106363][T17530] active_file 0 [ 1051.106363][T17530] unevictable 0 [ 1051.106363][T17530] slab_reclaimable 35520 [ 1051.106363][T17530] slab_unreclaimable 59240 [ 1051.106363][T17530] slab 94760 [ 1051.210023][T17530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17530,uid=0 [ 1051.226364][T17530] Memory cgroup out of memory: Killed process 17530 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1051.233303][T17780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.276091][T17780] bridge0: port 1(bridge_slave_0) entered disabled state 00:19:20 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:20 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:20 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1051.291464][T17780] device bridge_slave_0 entered promiscuous mode [ 1051.346778][T17473] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1051.388209][T17620] device veth0_vlan entered promiscuous mode [ 1051.401686][T17780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.412423][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.420705][T17780] device bridge_slave_1 entered promiscuous mode [ 1051.420708][T17473] CPU: 1 PID: 17473 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1051.437467][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1051.447550][T17473] Call Trace: [ 1051.450847][T17473] [ 1051.453791][T17473] dump_stack_lvl+0xd1/0x138 [ 1051.458417][T17473] dump_header+0x10b/0x85f [ 1051.462863][T17473] oom_kill_process.cold+0x10/0x15 [ 1051.468012][T17473] out_of_memory+0x35c/0x14a0 [ 1051.472729][T17473] ? find_held_lock+0x2d/0x110 [ 1051.477533][T17473] ? oom_killer_disable+0x280/0x280 [ 1051.482761][T17473] ? find_held_lock+0x2d/0x110 00:19:20 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1051.487571][T17473] mem_cgroup_out_of_memory+0x206/0x270 [ 1051.493142][T17473] ? mem_cgroup_margin+0x130/0x130 [ 1051.498276][T17473] ? lock_downgrade+0x6e0/0x6e0 [ 1051.503180][T17473] try_charge_memcg+0xefb/0x12f0 [ 1051.508599][T17473] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1051.514626][T17473] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1051.520389][T17473] ? lock_downgrade+0x6e0/0x6e0 [ 1051.525276][T17473] ? lock_downgrade+0x6e0/0x6e0 [ 1051.530140][T17473] ? rcu_read_unlock+0x9/0x60 [ 1051.534842][T17473] obj_cgroup_charge+0x2af/0x5e0 [ 1051.539808][T17473] ? copy_process+0x3aa/0x7520 [ 1051.544580][T17473] kmem_cache_alloc_node+0xb7/0x460 [ 1051.549793][T17473] copy_process+0x3aa/0x7520 [ 1051.554392][T17473] ? _raw_spin_unlock+0x28/0x40 [ 1051.559256][T17473] ? wp_page_reuse+0x197/0x570 [ 1051.564033][T17473] ? do_wp_page+0x844/0x3370 [ 1051.568644][T17473] ? __cleanup_sighand+0xb0/0xb0 [ 1051.573588][T17473] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1051.578980][T17473] ? rwlock_bug.part.0+0x90/0x90 [ 1051.583923][T17473] ? lock_chain_count+0x20/0x20 [ 1051.588782][T17473] kernel_clone+0xeb/0x990 [ 1051.593208][T17473] ? create_io_thread+0xf0/0xf0 [ 1051.598083][T17473] ? find_held_lock+0x2d/0x110 [ 1051.602871][T17473] __do_sys_clone+0xba/0x100 [ 1051.607471][T17473] ? kernel_clone+0x990/0x990 [ 1051.612170][T17473] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1051.618081][T17473] do_syscall_64+0x39/0xb0 [ 1051.622526][T17473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1051.628450][T17473] RIP: 0033:0x7ff11e489dfb [ 1051.632869][T17473] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1051.652483][T17473] RSP: 002b:00007ffe57a56600 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1051.660919][T17473] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff11e489dfb [ 1051.668904][T17473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1051.676875][T17473] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555573e1400 [ 1051.684846][T17473] R10: 00005555573e16d0 R11: 0000000000000246 R12: 0000000000000001 [ 1051.692845][T17473] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe57a566e0 [ 1051.700855][T17473] [ 1051.745587][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1051.774670][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.798410][T17620] device veth1_vlan entered promiscuous mode 00:19:20 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1051.841146][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.869812][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.899971][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1052.016382][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.032141][T17473] memory: usage 8308kB, limit 0kB, failcnt 1082 [ 1052.038436][T17473] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1052.064011][T16383] Bluetooth: hci4: command 0x041b tx timeout [ 1052.092204][T17473] Memory cgroup stats for /syz1: [ 1052.092400][T17473] anon 45056 [ 1052.092400][T17473] file 8376320 [ 1052.092400][T17473] kernel 81920 [ 1052.092400][T17473] kernel_stack 0 [ 1052.092400][T17473] pagetables 8192 [ 1052.092400][T17473] sec_pagetables 0 [ 1052.092400][T17473] percpu 0 [ 1052.092400][T17473] sock 0 [ 1052.092400][T17473] vmalloc 0 [ 1052.092400][T17473] shmem 8376320 [ 1052.092400][T17473] zswap 0 [ 1052.092400][T17473] zswapped 0 [ 1052.092400][T17473] file_mapped 208896 [ 1052.092400][T17473] file_dirty 0 [ 1052.092400][T17473] file_writeback 0 [ 1052.092400][T17473] swapcached 0 [ 1052.092400][T17473] anon_thp 0 [ 1052.092400][T17473] file_thp 0 [ 1052.092400][T17473] shmem_thp 0 [ 1052.092400][T17473] inactive_anon 45056 [ 1052.092400][T17473] active_anon 8376320 [ 1052.092400][T17473] inactive_file 0 [ 1052.092400][T17473] active_file 0 [ 1052.092400][T17473] unevictable 0 [ 1052.092400][T17473] slab_reclaimable 33776 [ 1052.092400][T17473] slab_unreclaimable 32296 [ 1052.092400][T17473] slab 66072 [ 1052.190198][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1052.228319][T17473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17473,uid=0 [ 1052.248839][T17473] Memory cgroup out of memory: Killed process 17473 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1052.349689][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.427482][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.441370][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.511402][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1052.521356][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1052.530367][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.556010][T17620] device veth0_macvtap entered promiscuous mode [ 1052.591363][T17620] device veth1_macvtap entered promiscuous mode [ 1052.618254][T17780] team0: Port device team_slave_0 added [ 1052.777700][T17780] team0: Port device team_slave_1 added [ 1052.792215][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.822171][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.843881][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.862221][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.922022][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.991781][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1053.014263][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1053.060695][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1053.069684][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.092090][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.111979][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.132269][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.157270][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.180161][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.202845][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.222022][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.242029][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.272031][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.291940][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.312010][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.331984][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.358375][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.389173][T17620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.409813][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.417676][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.444239][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.532638][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1053.593193][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1053.654872][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.712040][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.731980][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.751980][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.768461][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.780787][T17826] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1053.807435][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.817369][T17826] CPU: 1 PID: 17826 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1053.827823][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1053.837912][T17826] Call Trace: [ 1053.841212][T17826] [ 1053.844162][T17826] dump_stack_lvl+0xd1/0x138 [ 1053.848795][T17826] dump_header+0x10b/0x85f [ 1053.853248][T17826] oom_kill_process.cold+0x10/0x15 [ 1053.858395][T17826] out_of_memory+0x35c/0x14a0 [ 1053.863115][T17826] ? oom_killer_disable+0x280/0x280 [ 1053.868349][T17826] ? find_held_lock+0x2d/0x110 [ 1053.873164][T17826] mem_cgroup_out_of_memory+0x206/0x270 [ 1053.878741][T17826] ? mem_cgroup_margin+0x130/0x130 [ 1053.883904][T17826] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1053.889761][T17826] memory_max_write+0x2f9/0x3c0 [ 1053.894701][T17826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1053.900803][T17826] ? lock_release+0x810/0x810 [ 1053.905513][T17826] cgroup_file_write+0x1e2/0x770 [ 1053.910486][T17826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1053.916582][T17826] ? kill_css+0x370/0x370 [ 1053.920946][T17826] ? __virt_addr_valid+0x61/0x2e0 [ 1053.926021][T17826] ? kill_css+0x370/0x370 [ 1053.930370][T17826] kernfs_fop_write_iter+0x3f1/0x600 [ 1053.935686][T17826] vfs_write+0x9ed/0xdd0 [ 1053.939946][T17826] ? kernel_write+0x630/0x630 [ 1053.944643][T17826] ? __fget_files+0x26a/0x440 [ 1053.949348][T17826] ksys_write+0x12b/0x250 [ 1053.953691][T17826] ? __ia32_sys_read+0xb0/0xb0 [ 1053.958470][T17826] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1053.964394][T17826] do_syscall_64+0x39/0xb0 [ 1053.968832][T17826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1053.974747][T17826] RIP: 0033:0x7f414168c0c9 [ 1053.979177][T17826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1053.998807][T17826] RSP: 002b:00007f4142468168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.007243][T17826] RAX: ffffffffffffffda RBX: 00007f41417ac050 RCX: 00007f414168c0c9 [ 1054.015218][T17826] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1054.023195][T17826] RBP: 00007f41416e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1054.031171][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.039145][T17826] R13: 00007ffd1bed7f5f R14: 00007f4142468300 R15: 0000000000022000 [ 1054.047141][T17826] [ 1054.056077][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.062125][T17826] memory: usage 8748kB, limit 0kB, failcnt 307 [ 1054.069100][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.081007][T17826] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1054.093117][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.102623][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.103106][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.120250][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.120544][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.137526][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.148485][T17826] Memory cgroup stats for /syz2: [ 1054.148674][T17826] anon 135168 [ 1054.148674][T17826] file 8388608 [ 1054.148674][T17826] kernel 385024 [ 1054.148674][T17826] kernel_stack 98304 [ 1054.148674][T17826] pagetables 81920 [ 1054.148674][T17826] sec_pagetables 0 [ 1054.148674][T17826] percpu 64 [ 1054.148674][T17826] sock 0 [ 1054.148674][T17826] vmalloc 0 [ 1054.148674][T17826] shmem 8380416 [ 1054.148674][T17826] zswap 0 [ 1054.148674][T17826] zswapped 0 [ 1054.148674][T17826] file_mapped 237568 [ 1054.148674][T17826] file_dirty 8192 [ 1054.148674][T17826] file_writeback 0 [ 1054.148674][T17826] swapcached 0 [ 1054.148674][T17826] anon_thp 0 [ 1054.148674][T17826] file_thp 0 [ 1054.148674][T17826] shmem_thp 0 [ 1054.148674][T17826] inactive_anon 135168 [ 1054.148674][T17826] active_anon 8380416 [ 1054.148674][T17826] inactive_file 4096 [ 1054.148674][T17826] active_file 4096 [ 1054.148674][T17826] unevictable 0 [ 1054.148674][T17826] slab_reclaimable 50328 [ 1054.148674][T17826] slab_unreclaimable 122688 [ 1054.148769][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.154181][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.248958][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.258623][ T5119] Bluetooth: hci4: command 0x040f tx timeout [ 1054.267103][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.269856][T17620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.275372][T16379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1054.282477][T17620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.312117][T16379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1054.313486][T17620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.342184][T17826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17575,uid=0 [ 1054.359345][T17826] Memory cgroup out of memory: Killed process 17575 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1054.406710][T17826] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1054.419106][T17826] CPU: 0 PID: 17826 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1054.429639][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1054.439698][T17826] Call Trace: [ 1054.442984][T17826] [ 1054.445922][T17826] dump_stack_lvl+0xd1/0x138 [ 1054.450537][T17826] dump_header+0x10b/0x85f [ 1054.454967][T17826] oom_kill_process.cold+0x10/0x15 [ 1054.460093][T17826] out_of_memory+0x35c/0x14a0 [ 1054.464789][T17826] ? oom_killer_disable+0x280/0x280 [ 1054.470005][T17826] ? find_held_lock+0x2d/0x110 [ 1054.474793][T17826] mem_cgroup_out_of_memory+0x206/0x270 [ 1054.480348][T17826] ? mem_cgroup_margin+0x130/0x130 [ 1054.485479][T17826] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1054.491314][T17826] memory_max_write+0x2f9/0x3c0 [ 1054.496185][T17826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1054.502271][T17826] ? lock_release+0x810/0x810 [ 1054.506965][T17826] cgroup_file_write+0x1e2/0x770 [ 1054.511918][T17826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1054.518014][T17826] ? kill_css+0x370/0x370 [ 1054.522360][T17826] ? __virt_addr_valid+0x61/0x2e0 [ 1054.527413][T17826] ? kill_css+0x370/0x370 [ 1054.531757][T17826] kernfs_fop_write_iter+0x3f1/0x600 [ 1054.537071][T17826] vfs_write+0x9ed/0xdd0 [ 1054.541334][T17826] ? kernel_write+0x630/0x630 [ 1054.546031][T17826] ? __fget_files+0x26a/0x440 [ 1054.550735][T17826] ksys_write+0x12b/0x250 [ 1054.555075][T17826] ? __ia32_sys_read+0xb0/0xb0 [ 1054.559856][T17826] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1054.565771][T17826] do_syscall_64+0x39/0xb0 [ 1054.570209][T17826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1054.576114][T17826] RIP: 0033:0x7f414168c0c9 [ 1054.580536][T17826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1054.600151][T17826] RSP: 002b:00007f4142468168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.608577][T17826] RAX: ffffffffffffffda RBX: 00007f41417ac050 RCX: 00007f414168c0c9 [ 1054.616563][T17826] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1054.624536][T17826] RBP: 00007f41416e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1054.632510][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.640485][T17826] R13: 00007ffd1bed7f5f R14: 00007f4142468300 R15: 0000000000022000 [ 1054.648493][T17826] [ 1054.657518][T17826] memory: usage 8716kB, limit 0kB, failcnt 307 [ 1054.664611][T17826] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1054.671523][T17826] Memory cgroup stats for /syz2: [ 1054.671697][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1054.685027][T17826] anon 118784 [ 1054.685027][T17826] file 8388608 [ 1054.685027][T17826] kernel 307200 [ 1054.685027][T17826] kernel_stack 32768 [ 1054.685027][T17826] pagetables 73728 [ 1054.685027][T17826] sec_pagetables 0 [ 1054.685027][T17826] percpu 64 [ 1054.685027][T17826] sock 0 [ 1054.685027][T17826] vmalloc 0 [ 1054.685027][T17826] shmem 8380416 [ 1054.685027][T17826] zswap 0 [ 1054.685027][T17826] zswapped 0 [ 1054.685027][T17826] file_mapped 237568 [ 1054.685027][T17826] file_dirty 8192 [ 1054.685027][T17826] file_writeback 0 [ 1054.685027][T17826] swapcached 0 [ 1054.685027][T17826] anon_thp 0 [ 1054.685027][T17826] file_thp 0 [ 1054.685027][T17826] shmem_thp 0 [ 1054.685027][T17826] inactive_anon 114688 [ 1054.685027][T17826] active_anon 8380416 [ 1054.685027][T17826] inactive_file 4096 [ 1054.685027][T17826] active_file 4096 [ 1054.685027][T17826] unevictable 0 [ 1054.685027][T17826] slab_reclaimable 40264 [ 1054.685027][T17826] slab_unreclaimable 130400 [ 1054.686048][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.798884][T17826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17822,uid=0 [ 1054.815046][T17826] Memory cgroup out of memory: Killed process 17826 (syz-executor.2) total-vm:54804kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1054.852818][T17620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.861570][T17620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.875180][T17620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.885520][T17620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.015662][T17780] device hsr_slave_0 entered promiscuous mode [ 1055.025998][T17780] device hsr_slave_1 entered promiscuous mode 00:19:24 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:24 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:24 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1055.336208][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.401993][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.512503][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1055.620780][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.661152][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.728746][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1056.302238][T16379] Bluetooth: hci4: command 0x0419 tx timeout [ 1056.382209][T16379] Bluetooth: hci0: command 0x0409 tx timeout [ 1056.544979][T17840] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1056.592225][T17840] CPU: 1 PID: 17840 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1056.602713][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1056.612839][T17840] Call Trace: [ 1056.616149][T17840] [ 1056.619106][T17840] dump_stack_lvl+0xd1/0x138 [ 1056.623744][T17840] dump_header+0x10b/0x85f [ 1056.628209][T17840] oom_kill_process.cold+0x10/0x15 [ 1056.633367][T17840] out_of_memory+0x35c/0x14a0 [ 1056.638091][T17840] ? oom_killer_disable+0x280/0x280 [ 1056.643329][T17840] ? find_held_lock+0x2d/0x110 [ 1056.648168][T17840] mem_cgroup_out_of_memory+0x206/0x270 [ 1056.653747][T17840] ? mem_cgroup_margin+0x130/0x130 [ 1056.658885][T17840] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1056.664717][T17840] memory_max_write+0x2f9/0x3c0 [ 1056.669594][T17840] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1056.675677][T17840] ? lock_release+0x810/0x810 [ 1056.680381][T17840] cgroup_file_write+0x1e2/0x770 [ 1056.685334][T17840] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1056.691414][T17840] ? kill_css+0x370/0x370 [ 1056.695758][T17840] ? __virt_addr_valid+0x61/0x2e0 [ 1056.700809][T17840] ? kill_css+0x370/0x370 [ 1056.705156][T17840] kernfs_fop_write_iter+0x3f1/0x600 [ 1056.710473][T17840] vfs_write+0x9ed/0xdd0 [ 1056.714742][T17840] ? kernel_write+0x630/0x630 [ 1056.719455][T17840] ? __fget_files+0x26a/0x440 [ 1056.724162][T17840] ksys_write+0x12b/0x250 [ 1056.728503][T17840] ? __ia32_sys_read+0xb0/0xb0 [ 1056.733285][T17840] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1056.739200][T17840] do_syscall_64+0x39/0xb0 [ 1056.743650][T17840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1056.749558][T17840] RIP: 0033:0x7f9c7968c0c9 [ 1056.753981][T17840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1056.773601][T17840] RSP: 002b:00007f9c7a46f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.782196][T17840] RAX: ffffffffffffffda RBX: 00007f9c797abf80 RCX: 00007f9c7968c0c9 [ 1056.790171][T17840] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1056.798144][T17840] RBP: 00007f9c796e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1056.806119][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.814091][T17840] R13: 00007ffc8f0a05af R14: 00007f9c7a46f300 R15: 0000000000022000 [ 1056.822084][T17840] [ 1057.150555][T17828] chnl_net:caif_netlink_parms(): no params data found [ 1057.403929][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.411150][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.433157][T17828] device bridge_slave_0 entered promiscuous mode [ 1057.464558][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.471788][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.479334][T17840] memory: usage 10740kB, limit 0kB, failcnt 348 [ 1057.485949][T17840] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.503128][T17828] device bridge_slave_1 entered promiscuous mode [ 1057.509724][T17840] Memory cgroup stats for /syz0: [ 1057.509916][T17840] anon 131072 [ 1057.509916][T17840] file 10477568 [ 1057.509916][T17840] kernel 299008 [ 1057.509916][T17840] kernel_stack 32768 [ 1057.509916][T17840] pagetables 81920 [ 1057.509916][T17840] sec_pagetables 0 [ 1057.509916][T17840] percpu 64 [ 1057.509916][T17840] sock 0 [ 1057.509916][T17840] vmalloc 0 [ 1057.509916][T17840] shmem 10477568 [ 1057.509916][T17840] zswap 0 [ 1057.509916][T17840] zswapped 0 [ 1057.509916][T17840] file_mapped 237568 [ 1057.509916][T17840] file_dirty 0 [ 1057.509916][T17840] file_writeback 0 [ 1057.509916][T17840] swapcached 0 [ 1057.509916][T17840] anon_thp 0 [ 1057.509916][T17840] file_thp 0 [ 1057.509916][T17840] shmem_thp 0 [ 1057.509916][T17840] inactive_anon 2228224 [ 1057.509916][T17840] active_anon 8380416 [ 1057.509916][T17840] inactive_file 0 [ 1057.509916][T17840] active_file 0 [ 1057.509916][T17840] unevictable 0 [ 1057.509916][T17840] slab_reclaimable 40056 [ 1057.509916][T17840] slab_unreclaimable 123336 [ 1057.509916][T17840] slab 163392 [ 1057.635824][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.677365][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.775301][T16383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1057.785123][T16383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1057.802883][T16383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1057.811628][T16383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1057.819396][T16383] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1057.826777][T16383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1057.845981][T17840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17620,uid=0 [ 1057.852515][T17828] team0: Port device team_slave_0 added [ 1057.862308][T17840] Memory cgroup out of memory: Killed process 17620 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1058.145440][T17828] team0: Port device team_slave_1 added [ 1058.174972][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1058.186043][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 00:19:27 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) 00:19:27 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1058.194151][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1058.202540][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1058.210026][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1058.217431][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 00:19:27 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1058.461958][T16379] Bluetooth: hci0: command 0x041b tx timeout [ 1058.503731][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.510724][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.622097][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.677052][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.692930][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.750678][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.134867][T11188] device hsr_slave_0 left promiscuous mode [ 1059.172121][T11188] device hsr_slave_1 left promiscuous mode [ 1059.212341][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.219978][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.245330][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.261957][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.283905][T11188] device bridge_slave_1 left promiscuous mode [ 1059.290157][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.372692][T11188] device bridge_slave_0 left promiscuous mode [ 1059.378967][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.532195][T11188] device hsr_slave_0 left promiscuous mode [ 1059.581969][T11188] device hsr_slave_1 left promiscuous mode [ 1059.622544][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.630112][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.664925][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.681965][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.704456][T11188] device bridge_slave_1 left promiscuous mode [ 1059.722072][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.764614][T11188] device bridge_slave_0 left promiscuous mode [ 1059.770871][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.902066][T16379] Bluetooth: hci1: command 0x0409 tx timeout [ 1059.923616][T11188] device hsr_slave_0 left promiscuous mode [ 1059.952201][T11188] device hsr_slave_1 left promiscuous mode [ 1060.062044][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.069516][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.105135][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.142283][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.164346][T11188] device bridge_slave_1 left promiscuous mode [ 1060.170605][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.233361][T11188] device bridge_slave_0 left promiscuous mode [ 1060.239651][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.302920][T16383] Bluetooth: hci2: command 0x0409 tx timeout [ 1060.303399][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.320898][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.328672][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.338591][T11188] device veth1_macvtap left promiscuous mode [ 1060.345328][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.353032][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.360321][T11188] device veth0_macvtap left promiscuous mode [ 1060.360337][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1060.372088][T11188] device veth1_vlan left promiscuous mode [ 1060.402288][T11188] device veth0_vlan left promiscuous mode [ 1060.433896][T11188] device veth1_macvtap left promiscuous mode [ 1060.439981][T11188] device veth0_macvtap left promiscuous mode [ 1060.470203][T11188] device veth1_vlan left promiscuous mode [ 1060.492091][T11188] device veth0_vlan left promiscuous mode [ 1060.525924][T11188] device veth1_macvtap left promiscuous mode [ 1060.541971][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 1060.543267][T11188] device veth0_macvtap left promiscuous mode [ 1060.572744][T11188] device veth1_vlan left promiscuous mode [ 1060.578629][T11188] device veth0_vlan left promiscuous mode [ 1060.929259][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.942381][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.951581][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.962214][ T5119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1060.971567][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.486294][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1061.504567][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1061.519612][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.540174][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.692832][T11188] bond0 (unregistering): Released all slaves [ 1061.982027][ T5120] Bluetooth: hci1: command 0x041b tx timeout [ 1062.005559][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1062.022232][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1062.037907][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.055245][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.258638][T11188] bond0 (unregistering): Released all slaves [ 1062.382080][ T5120] Bluetooth: hci2: command 0x041b tx timeout [ 1062.462862][ T5120] Bluetooth: hci3: command 0x0409 tx timeout [ 1062.547653][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1062.616703][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1062.635902][ T5120] Bluetooth: hci0: command 0x0419 tx timeout [ 1062.667758][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.695805][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.863995][T11188] bond0 (unregistering): Released all slaves [ 1062.949364][T17828] device hsr_slave_0 entered promiscuous mode [ 1062.972235][T17828] device hsr_slave_1 entered promiscuous mode [ 1062.991973][T17828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.999575][T17828] Cannot create hsr debugfs directory [ 1063.022134][ T5120] Bluetooth: hci5: command 0x0409 tx timeout [ 1063.233473][T17780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.290216][T17780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.349200][T17780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.446467][T17780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1063.533897][T17859] chnl_net:caif_netlink_parms(): no params data found [ 1063.652449][T17866] chnl_net:caif_netlink_parms(): no params data found [ 1063.791736][T17828] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.062062][ T5120] Bluetooth: hci1: command 0x040f tx timeout [ 1064.133760][T17828] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.359941][T17828] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.444189][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.451400][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.462324][ T5120] Bluetooth: hci2: command 0x040f tx timeout [ 1064.475181][T17866] device bridge_slave_0 entered promiscuous mode [ 1064.501694][T17859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.519282][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.542184][ T5120] Bluetooth: hci3: command 0x041b tx timeout [ 1064.559707][T17859] device bridge_slave_0 entered promiscuous mode [ 1064.581135][T17828] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.652718][T17780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.659749][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.676266][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.696610][T17866] device bridge_slave_1 entered promiscuous mode [ 1064.714086][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.721218][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.767154][T17859] device bridge_slave_1 entered promiscuous mode [ 1064.846446][T17889] chnl_net:caif_netlink_parms(): no params data found [ 1064.869224][T17866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.903604][T17866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.915993][T17859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.929123][T17894] chnl_net:caif_netlink_parms(): no params data found [ 1064.951605][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1064.959697][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1064.971444][T17780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.994527][T17859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.097513][T17859] team0: Port device team_slave_0 added [ 1065.105157][ T5120] Bluetooth: hci5: command 0x041b tx timeout [ 1065.144589][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1065.162653][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1065.171135][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.178300][T15894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.211784][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1065.232641][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1065.253356][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.260482][T15894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.318057][T17866] team0: Port device team_slave_0 added [ 1065.364810][T17859] team0: Port device team_slave_1 added [ 1065.383588][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1065.405689][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1065.423120][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1065.441116][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1065.530020][T17866] team0: Port device team_slave_1 added [ 1065.604840][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1065.622922][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1065.719898][T17859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.732031][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.819665][T17859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.866253][T17780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.878486][T17780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.891121][T17828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1065.904779][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1065.922716][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1065.931332][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1065.952742][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1065.989667][T17866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.997450][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.031906][T17866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.066640][T17859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.082128][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.142089][ T5120] Bluetooth: hci1: command 0x0419 tx timeout [ 1066.172054][T17859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.202776][T17889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.209904][T17889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.236626][T17889] device bridge_slave_0 entered promiscuous mode [ 1066.258040][T17828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1066.270286][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1066.283701][T17866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.290672][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.334261][T17866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.466174][T17889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.482362][T17889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.490677][T17889] device bridge_slave_1 entered promiscuous mode [ 1066.532336][T17828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1066.542635][ T5120] Bluetooth: hci2: command 0x0419 tx timeout [ 1066.559779][T17894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.585873][T17894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.613517][T17894] device bridge_slave_0 entered promiscuous mode [ 1066.622806][ T5120] Bluetooth: hci3: command 0x040f tx timeout [ 1066.676763][T17859] device hsr_slave_0 entered promiscuous mode [ 1066.699014][T17859] device hsr_slave_1 entered promiscuous mode [ 1066.719311][T17859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.732318][T17859] Cannot create hsr debugfs directory [ 1066.785498][T17828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1066.854040][T17894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.861184][T17894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.903389][T17894] device bridge_slave_1 entered promiscuous mode [ 1066.980496][T17889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.067675][T17866] device hsr_slave_0 entered promiscuous mode [ 1067.099259][T17866] device hsr_slave_1 entered promiscuous mode [ 1067.113604][T17866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.121206][T17866] Cannot create hsr debugfs directory [ 1067.179360][T17894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.182072][ T5120] Bluetooth: hci5: command 0x040f tx timeout [ 1067.226892][T17889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.303981][T17894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.410098][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.419381][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.432171][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.478430][T17894] team0: Port device team_slave_0 added [ 1067.529951][T17889] team0: Port device team_slave_0 added [ 1067.544985][T17889] team0: Port device team_slave_1 added [ 1067.592906][T17894] team0: Port device team_slave_1 added [ 1067.730956][T17889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.745389][T17889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.802147][T17889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.880736][T17894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.894696][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.923794][T17894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.959563][T17889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.967681][T17889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.021041][T17889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.048283][T17894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.061932][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.092700][T17894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.272747][T17894] device hsr_slave_0 entered promiscuous mode [ 1068.289587][T17894] device hsr_slave_1 entered promiscuous mode [ 1068.308980][T17894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.333618][T17894] Cannot create hsr debugfs directory [ 1068.355809][T17889] device hsr_slave_0 entered promiscuous mode [ 1068.392375][T17889] device hsr_slave_1 entered promiscuous mode [ 1068.412092][T17889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.419712][T17889] Cannot create hsr debugfs directory [ 1068.504110][T17859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.573526][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.691639][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.702573][ T5120] Bluetooth: hci3: command 0x0419 tx timeout [ 1068.738402][T17859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.832648][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1068.840365][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1068.872251][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.881822][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1068.992959][T17859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.144229][T11188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.262194][ T5120] Bluetooth: hci5: command 0x0419 tx timeout [ 1069.303012][T17859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.334252][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1069.353074][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1069.372218][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.379345][T16672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.402587][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1069.411409][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1069.432617][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.439754][T16672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.467428][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1069.482901][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1069.491783][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1069.526388][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1069.542646][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1069.550671][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1069.559793][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1069.630442][T11188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.715767][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1069.724728][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1069.733593][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1069.748373][T17780] device veth0_vlan entered promiscuous mode [ 1069.804103][T11188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.901883][T17780] device veth1_vlan entered promiscuous mode [ 1069.925883][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1069.943083][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1069.962458][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1069.970929][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1069.992811][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1070.008066][T17828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.061264][T11188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.290187][T17780] device veth0_macvtap entered promiscuous mode [ 1070.313832][T17859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1070.380636][T17866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.459306][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1070.477058][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1070.513105][T17859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1070.553476][T17866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.585411][T17780] device veth1_macvtap entered promiscuous mode [ 1070.593207][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1070.601470][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1070.618681][T17859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1070.733144][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.774589][T17859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.809840][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.852110][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.901985][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.931997][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.971989][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.001884][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.011751][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.052016][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.062171][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.092060][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.113935][T17780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.213036][T17866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.343168][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.392723][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1071.411193][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1071.446954][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.485885][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.522580][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.551919][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.571891][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.581734][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.621953][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.631813][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.662445][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.681977][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.714065][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.743944][T17780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.776042][T17866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.812812][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1071.832579][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1071.929216][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.974997][T17780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.002089][T17780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.010840][T17780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.071952][T17780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.152467][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1072.160014][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1072.215136][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.340852][T17859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.488815][T17859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.495848][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.512327][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.569332][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1072.582996][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1072.590914][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1072.681048][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1072.712353][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.742387][T17024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.749617][T17024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.782756][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1072.796309][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1072.825160][T17024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.832348][T17024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.852319][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1072.903412][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1072.914041][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1072.934280][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1072.953645][T17866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1072.973724][T17866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1073.118058][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1073.129826][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.143711][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1073.161941][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.174016][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1073.194429][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1073.212693][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1073.241667][T17866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1073.275099][T17859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1073.312936][T17859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1073.339336][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1073.362903][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1073.372464][T17866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1073.959353][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1073.969193][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.090512][T18028] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1074.164282][T18028] CPU: 0 PID: 18028 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1074.174779][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1074.184868][T18028] Call Trace: [ 1074.188176][T18028] [ 1074.191142][T18028] dump_stack_lvl+0xd1/0x138 [ 1074.195793][T18028] dump_header+0x10b/0x85f [ 1074.200276][T18028] oom_kill_process.cold+0x10/0x15 [ 1074.205438][T18028] out_of_memory+0x35c/0x14a0 [ 1074.210178][T18028] ? oom_killer_disable+0x280/0x280 [ 1074.215422][T18028] ? find_held_lock+0x2d/0x110 [ 1074.220225][T18028] mem_cgroup_out_of_memory+0x206/0x270 [ 1074.225792][T18028] ? mem_cgroup_margin+0x130/0x130 [ 1074.230929][T18028] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1074.236764][T18028] memory_max_write+0x2f9/0x3c0 [ 1074.241636][T18028] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1074.247719][T18028] ? lock_release+0x810/0x810 [ 1074.252423][T18028] cgroup_file_write+0x1e2/0x770 [ 1074.257391][T18028] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1074.263477][T18028] ? kill_css+0x370/0x370 [ 1074.267828][T18028] ? __virt_addr_valid+0x61/0x2e0 [ 1074.272880][T18028] ? kill_css+0x370/0x370 [ 1074.277221][T18028] kernfs_fop_write_iter+0x3f1/0x600 [ 1074.282637][T18028] vfs_write+0x9ed/0xdd0 [ 1074.286896][T18028] ? kernel_write+0x630/0x630 [ 1074.291593][T18028] ? __fget_files+0x26a/0x440 [ 1074.296297][T18028] ksys_write+0x12b/0x250 [ 1074.300643][T18028] ? __ia32_sys_read+0xb0/0xb0 [ 1074.305424][T18028] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1074.311339][T18028] do_syscall_64+0x39/0xb0 [ 1074.315781][T18028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1074.321704][T18028] RIP: 0033:0x7f8769e8c0c9 [ 1074.326128][T18028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1074.345745][T18028] RSP: 002b:00007f876ac1c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1074.354213][T18028] RAX: ffffffffffffffda RBX: 00007f8769fabf80 RCX: 00007f8769e8c0c9 [ 1074.362216][T18028] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1074.370214][T18028] RBP: 00007f8769ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1074.378203][T18028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.386183][T18028] R13: 00007ffe0c7bc62f R14: 00007f876ac1c300 R15: 0000000000022000 [ 1074.394184][T18028] [ 1074.470961][T17828] device veth0_vlan entered promiscuous mode [ 1074.503091][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.517483][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.664191][T18028] memory: usage 10480kB, limit 0kB, failcnt 430 [ 1074.668071][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1074.670625][T18028] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1074.687657][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1074.712640][T17828] device veth1_vlan entered promiscuous mode [ 1074.771088][T18028] Memory cgroup stats for /syz5: [ 1074.771309][T18028] anon 135168 [ 1074.771309][T18028] file 10186752 [ 1074.771309][T18028] kernel 282624 [ 1074.771309][T18028] kernel_stack 32768 [ 1074.771309][T18028] pagetables 81920 [ 1074.771309][T18028] sec_pagetables 0 [ 1074.771309][T18028] percpu 64 [ 1074.771309][T18028] sock 0 [ 1074.771309][T18028] vmalloc 0 [ 1074.771309][T18028] shmem 10186752 [ 1074.771309][T18028] zswap 0 [ 1074.771309][T18028] zswapped 0 [ 1074.771309][T18028] file_mapped 294912 [ 1074.771309][T18028] file_dirty 0 [ 1074.771309][T18028] file_writeback 0 [ 1074.771309][T18028] swapcached 0 [ 1074.771309][T18028] anon_thp 0 [ 1074.771309][T18028] file_thp 0 [ 1074.771309][T18028] shmem_thp 0 [ 1074.771309][T18028] inactive_anon 1949696 [ 1074.771309][T18028] active_anon 8372224 [ 1074.771309][T18028] inactive_file 0 [ 1074.771309][T18028] active_file 0 [ 1074.771309][T18028] unevictable 0 [ 1074.771309][T18028] slab_reclaimable 43696 [ 1074.771309][T18028] slab_unreclaimable 95976 [ 1074.771309][T18028] slab 139672 00:19:43 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1074.881429][T18028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18027,uid=0 [ 1074.898705][T18028] Memory cgroup out of memory: Killed process 18028 (syz-executor.5) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1074.977676][T17780] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1075.052085][T17780] CPU: 0 PID: 17780 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1075.062559][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1075.072640][T17780] Call Trace: [ 1075.075937][T17780] [ 1075.078885][T17780] dump_stack_lvl+0xd1/0x138 [ 1075.083518][T17780] dump_header+0x10b/0x85f [ 1075.087966][T17780] oom_kill_process.cold+0x10/0x15 [ 1075.093117][T17780] out_of_memory+0x35c/0x14a0 [ 1075.097824][T17780] ? find_held_lock+0x2d/0x110 [ 1075.102626][T17780] ? oom_killer_disable+0x280/0x280 [ 1075.107852][T17780] ? find_held_lock+0x2d/0x110 [ 1075.112658][T17780] mem_cgroup_out_of_memory+0x206/0x270 [ 1075.118233][T17780] ? mem_cgroup_margin+0x130/0x130 [ 1075.123392][T17780] ? lock_downgrade+0x6e0/0x6e0 [ 1075.128309][T17780] try_charge_memcg+0xefb/0x12f0 [ 1075.133306][T17780] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1075.139351][T17780] ? lock_downgrade+0x6e0/0x6e0 [ 1075.144250][T17780] charge_memcg+0x90/0x3b0 [ 1075.148698][T17780] __mem_cgroup_charge+0x2b/0x90 [ 1075.153663][T17780] ? _compound_head+0x5d/0x150 [ 1075.158461][T17780] __handle_mm_fault+0x187d/0x3c90 [ 1075.163619][T17780] ? vm_iomap_memory+0x190/0x190 [ 1075.168625][T17780] handle_mm_fault+0x1b6/0x850 [ 1075.173439][T17780] do_user_addr_fault+0x475/0x1210 [ 1075.178585][T17780] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1075.184177][T17780] exc_page_fault+0x98/0x170 [ 1075.188819][T17780] asm_exc_page_fault+0x26/0x30 [ 1075.193712][T17780] RIP: 0033:0x7f8769e4a30a [ 1075.198168][T17780] Code: 89 fb 83 e3 02 0f 85 85 03 00 00 f3 41 0f 6f 0e 49 8b 46 10 be 25 00 00 00 4c 89 ef 48 89 85 c8 fb ff ff 0f 11 8d b8 fb ff ff f1 9d fd ff 41 81 e7 00 80 00 00 48 89 85 30 fb ff ff 48 89 85 [ 1075.217819][T17780] RSP: 002b:00007ffe0c7bafc0 EFLAGS: 00010246 [ 1075.223917][T17780] RAX: 00007ffe0c7bb6d0 RBX: 0000000000000000 RCX: 0000000000000000 [ 1075.231905][T17780] RDX: 00007ffe0c7bb6b0 RSI: 0000000000000025 RDI: 00007f8769ee6b43 [ 1075.239901][T17780] RBP: 00007ffe0c7bb510 R08: 0000000000000000 R09: 00007ffe0c7bb620 [ 1075.247904][T17780] R10: 0000000000000231 R11: 0000000000000293 R12: 00007ffe0c7bb530 [ 1075.255910][T17780] R13: 00007f8769ee6b43 R14: 00007ffe0c7bb6b0 R15: 00000000fbad8001 [ 1075.263940][T17780] [ 1075.283727][T17859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.338643][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1075.352287][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1075.421739][T17780] memory: usage 10124kB, limit 0kB, failcnt 449 [ 1075.438045][T17780] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1075.451924][T17780] Memory cgroup stats for /syz5: [ 1075.452106][T17780] anon 40960 [ 1075.452106][T17780] file 10186752 [ 1075.452106][T17780] kernel 122880 [ 1075.452106][T17780] kernel_stack 0 [ 1075.452106][T17780] pagetables 8192 [ 1075.452106][T17780] sec_pagetables 0 [ 1075.452106][T17780] percpu 64 [ 1075.452106][T17780] sock 0 [ 1075.452106][T17780] vmalloc 0 [ 1075.452106][T17780] shmem 10186752 [ 1075.452106][T17780] zswap 0 [ 1075.452106][T17780] zswapped 0 [ 1075.452106][T17780] file_mapped 262144 [ 1075.452106][T17780] file_dirty 0 [ 1075.452106][T17780] file_writeback 0 [ 1075.452106][T17780] swapcached 0 [ 1075.452106][T17780] anon_thp 0 [ 1075.452106][T17780] file_thp 0 [ 1075.452106][T17780] shmem_thp 0 [ 1075.452106][T17780] inactive_anon 1855488 [ 1075.452106][T17780] active_anon 8372224 [ 1075.452106][T17780] inactive_file 0 [ 1075.452106][T17780] active_file 0 [ 1075.452106][T17780] unevictable 0 [ 1075.452106][T17780] slab_reclaimable 43312 [ 1075.452106][T17780] slab_unreclaimable 67712 [ 1075.452106][T17780] slab 111024 [ 1075.659488][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1075.669440][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1075.692217][T17780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17780,uid=0 [ 1075.718844][T17780] Memory cgroup out of memory: Killed process 17780 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1075.911474][T17894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1075.926408][T17866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.122554][T17894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1076.134140][T17894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1076.161640][T17859] device veth0_vlan entered promiscuous mode [ 1076.182891][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1076.193856][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1076.202712][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1076.211267][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1076.220210][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1076.228593][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 00:19:45 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1076.372186][T17894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1076.398868][T17828] device veth0_macvtap entered promiscuous mode [ 1076.420684][T17866] 8021q: adding VLAN 0 to HW filter on device team0 00:19:45 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1076.672941][T17828] device veth1_macvtap entered promiscuous mode [ 1076.680670][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1076.693137][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1076.731917][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1076.764515][T17859] device veth1_vlan entered promiscuous mode [ 1076.952178][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1076.985978][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.012498][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.019709][T16164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.058618][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.089485][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.109671][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.116895][T16164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.178185][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.192028][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.202489][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.213390][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.224701][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.235847][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.246143][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.257433][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.269201][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.280249][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.291966][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.302903][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.314829][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.353251][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1077.361444][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1077.374607][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1077.385050][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1077.394541][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1077.443679][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.454522][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.465017][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.475809][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.486152][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.497171][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.508233][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.519024][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.529743][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.542212][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.552531][T17828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.563197][T17828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.581417][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.616460][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1077.627093][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1077.636588][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1077.646587][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1077.658943][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1077.670790][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1077.680410][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1077.689492][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.698186][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1077.707044][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1077.718190][T17859] device veth0_macvtap entered promiscuous mode [ 1077.741349][T17828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.752996][T17828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.761746][T17828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.770843][T17828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.784254][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1077.814936][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1077.831517][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1077.844375][T17859] device veth1_macvtap entered promiscuous mode [ 1077.939955][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.962110][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.982382][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.012223][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.031967][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.045653][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.081941][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.101891][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.111746][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.139826][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.162081][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.187076][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.207157][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.229530][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.254388][T17859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.299514][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1078.323065][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1078.352870][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1078.387799][T17894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.618247][T16379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1078.627074][T16379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1078.635674][T16379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1078.660147][T16379] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1078.668438][T16379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1078.694260][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.705523][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.720086][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.730669][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.740760][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.752088][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.762003][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.772739][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.783252][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.793791][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.803880][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.814644][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.826630][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.837183][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.848712][T17859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.871166][T17894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.892417][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1078.901314][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1078.911634][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1078.920998][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1078.929355][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1078.938348][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1078.947332][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.954493][T13312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.965484][T17859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.977040][T17859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.986196][T17859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.995346][T17859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.036908][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1079.046555][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1079.056465][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1079.068599][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.075812][T18020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.083836][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.091324][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1079.113042][T17889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1079.137131][T17889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1079.147764][T17889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1079.189229][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1079.198665][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1079.217220][T17889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1079.220524][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.239248][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.274444][T17866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.282316][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1079.291593][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1079.300324][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1079.326367][T17894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1079.339800][T17894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1079.398094][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1079.412886][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1079.421493][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1079.447027][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1079.467234][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1079.517851][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.542199][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.589751][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1079.602714][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1079.622874][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1079.633191][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1079.726414][T17866] device veth0_vlan entered promiscuous mode [ 1079.764794][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1079.775044][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1079.813042][T16898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.842578][T16898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.929034][T17866] device veth1_vlan entered promiscuous mode [ 1079.951786][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1079.962750][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1079.998059][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 00:19:49 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1080.190694][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.214759][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.433689][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1080.568289][T18059] chnl_net:caif_netlink_parms(): no params data found 00:19:49 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1080.662649][T17894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.670149][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.693329][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.702412][ T5120] Bluetooth: hci4: command 0x0409 tx timeout [ 1080.743278][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1080.750867][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1080.855457][T17866] device veth0_macvtap entered promiscuous mode [ 1080.878080][T17889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.895479][T18096] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 00:19:49 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1080.987793][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1080.998865][T17866] device veth1_macvtap entered promiscuous mode [ 1081.006470][T18096] CPU: 0 PID: 18096 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1081.017035][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1081.027132][T18096] Call Trace: [ 1081.030136][T17889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.030419][T18096] [ 1081.039991][T18096] dump_stack_lvl+0xd1/0x138 [ 1081.044639][T18096] dump_header+0x10b/0x85f [ 1081.049119][T18096] oom_kill_process.cold+0x10/0x15 [ 1081.054277][T18096] out_of_memory+0x35c/0x14a0 [ 1081.059045][T18096] ? oom_killer_disable+0x280/0x280 [ 1081.064282][T18096] ? find_held_lock+0x2d/0x110 [ 1081.069100][T18096] mem_cgroup_out_of_memory+0x206/0x270 [ 1081.074688][T18096] ? mem_cgroup_margin+0x130/0x130 [ 1081.079849][T18096] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1081.085713][T18096] memory_max_write+0x2f9/0x3c0 [ 1081.090699][T18096] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1081.096819][T18096] ? lock_release+0x810/0x810 [ 1081.101548][T18096] cgroup_file_write+0x1e2/0x770 [ 1081.106529][T18096] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1081.112637][T18096] ? kill_css+0x370/0x370 [ 1081.117006][T18096] ? __virt_addr_valid+0x61/0x2e0 [ 1081.122097][T18096] ? kill_css+0x370/0x370 [ 1081.126471][T18096] kernfs_fop_write_iter+0x3f1/0x600 [ 1081.131819][T18096] vfs_write+0x9ed/0xdd0 [ 1081.136119][T18096] ? kernel_write+0x630/0x630 [ 1081.140852][T18096] ? __fget_files+0x26a/0x440 [ 1081.145846][T18096] ksys_write+0x12b/0x250 [ 1081.150210][T18096] ? __ia32_sys_read+0xb0/0xb0 [ 1081.155020][T18096] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1081.160976][T18096] do_syscall_64+0x39/0xb0 [ 1081.165445][T18096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1081.171376][T18096] RIP: 0033:0x7fdac3a8c0c9 [ 1081.175820][T18096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1081.195465][T18096] RSP: 002b:00007fdac484e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.203918][T18096] RAX: ffffffffffffffda RBX: 00007fdac3bac050 RCX: 00007fdac3a8c0c9 [ 1081.203926][T17889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.211898][T18096] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1081.211915][T18096] RBP: 00007fdac3ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1081.211933][T18096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.211948][T18096] R13: 00007ffdffc098bf R14: 00007fdac484e300 R15: 0000000000022000 [ 1081.211987][T18096] [ 1081.267054][T17889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.278884][T18096] memory: usage 8672kB, limit 0kB, failcnt 1111 [ 1081.292057][T18096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1081.305793][T18096] Memory cgroup stats for /syz1: [ 1081.306015][T18096] anon 135168 [ 1081.306015][T18096] file 8376320 [ 1081.306015][T18096] kernel 368640 [ 1081.306015][T18096] kernel_stack 98304 [ 1081.306015][T18096] pagetables 81920 [ 1081.306015][T18096] sec_pagetables 0 [ 1081.306015][T18096] percpu 64 [ 1081.306015][T18096] sock 0 [ 1081.306015][T18096] vmalloc 0 [ 1081.306015][T18096] shmem 8376320 [ 1081.306015][T18096] zswap 0 [ 1081.306015][T18096] zswapped 0 [ 1081.306015][T18096] file_mapped 233472 [ 1081.306015][T18096] file_dirty 0 [ 1081.306015][T18096] file_writeback 0 [ 1081.306015][T18096] swapcached 0 [ 1081.306015][T18096] anon_thp 0 [ 1081.306015][T18096] file_thp 0 [ 1081.306015][T18096] shmem_thp 0 [ 1081.306015][T18096] inactive_anon 135168 [ 1081.306015][T18096] active_anon 8376320 [ 1081.306015][T18096] inactive_file 0 [ 1081.306015][T18096] active_file 0 [ 1081.306015][T18096] unevictable 0 [ 1081.306015][T18096] slab_reclaimable 39872 [ 1081.306015][T18096] slab_unreclaimable 122040 [ 1081.306015][T18096] slab 161912 [ 1081.424055][T18096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18092,uid=0 [ 1081.452452][T18096] Memory cgroup out of memory: Killed process 18092 (syz-executor.1) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1081.470146][T18107] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1081.480903][T18107] CPU: 0 PID: 18107 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1081.491384][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1081.501472][T18107] Call Trace: [ 1081.504779][T18107] [ 1081.507735][T18107] dump_stack_lvl+0xd1/0x138 [ 1081.512377][T18107] dump_header+0x10b/0x85f [ 1081.516839][T18107] oom_kill_process.cold+0x10/0x15 [ 1081.522007][T18107] out_of_memory+0x35c/0x14a0 [ 1081.526732][T18107] ? oom_killer_disable+0x280/0x280 [ 1081.531983][T18107] mem_cgroup_out_of_memory+0x206/0x270 [ 1081.537568][T18107] ? mem_cgroup_margin+0x130/0x130 [ 1081.542740][T18107] memory_max_write+0x2f9/0x3c0 [ 1081.547635][T18107] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1081.553746][T18107] ? lock_release+0x810/0x810 [ 1081.558468][T18107] cgroup_file_write+0x1e2/0x770 [ 1081.563447][T18107] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1081.569558][T18107] ? kill_css+0x370/0x370 [ 1081.573935][T18107] ? __virt_addr_valid+0x61/0x2e0 [ 1081.579016][T18107] ? kill_css+0x370/0x370 [ 1081.583383][T18107] kernfs_fop_write_iter+0x3f1/0x600 [ 1081.588731][T18107] vfs_write+0x9ed/0xdd0 [ 1081.593027][T18107] ? kernel_write+0x630/0x630 [ 1081.597750][T18107] ? __fget_files+0x26a/0x440 [ 1081.602484][T18107] ksys_write+0x12b/0x250 [ 1081.606864][T18107] ? __ia32_sys_read+0xb0/0xb0 [ 1081.611676][T18107] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1081.617623][T18107] do_syscall_64+0x39/0xb0 [ 1081.622095][T18107] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1081.628031][T18107] RIP: 0033:0x7f0b5448c0c9 [ 1081.632477][T18107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1081.652128][T18107] RSP: 002b:00007f0b5527d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.660594][T18107] RAX: ffffffffffffffda RBX: 00007f0b545ac050 RCX: 00007f0b5448c0c9 [ 1081.668602][T18107] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1081.676609][T18107] RBP: 00007f0b544e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1081.684615][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.692621][T18107] R13: 00007ffd12d2495f R14: 00007f0b5527d300 R15: 0000000000022000 [ 1081.700649][T18107] [ 1081.709637][T18107] memory: usage 10700kB, limit 0kB, failcnt 1177 [ 1081.716532][T18107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1081.724849][T18107] Memory cgroup stats for /syz4: [ 1081.725341][T18107] anon 147456 [ 1081.725341][T18107] file 10412032 [ 1081.725341][T18107] kernel 393216 [ 1081.725341][T18107] kernel_stack 98304 [ 1081.725341][T18107] pagetables 81920 [ 1081.725341][T18107] sec_pagetables 0 [ 1081.725341][T18107] percpu 64 [ 1081.725341][T18107] sock 0 [ 1081.725341][T18107] vmalloc 0 [ 1081.725341][T18107] shmem 10412032 [ 1081.725341][T18107] zswap 0 [ 1081.725341][T18107] zswapped 0 [ 1081.725341][T18107] file_mapped 172032 [ 1081.725341][T18107] file_dirty 0 [ 1081.725341][T18107] file_writeback 0 [ 1081.725341][T18107] swapcached 0 [ 1081.725341][T18107] anon_thp 0 [ 1081.725341][T18107] file_thp 0 [ 1081.725341][T18107] shmem_thp 0 [ 1081.725341][T18107] inactive_anon 143360 [ 1081.725341][T18107] active_anon 10412032 [ 1081.725341][T18107] inactive_file 0 [ 1081.725341][T18107] active_file 0 [ 1081.725341][T18107] unevictable 0 [ 1081.725341][T18107] slab_reclaimable 56864 [ 1081.725341][T18107] slab_unreclaimable 128824 [ 1081.725341][T18107] slab 185688 [ 1081.850031][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.869554][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.890869][T18107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17828,uid=0 [ 1081.909873][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.930353][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.944471][T18107] Memory cgroup out of memory: Killed process 17828 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1081.966687][T16164] bridge0: port 1(bridge_slave_0) entered blocking state 00:19:50 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1081.973900][T16164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.990088][T17859] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1082.009239][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1082.014126][T17859] CPU: 0 PID: 17859 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1082.018187][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1082.027725][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1082.027741][T17859] Call Trace: [ 1082.027749][T17859] [ 1082.027759][T17859] dump_stack_lvl+0xd1/0x138 [ 1082.027798][T17859] dump_header+0x10b/0x85f [ 1082.027828][T17859] oom_kill_process.cold+0x10/0x15 [ 1082.045499][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.045925][T17859] out_of_memory+0x35c/0x14a0 [ 1082.049279][T16164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.052116][T17859] ? find_held_lock+0x2d/0x110 [ 1082.052149][T17859] ? oom_killer_disable+0x280/0x280 [ 1082.052175][T17859] ? find_held_lock+0x2d/0x110 [ 1082.058130][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1082.061170][T17859] mem_cgroup_out_of_memory+0x206/0x270 [ 1082.067545][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1082.073271][T17859] ? mem_cgroup_margin+0x130/0x130 [ 1082.073299][T17859] ? lock_downgrade+0x6e0/0x6e0 [ 1082.073336][T17859] try_charge_memcg+0xefb/0x12f0 [ 1082.073371][T17859] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1082.073407][T17859] ? lock_downgrade+0x6e0/0x6e0 [ 1082.073444][T17859] charge_memcg+0x90/0x3b0 [ 1082.151388][T17859] __mem_cgroup_charge+0x2b/0x90 [ 1082.156346][T17859] ? _compound_head+0x5d/0x150 [ 1082.161146][T17859] __handle_mm_fault+0x187d/0x3c90 [ 1082.166315][T17859] ? vm_iomap_memory+0x190/0x190 [ 1082.171315][T17859] handle_mm_fault+0x1b6/0x850 [ 1082.176107][T17859] do_user_addr_fault+0x475/0x1210 [ 1082.181237][T17859] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1082.186814][T17859] exc_page_fault+0x98/0x170 [ 1082.191420][T17859] asm_exc_page_fault+0x26/0x30 [ 1082.196302][T17859] RIP: 0033:0x7fdac3a5a7d5 [ 1082.200723][T17859] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 1082.220339][T17859] RSP: 002b:00007ffdffc08860 EFLAGS: 00010206 [ 1082.226450][T17859] RAX: 00000000000187c1 RBX: 00007fdac3b885e0 RCX: 000055555658c840 [ 1082.234450][T17859] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1082.242425][T17859] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fdac3b88640 [ 1082.250402][T17859] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 1082.258390][T17859] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556584800 [ 1082.266384][T17859] [ 1082.275682][T17859] memory: usage 8372kB, limit 0kB, failcnt 1140 [ 1082.282097][T17859] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1082.283086][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1082.289013][T17859] Memory cgroup stats for /syz1: [ 1082.297540][T17859] anon 36864 [ 1082.297540][T17859] file 8376320 [ 1082.297540][T17859] kernel 147456 [ 1082.297540][T17859] kernel_stack 0 [ 1082.297540][T17859] pagetables 8192 [ 1082.297540][T17859] sec_pagetables 0 [ 1082.297540][T17859] percpu 64 [ 1082.297540][T17859] sock 0 [ 1082.297540][T17859] vmalloc 0 [ 1082.297540][T17859] shmem 8376320 [ 1082.297540][T17859] zswap 0 [ 1082.297540][T17859] zswapped 0 [ 1082.297540][T17859] file_mapped 208896 [ 1082.297540][T17859] file_dirty 0 [ 1082.297540][T17859] file_writeback 0 [ 1082.297540][T17859] swapcached 0 [ 1082.297540][T17859] anon_thp 0 [ 1082.297540][T17859] file_thp 0 [ 1082.297540][T17859] shmem_thp 0 [ 1082.297540][T17859] inactive_anon 36864 [ 1082.297540][T17859] active_anon 8376320 [ 1082.297540][T17859] inactive_file 0 [ 1082.297540][T17859] active_file 0 [ 1082.297540][T17859] unevictable 0 [ 1082.297540][T17859] slab_reclaimable 39488 [ 1082.297540][T17859] slab_unreclaimable 85952 [ 1082.297540][T17859] slab 125440 [ 1082.313488][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1082.429104][T17859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17859,uid=0 [ 1082.451065][T17859] Memory cgroup out of memory: Killed process 17859 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1082.494175][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1082.509640][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1082.518849][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1082.528364][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1082.630993][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1082.639055][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1082.647949][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1082.685190][T11188] device hsr_slave_0 left promiscuous mode [ 1082.692516][T11188] device hsr_slave_1 left promiscuous mode [ 1082.712275][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.722147][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.742232][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.750780][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.781461][T11188] device bridge_slave_1 left promiscuous mode [ 1082.788131][ T5120] Bluetooth: hci4: command 0x041b tx timeout [ 1082.812124][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.833548][T11188] device bridge_slave_0 left promiscuous mode [ 1082.839824][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.868292][T11188] device hsr_slave_0 left promiscuous mode [ 1082.883822][T11188] device hsr_slave_1 left promiscuous mode [ 1082.903625][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.911122][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.930342][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.938173][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.948783][T11188] device bridge_slave_1 left promiscuous mode [ 1082.955685][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.964677][T11188] device bridge_slave_0 left promiscuous mode [ 1082.970871][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.984854][T11188] device hsr_slave_0 left promiscuous mode [ 1082.991219][T11188] device hsr_slave_1 left promiscuous mode [ 1083.005171][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.012887][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.024849][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.032495][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.040987][T11188] device bridge_slave_1 left promiscuous mode [ 1083.047480][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.056964][T11188] device bridge_slave_0 left promiscuous mode [ 1083.063658][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.077666][T11188] device hsr_slave_0 left promiscuous mode [ 1083.084120][T11188] device hsr_slave_1 left promiscuous mode [ 1083.090421][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.102033][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.110568][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.119641][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.128873][T11188] device bridge_slave_1 left promiscuous mode [ 1083.135849][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.145590][T11188] device bridge_slave_0 left promiscuous mode [ 1083.151795][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.165001][T11188] device hsr_slave_0 left promiscuous mode [ 1083.171528][T11188] device hsr_slave_1 left promiscuous mode [ 1083.178088][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.186007][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.196006][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.203591][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.212340][T11188] device bridge_slave_1 left promiscuous mode [ 1083.218615][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.227706][T11188] device bridge_slave_0 left promiscuous mode [ 1083.234371][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.263138][T11188] device veth1_macvtap left promiscuous mode [ 1083.269205][T11188] device veth0_macvtap left promiscuous mode [ 1083.276679][T11188] device veth1_vlan left promiscuous mode [ 1083.282982][T11188] device veth0_vlan left promiscuous mode [ 1083.289802][T11188] device veth1_macvtap left promiscuous mode [ 1083.296347][T11188] device veth0_macvtap left promiscuous mode [ 1083.302681][T11188] device veth1_vlan left promiscuous mode [ 1083.308489][T11188] device veth0_vlan left promiscuous mode [ 1083.317025][T11188] device veth1_macvtap left promiscuous mode [ 1083.323174][T11188] device veth0_macvtap left promiscuous mode [ 1083.329238][T11188] device veth1_vlan left promiscuous mode [ 1083.338049][T11188] device veth0_vlan left promiscuous mode [ 1083.346438][T11188] device veth1_macvtap left promiscuous mode [ 1083.352965][T11188] device veth0_macvtap left promiscuous mode [ 1083.359047][T11188] device veth1_vlan left promiscuous mode [ 1083.365691][T11188] device veth0_vlan left promiscuous mode [ 1083.375611][T11188] device veth1_macvtap left promiscuous mode [ 1083.381719][T11188] device veth0_macvtap left promiscuous mode [ 1083.388342][T11188] device veth1_vlan left promiscuous mode [ 1083.394964][T11188] device veth0_vlan left promiscuous mode [ 1084.040405][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1084.056737][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1084.081755][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.097815][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.185715][T11188] bond0 (unregistering): Released all slaves [ 1084.338596][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1084.355494][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1084.367279][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.381163][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.463850][T11188] bond0 (unregistering): Released all slaves [ 1084.651799][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1084.670748][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1084.683018][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.700734][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.778953][T11188] bond0 (unregistering): Released all slaves [ 1084.862236][ T5120] Bluetooth: hci4: command 0x040f tx timeout [ 1084.944512][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1084.961564][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1084.978085][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.002686][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.076593][T11188] bond0 (unregistering): Released all slaves [ 1085.247620][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1085.259806][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1085.275321][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.288746][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.374384][T11188] bond0 (unregistering): Released all slaves [ 1085.478439][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.489454][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.501342][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.513490][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.523638][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.536772][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.548630][T17866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.557086][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1085.566281][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.575778][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1085.586072][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1085.623009][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.641410][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.651675][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.665962][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.678406][T17866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.689282][T17866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.701598][T17866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.741518][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1085.752757][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1085.765549][T17866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.776505][T17866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.786177][T17866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.794998][T17866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.809016][T18059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.816833][T18059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.826114][T18059] device bridge_slave_0 entered promiscuous mode [ 1085.836128][T18059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.843615][T18059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.852259][T18059] device bridge_slave_1 entered promiscuous mode [ 1085.906552][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.915820][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.943659][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.952015][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.963113][T17894] device veth0_vlan entered promiscuous mode [ 1085.985860][T18059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.030791][T17894] device veth1_vlan entered promiscuous mode [ 1086.050184][T18059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.087191][T17889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.094770][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.104699][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1086.116442][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1086.128251][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1086.147624][T18059] team0: Port device team_slave_0 added [ 1086.217457][T18059] team0: Port device team_slave_1 added [ 1086.244415][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.254895][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.279223][T17894] device veth0_macvtap entered promiscuous mode [ 1086.308673][T18059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.316970][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.346197][T18059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.360894][T17894] device veth1_macvtap entered promiscuous mode [ 1086.382881][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.383444][T18059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.391008][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.399094][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.433990][T18059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.469928][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1086.482982][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.491586][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1086.502945][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.512981][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.563104][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.580706][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.591988][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.602764][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.612919][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.626941][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.638112][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.648942][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.661402][T17894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.679784][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1086.688750][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.697694][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1086.707167][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.719348][T17889] device veth0_vlan entered promiscuous mode [ 1086.747857][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.762097][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.775619][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.797292][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.807442][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.822420][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.832939][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.844599][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.856855][T17894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.866195][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.874460][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.882365][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1086.890968][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.903539][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.906347][T18059] device hsr_slave_0 entered promiscuous mode [ 1086.911630][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.931501][T18059] device hsr_slave_1 entered promiscuous mode [ 1086.938471][T18059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.949984][T18059] Cannot create hsr debugfs directory [ 1086.955261][ T5120] Bluetooth: hci4: command 0x0419 tx timeout [ 1086.961751][T17894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.972544][T17894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.981267][T17894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.990400][T17894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.012850][T17889] device veth1_vlan entered promiscuous mode [ 1087.036786][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1087.109371][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1087.119580][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1087.210168][T17889] device veth0_macvtap entered promiscuous mode [ 1087.303449][T17889] device veth1_macvtap entered promiscuous mode [ 1087.369763][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.444511][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.445503][T18059] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.671341][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.699629][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.713050][T18117] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1087.713936][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.742167][T18117] CPU: 0 PID: 18117 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1087.752632][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1087.762700][T18117] Call Trace: [ 1087.765991][T18117] [ 1087.768932][T18117] dump_stack_lvl+0xd1/0x138 [ 1087.773549][T18117] dump_header+0x10b/0x85f [ 1087.777985][T18117] oom_kill_process.cold+0x10/0x15 [ 1087.783112][T18117] out_of_memory+0x35c/0x14a0 [ 1087.787811][T18117] ? oom_killer_disable+0x280/0x280 [ 1087.793031][T18117] ? find_held_lock+0x2d/0x110 [ 1087.797847][T18117] mem_cgroup_out_of_memory+0x206/0x270 [ 1087.803410][T18117] ? mem_cgroup_margin+0x130/0x130 [ 1087.808546][T18117] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1087.814380][T18117] memory_max_write+0x2f9/0x3c0 [ 1087.819256][T18117] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1087.825347][T18117] ? lock_release+0x810/0x810 [ 1087.830040][T18117] cgroup_file_write+0x1e2/0x770 [ 1087.834993][T18117] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1087.841072][T18117] ? kill_css+0x370/0x370 [ 1087.845417][T18117] ? __virt_addr_valid+0x61/0x2e0 [ 1087.850470][T18117] ? kill_css+0x370/0x370 [ 1087.854814][T18117] kernfs_fop_write_iter+0x3f1/0x600 [ 1087.860127][T18117] vfs_write+0x9ed/0xdd0 [ 1087.864396][T18117] ? kernel_write+0x630/0x630 [ 1087.869091][T18117] ? __fget_files+0x26a/0x440 [ 1087.873797][T18117] ksys_write+0x12b/0x250 [ 1087.878140][T18117] ? __ia32_sys_read+0xb0/0xb0 [ 1087.882919][T18117] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1087.888835][T18117] do_syscall_64+0x39/0xb0 [ 1087.893275][T18117] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1087.899184][T18117] RIP: 0033:0x7f214008c0c9 [ 1087.903627][T18117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1087.923330][T18117] RSP: 002b:00007f2140d4e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1087.931758][T18117] RAX: ffffffffffffffda RBX: 00007f21401abf80 RCX: 00007f214008c0c9 [ 1087.939737][T18117] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1087.947714][T18117] RBP: 00007f21400e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1087.955693][T18117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.963670][T18117] R13: 00007fff810f9f8f R14: 00007f2140d4e300 R15: 0000000000022000 [ 1087.971668][T18117] [ 1088.012191][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.022377][T18117] memory: usage 8708kB, limit 0kB, failcnt 339 [ 1088.028651][T18117] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1088.032025][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.051410][T18117] Memory cgroup stats for /syz3: [ 1088.051612][T18117] anon 135168 [ 1088.051612][T18117] file 8347648 [ 1088.051612][T18117] kernel 372736 [ 1088.051612][T18117] kernel_stack 98304 [ 1088.051612][T18117] pagetables 81920 [ 1088.051612][T18117] sec_pagetables 0 [ 1088.051612][T18117] percpu 64 [ 1088.051612][T18117] sock 0 [ 1088.051612][T18117] vmalloc 0 [ 1088.051612][T18117] shmem 8347648 [ 1088.051612][T18117] zswap 0 [ 1088.051612][T18117] zswapped 0 [ 1088.051612][T18117] file_mapped 204800 [ 1088.051612][T18117] file_dirty 0 [ 1088.051612][T18117] file_writeback 0 [ 1088.051612][T18117] swapcached 0 [ 1088.051612][T18117] anon_thp 0 [ 1088.051612][T18117] file_thp 0 [ 1088.051612][T18117] shmem_thp 0 [ 1088.051612][T18117] inactive_anon 8220672 [ 1088.051612][T18117] active_anon 258048 [ 1088.051612][T18117] inactive_file 0 [ 1088.051612][T18117] active_file 0 [ 1088.051612][T18117] unevictable 0 [ 1088.051612][T18117] slab_reclaimable 38480 [ 1088.051612][T18117] slab_unreclaimable 122952 [ 1088.051612][T18117] slab 161432 [ 1088.062509][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.191503][T18117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18116,uid=0 [ 1088.220718][T18117] Memory cgroup out of memory: Killed process 18117 (syz-executor.3) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1088.254798][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.275019][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.297557][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.316006][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.336461][T17889] batman_adv: batadv0: Interface activated: batadv_slave_0 00:19:57 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:57 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:19:57 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1088.358952][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1088.369347][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1088.378505][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1088.415022][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1088.432871][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1088.490351][T17866] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1088.519275][T18059] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.529778][T17866] CPU: 1 PID: 17866 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1088.540237][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1088.550313][T17866] Call Trace: [ 1088.553617][T17866] [ 1088.556577][T17866] dump_stack_lvl+0xd1/0x138 [ 1088.561225][T17866] dump_header+0x10b/0x85f [ 1088.565691][T17866] oom_kill_process.cold+0x10/0x15 [ 1088.570834][T17866] out_of_memory+0x35c/0x14a0 [ 1088.575547][T17866] ? find_held_lock+0x2d/0x110 [ 1088.580347][T17866] ? oom_killer_disable+0x280/0x280 [ 1088.585587][T17866] ? find_held_lock+0x2d/0x110 [ 1088.590417][T17866] mem_cgroup_out_of_memory+0x206/0x270 [ 1088.596007][T17866] ? mem_cgroup_margin+0x130/0x130 [ 1088.601144][T17866] ? lock_downgrade+0x6e0/0x6e0 [ 1088.606051][T17866] try_charge_memcg+0xefb/0x12f0 [ 1088.611045][T17866] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1088.617073][T17866] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1088.622826][T17866] ? lock_downgrade+0x6e0/0x6e0 [ 1088.627746][T17866] obj_cgroup_charge+0x2af/0x5e0 [ 1088.632741][T17866] ? vm_area_dup+0x7d/0x380 [ 1088.637281][T17866] kmem_cache_alloc+0xb5/0x430 [ 1088.642082][T17866] vm_area_dup+0x7d/0x380 [ 1088.646451][T17866] ? copy_page_range+0x1dfe/0x3b40 [ 1088.651651][T17866] ? mas_next_nentry+0x610/0xab0 [ 1088.656630][T17866] ? vm_area_alloc+0x100/0x100 [ 1088.661450][T17866] ? percpu_counter_add_batch+0xc1/0x180 [ 1088.667128][T17866] ? __vm_enough_memory+0x188/0x390 [ 1088.672373][T17866] ? security_vm_enough_memory_mm+0x89/0xb0 [ 1088.678320][T17866] dup_mmap+0x655/0x10b0 [ 1088.682605][T17866] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1088.687927][T17866] ? lock_downgrade+0x6e0/0x6e0 [ 1088.692824][T17866] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1088.698706][T17866] ? mm_init+0x8e0/0xc10 [ 1088.703002][T17866] copy_process+0x440f/0x7520 [ 1088.707718][T17866] ? _raw_spin_unlock+0x28/0x40 [ 1088.712599][T17866] ? wp_page_reuse+0x197/0x570 [ 1088.717415][T17866] ? __cleanup_sighand+0xb0/0xb0 [ 1088.722390][T17866] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1088.727817][T17866] ? rwlock_bug.part.0+0x90/0x90 [ 1088.732799][T17866] ? lock_chain_count+0x20/0x20 [ 1088.737698][T17866] kernel_clone+0xeb/0x990 [ 1088.742149][T17866] ? create_io_thread+0xf0/0xf0 [ 1088.747046][T17866] ? find_held_lock+0x2d/0x110 [ 1088.751884][T17866] __do_sys_clone+0xba/0x100 [ 1088.756524][T17866] ? kernel_clone+0x990/0x990 [ 1088.761270][T17866] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1088.767220][T17866] do_syscall_64+0x39/0xb0 [ 1088.771693][T17866] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1088.777631][T17866] RIP: 0033:0x7f2140089dfb [ 1088.782079][T17866] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1088.801727][T17866] RSP: 002b:00007fff810fa1d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1088.810186][T17866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2140089dfb [ 1088.818193][T17866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1088.826195][T17866] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555560af400 [ 1088.834207][T17866] R10: 00005555560af6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1088.842208][T17866] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff810fa2b0 [ 1088.850231][T17866] [ 1088.858861][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.890250][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.910826][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.929613][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.941220][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.964420][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.982101][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.005305][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.022282][T17889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.046290][T17889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.072178][T17866] memory: usage 8436kB, limit 0kB, failcnt 370 [ 1089.074250][T17889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.078365][T17866] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1089.078383][T17866] Memory cgroup stats for /syz3 [ 1089.101154][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.128958][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.153495][T18059] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.181984][T17866] : [ 1089.182161][T17866] anon 40960 [ 1089.182161][T17866] file 8347648 [ 1089.182161][T17866] kernel 249856 [ 1089.182161][T17866] kernel_stack 32768 [ 1089.182161][T17866] pagetables 49152 [ 1089.182161][T17866] sec_pagetables 0 [ 1089.182161][T17866] percpu 128 [ 1089.182161][T17866] sock 0 [ 1089.182161][T17866] vmalloc 0 [ 1089.182161][T17866] shmem 8347648 [ 1089.182161][T17866] zswap 0 [ 1089.182161][T17866] zswapped 0 [ 1089.182161][T17866] file_mapped 180224 [ 1089.182161][T17866] file_dirty 0 [ 1089.182161][T17866] file_writeback 0 [ 1089.182161][T17866] swapcached 0 [ 1089.182161][T17866] anon_thp 0 [ 1089.182161][T17866] file_thp 0 [ 1089.182161][T17866] shmem_thp 0 [ 1089.182161][T17866] inactive_anon 8130560 [ 1089.182161][T17866] active_anon 258048 [ 1089.182161][T17866] inactive_file 0 [ 1089.182161][T17866] active_file 0 [ 1089.182161][T17866] unevictable 0 [ 1089.182161][T17866] slab_reclaimable 32560 [ 1089.182161][T17866] slab_unreclaimable 110584 [ 1089.182161][T17866] slab 143144 [ 1089.283210][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1089.300797][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.320282][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.345601][T17889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.367196][T17889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.381013][T17889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.396193][T17889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.418259][T17866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17866,uid=0 [ 1089.476669][T18059] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.497973][T17866] Memory cgroup out of memory: Killed process 17866 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1089.678368][T18122] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1089.762100][T18122] CPU: 0 PID: 18122 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1089.772589][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1089.782683][T18122] Call Trace: [ 1089.785984][T18122] [ 1089.788934][T18122] dump_stack_lvl+0xd1/0x138 [ 1089.793577][T18122] dump_header+0x10b/0x85f [ 1089.798038][T18122] oom_kill_process.cold+0x10/0x15 [ 1089.803207][T18122] out_of_memory+0x35c/0x14a0 [ 1089.807943][T18122] ? oom_killer_disable+0x280/0x280 [ 1089.813197][T18122] ? find_held_lock+0x2d/0x110 [ 1089.818018][T18122] mem_cgroup_out_of_memory+0x206/0x270 [ 1089.823605][T18122] ? mem_cgroup_margin+0x130/0x130 [ 1089.828751][T18122] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1089.834607][T18122] memory_max_write+0x2f9/0x3c0 [ 1089.839494][T18122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1089.845599][T18122] ? lock_release+0x810/0x810 [ 1089.850301][T18122] cgroup_file_write+0x1e2/0x770 [ 1089.855259][T18122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1089.861343][T18122] ? kill_css+0x370/0x370 [ 1089.865695][T18122] ? __virt_addr_valid+0x61/0x2e0 [ 1089.870754][T18122] ? kill_css+0x370/0x370 [ 1089.875124][T18122] kernfs_fop_write_iter+0x3f1/0x600 [ 1089.880475][T18122] vfs_write+0x9ed/0xdd0 [ 1089.884756][T18122] ? kernel_write+0x630/0x630 [ 1089.889460][T18122] ? __fget_files+0x26a/0x440 [ 1089.894174][T18122] ksys_write+0x12b/0x250 [ 1089.898519][T18122] ? __ia32_sys_read+0xb0/0xb0 [ 1089.903328][T18122] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1089.909250][T18122] do_syscall_64+0x39/0xb0 [ 1089.913691][T18122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1089.919600][T18122] RIP: 0033:0x7f2e9968c0c9 [ 1089.924027][T18122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1089.943656][T18122] RSP: 002b:00007f2e9a425168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1089.952086][T18122] RAX: ffffffffffffffda RBX: 00007f2e997ac050 RCX: 00007f2e9968c0c9 [ 1089.960068][T18122] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1089.968050][T18122] RBP: 00007f2e996e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1089.976116][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.984094][T18122] R13: 00007ffd106d0a5f R14: 00007f2e9a425300 R15: 0000000000022000 [ 1089.992096][T18122] [ 1090.012518][T18122] memory: usage 10740kB, limit 0kB, failcnt 352 [ 1090.045410][T18122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1090.198421][T18122] Memory cgroup stats for /syz0: [ 1090.198607][T18122] anon 114688 [ 1090.198607][T18122] file 10477568 [ 1090.198607][T18122] kernel 405504 [ 1090.198607][T18122] kernel_stack 131072 [ 1090.198607][T18122] pagetables 81920 [ 1090.198607][T18122] sec_pagetables 0 [ 1090.198607][T18122] percpu 64 [ 1090.198607][T18122] sock 0 [ 1090.198607][T18122] vmalloc 0 [ 1090.198607][T18122] shmem 10477568 [ 1090.198607][T18122] zswap 0 [ 1090.198607][T18122] zswapped 0 [ 1090.198607][T18122] file_mapped 237568 [ 1090.198607][T18122] file_dirty 0 [ 1090.198607][T18122] file_writeback 0 [ 1090.198607][T18122] swapcached 0 [ 1090.198607][T18122] anon_thp 0 [ 1090.198607][T18122] file_thp 0 [ 1090.198607][T18122] shmem_thp 0 [ 1090.198607][T18122] inactive_anon 2211840 [ 1090.198607][T18122] active_anon 8380416 [ 1090.198607][T18122] inactive_file 0 [ 1090.198607][T18122] active_file 0 [ 1090.198607][T18122] unevictable 0 [ 1090.198607][T18122] slab_reclaimable 40056 [ 1090.198607][T18122] slab_unreclaimable 117864 [ 1090.198607][T18122] slab 157920 [ 1090.344307][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.372318][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.382552][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1090.447494][T18122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18120,uid=0 [ 1090.477706][T18122] Memory cgroup out of memory: Killed process 18122 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1090.532578][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.540690][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.595376][T18059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1090.627793][T18059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1090.655669][T18059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1090.666138][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1090.675430][T18059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1090.770601][T16379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1090.781205][T16379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1090.790758][T16379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1090.799431][T16379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1090.806937][T16379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.898691][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.962176][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.970186][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.995020][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.016140][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1091.025490][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1091.034225][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.041380][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.050657][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1091.053966][T18128] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1091.059627][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1091.078429][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.079253][T18128] CPU: 1 PID: 18128 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1091.085611][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.095961][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1091.095978][T18128] Call Trace: [ 1091.095986][T18128] [ 1091.095998][T18128] dump_stack_lvl+0xd1/0x138 [ 1091.112146][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1091.113336][T18128] dump_header+0x10b/0x85f [ 1091.135983][T18128] oom_kill_process.cold+0x10/0x15 [ 1091.141116][T18128] out_of_memory+0x35c/0x14a0 [ 1091.145813][T18128] ? oom_killer_disable+0x280/0x280 [ 1091.151033][T18128] mem_cgroup_out_of_memory+0x206/0x270 [ 1091.156593][T18128] ? mem_cgroup_margin+0x130/0x130 [ 1091.161727][T18128] memory_max_write+0x2f9/0x3c0 [ 1091.166594][T18128] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1091.172675][T18128] ? lock_release+0x810/0x810 [ 1091.177362][T18128] cgroup_file_write+0x1e2/0x770 [ 1091.182313][T18128] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1091.188391][T18128] ? kill_css+0x370/0x370 [ 1091.192732][T18128] ? __virt_addr_valid+0x61/0x2e0 [ 1091.197798][T18128] ? kill_css+0x370/0x370 [ 1091.202142][T18128] kernfs_fop_write_iter+0x3f1/0x600 [ 1091.207454][T18128] vfs_write+0x9ed/0xdd0 [ 1091.211712][T18128] ? kernel_write+0x630/0x630 [ 1091.216405][T18128] ? __fget_files+0x26a/0x440 [ 1091.221105][T18128] ksys_write+0x12b/0x250 [ 1091.225446][T18128] ? __ia32_sys_read+0xb0/0xb0 [ 1091.230221][T18128] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1091.236130][T18128] do_syscall_64+0x39/0xb0 [ 1091.240568][T18128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1091.246474][T18128] RIP: 0033:0x7fe8ff28c0c9 [ 1091.250895][T18128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1091.270510][T18128] RSP: 002b:00007fe900055168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.278934][T18128] RAX: ffffffffffffffda RBX: 00007fe8ff3ac050 RCX: 00007fe8ff28c0c9 [ 1091.286932][T18128] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1091.295169][T18128] RBP: 00007fe8ff2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1091.303175][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.311163][T18128] R13: 00007ffed42f401f R14: 00007fe900055300 R15: 0000000000022000 [ 1091.319165][T18128] [ 1091.382068][T18128] memory: usage 8688kB, limit 0kB, failcnt 307 [ 1091.388295][T18128] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1091.399041][T18128] Memory cgroup stats for /syz2: [ 1091.399245][T18128] anon 126976 [ 1091.399245][T18128] file 8384512 [ 1091.399245][T18128] kernel 380928 [ 1091.399245][T18128] kernel_stack 98304 [ 1091.399245][T18128] pagetables 86016 [ 1091.399245][T18128] sec_pagetables 0 [ 1091.399245][T18128] percpu 64 [ 1091.399245][T18128] sock 0 [ 1091.399245][T18128] vmalloc 0 [ 1091.399245][T18128] shmem 8380416 [ 1091.399245][T18128] zswap 0 [ 1091.399245][T18128] zswapped 0 [ 1091.399245][T18128] file_mapped 237568 [ 1091.399245][T18128] file_dirty 0 [ 1091.399245][T18128] file_writeback 0 [ 1091.399245][T18128] swapcached 0 [ 1091.399245][T18128] anon_thp 0 [ 1091.399245][T18128] file_thp 0 [ 1091.399245][T18128] shmem_thp 0 [ 1091.399245][T18128] inactive_anon 126976 [ 1091.399245][T18128] active_anon 8380416 [ 1091.399245][T18128] inactive_file 4096 [ 1091.399245][T18128] active_file 0 [ 1091.399245][T18128] unevictable 0 [ 1091.399245][T18128] slab_reclaimable 37448 [ 1091.399245][T18128] slab_unreclaimable 130400 [ 1091.399245][T18128] slab 167848 [ 1091.516137][T18128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18126,uid=0 [ 1091.541909][T18128] Memory cgroup out of memory: Killed process 18126 (syz-executor.2) total-vm:54804kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1091.561450][T16379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1091.571724][T16379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1091.580429][T16379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1091.593814][T16379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1091.601557][T16379] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1091.609779][T16379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1091.617900][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1091.648661][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1091.673461][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1091.684945][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1091.703968][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1091.728931][T18059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1091.753573][T18059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:20:00 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:00 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1091.805873][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1091.826150][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:20:00 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1091.886672][T17894] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1091.937811][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1091.946365][T17894] CPU: 1 PID: 17894 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1091.956818][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1091.966906][T17894] Call Trace: [ 1091.970214][T17894] [ 1091.973170][T17894] dump_stack_lvl+0xd1/0x138 [ 1091.977800][T17894] dump_header+0x10b/0x85f [ 1091.982242][T17894] oom_kill_process.cold+0x10/0x15 [ 1091.987393][T17894] out_of_memory+0x35c/0x14a0 [ 1091.992110][T17894] ? find_held_lock+0x2d/0x110 [ 1091.996929][T17894] ? oom_killer_disable+0x280/0x280 [ 1092.002175][T17894] ? find_held_lock+0x2d/0x110 [ 1092.006987][T17894] mem_cgroup_out_of_memory+0x206/0x270 [ 1092.012563][T17894] ? mem_cgroup_margin+0x130/0x130 [ 1092.017701][T17894] ? lock_downgrade+0x6e0/0x6e0 [ 1092.022598][T17894] try_charge_memcg+0xefb/0x12f0 [ 1092.027574][T17894] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1092.033593][T17894] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1092.039350][T17894] ? lock_downgrade+0x6e0/0x6e0 [ 1092.044248][T17894] ? lock_downgrade+0x6e0/0x6e0 [ 1092.049131][T17894] ? rcu_read_unlock+0x9/0x60 [ 1092.053871][T17894] obj_cgroup_charge+0x2af/0x5e0 [ 1092.058855][T17894] ? copy_process+0x3aa/0x7520 [ 1092.063647][T17894] kmem_cache_alloc_node+0xb7/0x460 [ 1092.068891][T17894] copy_process+0x3aa/0x7520 [ 1092.073515][T17894] ? _raw_spin_unlock+0x28/0x40 [ 1092.078413][T17894] ? wp_page_reuse+0x197/0x570 [ 1092.083224][T17894] ? do_wp_page+0x844/0x3370 [ 1092.087866][T17894] ? __cleanup_sighand+0xb0/0xb0 [ 1092.092833][T17894] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1092.098254][T17894] ? rwlock_bug.part.0+0x90/0x90 [ 1092.103230][T17894] ? lock_chain_count+0x20/0x20 [ 1092.108119][T17894] kernel_clone+0xeb/0x990 [ 1092.112566][T17894] ? create_io_thread+0xf0/0xf0 [ 1092.117454][T17894] ? find_held_lock+0x2d/0x110 [ 1092.122264][T17894] __do_sys_clone+0xba/0x100 [ 1092.126890][T17894] ? kernel_clone+0x990/0x990 [ 1092.131621][T17894] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1092.137739][T17894] do_syscall_64+0x39/0xb0 [ 1092.142197][T17894] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1092.148115][T17894] RIP: 0033:0x7f2e99689dfb [ 1092.152552][T17894] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1092.172191][T17894] RSP: 002b:00007ffd106d0ca0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1092.180641][T17894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e99689dfb [ 1092.188649][T17894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1092.196655][T17894] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555572e6400 [ 1092.204823][T17894] R10: 00005555572e66d0 R11: 0000000000000246 R12: 0000000000000001 [ 1092.212826][T17894] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd106d0d80 [ 1092.220859][T17894] [ 1092.233387][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1092.288033][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1092.352292][T17894] memory: usage 10396kB, limit 0kB, failcnt 375 [ 1092.358679][T17894] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1092.429129][T17894] Memory cgroup stats for /syz0: [ 1092.429297][T17894] anon 40960 [ 1092.429297][T17894] file 10477568 [ 1092.429297][T17894] kernel 126976 [ 1092.429297][T17894] kernel_stack 0 [ 1092.429297][T17894] pagetables 8192 [ 1092.429297][T17894] sec_pagetables 0 [ 1092.429297][T17894] percpu 64 [ 1092.429297][T17894] sock 0 [ 1092.429297][T17894] vmalloc 0 [ 1092.429297][T17894] shmem 10477568 [ 1092.429297][T17894] zswap 0 [ 1092.429297][T17894] zswapped 0 [ 1092.429297][T17894] file_mapped 208896 [ 1092.429297][T17894] file_dirty 0 [ 1092.429297][T17894] file_writeback 0 [ 1092.429297][T17894] swapcached 0 [ 1092.429297][T17894] anon_thp 0 [ 1092.429297][T17894] file_thp 0 [ 1092.429297][T17894] shmem_thp 0 [ 1092.429297][T17894] inactive_anon 2138112 [ 1092.429297][T17894] active_anon 8380416 [ 1092.429297][T17894] inactive_file 0 [ 1092.429297][T17894] active_file 0 [ 1092.429297][T17894] unevictable 0 [ 1092.429297][T17894] slab_reclaimable 33192 [ 1092.429297][T17894] slab_unreclaimable 71824 [ 1092.429297][T17894] slab 105016 [ 1092.672573][T17894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17894,uid=0 [ 1092.698715][T17894] Memory cgroup out of memory: Killed process 17894 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1092.722557][T17889] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1092.738302][T17889] CPU: 1 PID: 17889 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1092.748777][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1092.758874][T17889] Call Trace: [ 1092.762177][T17889] [ 1092.765164][T17889] dump_stack_lvl+0xd1/0x138 [ 1092.769804][T17889] dump_header+0x10b/0x85f [ 1092.774269][T17889] oom_kill_process.cold+0x10/0x15 [ 1092.779419][T17889] out_of_memory+0x35c/0x14a0 [ 1092.784139][T17889] ? oom_killer_disable+0x280/0x280 [ 1092.789459][T17889] ? find_held_lock+0x2d/0x110 [ 1092.794265][T17889] mem_cgroup_out_of_memory+0x206/0x270 [ 1092.799851][T17889] ? mem_cgroup_margin+0x130/0x130 [ 1092.804995][T17889] ? lock_downgrade+0x6e0/0x6e0 [ 1092.809896][T17889] try_charge_memcg+0xefb/0x12f0 [ 1092.814881][T17889] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1092.820908][T17889] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1092.826670][T17889] ? lock_downgrade+0x6e0/0x6e0 [ 1092.831554][T17889] ? lock_downgrade+0x6e0/0x6e0 [ 1092.836449][T17889] obj_cgroup_charge+0x2af/0x5e0 [ 1092.841422][T17889] kmem_cache_alloc_lru+0x145/0x760 [ 1092.846649][T17889] ? sock_alloc_inode+0x27/0x1d0 [ 1092.851641][T17889] sock_alloc_inode+0x27/0x1d0 [ 1092.856450][T17889] ? sock_free_inode+0x30/0x30 [ 1092.861259][T17889] alloc_inode+0x61/0x230 [ 1092.865631][T17889] new_inode_pseudo+0x17/0x80 [ 1092.870326][T17889] sock_alloc+0x40/0x260 [ 1092.874588][T17889] __sock_create+0xbd/0x790 [ 1092.879116][T17889] __sys_socket+0x133/0x250 [ 1092.883638][T17889] ? __sys_socket_file+0x1f0/0x1f0 [ 1092.888776][T17889] __x64_sys_socket+0x73/0xb0 [ 1092.893477][T17889] do_syscall_64+0x39/0xb0 [ 1092.897917][T17889] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1092.903824][T17889] RIP: 0033:0x7fe8ff28d747 [ 1092.908245][T17889] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1092.927876][T17889] RSP: 002b:00007ffed42f3b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 1092.936300][T17889] RAX: ffffffffffffffda RBX: 00007ffed42f4300 RCX: 00007fe8ff28d747 [ 1092.944280][T17889] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1092.952271][T17889] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffed42f4110 [ 1092.960246][T17889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 1092.968397][T17889] R13: 000000000010a5d4 R14: 0000000000000012 R15: 00007ffed42f4340 [ 1092.976389][T17889] [ 1092.979499][T16379] Bluetooth: hci0: command 0x0409 tx timeout [ 1093.000413][T18124] chnl_net:caif_netlink_parms(): no params data found [ 1093.005547][T17889] memory: usage 8368kB, limit 0kB, failcnt 362 [ 1093.013665][T17889] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1093.020544][T17889] Memory cgroup stats for /syz2: [ 1093.020701][T17889] anon 40960 [ 1093.020701][T17889] file 8384512 [ 1093.020701][T17889] kernel 143360 [ 1093.020701][T17889] kernel_stack 0 [ 1093.020701][T17889] pagetables 8192 [ 1093.020701][T17889] sec_pagetables 0 [ 1093.020701][T17889] percpu 64 [ 1093.020701][T17889] sock 0 [ 1093.020701][T17889] vmalloc 0 [ 1093.020701][T17889] shmem 8380416 [ 1093.020701][T17889] zswap 0 [ 1093.020701][T17889] zswapped 0 [ 1093.020701][T17889] file_mapped 208896 [ 1093.020701][T17889] file_dirty 4096 [ 1093.020701][T17889] file_writeback 0 [ 1093.020701][T17889] swapcached 0 [ 1093.020701][T17889] anon_thp 0 [ 1093.020701][T17889] file_thp 0 [ 1093.020701][T17889] shmem_thp 0 [ 1093.020701][T17889] inactive_anon 40960 [ 1093.020701][T17889] active_anon 8380416 [ 1093.020701][T17889] inactive_file 0 [ 1093.020701][T17889] active_file 4096 [ 1093.020701][T17889] unevictable 0 [ 1093.020701][T17889] slab_reclaimable 30584 [ 1093.020701][T17889] slab_unreclaimable 85304 [ 1093.020701][T17889] slab 115888 [ 1093.221212][T17889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17889,uid=0 [ 1093.240961][T17889] Memory cgroup out of memory: Killed process 17889 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1093.285946][T17889] socket: no more sockets [ 1093.348609][T18131] chnl_net:caif_netlink_parms(): no params data found 00:20:02 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1093.515790][T18124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.532044][T18124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.541290][T18124] device bridge_slave_0 entered promiscuous mode [ 1093.625256][T18124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.656757][T18124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.664472][T16379] Bluetooth: hci1: command 0x0409 tx timeout [ 1093.716922][T18124] device bridge_slave_1 entered promiscuous mode [ 1093.833030][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1093.840605][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1093.883632][T18059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.893311][T18124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.940400][T18124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.059603][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.084114][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.110413][T18131] device bridge_slave_0 entered promiscuous mode [ 1094.127722][T18124] team0: Port device team_slave_0 added [ 1094.135400][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.143519][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.162408][T18131] device bridge_slave_1 entered promiscuous mode [ 1094.183675][T18124] team0: Port device team_slave_1 added [ 1094.313044][T18124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.331976][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.411914][T18124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.445720][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.464451][T18124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.471437][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.509997][T18124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.530092][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.640100][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1094.654379][T18124] device hsr_slave_0 entered promiscuous mode [ 1094.661317][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1094.669459][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1094.678036][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1094.685396][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1094.700574][T18124] device hsr_slave_1 entered promiscuous mode [ 1094.732295][T18124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.739922][T18124] Cannot create hsr debugfs directory [ 1094.765667][T18131] team0: Port device team_slave_0 added [ 1094.817093][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1094.826291][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1094.838483][T18131] team0: Port device team_slave_1 added [ 1094.867161][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.874667][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.900703][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.937970][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.945230][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.974478][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.995753][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1095.004441][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1095.022233][ T5120] Bluetooth: hci0: command 0x041b tx timeout [ 1095.048543][T18059] device veth0_vlan entered promiscuous mode [ 1095.055456][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1095.063612][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1095.100647][T18131] device hsr_slave_0 entered promiscuous mode [ 1095.107683][T18131] device hsr_slave_1 entered promiscuous mode [ 1095.114563][T18131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.123968][T18131] Cannot create hsr debugfs directory [ 1095.237375][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.291199][T18059] device veth1_vlan entered promiscuous mode [ 1095.391785][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.442355][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1095.451681][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1095.489837][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1095.512847][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1095.568158][T18124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.606986][T18059] device veth0_macvtap entered promiscuous mode [ 1095.632558][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.690620][T18059] device veth1_macvtap entered promiscuous mode [ 1095.704903][T18124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.742353][ T5120] Bluetooth: hci1: command 0x041b tx timeout [ 1095.758715][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.800662][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.824920][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.835176][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.845867][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.869787][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.892354][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.911905][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.931901][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.941753][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.955904][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.966063][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.978757][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.994284][T18059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.032592][T18124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.060042][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1096.069135][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1096.077521][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1096.087299][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1096.102532][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.117045][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.130776][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.151955][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.175017][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.198334][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.222132][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.241887][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.251742][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.264575][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.274749][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.285500][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.297220][T18059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.344906][T18124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.359989][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1096.382664][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1096.407156][T18059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.423200][T18059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.444171][T18059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.464374][T18059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.668455][T18158] chnl_net:caif_netlink_parms(): no params data found [ 1096.722851][T11188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.792222][ T5120] Bluetooth: hci2: command 0x0409 tx timeout [ 1096.892734][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.900924][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.962886][T11188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.015758][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1097.102872][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 1097.135923][T11188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.293149][T18131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.353431][T18124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1097.360694][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.371222][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.432699][T11188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.536354][T18131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.653197][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.660324][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.693882][T18158] device bridge_slave_0 entered promiscuous mode [ 1097.722902][T18124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1097.754584][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1097.762956][T18124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1097.822232][ T5120] Bluetooth: hci1: command 0x040f tx timeout [ 1097.954274][T18131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.042442][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.049630][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.101188][T18158] device bridge_slave_1 entered promiscuous mode [ 1098.132072][T18124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1098.192662][T18131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.356384][T18158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.407562][T18158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.478862][T18180] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1098.512570][T18180] CPU: 1 PID: 18180 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1098.523068][T18180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1098.533165][T18180] Call Trace: [ 1098.536501][T18180] [ 1098.539468][T18180] dump_stack_lvl+0xd1/0x138 [ 1098.544110][T18180] dump_header+0x10b/0x85f [ 1098.548579][T18180] oom_kill_process.cold+0x10/0x15 [ 1098.553746][T18180] out_of_memory+0x35c/0x14a0 [ 1098.558484][T18180] ? oom_killer_disable+0x280/0x280 [ 1098.563741][T18180] mem_cgroup_out_of_memory+0x206/0x270 [ 1098.570200][T18180] ? mem_cgroup_margin+0x130/0x130 [ 1098.575390][T18180] memory_max_write+0x2f9/0x3c0 [ 1098.580334][T18180] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1098.586458][T18180] ? lock_release+0x810/0x810 [ 1098.591178][T18180] cgroup_file_write+0x1e2/0x770 [ 1098.596179][T18180] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1098.602297][T18180] ? kill_css+0x370/0x370 [ 1098.606690][T18180] ? kill_css+0x370/0x370 [ 1098.611070][T18180] kernfs_fop_write_iter+0x3f1/0x600 [ 1098.616427][T18180] vfs_write+0x9ed/0xdd0 [ 1098.620710][T18180] ? kernel_write+0x630/0x630 [ 1098.625434][T18180] ? __fget_files+0x26a/0x440 [ 1098.630148][T18180] ksys_write+0x12b/0x250 [ 1098.634498][T18180] ? __ia32_sys_read+0xb0/0xb0 [ 1098.639280][T18180] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1098.645210][T18180] do_syscall_64+0x39/0xb0 [ 1098.649648][T18180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1098.655558][T18180] RIP: 0033:0x7f7fa8a8c0c9 [ 1098.659979][T18180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1098.679610][T18180] RSP: 002b:00007f7fa75fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1098.688055][T18180] RAX: ffffffffffffffda RBX: 00007f7fa8babf80 RCX: 00007f7fa8a8c0c9 [ 1098.696032][T18180] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1098.704012][T18180] RBP: 00007f7fa8ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1098.711995][T18180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.719988][T18180] R13: 00007fffed58b2bf R14: 00007f7fa75fe300 R15: 0000000000022000 [ 1098.727990][T18180] [ 1098.829604][T18180] memory: usage 10468kB, limit 0kB, failcnt 467 [ 1098.845828][T18180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1098.863250][ T5120] Bluetooth: hci2: command 0x041b tx timeout [ 1098.865536][T18158] team0: Port device team_slave_0 added [ 1098.912005][T18180] Memory cgroup stats for /syz5: [ 1098.912212][T18180] anon 139264 [ 1098.912212][T18180] file 10186752 [ 1098.912212][T18180] kernel 372736 [ 1098.912212][T18180] kernel_stack 98304 [ 1098.912212][T18180] pagetables 81920 [ 1098.912212][T18180] sec_pagetables 0 [ 1098.912212][T18180] percpu 64 [ 1098.912212][T18180] sock 0 [ 1098.912212][T18180] vmalloc 0 [ 1098.912212][T18180] shmem 10186752 [ 1098.912212][T18180] zswap 0 [ 1098.912212][T18180] zswapped 0 [ 1098.912212][T18180] file_mapped 294912 [ 1098.912212][T18180] file_dirty 0 [ 1098.912212][T18180] file_writeback 0 [ 1098.912212][T18180] swapcached 0 [ 1098.912212][T18180] anon_thp 0 [ 1098.912212][T18180] file_thp 0 [ 1098.912212][T18180] shmem_thp 0 [ 1098.912212][T18180] inactive_anon 1953792 [ 1098.912212][T18180] active_anon 8372224 [ 1098.912212][T18180] inactive_file 0 [ 1098.912212][T18180] active_file 0 [ 1098.912212][T18180] unevictable 0 [ 1098.912212][T18180] slab_reclaimable 41936 [ 1098.912212][T18180] slab_unreclaimable 123336 [ 1098.912212][T18180] slab 165272 [ 1098.915850][T18158] team0: Port device team_slave_1 added [ 1098.932113][T18180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1099.182052][T16379] Bluetooth: hci0: command 0x0419 tx timeout [ 1099.196411][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.262413][T18180] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18179,uid=0 [ 1099.313942][T18180] Memory cgroup out of memory: Killed process 18180 (syz-executor.5) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 00:20:08 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:08 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:08 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1099.480380][T18059] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1099.531418][T18059] CPU: 1 PID: 18059 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1099.541891][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1099.551971][T18059] Call Trace: [ 1099.555266][T18059] [ 1099.558212][T18059] dump_stack_lvl+0xd1/0x138 [ 1099.562869][T18059] dump_header+0x10b/0x85f [ 1099.567308][T18059] oom_kill_process.cold+0x10/0x15 [ 1099.572431][T18059] out_of_memory+0x35c/0x14a0 [ 1099.577132][T18059] ? find_held_lock+0x2d/0x110 [ 1099.581916][T18059] ? oom_killer_disable+0x280/0x280 [ 1099.587131][T18059] ? find_held_lock+0x2d/0x110 [ 1099.591917][T18059] mem_cgroup_out_of_memory+0x206/0x270 [ 1099.597471][T18059] ? mem_cgroup_margin+0x130/0x130 [ 1099.602588][T18059] ? lock_downgrade+0x6e0/0x6e0 [ 1099.607463][T18059] try_charge_memcg+0xefb/0x12f0 [ 1099.612422][T18059] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1099.618411][T18059] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1099.624165][T18059] ? lock_downgrade+0x6e0/0x6e0 [ 1099.629121][T18059] obj_cgroup_charge+0x2af/0x5e0 [ 1099.634094][T18059] ? vm_area_dup+0x7d/0x380 [ 1099.638610][T18059] kmem_cache_alloc+0xb5/0x430 [ 1099.643403][T18059] vm_area_dup+0x7d/0x380 [ 1099.647744][T18059] ? copy_page_range+0x1dfe/0x3b40 [ 1099.652989][T18059] ? mas_next_nentry+0x610/0xab0 [ 1099.657945][T18059] ? vm_area_alloc+0x100/0x100 [ 1099.662730][T18059] ? mas_find+0x211/0xd10 [ 1099.667083][T18059] dup_mmap+0x655/0x10b0 [ 1099.671348][T18059] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1099.676641][T18059] ? lock_downgrade+0x6e0/0x6e0 [ 1099.681511][T18059] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1099.687349][T18059] ? mm_init+0x8e0/0xc10 [ 1099.691603][T18059] copy_process+0x440f/0x7520 [ 1099.696290][T18059] ? _raw_spin_unlock+0x28/0x40 [ 1099.701155][T18059] ? wp_page_reuse+0x197/0x570 [ 1099.705952][T18059] ? __cleanup_sighand+0xb0/0xb0 [ 1099.710901][T18059] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1099.716309][T18059] ? rwlock_bug.part.0+0x90/0x90 [ 1099.721255][T18059] ? lock_chain_count+0x20/0x20 [ 1099.726119][T18059] kernel_clone+0xeb/0x990 [ 1099.730555][T18059] ? create_io_thread+0xf0/0xf0 [ 1099.735425][T18059] ? find_held_lock+0x2d/0x110 [ 1099.740240][T18059] __do_sys_clone+0xba/0x100 [ 1099.744839][T18059] ? kernel_clone+0x990/0x990 [ 1099.749539][T18059] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1099.755449][T18059] do_syscall_64+0x39/0xb0 [ 1099.759888][T18059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1099.765797][T18059] RIP: 0033:0x7f7fa8a89dfb [ 1099.770232][T18059] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1099.791848][T18059] RSP: 002b:00007fffed58b500 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1099.800277][T18059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7fa8a89dfb [ 1099.808257][T18059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1099.816230][T18059] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555567fc400 [ 1099.824222][T18059] R10: 00005555567fc6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1099.832197][T18059] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffed58b5e0 [ 1099.840194][T18059] [ 1099.847685][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.902137][T16379] Bluetooth: hci1: command 0x0419 tx timeout [ 1099.908246][T18059] memory: usage 10240kB, limit 0kB, failcnt 494 [ 1099.916031][T18059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1099.931994][T18059] Memory cgroup stats for /syz5: [ 1099.932180][T18059] anon 45056 [ 1099.932180][T18059] file 10186752 [ 1099.932180][T18059] kernel 245760 [ 1099.932180][T18059] kernel_stack 32768 [ 1099.932180][T18059] pagetables 40960 [ 1099.932180][T18059] sec_pagetables 0 [ 1099.932180][T18059] percpu 128 [ 1099.932180][T18059] sock 0 [ 1099.932180][T18059] vmalloc 0 [ 1099.932180][T18059] shmem 10186752 [ 1099.932180][T18059] zswap 0 [ 1099.932180][T18059] zswapped 0 [ 1099.932180][T18059] file_mapped 262144 [ 1099.932180][T18059] file_dirty 0 [ 1099.932180][T18059] file_writeback 0 [ 1099.932180][T18059] swapcached 0 [ 1099.932180][T18059] anon_thp 0 [ 1099.932180][T18059] file_thp 0 [ 1099.932180][T18059] shmem_thp 0 [ 1099.932180][T18059] inactive_anon 1859584 [ 1099.932180][T18059] active_anon 8372224 [ 1099.932180][T18059] inactive_file 0 [ 1099.932180][T18059] active_file 0 [ 1099.932180][T18059] unevictable 0 [ 1099.932180][T18059] slab_reclaimable 39144 [ 1099.932180][T18059] slab_unreclaimable 111560 [ 1099.932180][T18059] slab 150704 [ 1100.053473][T18158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.060469][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.151933][T18158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.265888][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.311926][T18059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18059,uid=0 [ 1100.338602][T18158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.345976][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.413262][T18059] Memory cgroup out of memory: Killed process 18059 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1100.462391][T18158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.593586][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.795095][T18158] device hsr_slave_0 entered promiscuous mode [ 1100.842303][T18158] device hsr_slave_1 entered promiscuous mode [ 1100.862316][T18158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.871040][T18158] Cannot create hsr debugfs directory [ 1100.942881][T16379] Bluetooth: hci2: command 0x040f tx timeout [ 1101.020424][T18124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.062159][T18131] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:20:10 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1101.154436][T18124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.161402][T18131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1101.196785][T18131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1101.218278][T18131] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:20:10 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1101.265429][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1101.291110][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1101.371182][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1101.380804][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1101.403018][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.410159][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.431672][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1101.460698][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1101.492075][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.499266][T16165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.559193][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1101.588959][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1101.629162][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1101.644954][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1101.691685][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1101.767438][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1101.783723][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1101.822782][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1101.832958][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.872550][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1101.989467][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1102.392815][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.402817][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.411721][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.431770][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.439614][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1102.447552][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1102.496700][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.022390][T16379] Bluetooth: hci2: command 0x0419 tx timeout [ 1103.133465][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.141439][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.172646][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1103.186113][T16379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1103.195855][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.203664][T16379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1103.212364][T16379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1103.227520][T16379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1103.243090][T16379] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1103.250407][T16379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.413557][T18124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.427639][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.703919][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.712985][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.721420][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.728596][T16672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.737969][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.749039][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.758215][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.765406][T16672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.773580][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1103.782756][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1103.969313][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.977716][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.987507][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.010198][T18124] device veth0_vlan entered promiscuous mode [ 1104.067981][T18124] device veth1_vlan entered promiscuous mode [ 1104.211392][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1104.221210][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1104.230366][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1104.239553][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1104.249948][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1104.260409][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.269569][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.279045][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.287500][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1104.295826][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1104.441295][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1104.450391][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1104.461602][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1104.469946][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1104.478604][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1104.487112][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1104.542312][ T5120] Bluetooth: hci3: command 0x0409 tx timeout [ 1104.564836][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.575299][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.585605][T18131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.797005][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1104.812817][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1104.849778][T18124] device veth0_macvtap entered promiscuous mode [ 1104.989932][T18124] device veth1_macvtap entered promiscuous mode [ 1104.998515][T18158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1105.009358][T18158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1105.088907][T18158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1105.216538][T18158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.262393][ T5120] Bluetooth: hci4: command 0x0409 tx timeout [ 1105.273844][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.291971][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.303708][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.314868][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.325189][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.335912][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.346411][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.357438][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.367641][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.378933][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.389198][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.400206][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.410545][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.422570][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.437069][T18124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.446202][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1105.454902][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1105.463778][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.471232][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.480309][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1105.488868][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1105.515598][T18204] chnl_net:caif_netlink_parms(): no params data found [ 1105.539342][T18215] chnl_net:caif_netlink_parms(): no params data found [ 1105.553541][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.565194][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.575327][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.587677][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.598030][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.608751][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.618928][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.629850][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.639899][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.651062][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.660946][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.672022][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.681912][T18124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.693671][T18124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.705208][T18124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.728086][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.767686][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1105.782737][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1105.811197][T18124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.821265][T18124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.830873][T18124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.853419][T18124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.209665][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.222261][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.232883][T18204] device bridge_slave_0 entered promiscuous mode [ 1106.290282][T18215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.322638][T18215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.331050][T18215] device bridge_slave_0 entered promiscuous mode [ 1106.363666][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.370800][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.389922][T18204] device bridge_slave_1 entered promiscuous mode [ 1106.491185][T18215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.504642][T18215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.518386][T18215] device bridge_slave_1 entered promiscuous mode [ 1106.543293][ T5120] Bluetooth: hci5: command 0x0409 tx timeout [ 1106.590028][T18158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.623981][ T5120] Bluetooth: hci3: command 0x041b tx timeout [ 1106.669620][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.682825][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.733888][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.763403][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.797310][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1106.806365][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1106.830543][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1106.852761][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.861639][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1106.924032][T18158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.954605][T18215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.981428][T18204] team0: Port device team_slave_0 added [ 1107.013589][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.040352][T18131] device veth0_vlan entered promiscuous mode [ 1107.047718][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.066322][T18215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.134014][T18204] team0: Port device team_slave_1 added [ 1107.143989][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1107.162620][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.182560][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.202281][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.209384][T13271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.217565][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.227833][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.236770][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.243941][T13271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.251623][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.260152][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.289760][T18131] device veth1_vlan entered promiscuous mode [ 1107.347540][ T5120] Bluetooth: hci4: command 0x041b tx timeout [ 1107.354520][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.372745][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.382831][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.390846][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.423031][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.443013][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.475776][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.504537][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.525495][T18227] chnl_net:caif_netlink_parms(): no params data found [ 1107.663569][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.676367][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.695868][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.730435][T18276] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1107.752778][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.760722][T18276] CPU: 1 PID: 18276 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1107.771180][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1107.781247][T18276] Call Trace: [ 1107.784538][T18276] [ 1107.787494][T18276] dump_stack_lvl+0xd1/0x138 [ 1107.792125][T18276] dump_header+0x10b/0x85f [ 1107.796557][T18276] oom_kill_process.cold+0x10/0x15 [ 1107.801695][T18276] out_of_memory+0x35c/0x14a0 [ 1107.806478][T18276] ? oom_killer_disable+0x280/0x280 [ 1107.811688][T18276] ? find_held_lock+0x2d/0x110 [ 1107.816479][T18276] mem_cgroup_out_of_memory+0x206/0x270 [ 1107.822039][T18276] ? mem_cgroup_margin+0x130/0x130 [ 1107.827170][T18276] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1107.833007][T18276] memory_max_write+0x2f9/0x3c0 [ 1107.837881][T18276] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1107.843973][T18276] ? cgroup_file_write+0x8e/0x770 [ 1107.849021][T18276] cgroup_file_write+0x1e2/0x770 [ 1107.853977][T18276] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1107.860075][T18276] ? kill_css+0x370/0x370 [ 1107.864439][T18276] ? kill_css+0x370/0x370 [ 1107.868799][T18276] kernfs_fop_write_iter+0x3f1/0x600 [ 1107.874119][T18276] vfs_write+0x9ed/0xdd0 [ 1107.878398][T18276] ? kernel_write+0x630/0x630 [ 1107.883105][T18276] ? lockdep_hardirqs_on+0x7d/0x100 [ 1107.888324][T18276] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1107.894515][T18276] ? ksys_write+0xf1/0x250 [ 1107.898948][T18276] ksys_write+0x12b/0x250 [ 1107.903291][T18276] ? __ia32_sys_read+0xb0/0xb0 [ 1107.908073][T18276] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1107.913984][T18276] do_syscall_64+0x39/0xb0 [ 1107.918428][T18276] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1107.924349][T18276] RIP: 0033:0x7f2b6728c0c9 [ 1107.928774][T18276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1107.948389][T18276] RSP: 002b:00007f2b67fbf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.956818][T18276] RAX: ffffffffffffffda RBX: 00007f2b673abf80 RCX: 00007f2b6728c0c9 [ 1107.964794][T18276] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1107.972773][T18276] RBP: 00007f2b672e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1107.980749][T18276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.988742][T18276] R13: 00007ffcb061325f R14: 00007f2b67fbf300 R15: 0000000000022000 [ 1107.996740][T18276] [ 1108.007582][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1108.017219][T18276] memory: usage 8728kB, limit 0kB, failcnt 1157 [ 1108.024681][T18276] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1108.025230][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1108.034459][T18215] team0: Port device team_slave_0 added [ 1108.050814][T18276] Memory cgroup stats for /syz1: [ 1108.052353][T18276] anon 131072 [ 1108.052353][T18276] file 8376320 [ 1108.052353][T18276] kernel 372736 [ 1108.052353][T18276] kernel_stack 98304 [ 1108.052353][T18276] pagetables 77824 [ 1108.052353][T18276] sec_pagetables 0 [ 1108.052353][T18276] percpu 64 [ 1108.052353][T18276] sock 0 [ 1108.052353][T18276] vmalloc 0 [ 1108.052353][T18276] shmem 8376320 [ 1108.052353][T18276] zswap 0 [ 1108.052353][T18276] zswapped 0 [ 1108.052353][T18276] file_mapped 233472 [ 1108.052353][T18276] file_dirty 0 [ 1108.052353][T18276] file_writeback 0 [ 1108.052353][T18276] swapcached 0 [ 1108.052353][T18276] anon_thp 0 [ 1108.052353][T18276] file_thp 0 [ 1108.052353][T18276] shmem_thp 0 [ 1108.052353][T18276] inactive_anon 131072 [ 1108.052353][T18276] active_anon 8376320 [ 1108.052353][T18276] inactive_file 0 [ 1108.052353][T18276] active_file 0 [ 1108.052353][T18276] unevictable 0 [ 1108.052353][T18276] slab_reclaimable 39872 [ 1108.052353][T18276] slab_unreclaimable 122952 [ 1108.052353][T18276] slab 162824 [ 1108.075579][T18215] team0: Port device team_slave_1 added [ 1108.167452][T18276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18275,uid=0 [ 1108.182286][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.183551][T18276] Memory cgroup out of memory: Killed process 18276 (syz-executor.1) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1108.189897][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:20:17 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1108.189925][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.192045][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1108.287773][T18281] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1108.301507][T18281] CPU: 0 PID: 18281 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1108.312582][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1108.322664][T18281] Call Trace: [ 1108.325987][T18281] [ 1108.328914][T18281] dump_stack_lvl+0xd1/0x138 [ 1108.333621][T18281] dump_header+0x10b/0x85f [ 1108.338036][T18281] oom_kill_process.cold+0x10/0x15 [ 1108.343145][T18281] out_of_memory+0x35c/0x14a0 [ 1108.347828][T18281] ? find_held_lock+0x2d/0x110 [ 1108.352612][T18281] ? oom_killer_disable+0x280/0x280 [ 1108.357849][T18281] ? find_held_lock+0x2d/0x110 [ 1108.362655][T18281] mem_cgroup_out_of_memory+0x206/0x270 [ 1108.368225][T18281] ? mem_cgroup_margin+0x130/0x130 [ 1108.373353][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 1108.378206][T18281] try_charge_memcg+0xefb/0x12f0 [ 1108.383148][T18281] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1108.389139][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 1108.393991][T18281] charge_memcg+0x90/0x3b0 [ 1108.398410][T18281] __mem_cgroup_charge+0x2b/0x90 [ 1108.403361][T18281] ? copy_mc_to_kernel+0x3e/0x90 [ 1108.408322][T18281] do_wp_page+0x7ec/0x3370 [ 1108.412772][T18281] ? lock_release+0x810/0x810 [ 1108.417454][T18281] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1108.422846][T18281] ? do_raw_spin_lock+0x124/0x2b0 [ 1108.427877][T18281] ? rwlock_bug.part.0+0x90/0x90 [ 1108.432822][T18281] ? lock_chain_count+0x20/0x20 [ 1108.437683][T18281] __handle_mm_fault+0x1f58/0x3c90 [ 1108.442819][T18281] ? vm_iomap_memory+0x190/0x190 [ 1108.447795][T18281] handle_mm_fault+0x1b6/0x850 [ 1108.452588][T18281] do_user_addr_fault+0x475/0x1210 [ 1108.457716][T18281] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1108.463284][T18281] exc_page_fault+0x98/0x170 [ 1108.467904][T18281] asm_exc_page_fault+0x26/0x30 [ 1108.472770][T18281] RIP: 0033:0x7f2b6723a146 [ 1108.477193][T18281] Code: 49 8d 82 c0 02 00 00 48 89 05 ce b5 c9 00 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a b5 c9 00 <4c> 89 0d ab dd 14 00 31 d2 48 c7 05 9e b5 c9 00 00 00 00 00 4c 89 [ 1108.496811][T18281] RSP: 002b:00007ffcb0613468 EFLAGS: 00010246 [ 1108.502884][T18281] RAX: 000055555730a6c0 RBX: 0000000000000001 RCX: 00007f2b67ed56e0 [ 1108.510857][T18281] RDX: 00007f2b67ed56e0 RSI: 00007f2b67387ef0 RDI: 0000000000000001 [ 1108.518832][T18281] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2b67387ef0 [ 1108.526804][T18281] R10: 000055555730a400 R11: 0000000000000202 R12: 0000000000000001 [ 1108.534777][T18281] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcb0613580 [ 1108.542857][T18281] [ 1108.561608][T18281] memory: usage 8548kB, limit 0kB, failcnt 1176 [ 1108.568513][T18281] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1108.575955][T18281] Memory cgroup stats for /syz1: [ 1108.576141][T18281] anon 61440 [ 1108.576141][T18281] file 8376320 [ 1108.576141][T18281] kernel 253952 [ 1108.576141][T18281] kernel_stack 32768 [ 1108.576141][T18281] pagetables 57344 [ 1108.576141][T18281] sec_pagetables 0 [ 1108.576141][T18281] percpu 128 [ 1108.576141][T18281] sock 0 [ 1108.576141][T18281] vmalloc 0 [ 1108.576141][T18281] shmem 8376320 [ 1108.576141][T18281] zswap 0 [ 1108.576141][T18281] zswapped 0 [ 1108.576141][T18281] file_mapped 208896 [ 1108.576141][T18281] file_dirty 0 [ 1108.576141][T18281] file_writeback 0 [ 1108.576141][T18281] swapcached 0 [ 1108.576141][T18281] anon_thp 0 [ 1108.576141][T18281] file_thp 0 [ 1108.576141][T18281] shmem_thp 0 [ 1108.576141][T18281] inactive_anon 40960 [ 1108.576141][T18281] active_anon 8376320 [ 1108.576141][T18281] inactive_file 0 [ 1108.576141][T18281] active_file 0 [ 1108.576141][T18281] unevictable 0 [ 1108.576141][T18281] slab_reclaimable 33776 [ 1108.576141][T18281] slab_unreclaimable 101728 [ 1108.576141][T18281] slab 135504 [ 1108.577379][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.581276][T18281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1108.688391][ T5120] Bluetooth: hci5: command 0x041b tx timeout [ 1108.702390][T16379] Bluetooth: hci3: command 0x040f tx timeout [ 1108.707854][T18281] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18124,uid=0 [ 1108.720028][T18281] Memory cgroup out of memory: Killed process 18124 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1108.737993][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.765381][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.777528][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.787177][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.798755][T18131] device veth0_macvtap entered promiscuous mode [ 1108.866274][T18215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.876324][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.904450][T18215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.933655][T18131] device veth1_macvtap entered promiscuous mode [ 1109.044147][T18215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.051259][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.078175][T18215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.157612][T18204] device hsr_slave_0 entered promiscuous mode [ 1109.168138][T18204] device hsr_slave_1 entered promiscuous mode [ 1109.175701][T18204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.184951][T18204] Cannot create hsr debugfs directory [ 1109.296525][T18227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.311719][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.330475][T18227] device bridge_slave_0 entered promiscuous mode [ 1109.385262][T18215] device hsr_slave_0 entered promiscuous mode [ 1109.393347][T18215] device hsr_slave_1 entered promiscuous mode [ 1109.400290][T18215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.408967][T18215] Cannot create hsr debugfs directory [ 1109.416285][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.423607][T16379] Bluetooth: hci4: command 0x040f tx timeout [ 1109.430431][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.460234][T18227] device bridge_slave_1 entered promiscuous mode [ 1109.529634][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.552084][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.575461][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.592197][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.602397][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.613872][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.623899][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.634495][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.644447][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.655035][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.678201][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.694636][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.706339][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.717114][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.727363][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.738137][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.751317][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.765765][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.778040][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.789205][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.800355][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.818649][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.832826][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.842991][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.859425][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.869599][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.880493][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.891648][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.904208][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.914394][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.925233][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.951798][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.962815][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.974361][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.028975][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1110.045634][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1110.060578][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1110.070306][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1110.079392][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1110.164049][T18131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.181921][T18131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.191169][T18131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.220419][T18131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.246259][T18227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.279578][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1110.292271][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1110.334195][T18227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.404289][T18158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.529403][T18227] team0: Port device team_slave_0 added [ 1110.594425][T18227] team0: Port device team_slave_1 added [ 1110.617119][T11188] device hsr_slave_0 left promiscuous mode [ 1110.631271][T11188] device hsr_slave_1 left promiscuous mode [ 1110.653061][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.660578][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.670489][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.678650][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.688788][T11188] device bridge_slave_1 left promiscuous mode [ 1110.695242][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.704877][T11188] device bridge_slave_0 left promiscuous mode [ 1110.711073][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.725152][T11188] device hsr_slave_0 left promiscuous mode [ 1110.731654][T11188] device hsr_slave_1 left promiscuous mode [ 1110.738405][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.746309][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.756141][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.763770][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.772461][T11188] device bridge_slave_1 left promiscuous mode [ 1110.778688][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.784718][T16379] Bluetooth: hci5: command 0x040f tx timeout [ 1110.794141][ T5120] Bluetooth: hci3: command 0x0419 tx timeout [ 1110.794347][T11188] device bridge_slave_0 left promiscuous mode [ 1110.807536][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.821787][T11188] device hsr_slave_0 left promiscuous mode [ 1110.828659][T11188] device hsr_slave_1 left promiscuous mode [ 1110.836239][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.844420][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.853906][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.861350][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.871667][T11188] device bridge_slave_1 left promiscuous mode [ 1110.878039][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.887008][T11188] device bridge_slave_0 left promiscuous mode [ 1110.895857][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.908874][T11188] device hsr_slave_0 left promiscuous mode [ 1110.915541][T11188] device hsr_slave_1 left promiscuous mode [ 1110.922438][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.929907][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.938699][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.947041][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.957206][T11188] device bridge_slave_1 left promiscuous mode [ 1110.963539][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.971792][T11188] device bridge_slave_0 left promiscuous mode [ 1110.978308][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.992146][T11188] device hsr_slave_0 left promiscuous mode [ 1110.998503][T11188] device hsr_slave_1 left promiscuous mode [ 1111.013531][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.020998][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.032639][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.040086][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.050207][T11188] device bridge_slave_1 left promiscuous mode [ 1111.056826][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.066235][T11188] device bridge_slave_0 left promiscuous mode [ 1111.072929][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.085674][T11188] device hsr_slave_0 left promiscuous mode [ 1111.092544][T11188] device hsr_slave_1 left promiscuous mode [ 1111.099281][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.108443][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.119819][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.129422][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.139242][T11188] device bridge_slave_1 left promiscuous mode [ 1111.145771][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.154948][T11188] device bridge_slave_0 left promiscuous mode [ 1111.161111][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.193055][T11188] device veth1_macvtap left promiscuous mode [ 1111.199145][T11188] device veth0_macvtap left promiscuous mode [ 1111.205722][T11188] device veth1_vlan left promiscuous mode [ 1111.211575][T11188] device veth0_vlan left promiscuous mode [ 1111.218996][T11188] device veth1_macvtap left promiscuous mode [ 1111.225337][T11188] device veth0_macvtap left promiscuous mode [ 1111.231473][T11188] device veth1_vlan left promiscuous mode [ 1111.238722][T11188] device veth0_vlan left promiscuous mode [ 1111.248476][T11188] device veth1_macvtap left promiscuous mode [ 1111.254941][T11188] device veth0_macvtap left promiscuous mode [ 1111.261017][T11188] device veth1_vlan left promiscuous mode [ 1111.267479][T11188] device veth0_vlan left promiscuous mode [ 1111.276107][T11188] device veth1_macvtap left promiscuous mode [ 1111.286964][T11188] device veth0_macvtap left promiscuous mode [ 1111.293519][T11188] device veth1_vlan left promiscuous mode [ 1111.299375][T11188] device veth0_vlan left promiscuous mode [ 1111.307426][T11188] device veth1_macvtap left promiscuous mode [ 1111.313580][T11188] device veth0_macvtap left promiscuous mode [ 1111.319968][T11188] device veth1_vlan left promiscuous mode [ 1111.326085][T11188] device veth0_vlan left promiscuous mode [ 1111.335695][T11188] device veth1_macvtap left promiscuous mode [ 1111.341781][T11188] device veth0_macvtap left promiscuous mode [ 1111.349075][T11188] device veth1_vlan left promiscuous mode [ 1111.355034][T11188] device veth0_vlan left promiscuous mode [ 1111.512187][ T5119] Bluetooth: hci4: command 0x0419 tx timeout [ 1112.121143][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1112.139094][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1112.154022][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.170890][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.254023][T11188] bond0 (unregistering): Released all slaves [ 1112.417591][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1112.435428][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1112.450983][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.466558][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.535829][T11188] bond0 (unregistering): Released all slaves [ 1112.696667][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1112.714791][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1112.731288][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.748598][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.836265][T11188] bond0 (unregistering): Released all slaves [ 1112.862043][ T5119] Bluetooth: hci5: command 0x0419 tx timeout [ 1112.999801][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1113.016267][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1113.031198][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.048917][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.137625][T11188] bond0 (unregistering): Released all slaves [ 1113.298174][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1113.315208][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1113.330262][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.348073][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.445311][T11188] bond0 (unregistering): Released all slaves [ 1113.646819][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1113.663777][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1113.679834][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.694844][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.779874][T11188] bond0 (unregistering): Released all slaves [ 1113.933124][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.959634][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1114.023710][T18227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.030794][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.059637][T18227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.132233][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.140370][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.152328][T18227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.159316][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.194970][T18227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.226085][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1114.236375][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1114.245376][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1114.333399][T18158] device veth0_vlan entered promiscuous mode [ 1114.352837][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.360818][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.406126][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.415347][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.500677][T18158] device veth1_vlan entered promiscuous mode [ 1114.533087][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1114.562114][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1114.625736][T18227] device hsr_slave_0 entered promiscuous mode [ 1114.652642][T18227] device hsr_slave_1 entered promiscuous mode [ 1114.868405][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1114.871496][T18319] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1114.887294][T18319] CPU: 0 PID: 18319 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1114.887859][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1114.897748][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1114.897764][T18319] Call Trace: [ 1114.897772][T18319] [ 1114.897783][T18319] dump_stack_lvl+0xd1/0x138 [ 1114.897833][T18319] dump_header+0x10b/0x85f [ 1114.897869][T18319] oom_kill_process.cold+0x10/0x15 [ 1114.897902][T18319] out_of_memory+0x35c/0x14a0 [ 1114.897939][T18319] ? oom_killer_disable+0x280/0x280 [ 1114.916355][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.919281][T18319] ? find_held_lock+0x2d/0x110 [ 1114.931279][T18158] device veth0_macvtap entered promiscuous mode [ 1114.936361][T18319] mem_cgroup_out_of_memory+0x206/0x270 [ 1114.936393][T18319] ? mem_cgroup_margin+0x130/0x130 [ 1114.936426][T18319] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1114.981633][T18319] memory_max_write+0x2f9/0x3c0 [ 1114.986510][T18319] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1114.992598][T18319] ? lock_release+0x810/0x810 [ 1114.997294][T18319] cgroup_file_write+0x1e2/0x770 [ 1115.002260][T18319] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1115.008346][T18319] ? kill_css+0x370/0x370 [ 1115.012690][T18319] ? __virt_addr_valid+0x61/0x2e0 [ 1115.017743][T18319] ? kill_css+0x370/0x370 [ 1115.022088][T18319] kernfs_fop_write_iter+0x3f1/0x600 [ 1115.027403][T18319] vfs_write+0x9ed/0xdd0 [ 1115.031664][T18319] ? kernel_write+0x630/0x630 [ 1115.036365][T18319] ? __fget_files+0x26a/0x440 [ 1115.041074][T18319] ksys_write+0x12b/0x250 [ 1115.045419][T18319] ? __ia32_sys_read+0xb0/0xb0 [ 1115.050198][T18319] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1115.056120][T18319] do_syscall_64+0x39/0xb0 [ 1115.060560][T18319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1115.066468][T18319] RIP: 0033:0x7faa4688c0c9 [ 1115.070895][T18319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1115.090511][T18319] RSP: 002b:00007faa474fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1115.098949][T18319] RAX: ffffffffffffffda RBX: 00007faa469abf80 RCX: 00007faa4688c0c9 [ 1115.106930][T18319] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1115.114908][T18319] RBP: 00007faa468e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1115.122902][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.130898][T18319] R13: 00007ffe460f45df R14: 00007faa474fe300 R15: 0000000000022000 [ 1115.138911][T18319] [ 1115.176946][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1115.191283][T18319] memory: usage 10656kB, limit 0kB, failcnt 1229 [ 1115.222882][T18158] device veth1_macvtap entered promiscuous mode [ 1115.245435][T18319] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1115.280044][T18319] Memory cgroup stats for /syz4: [ 1115.280243][T18319] anon 126976 [ 1115.280243][T18319] file 10412032 [ 1115.280243][T18319] kernel 323584 [ 1115.280243][T18319] kernel_stack 65536 [ 1115.280243][T18319] pagetables 77824 [ 1115.280243][T18319] sec_pagetables 0 [ 1115.280243][T18319] percpu 64 [ 1115.280243][T18319] sock 0 [ 1115.280243][T18319] vmalloc 0 [ 1115.280243][T18319] shmem 10412032 [ 1115.280243][T18319] zswap 0 [ 1115.280243][T18319] zswapped 0 [ 1115.280243][T18319] file_mapped 172032 [ 1115.280243][T18319] file_dirty 0 [ 1115.280243][T18319] file_writeback 0 [ 1115.280243][T18319] swapcached 0 [ 1115.280243][T18319] anon_thp 0 [ 1115.280243][T18319] file_thp 0 [ 1115.280243][T18319] shmem_thp 0 [ 1115.280243][T18319] inactive_anon 126976 [ 1115.280243][T18319] active_anon 10412032 [ 1115.280243][T18319] inactive_file 0 [ 1115.280243][T18319] active_file 0 [ 1115.280243][T18319] unevictable 0 [ 1115.280243][T18319] slab_reclaimable 39792 [ 1115.280243][T18319] slab_unreclaimable 112704 [ 1115.280243][T18319] slab 152496 [ 1115.400731][T18319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18131,uid=0 [ 1115.412185][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.451994][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.461136][T18319] Memory cgroup out of memory: Killed process 18131 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1115.491934][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.511877][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.532005][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.551309][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.574677][T18158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.628993][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.652067][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.663899][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.670223][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.677917][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.688478][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.698374][T18158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.708912][T18158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.735067][T18158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.744629][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1115.753727][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1115.762722][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1115.772508][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1115.885525][T18158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.902213][T18158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.910945][T18158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.923424][T18158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:20:25 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:25 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1116.314233][T18204] netdevsim netdevsim0 netdevsim0: renamed from eth0 00:20:25 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1116.354761][T18204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1116.622321][T18204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1116.697313][T18204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1117.032488][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.040570][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.248617][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1117.334534][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.349559][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.432518][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1117.535040][T18204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.569487][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.584211][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.619242][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.686838][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1117.704958][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.732519][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.739660][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.786469][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1117.827090][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1117.863105][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.870286][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.075253][T18338] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1118.083253][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1118.102085][T18338] CPU: 0 PID: 18338 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1118.102681][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1118.112535][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1118.112557][T18338] Call Trace: [ 1118.112565][T18338] [ 1118.112576][T18338] dump_stack_lvl+0xd1/0x138 [ 1118.141925][T18338] dump_header+0x10b/0x85f [ 1118.146387][T18338] oom_kill_process.cold+0x10/0x15 [ 1118.151552][T18338] out_of_memory+0x35c/0x14a0 [ 1118.152900][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1118.156245][T18338] ? lockdep_hardirqs_on+0x7d/0x100 [ 1118.169361][T18338] ? oom_killer_disable+0x280/0x280 [ 1118.174634][T18338] mem_cgroup_out_of_memory+0x206/0x270 [ 1118.180222][T18338] ? mem_cgroup_margin+0x130/0x130 [ 1118.185396][T18338] memory_max_write+0x2f9/0x3c0 [ 1118.190298][T18338] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1118.196415][T18338] ? lock_release+0x810/0x810 [ 1118.201140][T18338] cgroup_file_write+0x1e2/0x770 [ 1118.204896][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1118.206103][T18338] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1118.220073][T18338] ? kill_css+0x370/0x370 [ 1118.224428][T18338] ? __virt_addr_valid+0x61/0x2e0 [ 1118.229486][T18338] ? kill_css+0x370/0x370 [ 1118.233831][T18338] kernfs_fop_write_iter+0x3f1/0x600 [ 1118.239149][T18338] vfs_write+0x9ed/0xdd0 [ 1118.243413][T18338] ? kernel_write+0x630/0x630 [ 1118.248113][T18338] ? __fget_files+0x26a/0x440 [ 1118.252820][T18338] ksys_write+0x12b/0x250 [ 1118.257166][T18338] ? __ia32_sys_read+0xb0/0xb0 [ 1118.261955][T18338] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1118.267884][T18338] do_syscall_64+0x39/0xb0 [ 1118.272342][T18338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1118.278256][T18338] RIP: 0033:0x7f182b48c0c9 [ 1118.282679][T18338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1118.302315][T18338] RSP: 002b:00007f182c228168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1118.310750][T18338] RAX: ffffffffffffffda RBX: 00007f182b5abf80 RCX: 00007f182b48c0c9 [ 1118.318765][T18338] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1118.326764][T18338] RBP: 00007f182b4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1118.334748][T18338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.342746][T18338] R13: 00007ffdcc2f093f R14: 00007f182c228300 R15: 0000000000022000 [ 1118.350761][T18338] [ 1118.376470][T18338] memory: usage 8712kB, limit 0kB, failcnt 387 [ 1118.383154][T18338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1118.390051][T18338] Memory cgroup stats for /syz3: [ 1118.390267][T18338] anon 135168 [ 1118.390267][T18338] file 8347648 [ 1118.390267][T18338] kernel 372736 [ 1118.390267][T18338] kernel_stack 98304 [ 1118.390267][T18338] pagetables 81920 [ 1118.390267][T18338] sec_pagetables 0 [ 1118.390267][T18338] percpu 64 [ 1118.390267][T18338] sock 0 [ 1118.390267][T18338] vmalloc 0 [ 1118.390267][T18338] shmem 8347648 [ 1118.390267][T18338] zswap 0 [ 1118.390267][T18338] zswapped 0 [ 1118.390267][T18338] file_mapped 204800 [ 1118.390267][T18338] file_dirty 0 [ 1118.390267][T18338] file_writeback 0 [ 1118.390267][T18338] swapcached 0 [ 1118.390267][T18338] anon_thp 0 [ 1118.390267][T18338] file_thp 0 [ 1118.390267][T18338] shmem_thp 0 [ 1118.390267][T18338] inactive_anon 8224768 [ 1118.390267][T18338] active_anon 258048 [ 1118.390267][T18338] inactive_file 0 [ 1118.390267][T18338] active_file 0 [ 1118.390267][T18338] unevictable 0 [ 1118.390267][T18338] slab_reclaimable 35904 [ 1118.390267][T18338] slab_unreclaimable 122040 [ 1118.390267][T18338] slab 157944 [ 1118.425027][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.499190][T18338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18336,uid=0 [ 1118.532024][T18338] Memory cgroup out of memory: Killed process 18338 (syz-executor.3) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 00:20:27 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1118.744385][T18158] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1118.790723][T18158] CPU: 0 PID: 18158 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1118.793136][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1118.801171][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1118.818469][T18158] Call Trace: [ 1118.820656][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1118.821783][T18158] [ 1118.821797][T18158] dump_stack_lvl+0xd1/0x138 [ 1118.821838][T18158] dump_header+0x10b/0x85f [ 1118.821867][T18158] oom_kill_process.cold+0x10/0x15 [ 1118.835314][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1118.837518][T18158] out_of_memory+0x35c/0x14a0 [ 1118.855514][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1118.859619][T18158] ? find_held_lock+0x2d/0x110 [ 1118.869029][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1118.872168][T18158] ? oom_killer_disable+0x280/0x280 [ 1118.872204][T18158] ? find_held_lock+0x2d/0x110 [ 1118.884357][T18204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1118.885114][T18158] mem_cgroup_out_of_memory+0x206/0x270 [ 1118.902664][T18158] ? mem_cgroup_margin+0x130/0x130 [ 1118.907823][T18158] ? lock_downgrade+0x6e0/0x6e0 [ 1118.912737][T18158] try_charge_memcg+0xefb/0x12f0 [ 1118.917723][T18158] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1118.923746][T18158] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1118.929768][T18158] ? lock_downgrade+0x6e0/0x6e0 [ 1118.934661][T18158] ? lock_downgrade+0x6e0/0x6e0 [ 1118.939551][T18158] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1118.945119][T18158] __alloc_pages+0x1f3/0x5b0 [ 1118.949727][T18158] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1118.956505][T18158] ? find_held_lock+0x2d/0x110 [ 1118.961296][T18158] ? lock_downgrade+0x6e0/0x6e0 [ 1118.966162][T18158] ? do_raw_spin_lock+0x124/0x2b0 [ 1118.971205][T18158] alloc_pages+0x1aa/0x270 [ 1118.975641][T18158] __pmd_alloc+0x3f/0x5d0 [ 1118.979986][T18158] ? __pud_alloc+0xe4/0x180 [ 1118.984516][T18158] copy_page_range+0x2829/0x3b40 [ 1118.989599][T18158] ? mas_store+0x206/0x2e0 [ 1118.994027][T18158] ? handle_mm_fault+0x850/0x850 [ 1118.998997][T18158] ? anon_vma_fork+0xba/0x630 [ 1119.003699][T18158] dup_mmap+0xc10/0x10b0 [ 1119.007966][T18158] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1119.013279][T18158] ? lock_downgrade+0x6e0/0x6e0 [ 1119.018149][T18158] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1119.023989][T18158] ? mm_init+0x8e0/0xc10 [ 1119.028245][T18158] copy_process+0x440f/0x7520 [ 1119.032934][T18158] ? _raw_spin_unlock+0x28/0x40 [ 1119.037799][T18158] ? wp_page_reuse+0x197/0x570 [ 1119.042597][T18158] ? __cleanup_sighand+0xb0/0xb0 [ 1119.047543][T18158] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1119.052939][T18158] ? rwlock_bug.part.0+0x90/0x90 [ 1119.057890][T18158] ? lock_chain_count+0x20/0x20 [ 1119.062755][T18158] kernel_clone+0xeb/0x990 [ 1119.067187][T18158] ? create_io_thread+0xf0/0xf0 [ 1119.072059][T18158] ? find_held_lock+0x2d/0x110 [ 1119.076875][T18158] __do_sys_clone+0xba/0x100 [ 1119.081480][T18158] ? kernel_clone+0x990/0x990 [ 1119.086188][T18158] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1119.092103][T18158] do_syscall_64+0x39/0xb0 [ 1119.096545][T18158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1119.102455][T18158] RIP: 0033:0x7f182b489dfb [ 1119.106879][T18158] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1119.126496][T18158] RSP: 002b:00007ffdcc2f0b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1119.134920][T18158] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f182b489dfb [ 1119.142896][T18158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1119.150874][T18158] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555754b400 [ 1119.158872][T18158] R10: 000055555754b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1119.166852][T18158] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdcc2f0c60 [ 1119.174851][T18158] [ 1119.271905][T18158] memory: usage 8448kB, limit 0kB, failcnt 418 [ 1119.283713][T18227] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.322005][T18158] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1119.343368][T18158] Memory cgroup stats for /syz3: [ 1119.343563][T18158] anon 40960 [ 1119.343563][T18158] file 8347648 [ 1119.343563][T18158] kernel 262144 [ 1119.343563][T18158] kernel_stack 32768 [ 1119.343563][T18158] pagetables 49152 [ 1119.343563][T18158] sec_pagetables 0 [ 1119.343563][T18158] percpu 128 [ 1119.343563][T18158] sock 0 [ 1119.343563][T18158] vmalloc 0 [ 1119.343563][T18158] shmem 8347648 [ 1119.343563][T18158] zswap 0 [ 1119.343563][T18158] zswapped 0 [ 1119.343563][T18158] file_mapped 180224 [ 1119.343563][T18158] file_dirty 0 [ 1119.343563][T18158] file_writeback 0 [ 1119.343563][T18158] swapcached 0 [ 1119.343563][T18158] anon_thp 0 [ 1119.343563][T18158] file_thp 0 [ 1119.343563][T18158] shmem_thp 0 [ 1119.343563][T18158] inactive_anon 8130560 [ 1119.343563][T18158] active_anon 258048 [ 1119.343563][T18158] inactive_file 0 [ 1119.343563][T18158] active_file 0 [ 1119.343563][T18158] unevictable 0 [ 1119.343563][T18158] slab_reclaimable 33328 [ 1119.343563][T18158] slab_unreclaimable 113200 [ 1119.343563][T18158] slab 146528 [ 1119.486088][T18215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1119.534187][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.546366][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.555314][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.582603][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.595738][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1119.602913][T18158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18158,uid=0 [ 1119.620165][T18158] Memory cgroup out of memory: Killed process 18158 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1119.637709][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1119.700906][T18227] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.838735][T18215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1119.947595][T18215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1119.989849][T18227] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.045416][T18215] netdevsim netdevsim2 netdevsim3: renamed from eth3 00:20:29 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1120.288465][T18227] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:20:29 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1120.427110][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1120.438245][T17024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1120.480285][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.639813][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1120.659353][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1120.714249][T18215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.753005][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1120.762286][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1120.770659][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.778834][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1120.788169][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.011345][T18215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.083662][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1121.092557][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1121.122075][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1121.130051][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1121.197328][T18204] device veth0_vlan entered promiscuous mode [ 1121.248208][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1121.256606][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1121.265102][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1121.274142][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1121.282791][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.289917][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.357309][T18204] device veth1_vlan entered promiscuous mode [ 1121.434703][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1121.444494][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1121.454745][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1121.472561][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.479705][T13312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.495935][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1121.572416][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1121.581053][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1121.607745][T18227] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1121.620607][T18350] chnl_net:caif_netlink_parms(): no params data found [ 1121.725509][T18227] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1121.740762][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1121.748268][T16379] Bluetooth: hci0: command 0x0409 tx timeout [ 1121.756760][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1121.767459][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1121.776316][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1121.785057][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.793704][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.844420][T18215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1121.897231][T18227] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1121.939317][T18227] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1122.150217][T18204] device veth0_macvtap entered promiscuous mode [ 1122.188380][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1122.199969][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1122.209414][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1122.281307][T18204] device veth1_macvtap entered promiscuous mode [ 1122.392320][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.462338][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.481892][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.521885][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.531743][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.579543][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.611927][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.639508][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.676199][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1122.691283][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1122.699893][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1122.718905][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.726703][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1122.734773][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1122.742489][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1122.852070][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1122.861251][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1122.862365][T16379] Bluetooth: hci1: command 0x0409 tx timeout [ 1122.891109][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.911947][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.931955][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.971886][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.981738][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.040848][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.054032][T18204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.073855][T18204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.103992][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.164938][T18350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.182255][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.193990][T18350] device bridge_slave_0 entered promiscuous mode [ 1123.239586][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.264604][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.285817][T18204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.295229][T18204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.322033][T18204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.330782][T18204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.361411][T18350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.383064][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.391406][T18350] device bridge_slave_1 entered promiscuous mode [ 1123.473864][T18227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.481338][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1123.501602][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1123.535214][T18215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.588533][T18350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.624926][T18227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.656107][T18370] chnl_net:caif_netlink_parms(): no params data found [ 1123.696014][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1123.712654][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1123.745088][T18350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.831520][T16379] Bluetooth: hci0: command 0x041b tx timeout [ 1123.845107][T18350] team0: Port device team_slave_0 added [ 1123.854718][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1123.880056][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1123.922716][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.929855][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.001514][T18350] team0: Port device team_slave_1 added [ 1124.064552][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1124.084088][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1124.113950][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1124.144747][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.151947][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.256719][T18350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.293343][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.341963][T18350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.376901][T18350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.392169][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.472078][T18350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.491415][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1124.500668][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1124.518995][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1124.612766][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1124.621760][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1124.689682][T18215] device veth0_vlan entered promiscuous mode [ 1124.720095][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1124.753591][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1124.773904][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1124.782032][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 1124.836464][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.891963][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.905029][T18350] device hsr_slave_0 entered promiscuous mode [ 1124.913461][T18350] device hsr_slave_1 entered promiscuous mode [ 1124.920088][T18350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.927897][T18350] Cannot create hsr debugfs directory [ 1124.934470][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1124.942121][ T5119] Bluetooth: hci1: command 0x041b tx timeout [ 1124.948912][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1124.956941][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1124.966309][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1125.022634][T18215] device veth1_vlan entered promiscuous mode [ 1125.054432][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1125.074528][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1125.095532][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1125.109681][T18227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1125.125906][T18227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1125.134796][T18370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.147352][T18370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.163253][T18370] device bridge_slave_0 entered promiscuous mode [ 1125.194640][T18370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.201776][T18370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.226105][T18370] device bridge_slave_1 entered promiscuous mode [ 1125.326207][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1125.343843][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1125.353437][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1125.364642][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.392738][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.433790][T18370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.542570][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1125.579362][T18215] device veth0_macvtap entered promiscuous mode [ 1125.605075][T18370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.626836][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1125.636971][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1125.652119][T18401] chnl_net:caif_netlink_parms(): no params data found [ 1125.705300][T18215] device veth1_macvtap entered promiscuous mode [ 1125.763041][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1125.771409][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1125.902814][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 1125.934538][T18370] team0: Port device team_slave_0 added [ 1126.101085][T18456] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1126.123472][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.135329][T18456] CPU: 1 PID: 18456 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1126.145804][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1126.155900][T18456] Call Trace: [ 1126.159245][T18456] [ 1126.162216][T18456] dump_stack_lvl+0xd1/0x138 [ 1126.166857][T18456] dump_header+0x10b/0x85f [ 1126.171310][T18456] oom_kill_process.cold+0x10/0x15 [ 1126.176471][T18456] out_of_memory+0x35c/0x14a0 [ 1126.181198][T18456] ? oom_killer_disable+0x280/0x280 [ 1126.186439][T18456] ? mark_held_locks+0x9f/0xe0 [ 1126.191258][T18456] mem_cgroup_out_of_memory+0x206/0x270 [ 1126.196944][T18456] ? mem_cgroup_margin+0x130/0x130 [ 1126.202119][T18456] memory_max_write+0x2f9/0x3c0 [ 1126.207012][T18456] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1126.213120][T18456] ? lock_release+0x810/0x810 [ 1126.217840][T18456] cgroup_file_write+0x1e2/0x770 [ 1126.222823][T18456] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1126.228932][T18456] ? kill_css+0x370/0x370 [ 1126.233304][T18456] ? __virt_addr_valid+0x61/0x2e0 [ 1126.238383][T18456] ? kill_css+0x370/0x370 [ 1126.242752][T18456] kernfs_fop_write_iter+0x3f1/0x600 [ 1126.248100][T18456] vfs_write+0x9ed/0xdd0 [ 1126.252388][T18456] ? kernel_write+0x630/0x630 [ 1126.257135][T18456] ? __fdget_pos+0xca/0x100 [ 1126.261713][T18456] ksys_write+0x12b/0x250 [ 1126.266092][T18456] ? __ia32_sys_read+0xb0/0xb0 [ 1126.270918][T18456] do_syscall_64+0x39/0xb0 [ 1126.275383][T18456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.281314][T18456] RIP: 0033:0x7fd83268c0c9 [ 1126.285768][T18456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1126.305420][T18456] RSP: 002b:00007fd8334b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1126.313872][T18456] RAX: ffffffffffffffda RBX: 00007fd8327abf80 RCX: 00007fd83268c0c9 [ 1126.321869][T18456] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1126.329862][T18456] RBP: 00007fd8326e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1126.337867][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.345870][T18456] R13: 00007ffebadede6f R14: 00007fd8334b6300 R15: 0000000000022000 [ 1126.353904][T18456] [ 1126.392287][T18456] memory: usage 10768kB, limit 0kB, failcnt 411 [ 1126.399393][T18456] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1126.413710][T18370] team0: Port device team_slave_1 added [ 1126.422217][T18456] Memory cgroup stats for /syz0: [ 1126.422945][T18456] anon 135168 [ 1126.422945][T18456] file 10477568 [ 1126.422945][T18456] kernel 344064 [ 1126.422945][T18456] kernel_stack 98304 [ 1126.422945][T18456] pagetables 81920 [ 1126.422945][T18456] sec_pagetables 0 [ 1126.422945][T18456] percpu 64 [ 1126.422945][T18456] sock 0 [ 1126.422945][T18456] vmalloc 0 [ 1126.422945][T18456] shmem 10477568 [ 1126.422945][T18456] zswap 0 [ 1126.422945][T18456] zswapped 0 [ 1126.422945][T18456] file_mapped 237568 [ 1126.422945][T18456] file_dirty 0 [ 1126.422945][T18456] file_writeback 0 [ 1126.422945][T18456] swapcached 0 [ 1126.422945][T18456] anon_thp 0 [ 1126.422945][T18456] file_thp 0 [ 1126.422945][T18456] shmem_thp 0 [ 1126.422945][T18456] inactive_anon 2232320 [ 1126.422945][T18456] active_anon 8380416 [ 1126.422945][T18456] inactive_file 0 [ 1126.422945][T18456] active_file 0 [ 1126.422945][T18456] unevictable 0 [ 1126.422945][T18456] slab_reclaimable 40056 [ 1126.422945][T18456] slab_unreclaimable 96888 [ 1126.422945][T18456] slab 136944 [ 1126.537411][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.572017][T18456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18454,uid=0 [ 1126.574178][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.598457][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.609239][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.619503][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.621172][T18456] Memory cgroup out of memory: Killed process 18456 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1126.641887][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.676395][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.701877][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:20:35 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1126.718048][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.741935][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.773626][T18215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.823276][T18469] syz-executor.0 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1126.860097][T18469] CPU: 1 PID: 18469 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1126.860540][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.870550][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1126.870596][T18469] Call Trace: [ 1126.870603][T18469] [ 1126.870612][T18469] dump_stack_lvl+0xd1/0x138 [ 1126.870652][T18469] dump_header+0x10b/0x85f [ 1126.870681][T18469] oom_kill_process.cold+0x10/0x15 [ 1126.870709][T18469] out_of_memory+0x35c/0x14a0 [ 1126.870740][T18469] ? find_held_lock+0x2d/0x110 [ 1126.870778][T18469] ? oom_killer_disable+0x280/0x280 [ 1126.870806][T18469] ? find_held_lock+0x2d/0x110 [ 1126.870843][T18469] mem_cgroup_out_of_memory+0x206/0x270 [ 1126.870866][T18469] ? mem_cgroup_margin+0x130/0x130 [ 1126.870886][T18469] ? lock_downgrade+0x6e0/0x6e0 [ 1126.870930][T18469] try_charge_memcg+0xefb/0x12f0 [ 1126.952145][T18469] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1126.958177][T18469] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1126.963939][T18469] ? lock_downgrade+0x6e0/0x6e0 [ 1126.968853][T18469] obj_cgroup_charge+0x2af/0x5e0 [ 1126.973849][T18469] kmem_cache_alloc_lru+0x145/0x760 [ 1126.979084][T18469] ? ext4_alloc_inode+0x28/0x680 [ 1126.984075][T18469] ? ext4_free_in_core_inode+0x70/0x70 [ 1126.989588][T18469] ext4_alloc_inode+0x28/0x680 [ 1126.994419][T18469] ? ext4_free_in_core_inode+0x70/0x70 [ 1126.999930][T18469] alloc_inode+0x61/0x230 [ 1127.004317][T18469] new_inode+0x2b/0x280 [ 1127.008524][T18469] __ext4_new_inode+0x399/0x57d0 [ 1127.013521][T18469] ? __kmem_cache_free+0xaf/0x3b0 [ 1127.018597][T18469] ? tomoyo_path_perm+0x16d/0x430 [ 1127.023752][T18469] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1127.029348][T18469] ? ext4_lookup+0xcb/0x700 [ 1127.033901][T18469] ext4_symlink+0x5ac/0xa00 [ 1127.038455][T18469] ? d_alloc+0x1c0/0x240 [ 1127.042740][T18469] ? ext4_mknod+0x4f0/0x4f0 [ 1127.047286][T18469] ? from_kgid+0x8b/0xd0 [ 1127.051580][T18469] ? from_kuid_munged+0x130/0x130 [ 1127.056650][T18469] ? generic_permission+0x28f/0x7a0 [ 1127.061894][T18469] ? bpf_lsm_inode_permission+0x9/0x10 [ 1127.067481][T18469] ? bpf_lsm_inode_symlink+0x9/0x10 [ 1127.072737][T18469] vfs_symlink+0x369/0x5c0 [ 1127.077210][T18469] do_symlinkat+0x250/0x2c0 [ 1127.081772][T18469] ? __ia32_sys_unlink+0x110/0x110 [ 1127.086935][T18469] ? getname_flags.part.0+0x1dd/0x4f0 [ 1127.092376][T18469] __x64_sys_symlinkat+0x97/0xc0 [ 1127.097366][T18469] do_syscall_64+0x39/0xb0 [ 1127.101834][T18469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.107944][T18469] RIP: 0033:0x7fd83268ba07 [ 1127.112479][T18469] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1127.132123][T18469] RSP: 002b:00007ffebadee0c8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 1127.140568][T18469] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd83268ba07 [ 1127.148582][T18469] RDX: 00007fd8326e7b95 RSI: 00000000ffffff9c RDI: 00007ffebadee190 [ 1127.156583][T18469] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebadedf60 [ 1127.164580][T18469] R10: 00007ffebadede17 R11: 0000000000000202 R12: 0000000000000001 [ 1127.172573][T18469] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffebadee190 [ 1127.180594][T18469] [ 1127.185143][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 1127.192422][ T5119] Bluetooth: hci1: command 0x040f tx timeout [ 1127.198495][T18469] memory: usage 10572kB, limit 0kB, failcnt 430 [ 1127.215477][T18469] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1127.223362][T18469] Memory cgroup stats for /syz0: [ 1127.223568][T18469] anon 73728 [ 1127.223568][T18469] file 10477568 [ 1127.223568][T18469] kernel 225280 [ 1127.223568][T18469] kernel_stack 32768 [ 1127.223568][T18469] pagetables 57344 [ 1127.223568][T18469] sec_pagetables 0 [ 1127.223568][T18469] percpu 128 [ 1127.223568][T18469] sock 0 [ 1127.223568][T18469] vmalloc 0 [ 1127.223568][T18469] shmem 10477568 [ 1127.223568][T18469] zswap 0 [ 1127.223568][T18469] zswapped 0 [ 1127.223568][T18469] file_mapped 208896 [ 1127.223568][T18469] file_dirty 0 [ 1127.223568][T18469] file_writeback 0 [ 1127.223568][T18469] swapcached 0 [ 1127.223568][T18469] anon_thp 0 [ 1127.223568][T18469] file_thp 0 [ 1127.223568][T18469] shmem_thp 0 [ 1127.223568][T18469] inactive_anon 2170880 [ 1127.223568][T18469] active_anon 8380416 [ 1127.223568][T18469] inactive_file 0 [ 1127.223568][T18469] active_file 0 [ 1127.223568][T18469] unevictable 0 [ 1127.223568][T18469] slab_reclaimable 34344 [ 1127.223568][T18469] slab_unreclaimable 75016 [ 1127.223568][T18469] slab 109360 [ 1127.348816][T18469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18204,uid=0 [ 1127.376749][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1127.378045][T18469] Memory cgroup out of memory: Killed process 18204 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1127.403698][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1127.414549][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.444010][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.461869][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.481866][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.491714][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.517962][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.534980][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.555446][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.576987][T18215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.598720][T18215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.618941][T18215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.793607][T18370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.800603][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.865392][T18370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.955186][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.970372][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1127.982019][T16379] Bluetooth: hci0: command 0x0419 tx timeout [ 1127.993175][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1128.010486][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1128.027474][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1128.110665][T18215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.133476][T18215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.151893][T18215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.160635][T18215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.193273][T18227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.274359][T18350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.334524][T18401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.341667][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.373428][T18401] device bridge_slave_0 entered promiscuous mode [ 1128.382343][T18370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.389325][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.492074][T18370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.524237][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.590181][T18401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.602056][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.632432][T18401] device bridge_slave_1 entered promiscuous mode [ 1128.683030][T18350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.875573][T18401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.905018][T18401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.013747][T18350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.117419][T18350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.195155][T18370] device hsr_slave_0 entered promiscuous mode [ 1129.226138][T18370] device hsr_slave_1 entered promiscuous mode [ 1129.262300][T16379] Bluetooth: hci1: command 0x0419 tx timeout [ 1129.268384][T16379] Bluetooth: hci2: command 0x040f tx timeout [ 1129.276580][T18370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1129.311890][T18370] Cannot create hsr debugfs directory [ 1129.323493][T18401] team0: Port device team_slave_0 added [ 1129.500243][T18401] team0: Port device team_slave_1 added [ 1129.522555][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.530764][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.772973][T11188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.811650][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1129.843103][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.865088][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1129.893267][T18401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.900267][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.971955][T18401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.004381][T18401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.011374][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.122012][T18401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.159604][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.193023][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.356027][T11188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.422933][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1130.438400][T18401] device hsr_slave_0 entered promiscuous mode [ 1130.502478][T18401] device hsr_slave_1 entered promiscuous mode [ 1130.562013][T18401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.581917][T18401] Cannot create hsr debugfs directory [ 1130.640352][T18227] device veth0_vlan entered promiscuous mode [ 1130.727268][T11188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.952833][T18515] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1131.001976][T18515] CPU: 1 PID: 18515 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1131.012464][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1131.022548][T18515] Call Trace: [ 1131.025853][T18515] [ 1131.028809][T18515] dump_stack_lvl+0xd1/0x138 [ 1131.033450][T18515] dump_header+0x10b/0x85f [ 1131.037906][T18515] oom_kill_process.cold+0x10/0x15 [ 1131.043054][T18515] out_of_memory+0x35c/0x14a0 [ 1131.047772][T18515] ? find_held_lock+0x2d/0x110 [ 1131.052576][T18515] ? oom_killer_disable+0x280/0x280 [ 1131.057807][T18515] ? find_held_lock+0x2d/0x110 [ 1131.062614][T18515] mem_cgroup_out_of_memory+0x206/0x270 [ 1131.068188][T18515] ? mem_cgroup_margin+0x130/0x130 [ 1131.073342][T18515] ? lock_downgrade+0x6e0/0x6e0 [ 1131.078252][T18515] try_charge_memcg+0xefb/0x12f0 [ 1131.083240][T18515] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1131.089259][T18515] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1131.095009][T18515] ? lock_downgrade+0x6e0/0x6e0 [ 1131.099890][T18515] ? lock_downgrade+0x6e0/0x6e0 [ 1131.104778][T18515] ? rcu_read_unlock+0x9/0x60 [ 1131.109500][T18515] obj_cgroup_charge+0x2af/0x5e0 [ 1131.114522][T18515] ? __alloc_file+0x21/0x270 [ 1131.119160][T18515] kmem_cache_alloc+0xb5/0x430 [ 1131.123980][T18515] __alloc_file+0x21/0x270 [ 1131.128470][T18515] alloc_empty_file+0x71/0x170 [ 1131.133278][T18515] path_openat+0xe1/0x2a50 [ 1131.137753][T18515] ? path_lookupat+0x840/0x840 [ 1131.142573][T18515] do_filp_open+0x1ba/0x410 [ 1131.147120][T18515] ? may_open_dev+0xf0/0xf0 [ 1131.151665][T18515] ? find_held_lock+0x2d/0x110 [ 1131.156486][T18515] ? do_raw_spin_lock+0x124/0x2b0 [ 1131.161547][T18515] ? rwlock_bug.part.0+0x90/0x90 [ 1131.166522][T18515] ? _raw_spin_unlock+0x28/0x40 [ 1131.171408][T18515] ? alloc_fd+0x2d8/0x6d0 [ 1131.175789][T18515] do_sys_openat2+0x16d/0x4c0 [ 1131.180496][T18515] ? build_open_flags+0x6f0/0x6f0 [ 1131.185551][T18515] ? xfd_validate_state+0x5d/0x180 [ 1131.190712][T18515] __x64_sys_openat+0x143/0x1f0 [ 1131.195608][T18515] ? __ia32_sys_open+0x1c0/0x1c0 [ 1131.200592][T18515] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1131.206537][T18515] do_syscall_64+0x39/0xb0 [ 1131.210998][T18515] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1131.216923][T18515] RIP: 0033:0x7efc07a8c0c9 [ 1131.221362][T18515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1131.241008][T18515] RSP: 002b:00007efc087ee168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1131.249457][T18515] RAX: ffffffffffffffda RBX: 00007efc07bac050 RCX: 00007efc07a8c0c9 [ 1131.257468][T18515] RDX: 0000000000200002 RSI: 0000000020000480 RDI: ffffffffffffffff [ 1131.265470][T18515] RBP: 00007efc07ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1131.273723][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.281723][T18515] R13: 00007fff2d2f497f R14: 00007efc087ee300 R15: 0000000000022000 [ 1131.290009][T18515] [ 1131.301182][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1131.315794][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1131.342181][T16379] Bluetooth: hci2: command 0x0419 tx timeout [ 1131.347942][T18227] device veth1_vlan entered promiscuous mode [ 1131.412063][T18515] memory: usage 8712kB, limit 0kB, failcnt 398 [ 1131.418481][T18515] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1131.442039][T18515] Memory cgroup stats for /syz2: [ 1131.442242][T18515] anon 135168 [ 1131.442242][T18515] file 8384512 [ 1131.442242][T18515] kernel 339968 [ 1131.442242][T18515] kernel_stack 98304 [ 1131.442242][T18515] pagetables 81920 [ 1131.442242][T18515] sec_pagetables 0 [ 1131.442242][T18515] percpu 64 [ 1131.442242][T18515] sock 0 [ 1131.442242][T18515] vmalloc 0 [ 1131.442242][T18515] shmem 8380416 [ 1131.442242][T18515] zswap 0 [ 1131.442242][T18515] zswapped 0 [ 1131.442242][T18515] file_mapped 237568 [ 1131.442242][T18515] file_dirty 0 [ 1131.442242][T18515] file_writeback 0 [ 1131.442242][T18515] swapcached 0 [ 1131.442242][T18515] anon_thp 0 [ 1131.442242][T18515] file_thp 0 [ 1131.442242][T18515] shmem_thp 0 [ 1131.442242][T18515] inactive_anon 135168 [ 1131.442242][T18515] active_anon 8380416 [ 1131.442242][T18515] inactive_file 0 [ 1131.442242][T18515] active_file 4096 [ 1131.442242][T18515] unevictable 0 [ 1131.442242][T18515] slab_reclaimable 34872 [ 1131.442242][T18515] slab_unreclaimable 95592 [ 1131.442242][T18515] slab 130464 [ 1131.442629][T11188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.447388][T18515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1131.780152][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1131.797024][T17025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1131.922160][T18515] ,cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18512,uid=0 [ 1131.952276][T18350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.957499][T18515] Memory cgroup out of memory: Killed process 18515 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 00:20:41 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:41 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1131.997968][T18350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1132.086260][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1132.103466][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1132.122475][T18350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1132.141179][T18526] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1132.165158][T18227] device veth0_macvtap entered promiscuous mode [ 1132.173142][T18526] CPU: 0 PID: 18526 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1132.183607][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1132.192669][T18227] device veth1_macvtap entered promiscuous mode [ 1132.193670][T18526] Call Trace: [ 1132.193680][T18526] [ 1132.206156][T18526] dump_stack_lvl+0xd1/0x138 [ 1132.210797][T18526] dump_header+0x10b/0x85f [ 1132.215259][T18526] oom_kill_process.cold+0x10/0x15 [ 1132.220419][T18526] out_of_memory+0x35c/0x14a0 [ 1132.225152][T18526] ? find_held_lock+0x2d/0x110 [ 1132.229969][T18526] ? oom_killer_disable+0x280/0x280 [ 1132.235217][T18526] ? find_held_lock+0x2d/0x110 [ 1132.240040][T18526] mem_cgroup_out_of_memory+0x206/0x270 [ 1132.245627][T18526] ? mem_cgroup_margin+0x130/0x130 [ 1132.250781][T18526] ? lock_downgrade+0x6e0/0x6e0 [ 1132.255311][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.255665][T18526] try_charge_memcg+0xefb/0x12f0 [ 1132.271021][T18526] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1132.277052][T18526] ? lock_downgrade+0x6e0/0x6e0 [ 1132.281958][T18526] charge_memcg+0x90/0x3b0 [ 1132.286426][T18526] __mem_cgroup_charge+0x2b/0x90 [ 1132.291408][T18526] ? copy_mc_to_kernel+0x3e/0x90 [ 1132.291889][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.296370][T18526] do_wp_page+0x7ec/0x3370 [ 1132.310605][T18526] ? lock_release+0x810/0x810 [ 1132.315324][T18526] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1132.320752][T18526] ? do_raw_spin_lock+0x124/0x2b0 [ 1132.325818][T18526] ? rwlock_bug.part.0+0x90/0x90 [ 1132.330806][T18526] ? lock_chain_count+0x20/0x20 [ 1132.334434][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.335686][T18526] __handle_mm_fault+0x1f58/0x3c90 [ 1132.351241][T18526] ? vm_iomap_memory+0x190/0x190 [ 1132.356263][T18526] handle_mm_fault+0x1b6/0x850 [ 1132.361096][T18526] do_user_addr_fault+0x475/0x1210 [ 1132.366269][T18526] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1132.371911][T18526] exc_page_fault+0x98/0x170 [ 1132.376552][T18526] asm_exc_page_fault+0x26/0x30 [ 1132.381458][T18526] RIP: 0033:0x7efc07a3a146 [ 1132.384017][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.385882][T18526] Code: 49 8d 82 c0 02 00 00 48 89 05 ce b5 c9 00 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a b5 c9 00 <4c> 89 0d ab dd 14 00 31 d2 48 c7 05 9e b5 c9 00 00 00 00 00 4c 89 [ 1132.415318][T18526] RSP: 002b:00007fff2d2f4b88 EFLAGS: 00010246 [ 1132.421523][T18526] RAX: 000055555594c6c0 RBX: 0000000000000001 RCX: 00007efc086d56e0 [ 1132.430181][T18526] RDX: 00007efc086d56e0 RSI: 00007efc07b87ef0 RDI: 0000000000000001 [ 1132.434905][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.438166][T18526] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007efc07b87ef0 [ 1132.456575][T18526] R10: 000055555594c400 R11: 0000000000000202 R12: 0000000000000001 [ 1132.464584][T18526] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff2d2f4ca0 [ 1132.471897][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.472581][T18526] [ 1132.522209][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.561972][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.602144][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.651890][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.661748][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.713901][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.728198][T18227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.758775][T18350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.794864][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1132.815334][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1132.833122][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1132.876732][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.888365][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.922448][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.932110][T18526] memory: usage 8468kB, limit 0kB, failcnt 441 [ 1132.951877][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.952045][T18526] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1132.961703][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.961723][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.961742][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.982657][T18526] Memory cgroup stats for /syz2: [ 1133.022425][T18526] anon 61440 [ 1133.022425][T18526] file 8384512 [ 1133.022425][T18526] kernel 225280 [ 1133.022425][T18526] kernel_stack 32768 [ 1133.022425][T18526] pagetables 57344 [ 1133.022425][T18526] sec_pagetables 0 [ 1133.022425][T18526] percpu 128 [ 1133.022425][T18526] sock 0 [ 1133.022425][T18526] vmalloc 0 [ 1133.022425][T18526] shmem 8380416 [ 1133.022425][T18526] zswap 0 [ 1133.022425][T18526] zswapped 0 [ 1133.022425][T18526] file_mapped 208896 [ 1133.022425][T18526] file_dirty 0 [ 1133.022425][T18526] file_writeback 0 [ 1133.022425][T18526] swapcached 0 [ 1133.022425][T18526] anon_thp 0 [ 1133.022425][T18526] file_thp 0 [ 1133.022425][T18526] shmem_thp 0 [ 1133.022425][T18526] inactive_anon 61440 [ 1133.022425][T18526] active_anon 8380416 [ 1133.022425][T18526] inactive_file 0 [ 1133.022425][T18526] active_file 4096 [ 1133.022425][T18526] unevictable 0 [ 1133.022425][T18526] slab_reclaimable 30584 [ 1133.022425][T18526] slab_unreclaimable 75016 [ 1133.022425][T18526] slab 105600 [ 1133.123836][T18526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18215,uid=0 [ 1133.154182][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.164419][T18526] Memory cgroup out of memory: Killed process 18215 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1133.169665][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.222613][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.251547][T18227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.296436][T18227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.334375][T18227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.373637][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1133.389011][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1133.425208][T18227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.442148][T18227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.450899][T18227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.481967][T18227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:20:42 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1134.094095][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.132046][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.282649][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1134.307084][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.333156][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.374593][T18350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.394497][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1134.611135][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.621458][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.630355][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1134.644885][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1134.654609][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1134.664845][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1134.728962][T18350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.844914][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.864583][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.997058][T18552] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1135.052323][T18552] CPU: 1 PID: 18552 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1135.062811][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1135.072905][T18552] Call Trace: [ 1135.076206][T18552] [ 1135.079161][T18552] dump_stack_lvl+0xd1/0x138 [ 1135.083804][T18552] dump_header+0x10b/0x85f [ 1135.088260][T18552] oom_kill_process.cold+0x10/0x15 [ 1135.093418][T18552] out_of_memory+0x35c/0x14a0 [ 1135.098139][T18552] ? oom_killer_disable+0x280/0x280 [ 1135.103383][T18552] mem_cgroup_out_of_memory+0x206/0x270 [ 1135.108975][T18552] ? mem_cgroup_margin+0x130/0x130 [ 1135.114142][T18552] memory_max_write+0x2f9/0x3c0 [ 1135.119033][T18552] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1135.125139][T18552] ? lock_release+0x810/0x810 [ 1135.129851][T18552] cgroup_file_write+0x1e2/0x770 [ 1135.134827][T18552] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1135.140932][T18552] ? kill_css+0x370/0x370 [ 1135.145293][T18552] ? __virt_addr_valid+0x61/0x2e0 [ 1135.150378][T18552] ? kill_css+0x370/0x370 [ 1135.154746][T18552] kernfs_fop_write_iter+0x3f1/0x600 [ 1135.160093][T18552] vfs_write+0x9ed/0xdd0 [ 1135.164384][T18552] ? kernel_write+0x630/0x630 [ 1135.169120][T18552] ? __fget_files+0x26a/0x440 [ 1135.173850][T18552] ksys_write+0x12b/0x250 [ 1135.178230][T18552] ? __ia32_sys_read+0xb0/0xb0 [ 1135.183045][T18552] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1135.188989][T18552] do_syscall_64+0x39/0xb0 [ 1135.193458][T18552] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1135.199388][T18552] RIP: 0033:0x7fe5d268c0c9 [ 1135.203841][T18552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1135.223576][T18552] RSP: 002b:00007fe5d333f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.232024][T18552] RAX: ffffffffffffffda RBX: 00007fe5d27abf80 RCX: 00007fe5d268c0c9 [ 1135.240027][T18552] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1135.248034][T18552] RBP: 00007fe5d26e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1135.256044][T18552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.264055][T18552] R13: 00007ffd56243b2f R14: 00007fe5d333f300 R15: 0000000000022000 [ 1135.272090][T18552] [ 1135.288050][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1135.290678][T18552] memory: usage 10448kB, limit 0kB, failcnt 511 [ 1135.303989][T18552] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1135.304752][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1135.305211][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.322821][T18552] Memory cgroup stats for [ 1135.327346][T16856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.349380][T18552] /syz5: [ 1135.350286][T18552] anon 131072 [ 1135.350286][T18552] file 10186752 [ 1135.350286][T18552] kernel 364544 [ 1135.350286][T18552] kernel_stack 98304 [ 1135.350286][T18552] pagetables 77824 [ 1135.350286][T18552] sec_pagetables 0 [ 1135.350286][T18552] percpu 64 [ 1135.350286][T18552] sock 0 [ 1135.350286][T18552] vmalloc 0 [ 1135.350286][T18552] shmem 10186752 [ 1135.350286][T18552] zswap 0 [ 1135.350286][T18552] zswapped 0 [ 1135.350286][T18552] file_mapped 294912 [ 1135.350286][T18552] file_dirty 0 [ 1135.350286][T18552] file_writeback 0 [ 1135.350286][T18552] swapcached 0 [ 1135.350286][T18552] anon_thp 0 [ 1135.350286][T18552] file_thp 0 [ 1135.350286][T18552] shmem_thp 0 [ 1135.350286][T18552] inactive_anon 1945600 [ 1135.350286][T18552] active_anon 8372224 [ 1135.350286][T18552] inactive_file 0 [ 1135.350286][T18552] active_file 0 [ 1135.350286][T18552] unevictable 0 [ 1135.350286][T18552] slab_reclaimable 42752 [ 1135.350286][T18552] slab_unreclaimable 122688 [ 1135.350286][T18552] slab 165440 00:20:44 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:44 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1135.451256][T18552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18551,uid=0 [ 1135.468256][T18552] Memory cgroup out of memory: Killed process 18552 (syz-executor.5) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1135.604764][T18227] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1135.641915][T18227] CPU: 1 PID: 18227 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1135.652391][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1135.662470][T18227] Call Trace: [ 1135.665794][T18227] [ 1135.668749][T18227] dump_stack_lvl+0xd1/0x138 [ 1135.673642][T18227] dump_header+0x10b/0x85f [ 1135.678097][T18227] oom_kill_process.cold+0x10/0x15 [ 1135.683249][T18227] out_of_memory+0x35c/0x14a0 [ 1135.687968][T18227] ? find_held_lock+0x2d/0x110 [ 1135.692779][T18227] ? oom_killer_disable+0x280/0x280 [ 1135.698102][T18227] ? find_held_lock+0x2d/0x110 [ 1135.702911][T18227] mem_cgroup_out_of_memory+0x206/0x270 [ 1135.708490][T18227] ? mem_cgroup_margin+0x130/0x130 [ 1135.713640][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 1135.718552][T18227] try_charge_memcg+0xefb/0x12f0 [ 1135.723533][T18227] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1135.729550][T18227] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1135.735301][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 1135.740185][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 1135.745082][T18227] obj_cgroup_charge+0x2af/0x5e0 [ 1135.750063][T18227] kmem_cache_alloc_lru+0x145/0x760 [ 1135.755292][T18227] ? sock_alloc_inode+0x27/0x1d0 [ 1135.760273][T18227] sock_alloc_inode+0x27/0x1d0 [ 1135.765077][T18227] ? sock_free_inode+0x30/0x30 [ 1135.769873][T18227] alloc_inode+0x61/0x230 [ 1135.774241][T18227] new_inode_pseudo+0x17/0x80 [ 1135.778941][T18227] sock_alloc+0x40/0x260 [ 1135.783219][T18227] __sock_create+0xbd/0x790 [ 1135.787788][T18227] __sys_socket+0x133/0x250 [ 1135.792336][T18227] ? __sys_socket_file+0x1f0/0x1f0 [ 1135.797517][T18227] __x64_sys_socket+0x73/0xb0 [ 1135.802238][T18227] do_syscall_64+0x39/0xb0 [ 1135.806695][T18227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1135.812615][T18227] RIP: 0033:0x7fe5d268d747 [ 1135.817058][T18227] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1135.836956][T18227] RSP: 002b:00007ffd562436a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1135.845411][T18227] RAX: ffffffffffffffda RBX: 00007ffd56243e10 RCX: 00007fe5d268d747 [ 1135.853420][T18227] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1135.861430][T18227] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd56243c20 [ 1135.869518][T18227] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1135.877523][T18227] R13: 0000000000115344 R14: 000000000000001c R15: 00007ffd56243e50 [ 1135.885551][T18227] [ 1136.006531][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1136.015487][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1136.032601][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.051446][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.058660][T16672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.242305][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.251462][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1136.284239][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1136.304986][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1136.313437][T18227] memory: usage 10144kB, limit 0kB, failcnt 530 [ 1136.319900][T18227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1136.336827][T18370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1136.337465][T18227] Memory cgroup stats for /syz5: [ 1136.362154][T18227] anon 40960 [ 1136.362154][T18227] file 10186752 [ 1136.362154][T18227] kernel 143360 [ 1136.362154][T18227] kernel_stack 0 [ 1136.362154][T18227] pagetables 8192 [ 1136.362154][T18227] sec_pagetables 0 [ 1136.362154][T18227] percpu 64 [ 1136.362154][T18227] sock 0 [ 1136.362154][T18227] vmalloc 0 [ 1136.362154][T18227] shmem 10186752 [ 1136.362154][T18227] zswap 0 [ 1136.362154][T18227] zswapped 0 [ 1136.362154][T18227] file_mapped 262144 [ 1136.362154][T18227] file_dirty 0 [ 1136.362154][T18227] file_writeback 0 [ 1136.362154][T18227] swapcached 0 [ 1136.362154][T18227] anon_thp 0 [ 1136.362154][T18227] file_thp 0 [ 1136.362154][T18227] shmem_thp 0 [ 1136.362154][T18227] inactive_anon 1855488 [ 1136.362154][T18227] active_anon 8372224 [ 1136.362154][T18227] inactive_file 0 [ 1136.362154][T18227] active_file 0 [ 1136.362154][T18227] unevictable 0 [ 1136.362154][T18227] slab_reclaimable 37600 [ 1136.362154][T18227] slab_unreclaimable 86600 [ 1136.362154][T18227] slab 124200 [ 1136.573682][T18227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18227,uid=0 [ 1136.608989][T18227] Memory cgroup out of memory: Killed process 18227 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1136.702132][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 1136.719029][T18227] socket: no more sockets [ 1136.745474][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1136.759242][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1136.767571][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1136.780604][T18370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1136.895778][T18350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.932896][T18350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1137.019598][T18370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1137.087284][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1137.103305][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1137.172737][T18370] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:20:46 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1137.813594][T16379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1137.823237][T16379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1137.832302][T16379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1137.851520][T16379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1137.859288][T16379] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1137.872422][T16379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1137.912498][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1137.922135][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1137.977502][T18350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.113270][T18370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.164155][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1138.174746][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1138.264373][T18557] chnl_net:caif_netlink_parms(): no params data found [ 1138.289822][T18401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1138.310606][T18370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.322199][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1138.330364][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1138.339289][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1138.349629][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1138.384420][T18401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1138.395738][T18350] device veth0_vlan entered promiscuous mode [ 1138.429268][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1138.437268][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1138.445772][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1138.456539][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1138.465745][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.472906][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.480597][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.489898][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.499549][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.506717][T16165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.515098][T18401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1138.558695][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1138.568517][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.581563][T18350] device veth1_vlan entered promiscuous mode [ 1138.590243][T18401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1138.632033][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1138.640822][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1138.649890][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.661579][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1138.704782][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.714001][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1138.723061][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.784072][T16379] Bluetooth: hci3: command 0x041b tx timeout [ 1138.801752][T18370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.833525][T18370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1138.904440][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.923337][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1138.942858][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1139.015542][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.023386][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.042089][T18557] device bridge_slave_0 entered promiscuous mode [ 1139.083009][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1139.092750][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1139.143461][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.150616][T18557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.170617][T18557] device bridge_slave_1 entered promiscuous mode [ 1139.180661][T18350] device veth0_macvtap entered promiscuous mode [ 1139.258866][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1139.295429][T18350] device veth1_macvtap entered promiscuous mode [ 1139.374775][T18557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.458171][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.482293][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.504935][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.528017][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.556937][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.578663][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.590453][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.601187][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.611361][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.632013][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.642210][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.652997][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.663784][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.674586][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.687485][T18350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.700768][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.715322][T18557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.739650][T18583] chnl_net:caif_netlink_parms(): no params data found [ 1139.775255][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1139.785001][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1139.799643][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.841999][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.870018][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.890902][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.900945][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.912355][T16379] Bluetooth: hci4: command 0x0409 tx timeout [ 1139.919882][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.929968][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.940554][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.950854][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.961491][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.973006][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.008730][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.022313][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.033350][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.045393][T18350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.109370][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1140.119156][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1140.128459][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1140.137760][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1140.148710][T18350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.159250][T18350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.168345][T18350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.177407][T18350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.193109][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.227380][T18557] team0: Port device team_slave_0 added [ 1140.266039][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1140.282111][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1140.289708][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1140.313090][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1140.332272][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.339485][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.386208][T18557] team0: Port device team_slave_1 added [ 1140.401786][T11188] device hsr_slave_0 left promiscuous mode [ 1140.408870][T11188] device hsr_slave_1 left promiscuous mode [ 1140.422889][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.430402][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.442832][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.450328][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.460327][T11188] device bridge_slave_1 left promiscuous mode [ 1140.472230][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.495281][T11188] device bridge_slave_0 left promiscuous mode [ 1140.502113][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.538401][T11188] device hsr_slave_0 left promiscuous mode [ 1140.552725][T11188] device hsr_slave_1 left promiscuous mode [ 1140.572339][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.579840][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.606240][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.623613][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.640608][T11188] device bridge_slave_1 left promiscuous mode [ 1140.656349][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.676322][T11188] device bridge_slave_0 left promiscuous mode [ 1140.699216][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.714918][T11188] device hsr_slave_0 left promiscuous mode [ 1140.721645][T11188] device hsr_slave_1 left promiscuous mode [ 1140.742798][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.750328][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.775047][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.783039][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.793059][T11188] device bridge_slave_1 left promiscuous mode [ 1140.799309][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.810064][T11188] device bridge_slave_0 left promiscuous mode [ 1140.816976][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.832764][T11188] device hsr_slave_0 left promiscuous mode [ 1140.842713][T11188] device hsr_slave_1 left promiscuous mode [ 1140.862186][T16379] Bluetooth: hci3: command 0x040f tx timeout [ 1140.869689][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.886662][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.904499][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.921934][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.938459][T11188] device bridge_slave_1 left promiscuous mode [ 1140.959377][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.980732][T11188] device bridge_slave_0 left promiscuous mode [ 1140.987602][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.035838][T11188] device veth1_macvtap left promiscuous mode [ 1141.042111][T11188] device veth0_macvtap left promiscuous mode [ 1141.048491][T11188] device veth1_vlan left promiscuous mode [ 1141.055373][T11188] device veth0_vlan left promiscuous mode [ 1141.065727][T11188] device veth1_macvtap left promiscuous mode [ 1141.071791][T11188] device veth0_macvtap left promiscuous mode [ 1141.078309][T11188] device veth1_vlan left promiscuous mode [ 1141.084256][T11188] device veth0_vlan left promiscuous mode [ 1141.091050][T11188] device veth1_macvtap left promiscuous mode [ 1141.097685][T11188] device veth0_macvtap left promiscuous mode [ 1141.105477][T11188] device veth1_vlan left promiscuous mode [ 1141.111358][T11188] device veth0_vlan left promiscuous mode [ 1141.120166][T11188] device veth1_macvtap left promiscuous mode [ 1141.126342][T11188] device veth0_macvtap left promiscuous mode [ 1141.132981][T11188] device veth1_vlan left promiscuous mode [ 1141.138832][T11188] device veth0_vlan left promiscuous mode [ 1141.663991][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1141.688648][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1141.703804][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.719838][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.803501][T11188] bond0 (unregistering): Released all slaves [ 1141.976516][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1141.982386][T16379] Bluetooth: hci4: command 0x041b tx timeout [ 1142.000493][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1142.014981][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.031473][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.107743][T11188] bond0 (unregistering): Released all slaves [ 1142.281424][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1142.299241][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1142.318033][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.338339][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.416956][T11188] bond0 (unregistering): Released all slaves [ 1142.566107][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1142.579236][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1142.591027][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.611654][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.694534][T11188] bond0 (unregistering): Released all slaves [ 1142.793877][T18370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.801068][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1142.890418][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1142.899450][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1142.909012][ T9773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.916204][ T9773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.924434][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1142.934298][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1142.942232][T16379] Bluetooth: hci3: command 0x0419 tx timeout [ 1142.983592][T18557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.990642][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.032997][T18557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.056475][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1143.083207][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1143.142324][T18557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.152472][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.247584][T18557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.278740][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1143.288471][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1143.312768][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1143.332502][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1143.352591][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1143.393607][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1143.450069][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.464274][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.492322][T18583] device bridge_slave_0 entered promiscuous mode [ 1143.533223][T18557] device hsr_slave_0 entered promiscuous mode [ 1143.562502][T18557] device hsr_slave_1 entered promiscuous mode [ 1143.572334][T18557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.579933][T18557] Cannot create hsr debugfs directory [ 1143.632214][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.642145][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.683506][T18583] device bridge_slave_1 entered promiscuous mode [ 1143.722785][T14925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.730916][T14925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.811439][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.837185][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1143.860337][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.872587][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.885251][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.015156][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1144.062619][ T5119] Bluetooth: hci4: command 0x040f tx timeout [ 1144.116103][T18583] team0: Port device team_slave_0 added [ 1144.183650][T18583] team0: Port device team_slave_1 added [ 1144.236726][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.253053][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1144.334264][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.341270][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:20:53 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1144.398643][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.455480][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1144.513150][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1144.522042][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.529614][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.539292][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1144.548186][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1144.562341][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.589055][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.600295][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.694482][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.751661][T18370] device veth0_vlan entered promiscuous mode [ 1144.810605][T18583] device hsr_slave_0 entered promiscuous mode [ 1144.839197][T18583] device hsr_slave_1 entered promiscuous mode [ 1144.846583][T18583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.867328][T18583] Cannot create hsr debugfs directory [ 1144.920054][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.938372][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1144.961433][T18370] device veth1_vlan entered promiscuous mode [ 1144.993089][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1145.013939][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1145.097862][T18557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.185654][T18401] device veth0_vlan entered promiscuous mode [ 1145.202732][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1145.222735][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1145.389369][T18557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.457790][T18370] device veth0_macvtap entered promiscuous mode [ 1145.495559][T18401] device veth1_vlan entered promiscuous mode [ 1145.510973][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1145.527837][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.553122][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.570374][T18370] device veth1_macvtap entered promiscuous mode [ 1145.673857][T18557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.714798][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1145.743561][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1145.812717][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1145.832556][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.846733][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.870286][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.892482][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.915654][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.941882][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.961866][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.981972][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.994690][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.012186][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.036455][T18370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.053793][T18401] device veth0_macvtap entered promiscuous mode [ 1146.089925][T18557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.112777][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1146.121499][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.142106][ T5119] Bluetooth: hci4: command 0x0419 tx timeout [ 1146.165609][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.180474][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.192142][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.203989][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.215088][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.225725][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.237513][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.248411][T18370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.259376][T18370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.271170][T18370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.280813][T18401] device veth1_macvtap entered promiscuous mode [ 1146.301204][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.312637][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1146.324445][T18370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.337122][T18370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.346382][T18370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.355438][T18370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.441764][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.462391][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.482018][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.511987][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.532225][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.551861][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.567601][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.584049][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.601910][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.631889][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.655397][T18401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.707428][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.723478][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.739438][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.772274][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.801898][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.842227][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.872132][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.902020][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.932108][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.961946][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.981916][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.001890][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.025114][T18401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.062274][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1147.071105][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1147.106388][T18401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.131908][T18401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.140666][T18401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.168286][T18401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.312311][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.320408][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.367510][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1147.433873][T18583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.475711][T18557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1147.495199][T18557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1147.579271][T18583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.646050][T18557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1147.653701][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.668860][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.756576][T18583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.802366][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1147.812581][T18557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1147.878330][T18583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.942673][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.012033][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.021386][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.062096][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.108572][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1148.195604][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1148.212219][T18720] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1148.343776][T18720] CPU: 1 PID: 18720 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1148.343831][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.354232][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1148.354255][T18720] Call Trace: [ 1148.354265][T18720] [ 1148.354276][T18720] dump_stack_lvl+0xd1/0x138 [ 1148.354320][T18720] dump_header+0x10b/0x85f [ 1148.354351][T18720] oom_kill_process.cold+0x10/0x15 [ 1148.354383][T18720] out_of_memory+0x35c/0x14a0 [ 1148.375302][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1148.377239][T18720] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1148.386905][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1148.391359][T18720] ? oom_killer_disable+0x280/0x280 [ 1148.391397][T18720] ? find_held_lock+0x2d/0x110 [ 1148.413937][T18557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.416302][T18720] mem_cgroup_out_of_memory+0x206/0x270 [ 1148.438485][T18720] ? mem_cgroup_margin+0x130/0x130 [ 1148.439864][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1148.443619][T18720] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1148.443666][T18720] memory_max_write+0x2f9/0x3c0 [ 1148.443699][T18720] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1148.443734][T18720] ? lock_release+0x810/0x810 [ 1148.443765][T18720] cgroup_file_write+0x1e2/0x770 [ 1148.443799][T18720] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1148.443829][T18720] ? kill_css+0x370/0x370 [ 1148.443860][T18720] ? __virt_addr_valid+0x61/0x2e0 [ 1148.443905][T18720] ? kill_css+0x370/0x370 [ 1148.460617][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1148.462606][T18720] kernfs_fop_write_iter+0x3f1/0x600 [ 1148.462659][T18720] vfs_write+0x9ed/0xdd0 [ 1148.462693][T18720] ? kernel_write+0x630/0x630 [ 1148.462729][T18720] ? __fget_files+0x26a/0x440 [ 1148.480562][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.484462][T18720] ksys_write+0x12b/0x250 [ 1148.484497][T18720] ? __ia32_sys_read+0xb0/0xb0 [ 1148.488885][T16672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.493835][T18720] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1148.493879][T18720] do_syscall_64+0x39/0xb0 [ 1148.539034][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1148.541163][T18720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1148.557198][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1148.558657][T18720] RIP: 0033:0x7f8b06e8c0c9 [ 1148.558684][T18720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1148.577048][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1148.579972][T18720] RSP: 002b:00007f8b059fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1148.580003][T18720] RAX: ffffffffffffffda RBX: 00007f8b06fac120 RCX: 00007f8b06e8c0c9 [ 1148.591473][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.604031][T18720] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1148.604050][T18720] RBP: 00007f8b06ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1148.604064][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.604079][T18720] R13: 00007ffcdb9e4dff R14: 00007f8b059fe300 R15: 0000000000022000 [ 1148.604125][T18720] [ 1148.612191][T16856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.716426][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1148.760925][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1148.824241][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1148.872285][T18720] memory: usage 10900kB, limit 0kB, failcnt 1287 [ 1148.891365][T18720] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1148.916711][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1148.944302][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1148.955794][T18720] Memory cgroup stats for /syz4: [ 1148.964788][T18720] anon 221184 [ 1148.964788][T18720] file 10412032 [ 1148.964788][T18720] kernel 528384 [ 1148.964788][T18720] kernel_stack 163840 [ 1148.964788][T18720] pagetables 139264 [ 1148.964788][T18720] sec_pagetables 0 [ 1148.964788][T18720] percpu 128 [ 1148.964788][T18720] sock 0 [ 1148.964788][T18720] vmalloc 0 [ 1148.964788][T18720] shmem 10412032 [ 1148.964788][T18720] zswap 0 [ 1148.964788][T18720] zswapped 0 [ 1148.964788][T18720] file_mapped 172032 [ 1148.964788][T18720] file_dirty 0 [ 1148.964788][T18720] file_writeback 0 [ 1148.964788][T18720] swapcached 0 [ 1148.964788][T18720] anon_thp 0 [ 1148.964788][T18720] file_thp 0 [ 1148.964788][T18720] shmem_thp 0 [ 1148.964788][T18720] inactive_anon 221184 [ 1148.964788][T18720] active_anon 10412032 [ 1148.964788][T18720] inactive_file 0 [ 1148.964788][T18720] active_file 0 [ 1148.964788][T18720] unevictable 0 [ 1148.964788][T18720] slab_reclaimable 39792 [ 1148.964788][T18720] slab_unreclaimable 143728 [ 1148.964788][T18720] slab 183520 [ 1149.088512][T18557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1149.103123][T18557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.116127][T18583] netdevsim netdevsim2 netdevsim0: renamed from eth0 00:20:58 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:58 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:20:58 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1149.129411][T18720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18717,uid=0 [ 1149.148468][T18720] Memory cgroup out of memory: Killed process 18720 (syz-executor.4) total-vm:54804kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1149.162345][T18583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1149.172777][T18724] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1149.215703][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1149.217051][T18724] CPU: 1 PID: 18724 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1149.233975][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1149.238681][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.244040][T18724] Call Trace: [ 1149.244052][T18724] [ 1149.244063][T18724] dump_stack_lvl+0xd1/0x138 [ 1149.244108][T18724] dump_header+0x10b/0x85f [ 1149.244138][T18724] oom_kill_process.cold+0x10/0x15 [ 1149.244174][T18724] out_of_memory+0x35c/0x14a0 [ 1149.276956][T18724] ? oom_killer_disable+0x280/0x280 [ 1149.282223][T18724] ? find_held_lock+0x2d/0x110 [ 1149.287053][T18724] mem_cgroup_out_of_memory+0x206/0x270 [ 1149.292651][T18724] ? mem_cgroup_margin+0x130/0x130 [ 1149.297817][T18724] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1149.300811][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1149.303659][T18724] memory_max_write+0x2f9/0x3c0 [ 1149.303698][T18724] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1149.303731][T18724] ? lock_release+0x810/0x810 [ 1149.303762][T18724] cgroup_file_write+0x1e2/0x770 [ 1149.303794][T18724] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1149.338145][T18724] ? kill_css+0x370/0x370 [ 1149.342500][T18724] ? __virt_addr_valid+0x61/0x2e0 [ 1149.347556][T18724] ? kill_css+0x370/0x370 [ 1149.351900][T18724] kernfs_fop_write_iter+0x3f1/0x600 [ 1149.357240][T18724] vfs_write+0x9ed/0xdd0 [ 1149.361518][T18724] ? kernel_write+0x630/0x630 [ 1149.366227][T18724] ? __fget_files+0x26a/0x440 [ 1149.371032][T18724] ksys_write+0x12b/0x250 [ 1149.375382][T18724] ? __ia32_sys_read+0xb0/0xb0 [ 1149.380164][T18724] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1149.386088][T18724] do_syscall_64+0x39/0xb0 [ 1149.390554][T18724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1149.396473][T18724] RIP: 0033:0x7f387368c0c9 [ 1149.400895][T18724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1149.420513][T18724] RSP: 002b:00007f38721dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1149.428942][T18724] RAX: ffffffffffffffda RBX: 00007f38737ac050 RCX: 00007f387368c0c9 [ 1149.437037][T18724] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1149.445014][T18724] RBP: 00007f38736e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1149.452992][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.460970][T18724] R13: 00007ffc1056418f R14: 00007f38721dd300 R15: 0000000000022000 [ 1149.468975][T18724] [ 1149.505543][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1149.554157][T18583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1149.575877][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1149.602363][T18583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1149.879163][T18583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.935472][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1149.947230][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1149.983488][T18583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.025957][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1150.045157][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.065302][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.072516][T16856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.159931][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1150.183446][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1150.192204][T18724] memory: usage 8616kB, limit 0kB, failcnt 454 [ 1150.199467][T18724] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1150.207747][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1150.216300][T18724] Memory cgroup stats for /syz3: [ 1150.216550][T18724] anon 131072 [ 1150.216550][T18724] file 8347648 [ 1150.216550][T18724] kernel 344064 [ 1150.216550][T18724] kernel_stack 98304 [ 1150.216550][T18724] pagetables 81920 [ 1150.216550][T18724] sec_pagetables 0 [ 1150.216550][T18724] percpu 64 [ 1150.216550][T18724] sock 0 [ 1150.216550][T18724] vmalloc 0 [ 1150.216550][T18724] shmem 8347648 [ 1150.216550][T18724] zswap 0 [ 1150.216550][T18724] zswapped 0 [ 1150.216550][T18724] file_mapped 204800 [ 1150.216550][T18724] file_dirty 0 [ 1150.216550][T18724] file_writeback 0 [ 1150.216550][T18724] swapcached 0 [ 1150.216550][T18724] anon_thp 0 [ 1150.216550][T18724] file_thp 0 [ 1150.216550][T18724] shmem_thp 0 [ 1150.216550][T18724] inactive_anon 8220672 [ 1150.216550][T18724] active_anon 258048 [ 1150.216550][T18724] inactive_file 0 [ 1150.216550][T18724] active_file 0 [ 1150.216550][T18724] unevictable 0 [ 1150.216550][T18724] slab_reclaimable 39424 [ 1150.216550][T18724] slab_unreclaimable 95328 [ 1150.216550][T18724] slab 134752 [ 1150.315712][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.322911][T16672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.331240][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1150.333372][T18724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18401,uid=0 [ 1150.340264][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1150.364006][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1150.365221][T18724] Memory cgroup out of memory: Killed process 18401 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1150.373844][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1150.400276][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1150.408501][T18370] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1150.418598][T18370] CPU: 0 PID: 18370 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1150.429052][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1150.439143][T18370] Call Trace: [ 1150.442456][T18370] [ 1150.445412][T18370] dump_stack_lvl+0xd1/0x138 [ 1150.450046][T18370] dump_header+0x10b/0x85f [ 1150.454495][T18370] oom_kill_process.cold+0x10/0x15 [ 1150.459722][T18370] out_of_memory+0x35c/0x14a0 [ 1150.464437][T18370] ? oom_killer_disable+0x280/0x280 [ 1150.469663][T18370] ? find_held_lock+0x2d/0x110 [ 1150.474468][T18370] mem_cgroup_out_of_memory+0x206/0x270 [ 1150.480036][T18370] ? mem_cgroup_margin+0x130/0x130 [ 1150.485154][T18370] ? lock_downgrade+0x6e0/0x6e0 [ 1150.490026][T18370] try_charge_memcg+0xefb/0x12f0 [ 1150.494982][T18370] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1150.500975][T18370] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1150.506703][T18370] ? lock_downgrade+0x6e0/0x6e0 [ 1150.511579][T18370] obj_cgroup_charge+0x2af/0x5e0 [ 1150.516531][T18370] kmem_cache_alloc_lru+0x145/0x760 [ 1150.521737][T18370] ? ext4_alloc_inode+0x28/0x680 [ 1150.526689][T18370] ? ext4_free_in_core_inode+0x70/0x70 [ 1150.532162][T18370] ext4_alloc_inode+0x28/0x680 [ 1150.536939][T18370] ? ext4_free_in_core_inode+0x70/0x70 [ 1150.542413][T18370] alloc_inode+0x61/0x230 [ 1150.546764][T18370] iget_locked+0x1bb/0x700 [ 1150.551279][T18370] __ext4_iget+0x3af/0x4230 [ 1150.555814][T18370] ? ext4_get_projid+0x190/0x190 [ 1150.560769][T18370] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1150.566613][T18370] ? ext4_fname_setup_filename+0x110/0x110 [ 1150.572477][T18370] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1150.578066][T18370] ext4_lookup+0x387/0x700 [ 1150.582581][T18370] ? ext4_resetent+0x2d0/0x2d0 [ 1150.587455][T18370] __lookup_slow+0x24c/0x460 [ 1150.592078][T18370] ? __lookup_hash+0x180/0x180 [ 1150.596863][T18370] ? azx_position_ok.cold+0x1ae/0x281 [ 1150.602260][T18370] ? azx_position_ok.cold+0x1ae/0x281 [ 1150.607649][T18370] ? lookup_fast+0x14e/0x520 [ 1150.612257][T18370] walk_component+0x33f/0x5a0 [ 1150.616954][T18370] path_lookupat+0x1ba/0x840 [ 1150.621569][T18370] filename_lookup+0x1d2/0x590 [ 1150.626354][T18370] ? may_linkat+0x500/0x500 [ 1150.630886][T18370] ? __might_fault+0xd9/0x180 [ 1150.635847][T18370] ? __phys_addr_symbol+0x30/0x70 [ 1150.640887][T18370] ? __check_object_size+0x2e2/0x5a0 [ 1150.646455][T18370] ? strncpy_from_user+0x28b/0x3c0 [ 1150.651589][T18370] ? getname_flags.part.0+0x1dd/0x4f0 [ 1150.656989][T18370] user_path_at_empty+0x46/0x60 [ 1150.661886][T18370] __x64_sys_umount+0xfc/0x190 [ 1150.666670][T18370] ? path_umount+0x10b0/0x10b0 [ 1150.671448][T18370] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1150.677360][T18370] do_syscall_64+0x39/0xb0 [ 1150.681802][T18370] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1150.687710][T18370] RIP: 0033:0x7f8b06e8d537 [ 1150.692133][T18370] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1150.711748][T18370] RSP: 002b:00007ffcdb9e3f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1150.720436][T18370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8b06e8d537 [ 1150.728421][T18370] RDX: 00007ffcdb9e402c RSI: 000000000000000a RDI: 00007ffcdb9e4020 [ 1150.736402][T18370] RBP: 00007ffcdb9e4020 R08: 00000000ffffffff R09: 00007ffcdb9e3df0 [ 1150.744384][T18370] R10: 0000555555da9853 R11: 0000000000000246 R12: 00007f8b06ee6b24 [ 1150.752359][T18370] R13: 00007ffcdb9e50e0 R14: 0000555555da9810 R15: 00007ffcdb9e5120 [ 1150.760358][T18370] [ 1150.770034][T18370] memory: usage 10316kB, limit 0kB, failcnt 1314 [ 1150.776568][T18370] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1150.782882][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1150.783601][T18370] Memory cgroup stats for /syz4: [ 1150.791311][T18370] anon 45056 [ 1150.791311][T18370] file 10412032 [ 1150.791311][T18370] kernel 106496 [ 1150.791311][T18370] kernel_stack 0 [ 1150.791311][T18370] pagetables 8192 [ 1150.791311][T18370] sec_pagetables 0 [ 1150.791311][T18370] percpu 64 [ 1150.791311][T18370] sock 0 [ 1150.791311][T18370] vmalloc 0 [ 1150.791311][T18370] shmem 10412032 [ 1150.791311][T18370] zswap 0 [ 1150.791311][T18370] zswapped 0 [ 1150.791311][T18370] file_mapped 172032 [ 1150.791311][T18370] file_dirty 0 [ 1150.791311][T18370] file_writeback 0 [ 1150.791311][T18370] swapcached 0 [ 1150.791311][T18370] anon_thp 0 [ 1150.791311][T18370] file_thp 0 [ 1150.791311][T18370] shmem_thp 0 [ 1150.791311][T18370] inactive_anon 45056 [ 1150.791311][T18370] active_anon 10412032 [ 1150.791311][T18370] inactive_file 0 [ 1150.791311][T18370] active_file 0 [ 1150.791311][T18370] unevictable 0 [ 1150.791311][T18370] slab_reclaimable 40176 [ 1150.791311][T18370] slab_unreclaimable 45760 [ 1150.791311][T18370] slab 85936 [ 1150.794292][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1150.802174][T18370] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18370,uid=0 [ 1150.961979][T18370] Memory cgroup out of memory: Killed process 18370 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1151.002938][T16672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1151.014024][T18583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1151.085198][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1151.095361][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1151.112182][T16856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1151.201095][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 00:21:00 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:00 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:00 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1151.738507][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1151.770398][T18350] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1151.774098][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1151.873693][T11188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.881966][T18350] CPU: 0 PID: 18350 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1151.895908][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1151.907557][T18350] Call Trace: [ 1151.911028][T18350] [ 1151.913983][T18350] dump_stack_lvl+0xd1/0x138 [ 1151.918904][T18350] dump_header+0x10b/0x85f [ 1151.923612][T18350] oom_kill_process.cold+0x10/0x15 [ 1151.928766][T18350] out_of_memory+0x35c/0x14a0 [ 1151.933479][T18350] ? find_held_lock+0x2d/0x110 [ 1151.938290][T18350] ? oom_killer_disable+0x280/0x280 [ 1151.943525][T18350] ? find_held_lock+0x2d/0x110 [ 1151.948343][T18350] mem_cgroup_out_of_memory+0x206/0x270 [ 1151.953942][T18350] ? mem_cgroup_margin+0x130/0x130 [ 1151.959090][T18350] ? lock_downgrade+0x6e0/0x6e0 [ 1151.963998][T18350] try_charge_memcg+0xefb/0x12f0 [ 1151.968991][T18350] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1151.975020][T18350] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1151.980783][T18350] ? lock_downgrade+0x6e0/0x6e0 [ 1151.985684][T18350] ? lock_downgrade+0x6e0/0x6e0 [ 1151.990573][T18350] ? rcu_read_unlock+0x9/0x60 [ 1151.995311][T18350] obj_cgroup_charge+0x2af/0x5e0 [ 1152.000304][T18350] ? copy_process+0x3aa/0x7520 [ 1152.005113][T18350] kmem_cache_alloc_node+0xb7/0x460 [ 1152.010360][T18350] copy_process+0x3aa/0x7520 [ 1152.014996][T18350] ? _raw_spin_unlock+0x28/0x40 [ 1152.019898][T18350] ? wp_page_reuse+0x197/0x570 [ 1152.024725][T18350] ? do_wp_page+0x844/0x3370 [ 1152.029381][T18350] ? __cleanup_sighand+0xb0/0xb0 [ 1152.034359][T18350] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1152.039793][T18350] ? rwlock_bug.part.0+0x90/0x90 [ 1152.044787][T18350] ? lock_chain_count+0x20/0x20 [ 1152.049691][T18350] kernel_clone+0xeb/0x990 [ 1152.054155][T18350] ? create_io_thread+0xf0/0xf0 [ 1152.059053][T18350] ? find_held_lock+0x2d/0x110 [ 1152.063873][T18350] __do_sys_clone+0xba/0x100 [ 1152.068508][T18350] ? kernel_clone+0x990/0x990 [ 1152.073242][T18350] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1152.079180][T18350] do_syscall_64+0x39/0xb0 [ 1152.083647][T18350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1152.089591][T18350] RIP: 0033:0x7f203ae89dfb [ 1152.094037][T18350] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1152.113685][T18350] RSP: 002b:00007ffed71744f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1152.122137][T18350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f203ae89dfb [ 1152.130142][T18350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1152.138149][T18350] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555562f4400 [ 1152.146149][T18350] R10: 00005555562f46d0 R11: 0000000000000246 R12: 0000000000000001 [ 1152.154156][T18350] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffed71745d0 [ 1152.162183][T18350] [ 1152.169763][T16379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1152.183365][T16379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1152.183514][T18557] device veth0_vlan entered promiscuous mode [ 1152.196823][T18350] memory: usage 8324kB, limit 0kB, failcnt 1231 [ 1152.205035][T16379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1152.215402][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1152.223708][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1152.231135][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1152.261968][T18350] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1152.357494][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1152.376412][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1152.427716][T11188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.468920][T18557] device veth1_vlan entered promiscuous mode [ 1152.491975][T18350] Memory cgroup stats for /syz1: [ 1152.492189][T18350] anon 49152 [ 1152.492189][T18350] file 8376320 [ 1152.492189][T18350] kernel 98304 [ 1152.492189][T18350] kernel_stack 0 [ 1152.492189][T18350] pagetables 8192 [ 1152.492189][T18350] sec_pagetables 0 [ 1152.492189][T18350] percpu 0 [ 1152.492189][T18350] sock 0 [ 1152.492189][T18350] vmalloc 0 [ 1152.492189][T18350] shmem 8376320 [ 1152.492189][T18350] zswap 0 [ 1152.492189][T18350] zswapped 0 [ 1152.492189][T18350] file_mapped 208896 [ 1152.492189][T18350] file_dirty 0 [ 1152.492189][T18350] file_writeback 0 [ 1152.492189][T18350] swapcached 0 [ 1152.492189][T18350] anon_thp 0 [ 1152.492189][T18350] file_thp 0 [ 1152.492189][T18350] shmem_thp 0 [ 1152.492189][T18350] inactive_anon 49152 [ 1152.492189][T18350] active_anon 8376320 [ 1152.492189][T18350] inactive_file 0 [ 1152.492189][T18350] active_file 0 [ 1152.492189][T18350] unevictable 0 [ 1152.492189][T18350] slab_reclaimable 33008 [ 1152.492189][T18350] slab_unreclaimable 46808 [ 1152.492189][T18350] slab 79816 [ 1152.589387][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1152.602447][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1152.648784][T18350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18350,uid=0 [ 1152.661221][T18557] device veth0_macvtap entered promiscuous mode [ 1152.674839][T18350] Memory cgroup out of memory: Killed process 18350 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1152.738515][T11188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.806095][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.815602][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.824423][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.831971][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.907117][T11188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.922594][T18557] device veth1_macvtap entered promiscuous mode [ 1152.941469][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1152.950388][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.985263][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.012306][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.038531][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.053950][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.072065][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.093187][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.131887][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.142699][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.162098][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.183650][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.202070][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.223596][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.246580][T18557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.265538][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.276773][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1153.288264][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1153.300600][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.314409][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.327626][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.361869][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.371724][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.412107][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.441974][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.481852][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.491710][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.536005][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.571850][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.595584][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.615741][T18557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.650102][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1153.673775][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1153.704389][T18557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.714309][T18557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.723928][T18557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.735442][T18557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.826801][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.836772][T13312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1154.009323][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1154.028211][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1154.037032][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1154.045795][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1154.054079][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1154.061450][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1154.087305][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1154.100827][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.113022][T18583] device veth0_vlan entered promiscuous mode [ 1154.131330][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.142508][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.261021][T18583] device veth1_vlan entered promiscuous mode [ 1154.300915][T18738] chnl_net:caif_netlink_parms(): no params data found [ 1154.308234][ T5120] Bluetooth: hci1: command 0x0409 tx timeout [ 1154.404316][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.421904][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.490325][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.513274][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1154.521619][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1154.537586][T18583] device veth0_macvtap entered promiscuous mode [ 1154.589148][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.598041][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.616450][T18583] device veth1_macvtap entered promiscuous mode [ 1154.636470][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1154.637952][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.645309][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1154.671165][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.682151][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.688367][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.699418][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.713559][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.724804][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.743461][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.753794][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.764387][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.774289][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.784931][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.796301][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.806833][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.816861][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.827366][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.840612][T18583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.890074][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1154.899956][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1154.911172][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1154.922836][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.935984][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.947568][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.958095][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.968151][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.978751][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.988625][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.999184][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.009097][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.019617][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.030556][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.042397][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.055814][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.066359][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.077936][T18583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.167119][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.176940][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1155.250805][T18738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.262680][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.284269][T18738] device bridge_slave_0 entered promiscuous mode [ 1155.305518][T18583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.322190][T18583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.331122][T18583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.376880][T18583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.478203][T18738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.492610][T18738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.512981][T18738] device bridge_slave_1 entered promiscuous mode [ 1155.667096][T18766] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1155.702510][T18766] CPU: 0 PID: 18766 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1155.714704][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1155.724791][T18766] Call Trace: [ 1155.728084][T18766] [ 1155.731028][T18766] dump_stack_lvl+0xd1/0x138 [ 1155.735647][T18766] dump_header+0x10b/0x85f [ 1155.740081][T18766] oom_kill_process.cold+0x10/0x15 [ 1155.745208][T18766] out_of_memory+0x35c/0x14a0 [ 1155.749905][T18766] ? oom_killer_disable+0x280/0x280 [ 1155.755118][T18766] ? mark_held_locks+0x9f/0xe0 [ 1155.759905][T18766] mem_cgroup_out_of_memory+0x206/0x270 [ 1155.765467][T18766] ? mem_cgroup_margin+0x130/0x130 [ 1155.770606][T18766] memory_max_write+0x2f9/0x3c0 [ 1155.775474][T18766] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1155.781561][T18766] ? cgroup_file_write+0x8e/0x770 [ 1155.786606][T18766] cgroup_file_write+0x1e2/0x770 [ 1155.791562][T18766] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1155.797648][T18766] ? kill_css+0x370/0x370 [ 1155.802025][T18766] ? kill_css+0x370/0x370 [ 1155.806465][T18766] kernfs_fop_write_iter+0x3f1/0x600 [ 1155.811779][T18766] vfs_write+0x9ed/0xdd0 [ 1155.816050][T18766] ? kernel_write+0x630/0x630 [ 1155.820758][T18766] ? lockdep_hardirqs_on+0x7d/0x100 [ 1155.825973][T18766] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1155.832162][T18766] ksys_write+0x12b/0x250 [ 1155.836510][T18766] ? __ia32_sys_read+0xb0/0xb0 [ 1155.841300][T18766] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1155.847213][T18766] do_syscall_64+0x39/0xb0 [ 1155.851650][T18766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1155.857557][T18766] RIP: 0033:0x7f2eaac8c0c9 [ 1155.861985][T18766] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.882298][T18766] RSP: 002b:00007f2eabaac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1155.890724][T18766] RAX: ffffffffffffffda RBX: 00007f2eaadabf80 RCX: 00007f2eaac8c0c9 [ 1155.898704][T18766] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1155.906769][T18766] RBP: 00007f2eaace7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1155.914747][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.922724][T18766] R13: 00007ffd7379c84f R14: 00007f2eabaac300 R15: 0000000000022000 [ 1155.930721][T18766] [ 1155.952414][T18766] memory: usage 10796kB, limit 0kB, failcnt 430 [ 1155.959598][T18766] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1155.984170][T18766] Memory cgroup stats for /syz0: [ 1155.988173][T18766] anon 135168 [ 1155.988173][T18766] file 10477568 [ 1155.988173][T18766] kernel 372736 [ 1155.988173][T18766] kernel_stack 98304 [ 1155.988173][T18766] pagetables 81920 [ 1155.988173][T18766] sec_pagetables 0 [ 1155.988173][T18766] percpu 64 [ 1155.988173][T18766] sock 0 [ 1155.988173][T18766] vmalloc 0 [ 1155.988173][T18766] shmem 10477568 [ 1155.988173][T18766] zswap 0 [ 1155.988173][T18766] zswapped 0 [ 1155.988173][T18766] file_mapped 237568 [ 1155.988173][T18766] file_dirty 0 [ 1155.988173][T18766] file_writeback 0 [ 1155.988173][T18766] swapcached 0 [ 1155.988173][T18766] anon_thp 0 [ 1155.988173][T18766] file_thp 0 [ 1155.988173][T18766] shmem_thp 0 [ 1155.988173][T18766] inactive_anon 2232320 [ 1155.988173][T18766] active_anon 8380416 [ 1155.988173][T18766] inactive_file 0 [ 1155.988173][T18766] active_file 0 [ 1155.988173][T18766] unevictable 0 [ 1155.988173][T18766] slab_reclaimable 40056 [ 1155.988173][T18766] slab_unreclaimable 126296 [ 1155.988173][T18766] slab 166352 [ 1155.998587][T18738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.118715][T18766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18557,uid=0 [ 1156.142171][ T5120] Bluetooth: hci0: command 0x0409 tx timeout [ 1156.149843][T18766] Memory cgroup out of memory: Killed process 18557 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1156.169650][T18738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.341349][T18738] team0: Port device team_slave_0 added [ 1156.364167][T18744] chnl_net:caif_netlink_parms(): no params data found [ 1156.382082][ T5120] Bluetooth: hci1: command 0x041b tx timeout [ 1156.392477][T18738] team0: Port device team_slave_1 added [ 1156.455580][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.472619][T18738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.479632][T18738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.521944][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.528032][T18738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.572208][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1156.582099][T18738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.589083][T18738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.616541][T18738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.652941][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.662953][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.710899][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1156.731278][T18744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.738477][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.747539][T18744] device bridge_slave_0 entered promiscuous mode [ 1156.786119][T18744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.793715][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.802701][T18744] device bridge_slave_1 entered promiscuous mode [ 1156.850267][T18738] device hsr_slave_0 entered promiscuous mode [ 1156.870529][T18738] device hsr_slave_1 entered promiscuous mode [ 1156.894882][T18738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.911925][T18738] Cannot create hsr debugfs directory [ 1156.983588][T18744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.062684][T18744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.080162][T18785] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1157.092246][T18785] CPU: 1 PID: 18785 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1157.102814][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1157.112908][T18785] Call Trace: [ 1157.116221][T18785] [ 1157.119189][T18785] dump_stack_lvl+0xd1/0x138 [ 1157.123832][T18785] dump_header+0x10b/0x85f [ 1157.128277][T18785] oom_kill_process.cold+0x10/0x15 [ 1157.133416][T18785] out_of_memory+0x35c/0x14a0 [ 1157.138120][T18785] ? oom_killer_disable+0x280/0x280 [ 1157.143350][T18785] mem_cgroup_out_of_memory+0x206/0x270 [ 1157.148917][T18785] ? mem_cgroup_margin+0x130/0x130 [ 1157.154060][T18785] memory_max_write+0x2f9/0x3c0 [ 1157.158934][T18785] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1157.165050][T18785] ? lock_release+0x810/0x810 [ 1157.169766][T18785] cgroup_file_write+0x1e2/0x770 [ 1157.174741][T18785] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1157.180839][T18785] ? kill_css+0x370/0x370 [ 1157.185195][T18785] ? __virt_addr_valid+0x61/0x2e0 [ 1157.190259][T18785] ? kill_css+0x370/0x370 [ 1157.194617][T18785] kernfs_fop_write_iter+0x3f1/0x600 [ 1157.199941][T18785] vfs_write+0x9ed/0xdd0 [ 1157.204211][T18785] ? kernel_write+0x630/0x630 [ 1157.208917][T18785] ? __fget_files+0x26a/0x440 [ 1157.213627][T18785] ksys_write+0x12b/0x250 [ 1157.217976][T18785] ? __ia32_sys_read+0xb0/0xb0 [ 1157.222759][T18785] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1157.228682][T18785] do_syscall_64+0x39/0xb0 [ 1157.233130][T18785] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1157.239157][T18785] RIP: 0033:0x7fa9d888c0c9 [ 1157.243615][T18785] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.263238][T18785] RSP: 002b:00007fa9d96b9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.271672][T18785] RAX: ffffffffffffffda RBX: 00007fa9d89ac050 RCX: 00007fa9d888c0c9 [ 1157.279659][T18785] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1157.287645][T18785] RBP: 00007fa9d88e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1157.295628][T18785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.303628][T18785] R13: 00007ffea43193cf R14: 00007fa9d96b9300 R15: 0000000000022000 00:21:06 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) 00:21:06 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:06 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1157.311644][T18785] [ 1157.358677][T18785] memory: usage 8724kB, limit 0kB, failcnt 458 [ 1157.373403][T18785] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1157.431732][T18785] Memory cgroup stats for /syz2: [ 1157.434196][T18785] anon 131072 [ 1157.434196][T18785] file 8384512 [ 1157.434196][T18785] kernel 364544 [ 1157.434196][T18785] kernel_stack 98304 [ 1157.434196][T18785] pagetables 81920 [ 1157.434196][T18785] sec_pagetables 0 [ 1157.434196][T18785] percpu 64 [ 1157.434196][T18785] sock 0 [ 1157.434196][T18785] vmalloc 0 [ 1157.434196][T18785] shmem 8380416 [ 1157.434196][T18785] zswap 0 [ 1157.434196][T18785] zswapped 0 [ 1157.434196][T18785] file_mapped 237568 [ 1157.434196][T18785] file_dirty 4096 [ 1157.434196][T18785] file_writeback 0 [ 1157.434196][T18785] swapcached 0 [ 1157.434196][T18785] anon_thp 0 [ 1157.434196][T18785] file_thp 0 [ 1157.434196][T18785] shmem_thp 0 [ 1157.434196][T18785] inactive_anon 131072 [ 1157.434196][T18785] active_anon 8380416 [ 1157.434196][T18785] inactive_file 0 [ 1157.434196][T18785] active_file 4096 [ 1157.434196][T18785] unevictable 0 [ 1157.434196][T18785] slab_reclaimable 37448 [ 1157.434196][T18785] slab_unreclaimable 122040 [ 1157.434196][T18785] slab 159488 [ 1157.636349][T18744] team0: Port device team_slave_0 added [ 1157.713591][T18744] team0: Port device team_slave_1 added [ 1157.855974][T18744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.863248][T18744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.933642][T18744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.982410][T18785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18782,uid=0 [ 1158.004232][T11188] device hsr_slave_0 left promiscuous mode [ 1158.032765][T18785] Memory cgroup out of memory: Killed process 18785 (syz-executor.2) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1158.051101][T11188] device hsr_slave_1 left promiscuous mode [ 1158.074813][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.102031][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.126546][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.144799][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.174793][T11188] device bridge_slave_1 left promiscuous mode [ 1158.212150][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.232033][ T5120] Bluetooth: hci0: command 0x041b tx timeout [ 1158.242739][T11188] device bridge_slave_0 left promiscuous mode [ 1158.249026][T11188] bridge0: port 1(bridge_slave_0) entered disabled state 00:21:07 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:07 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1158.334776][T11188] device hsr_slave_0 left promiscuous mode [ 1158.355118][T18583] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1158.380027][T11188] device hsr_slave_1 left promiscuous mode [ 1158.392536][T18583] CPU: 0 PID: 18583 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1158.403013][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1158.413077][T18583] Call Trace: [ 1158.416363][T18583] [ 1158.419302][T18583] dump_stack_lvl+0xd1/0x138 [ 1158.423919][T18583] dump_header+0x10b/0x85f [ 1158.428350][T18583] oom_kill_process.cold+0x10/0x15 [ 1158.433474][T18583] out_of_memory+0x35c/0x14a0 [ 1158.438164][T18583] ? find_held_lock+0x2d/0x110 [ 1158.442955][T18583] ? oom_killer_disable+0x280/0x280 [ 1158.448165][T18583] ? find_held_lock+0x2d/0x110 [ 1158.453014][T18583] mem_cgroup_out_of_memory+0x206/0x270 [ 1158.458574][T18583] ? mem_cgroup_margin+0x130/0x130 [ 1158.463694][T18583] ? lock_downgrade+0x6e0/0x6e0 [ 1158.468569][T18583] try_charge_memcg+0xefb/0x12f0 [ 1158.473530][T18583] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1158.479528][T18583] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1158.485366][T18583] ? lock_downgrade+0x6e0/0x6e0 [ 1158.490490][T18583] ? lock_downgrade+0x6e0/0x6e0 [ 1158.495352][T18583] ? rcu_read_unlock+0x9/0x60 [ 1158.500061][T18583] obj_cgroup_charge+0x2af/0x5e0 [ 1158.505798][T18583] ? copy_process+0x3aa/0x7520 [ 1158.510587][T18583] kmem_cache_alloc_node+0xb7/0x460 [ 1158.515805][T18583] copy_process+0x3aa/0x7520 [ 1158.520410][T18583] ? _raw_spin_unlock+0x28/0x40 [ 1158.525278][T18583] ? wp_page_reuse+0x197/0x570 [ 1158.530063][T18583] ? do_wp_page+0x844/0x3370 [ 1158.534684][T18583] ? __cleanup_sighand+0xb0/0xb0 [ 1158.539632][T18583] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1158.545059][T18583] ? rwlock_bug.part.0+0x90/0x90 [ 1158.550010][T18583] ? lock_chain_count+0x20/0x20 [ 1158.554898][T18583] kernel_clone+0xeb/0x990 [ 1158.559354][T18583] ? create_io_thread+0xf0/0xf0 [ 1158.564228][T18583] ? find_held_lock+0x2d/0x110 [ 1158.569022][T18583] __do_sys_clone+0xba/0x100 [ 1158.573624][T18583] ? kernel_clone+0x990/0x990 [ 1158.578326][T18583] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1158.584242][T18583] do_syscall_64+0x39/0xb0 [ 1158.588681][T18583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1158.594587][T18583] RIP: 0033:0x7fa9d8889dfb [ 1158.599013][T18583] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1158.618753][T18583] RSP: 002b:00007ffea4319610 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1158.627184][T18583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9d8889dfb [ 1158.635163][T18583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1158.643145][T18583] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557400400 [ 1158.651128][T18583] R10: 00005555574006d0 R11: 0000000000000246 R12: 0000000000000001 [ 1158.659110][T18583] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffea43196f0 [ 1158.667106][T18583] [ 1158.672756][ T5120] Bluetooth: hci1: command 0x040f tx timeout [ 1158.694884][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.713335][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.762113][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.795985][T18583] memory: usage 8364kB, limit 0kB, failcnt 477 [ 1158.800219][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.811943][T18583] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1158.813085][T11188] device bridge_slave_1 left promiscuous mode [ 1158.818814][T18583] Memory cgroup stats for /syz2 [ 1158.855694][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.861914][T18583] : [ 1158.867769][T18583] anon 40960 [ 1158.867769][T18583] file 8384512 [ 1158.867769][T18583] kernel 139264 [ 1158.867769][T18583] kernel_stack 0 [ 1158.867769][T18583] pagetables 8192 [ 1158.867769][T18583] sec_pagetables 0 [ 1158.867769][T18583] percpu 64 [ 1158.867769][T18583] sock 0 [ 1158.867769][T18583] vmalloc 0 [ 1158.867769][T18583] shmem 8380416 [ 1158.867769][T18583] zswap 0 [ 1158.867769][T18583] zswapped 0 [ 1158.867769][T18583] file_mapped 208896 [ 1158.867769][T18583] file_dirty 4096 [ 1158.867769][T18583] file_writeback 0 [ 1158.867769][T18583] swapcached 0 [ 1158.867769][T18583] anon_thp 0 [ 1158.867769][T18583] file_thp 0 [ 1158.867769][T18583] shmem_thp 0 [ 1158.867769][T18583] inactive_anon 40960 [ 1158.867769][T18583] active_anon 8380416 [ 1158.867769][T18583] inactive_file 0 [ 1158.867769][T18583] active_file 4096 [ 1158.867769][T18583] unevictable 0 [ 1158.867769][T18583] slab_reclaimable 31352 [ 1158.867769][T18583] slab_unreclaimable 85304 [ 1158.867769][T18583] slab 116656 [ 1158.991584][T11188] device bridge_slave_0 left promiscuous mode [ 1159.001334][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.044936][T11188] device hsr_slave_0 left promiscuous mode [ 1159.072432][T11188] device hsr_slave_1 left promiscuous mode [ 1159.092201][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.102731][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.130482][T18583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18583,uid=0 [ 1159.151432][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.184482][T18583] Memory cgroup out of memory: Killed process 18583 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1159.191659][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.274410][T11188] device bridge_slave_1 left promiscuous mode [ 1159.311281][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.353283][T11188] device bridge_slave_0 left promiscuous mode [ 1159.359540][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.396109][T11188] device veth1_macvtap left promiscuous mode [ 1159.413540][T11188] device veth0_macvtap left promiscuous mode [ 1159.419703][T11188] device veth1_vlan left promiscuous mode [ 1159.440823][T11188] device veth0_vlan left promiscuous mode [ 1159.465355][T11188] device veth1_macvtap left promiscuous mode [ 1159.471459][T11188] device veth0_macvtap left promiscuous mode [ 1159.523427][T11188] device veth1_vlan left promiscuous mode [ 1159.529324][T11188] device veth0_vlan left promiscuous mode [ 1159.548214][T11188] device veth1_macvtap left promiscuous mode [ 1159.562252][T11188] device veth0_macvtap left promiscuous mode [ 1159.568424][T11188] device veth1_vlan left promiscuous mode [ 1159.592023][T11188] device veth0_vlan left promiscuous mode [ 1159.673371][T16379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1159.683449][T16379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1159.691433][T16379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1159.700003][T16379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1159.707767][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1159.715481][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.213926][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.223620][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1160.231358][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.240905][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.248690][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1160.258299][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1160.267077][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1160.282624][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.299364][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.312329][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 1160.378643][T11188] bond0 (unregistering): Released all slaves [ 1160.547459][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1160.566655][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1160.582623][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.599170][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.702046][ T5119] Bluetooth: hci1: command 0x0419 tx timeout [ 1160.739789][T11188] bond0 (unregistering): Released all slaves [ 1160.903536][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1160.914424][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.926021][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.934586][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.942571][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1160.949905][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1160.997873][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1161.011696][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1161.025526][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.039688][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.119511][T11188] bond0 (unregistering): Released all slaves [ 1161.214845][T18744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.225618][T18744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.252487][T18744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.445951][T18744] device hsr_slave_0 entered promiscuous mode [ 1161.472978][T18744] device hsr_slave_1 entered promiscuous mode 00:21:10 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1161.743966][ T5119] Bluetooth: hci2: command 0x0409 tx timeout 00:21:10 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1162.301965][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 1162.393058][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 1162.713912][T18814] chnl_net:caif_netlink_parms(): no params data found [ 1162.791442][T18811] chnl_net:caif_netlink_parms(): no params data found [ 1162.978041][T18744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.007008][T18738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1163.023973][ T5119] Bluetooth: hci4: command 0x0409 tx timeout [ 1163.125441][T18808] chnl_net:caif_netlink_parms(): no params data found [ 1163.157889][T18738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1163.237704][T18744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.332916][T18738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1163.593269][T18744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.637258][T18738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1163.672774][T18814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.679913][T18814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.726903][T18814] device bridge_slave_0 entered promiscuous mode [ 1163.831889][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 1163.839067][T18744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.932453][T18814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.939684][T18814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.963185][T18814] device bridge_slave_1 entered promiscuous mode [ 1163.992238][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1164.001670][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1164.011748][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1164.013940][T18811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.021059][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1164.035581][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1164.040759][T18811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.053849][T18811] device bridge_slave_0 entered promiscuous mode [ 1164.187911][T18811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.201957][T18811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.252058][T18811] device bridge_slave_1 entered promiscuous mode [ 1164.274687][T18814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.380658][T18814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.390518][T18808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.397866][ T5120] Bluetooth: hci3: command 0x041b tx timeout [ 1164.411113][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.433184][T18808] device bridge_slave_0 entered promiscuous mode [ 1164.452856][T18811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.572539][T18808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.579680][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.613490][T18808] device bridge_slave_1 entered promiscuous mode [ 1164.622751][T18811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.699490][T18814] team0: Port device team_slave_0 added [ 1164.915659][T18814] team0: Port device team_slave_1 added [ 1164.984638][T18811] team0: Port device team_slave_0 added [ 1165.088400][T18808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.101956][ T5119] Bluetooth: hci4: command 0x041b tx timeout [ 1165.109314][T18744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1165.145952][T18811] team0: Port device team_slave_1 added [ 1165.174349][T18814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.191859][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.272676][T18814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.306453][T18808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.316880][T18744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1165.424198][T18814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.431260][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.459955][T18814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.538595][T18744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1165.566458][T18738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.593006][T18811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.600002][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.628203][T18811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.649306][T18808] team0: Port device team_slave_0 added [ 1165.663972][T18744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1165.707753][T18811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.722201][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.812929][T18811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.857097][T18808] team0: Port device team_slave_1 added [ 1165.876652][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1165.892592][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.905112][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 1165.965154][T18738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.062318][ T5119] Bluetooth: hci5: command 0x0409 tx timeout [ 1166.154792][T18808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.161791][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.223349][T18808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.306971][T18814] device hsr_slave_0 entered promiscuous mode [ 1166.333210][T18814] device hsr_slave_1 entered promiscuous mode [ 1166.361998][T18814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1166.369620][T18814] Cannot create hsr debugfs directory [ 1166.392683][T18808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.399675][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.462033][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 1166.492856][T18808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.533907][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1166.543691][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1166.571389][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.578566][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.615304][T18811] device hsr_slave_0 entered promiscuous mode [ 1166.632895][T18811] device hsr_slave_1 entered promiscuous mode [ 1166.664573][T18811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1166.681961][T18811] Cannot create hsr debugfs directory [ 1166.764308][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1166.776497][T18856] chnl_net:caif_netlink_parms(): no params data found [ 1166.885631][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1166.902602][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1166.911184][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.918348][ T9772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.927668][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1166.991612][T18808] device hsr_slave_0 entered promiscuous mode [ 1166.998797][T18808] device hsr_slave_1 entered promiscuous mode [ 1167.006171][T18808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.014278][T18808] Cannot create hsr debugfs directory [ 1167.054469][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1167.065069][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1167.075876][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1167.138428][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1167.148631][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1167.157495][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1167.170995][T18738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1167.182344][ T5119] Bluetooth: hci4: command 0x040f tx timeout [ 1167.183513][T18738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1167.237900][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1167.248964][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1167.309912][T18744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.375769][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.392204][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.400661][T18856] device bridge_slave_0 entered promiscuous mode [ 1167.435878][T18744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.479929][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1167.498470][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1167.522774][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.530623][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.545185][T18856] device bridge_slave_1 entered promiscuous mode [ 1167.581460][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1167.590926][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1167.600542][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.607747][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.615774][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1167.624755][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1167.633444][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.640544][T16163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.674124][T18814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.741385][T18814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.799395][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1167.812801][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1167.902746][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.976874][T18856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.982151][ T5119] Bluetooth: hci2: command 0x0419 tx timeout [ 1168.124549][T18814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.143354][ T5119] Bluetooth: hci5: command 0x041b tx timeout [ 1168.299257][T18738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.324394][T18856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.403034][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.474683][T18814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.532522][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1168.540119][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1168.542133][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 1168.563194][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1168.582844][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1168.613513][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1168.680143][T18744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.722076][T18744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.814200][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.876096][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1168.892828][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1168.916442][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1168.932882][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1168.950596][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.087788][T18856] team0: Port device team_slave_0 added [ 1169.221218][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.262152][ T5119] Bluetooth: hci4: command 0x0419 tx timeout [ 1169.270973][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.287922][T18856] team0: Port device team_slave_1 added [ 1169.397062][T18856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.412307][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.502635][T18856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.555289][T18856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.576451][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.608694][T18856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.872060][T18744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.907111][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1169.919345][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.929569][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1169.952765][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.033186][T18811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.104180][T18814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1170.134948][T18814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1170.198665][T18814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1170.221947][ T5119] Bluetooth: hci5: command 0x040f tx timeout [ 1170.253398][T18856] device hsr_slave_0 entered promiscuous mode [ 1170.260672][T18856] device hsr_slave_1 entered promiscuous mode [ 1170.289088][T18856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.311867][T18856] Cannot create hsr debugfs directory [ 1170.329519][T18811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.376235][T18814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1170.435693][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1170.444272][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1170.474460][T18738] device veth0_vlan entered promiscuous mode [ 1170.746678][T11188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.833698][T18811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.892664][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1170.900684][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1170.928964][T18738] device veth1_vlan entered promiscuous mode [ 1171.062682][T11188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.183042][T18811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.321635][T11188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.522736][T11188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.584546][T18738] device veth0_macvtap entered promiscuous mode [ 1171.612079][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1171.621427][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1171.645374][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1171.680458][T18738] device veth1_macvtap entered promiscuous mode [ 1171.737809][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.761968][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.786605][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.811964][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.831935][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.851882][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.861746][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.886666][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.912657][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.932661][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.953704][T18738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.013629][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1172.033074][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1172.055655][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1172.072816][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1172.112165][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.139575][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.152156][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.163059][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.178861][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.189648][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.199926][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.211093][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.221244][T18738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.232974][T18738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.258110][T18738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.278609][T18744] device veth0_vlan entered promiscuous mode [ 1172.302008][ T5119] Bluetooth: hci5: command 0x0419 tx timeout [ 1172.342062][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1172.351685][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1172.382956][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1172.400017][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1172.419703][T18738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.440413][T18738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.457034][T18738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.476013][T18738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.537135][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1172.547159][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1172.580085][T18744] device veth1_vlan entered promiscuous mode [ 1172.590959][T18814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.802250][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1172.810552][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1172.820336][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1172.829675][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1172.899908][T18814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.959621][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1172.977849][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1172.989775][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.996968][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.011544][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1173.020374][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1173.029204][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.036392][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.049147][T18744] device veth0_macvtap entered promiscuous mode [ 1173.109912][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1173.118371][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1173.127568][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1173.136815][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1173.390425][T18744] device veth1_macvtap entered promiscuous mode [ 1173.429771][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1173.438825][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1173.447458][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1173.458423][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1173.468218][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1173.486671][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1173.602211][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1173.611458][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1173.622045][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1173.642443][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1173.665111][T18814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1173.683050][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.691198][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.824522][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1173.835279][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.861155][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.871985][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.899533][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.931960][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.951887][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.961765][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.988828][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.012127][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.025046][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.048721][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.066065][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.089115][T18744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.121348][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1174.143115][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1174.236652][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.281858][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.321886][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.352003][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.371921][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.401904][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.411767][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.451876][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.461736][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.491843][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.511879][T18744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.531852][T18744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.573524][T18744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.584517][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1174.593602][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1174.824809][T18744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.825476][T14925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.851916][T14925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.862096][T18744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.870839][T18744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.901994][T18744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.950479][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1175.264170][T18808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1175.301509][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1175.311504][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.326450][T18814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.340066][T18996] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1175.394326][T18996] CPU: 1 PID: 18996 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1175.404821][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1175.414914][T18996] Call Trace: [ 1175.418232][T18996] [ 1175.421200][T18996] dump_stack_lvl+0xd1/0x138 [ 1175.425859][T18996] dump_header+0x10b/0x85f [ 1175.430309][T18996] oom_kill_process.cold+0x10/0x15 [ 1175.435428][T18996] out_of_memory+0x35c/0x14a0 [ 1175.440110][T18996] ? oom_killer_disable+0x280/0x280 [ 1175.445333][T18996] ? find_held_lock+0x2d/0x110 [ 1175.450142][T18996] mem_cgroup_out_of_memory+0x206/0x270 [ 1175.455695][T18996] ? mem_cgroup_margin+0x130/0x130 [ 1175.460810][T18996] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1175.466653][T18996] memory_max_write+0x2f9/0x3c0 [ 1175.471550][T18996] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1175.477648][T18996] ? lock_release+0x810/0x810 [ 1175.482350][T18996] cgroup_file_write+0x1e2/0x770 [ 1175.487333][T18996] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1175.493427][T18996] ? kill_css+0x370/0x370 [ 1175.497776][T18996] ? __virt_addr_valid+0x61/0x2e0 [ 1175.502835][T18996] ? kill_css+0x370/0x370 [ 1175.507183][T18996] kernfs_fop_write_iter+0x3f1/0x600 [ 1175.512503][T18996] vfs_write+0x9ed/0xdd0 [ 1175.516768][T18996] ? kernel_write+0x630/0x630 [ 1175.521471][T18996] ? __fget_files+0x26a/0x440 [ 1175.526179][T18996] ksys_write+0x12b/0x250 [ 1175.530529][T18996] ? __ia32_sys_read+0xb0/0xb0 [ 1175.535314][T18996] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1175.541234][T18996] do_syscall_64+0x39/0xb0 [ 1175.545675][T18996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1175.551582][T18996] RIP: 0033:0x7f761708c0c9 [ 1175.556005][T18996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1175.575710][T18996] RSP: 002b:00007f7617d06168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1175.584135][T18996] RAX: ffffffffffffffda RBX: 00007f76171ac050 RCX: 00007f761708c0c9 [ 1175.592112][T18996] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1175.600089][T18996] RBP: 00007f76170e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1175.608074][T18996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.616049][T18996] R13: 00007ffcc279ee3f R14: 00007f7617d06300 R15: 0000000000022000 [ 1175.624046][T18996] [ 1175.643886][T18996] memory: usage 10480kB, limit 0kB, failcnt 547 [ 1175.663151][T18996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1175.675052][T18996] Memory cgroup stats for /syz5: [ 1175.675248][T18996] anon 135168 [ 1175.675248][T18996] file 10186752 [ 1175.675248][T18996] kernel 344064 [ 1175.675248][T18996] kernel_stack 98304 [ 1175.675248][T18996] pagetables 77824 [ 1175.675248][T18996] sec_pagetables 0 [ 1175.675248][T18996] percpu 64 [ 1175.675248][T18996] sock 0 [ 1175.675248][T18996] vmalloc 0 [ 1175.675248][T18996] shmem 10186752 [ 1175.675248][T18996] zswap 0 [ 1175.675248][T18996] zswapped 0 [ 1175.675248][T18996] file_mapped 294912 [ 1175.675248][T18996] file_dirty 0 [ 1175.675248][T18996] file_writeback 0 [ 1175.675248][T18996] swapcached 0 [ 1175.675248][T18996] anon_thp 0 [ 1175.675248][T18996] file_thp 0 [ 1175.675248][T18996] shmem_thp 0 [ 1175.675248][T18996] inactive_anon 1945600 [ 1175.675248][T18996] active_anon 8372224 [ 1175.675248][T18996] inactive_file 0 [ 1175.675248][T18996] active_file 0 [ 1175.675248][T18996] unevictable 0 [ 1175.675248][T18996] slab_reclaimable 43696 [ 1175.675248][T18996] slab_unreclaimable 96240 [ 1175.675248][T18996] slab 139936 [ 1175.816408][T18996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18738,uid=0 [ 1175.862061][T18808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1175.947142][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.960057][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.026514][T18996] Memory cgroup out of memory: Killed process 18738 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1176.094482][T18808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1176.139337][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1176.150884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1176.172824][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1176.327534][T18808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1176.442379][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.464196][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.516201][T18811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1176.541719][T18814] device veth0_vlan entered promiscuous mode [ 1176.550514][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:21:25 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1176.562857][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1176.571310][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1176.692293][T18811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1176.740386][T18814] device veth1_vlan entered promiscuous mode [ 1176.824901][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1176.841767][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1176.850225][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 00:21:25 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1176.952202][T18811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1177.103141][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.109523][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.149100][T19001] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1177.168838][T18811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1177.192475][T19001] CPU: 0 PID: 19001 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1177.202956][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1177.213053][T19001] Call Trace: [ 1177.216368][T19001] [ 1177.219334][T19001] dump_stack_lvl+0xd1/0x138 [ 1177.223996][T19001] dump_header+0x10b/0x85f [ 1177.228451][T19001] oom_kill_process.cold+0x10/0x15 [ 1177.233607][T19001] out_of_memory+0x35c/0x14a0 [ 1177.238339][T19001] ? oom_killer_disable+0x280/0x280 [ 1177.243604][T19001] ? mark_held_locks+0x9f/0xe0 [ 1177.248461][T19001] mem_cgroup_out_of_memory+0x206/0x270 [ 1177.254073][T19001] ? mem_cgroup_margin+0x130/0x130 [ 1177.259224][T19001] memory_max_write+0x2f9/0x3c0 [ 1177.264097][T19001] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1177.270186][T19001] ? lock_release+0x810/0x810 [ 1177.274876][T19001] cgroup_file_write+0x1e2/0x770 [ 1177.279833][T19001] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1177.285911][T19001] ? kill_css+0x370/0x370 [ 1177.290261][T19001] ? __virt_addr_valid+0x61/0x2e0 [ 1177.295315][T19001] ? kill_css+0x370/0x370 [ 1177.299660][T19001] kernfs_fop_write_iter+0x3f1/0x600 [ 1177.304982][T19001] vfs_write+0x9ed/0xdd0 [ 1177.309247][T19001] ? kernel_write+0x630/0x630 [ 1177.313946][T19001] ? __fget_files+0x26a/0x440 [ 1177.318659][T19001] ksys_write+0x12b/0x250 [ 1177.323020][T19001] ? __ia32_sys_read+0xb0/0xb0 [ 1177.327817][T19001] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1177.333952][T19001] do_syscall_64+0x39/0xb0 [ 1177.338404][T19001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1177.344320][T19001] RIP: 0033:0x7ff679a8c0c9 [ 1177.348746][T19001] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1177.368378][T19001] RSP: 002b:00007ff67a74d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1177.376810][T19001] RAX: ffffffffffffffda RBX: 00007ff679babf80 RCX: 00007ff679a8c0c9 [ 1177.384788][T19001] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1177.393115][T19001] RBP: 00007ff679ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1177.401092][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.409094][T19001] R13: 00007ffe0bae024f R14: 00007ff67a74d300 R15: 0000000000022000 [ 1177.417109][T19001] [ 1177.467626][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1177.490829][T19001] memory: usage 10728kB, limit 0kB, failcnt 1331 [ 1177.502081][T19001] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1177.534404][T19001] Memory cgroup stats for /syz4: [ 1177.534624][T19001] anon 139264 [ 1177.534624][T19001] file 10412032 [ 1177.534624][T19001] kernel 299008 [ 1177.534624][T19001] kernel_stack 32768 [ 1177.534624][T19001] pagetables 77824 [ 1177.534624][T19001] sec_pagetables 0 [ 1177.534624][T19001] percpu 64 [ 1177.534624][T19001] sock 0 [ 1177.534624][T19001] vmalloc 0 [ 1177.534624][T19001] shmem 10412032 [ 1177.534624][T19001] zswap 0 [ 1177.534624][T19001] zswapped 0 [ 1177.534624][T19001] file_mapped 172032 [ 1177.534624][T19001] file_dirty 0 [ 1177.534624][T19001] file_writeback 0 [ 1177.534624][T19001] swapcached 0 [ 1177.534624][T19001] anon_thp 0 [ 1177.534624][T19001] file_thp 0 [ 1177.534624][T19001] shmem_thp 0 [ 1177.534624][T19001] inactive_anon 139264 [ 1177.534624][T19001] active_anon 10412032 [ 1177.534624][T19001] inactive_file 0 [ 1177.534624][T19001] active_file 0 [ 1177.534624][T19001] unevictable 0 [ 1177.534624][T19001] slab_reclaimable 40176 [ 1177.534624][T19001] slab_unreclaimable 122952 [ 1177.534624][T19001] slab 163128 [ 1177.953098][T19001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18999,uid=0 [ 1177.988349][T18814] device veth0_macvtap entered promiscuous mode [ 1178.034441][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1178.052701][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1178.070709][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1178.106072][T18814] device veth1_macvtap entered promiscuous mode [ 1178.106484][T19001] Memory cgroup out of memory: Killed process 19001 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 00:21:27 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1178.164720][T18808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.210552][T18744] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1178.246431][T18744] CPU: 1 PID: 18744 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1178.256918][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1178.267000][T18744] Call Trace: [ 1178.270284][T18744] [ 1178.273223][T18744] dump_stack_lvl+0xd1/0x138 [ 1178.277836][T18744] dump_header+0x10b/0x85f [ 1178.282271][T18744] oom_kill_process.cold+0x10/0x15 [ 1178.287394][T18744] out_of_memory+0x35c/0x14a0 [ 1178.292102][T18744] ? find_held_lock+0x2d/0x110 [ 1178.296895][T18744] ? oom_killer_disable+0x280/0x280 [ 1178.302196][T18744] ? find_held_lock+0x2d/0x110 [ 1178.306984][T18744] mem_cgroup_out_of_memory+0x206/0x270 [ 1178.312567][T18744] ? mem_cgroup_margin+0x130/0x130 [ 1178.317685][T18744] ? lock_downgrade+0x6e0/0x6e0 [ 1178.322737][T18744] try_charge_memcg+0xefb/0x12f0 [ 1178.327694][T18744] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1178.333684][T18744] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1178.339412][T18744] ? lock_downgrade+0x6e0/0x6e0 [ 1178.344298][T18744] ? lock_downgrade+0x6e0/0x6e0 [ 1178.349285][T18744] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1178.354866][T18744] __alloc_pages+0x1f3/0x5b0 [ 1178.359485][T18744] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1178.366286][T18744] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 1178.372219][T18744] alloc_pages+0x1aa/0x270 [ 1178.376649][T18744] __get_free_pages+0xc/0x40 [ 1178.381251][T18744] pgd_alloc+0x29/0x260 [ 1178.385427][T18744] mm_init+0x63b/0xc10 [ 1178.389513][T18744] copy_process+0x43f6/0x7520 [ 1178.394211][T18744] ? _raw_spin_unlock+0x28/0x40 [ 1178.399105][T18744] ? wp_page_reuse+0x197/0x570 [ 1178.403985][T18744] ? __cleanup_sighand+0xb0/0xb0 [ 1178.408932][T18744] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1178.414325][T18744] ? rwlock_bug.part.0+0x90/0x90 [ 1178.419273][T18744] ? lock_chain_count+0x20/0x20 [ 1178.424133][T18744] kernel_clone+0xeb/0x990 [ 1178.428564][T18744] ? create_io_thread+0xf0/0xf0 [ 1178.433429][T18744] ? find_held_lock+0x2d/0x110 [ 1178.438224][T18744] __do_sys_clone+0xba/0x100 [ 1178.442829][T18744] ? kernel_clone+0x990/0x990 [ 1178.447529][T18744] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1178.453444][T18744] do_syscall_64+0x39/0xb0 [ 1178.457882][T18744] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1178.463791][T18744] RIP: 0033:0x7ff679a89dfb [ 1178.468223][T18744] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1178.487845][T18744] RSP: 002b:00007ffe0bae0490 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1178.496268][T18744] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff679a89dfb [ 1178.504242][T18744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1178.512223][T18744] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555666400 [ 1178.520199][T18744] R10: 00005555556666d0 R11: 0000000000000246 R12: 0000000000000001 [ 1178.528179][T18744] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe0bae0570 [ 1178.536173][T18744] [ 1178.555071][T18744] memory: usage 10432kB, limit 0kB, failcnt 1350 [ 1178.561466][T18744] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1178.570090][T18744] Memory cgroup stats for /syz4: [ 1178.570278][T18744] anon 45056 [ 1178.570278][T18744] file 10412032 [ 1178.570278][T18744] kernel 196608 [ 1178.570278][T18744] kernel_stack 32768 [ 1178.570278][T18744] pagetables 8192 [ 1178.570278][T18744] sec_pagetables 0 [ 1178.570278][T18744] percpu 64 [ 1178.570278][T18744] sock 0 [ 1178.570278][T18744] vmalloc 0 [ 1178.570278][T18744] shmem 10412032 [ 1178.570278][T18744] zswap 0 [ 1178.570278][T18744] zswapped 0 [ 1178.570278][T18744] file_mapped 172032 [ 1178.570278][T18744] file_dirty 0 [ 1178.570278][T18744] file_writeback 0 [ 1178.570278][T18744] swapcached 0 [ 1178.570278][T18744] anon_thp 0 [ 1178.570278][T18744] file_thp 0 [ 1178.570278][T18744] shmem_thp 0 [ 1178.570278][T18744] inactive_anon 45056 [ 1178.570278][T18744] active_anon 10412032 [ 1178.570278][T18744] inactive_file 0 [ 1178.570278][T18744] active_file 0 [ 1178.570278][T18744] unevictable 0 [ 1178.570278][T18744] slab_reclaimable 39144 [ 1178.570278][T18744] slab_unreclaimable 108960 [ 1178.570278][T18744] slab 148104 [ 1178.669573][T18744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18744,uid=0 [ 1178.685551][T18744] Memory cgroup out of memory: Killed process 18744 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1178.741514][T18808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.780023][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.813815][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.830246][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.841255][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.851451][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.878049][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.899633][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.919477][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.936103][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.961853][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.971719][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.996278][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.020444][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.051951][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.071044][T18814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.098885][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1179.113776][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1179.132410][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1179.152680][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1179.172547][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1179.294922][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.331847][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.341714][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.374984][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.411851][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.444176][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.481927][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.514254][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.543527][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.561940][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.581968][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.613101][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.625479][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.634671][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.644131][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.652219][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1179.659364][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.671043][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1179.705294][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.733660][T18814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.741107][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 00:21:28 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1179.769212][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1179.793862][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.801011][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.872830][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1179.896592][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1179.923019][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.930353][T16165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.960216][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 00:21:29 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000003c0)=0x5) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1179.992862][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1180.001705][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.051967][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1180.175258][T18814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.212045][T18814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.220809][T18814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.286056][T18814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.327594][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1180.392326][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1180.414346][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1180.538489][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1180.553225][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1180.574483][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1180.603050][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1180.632663][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1180.683410][T18808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1180.691434][T18856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1180.751182][T18856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1180.779406][T18811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.809502][T18856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1180.936251][T18856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1180.977147][T18811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.019970][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1181.033852][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1181.064387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.108943][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.134778][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1181.156330][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.182631][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.190645][T16161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.212549][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.226231][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.242411][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.249543][T16161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.340184][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1181.350406][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.361108][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.394988][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.402532][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.413197][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.425310][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.431610][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.500544][T18811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.523373][T18811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.552158][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1181.566367][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.574809][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.589010][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.598383][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.607385][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.746057][ T5120] Bluetooth: hci0: command 0x0409 tx timeout [ 1181.778603][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.819760][T18856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.974424][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1181.992361][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.104326][T18808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.115181][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1182.133210][T19057] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1182.142939][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1182.155152][T19057] CPU: 1 PID: 19057 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1182.165632][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1182.175723][T19057] Call Trace: [ 1182.179033][T19057] [ 1182.181993][T19057] dump_stack_lvl+0xd1/0x138 [ 1182.186634][T19057] dump_header+0x10b/0x85f [ 1182.191094][T19057] oom_kill_process.cold+0x10/0x15 [ 1182.196248][T19057] out_of_memory+0x35c/0x14a0 [ 1182.200974][T19057] ? oom_killer_disable+0x280/0x280 [ 1182.206217][T19057] ? lockdep_hardirqs_on+0x7d/0x100 [ 1182.211464][T19057] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.217674][T19057] mem_cgroup_out_of_memory+0x206/0x270 [ 1182.223259][T19057] ? mem_cgroup_margin+0x130/0x130 [ 1182.228427][T19057] memory_max_write+0x2f9/0x3c0 [ 1182.233323][T19057] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1182.239430][T19057] ? lock_release+0x810/0x810 [ 1182.244138][T19057] cgroup_file_write+0x1e2/0x770 [ 1182.249109][T19057] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1182.255194][T19057] ? kill_css+0x370/0x370 [ 1182.259540][T19057] ? __virt_addr_valid+0x61/0x2e0 [ 1182.264602][T19057] ? kill_css+0x370/0x370 [ 1182.268947][T19057] kernfs_fop_write_iter+0x3f1/0x600 [ 1182.274262][T19057] vfs_write+0x9ed/0xdd0 [ 1182.278524][T19057] ? kernel_write+0x630/0x630 [ 1182.283229][T19057] ? __fget_files+0x26a/0x440 [ 1182.287938][T19057] ksys_write+0x12b/0x250 [ 1182.292280][T19057] ? __ia32_sys_read+0xb0/0xb0 [ 1182.297063][T19057] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1182.302979][T19057] do_syscall_64+0x39/0xb0 [ 1182.307420][T19057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1182.313344][T19057] RIP: 0033:0x7fb72448c0c9 [ 1182.317792][T19057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1182.337419][T19057] RSP: 002b:00007fb722ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1182.345848][T19057] RAX: ffffffffffffffda RBX: 00007fb7245abf80 RCX: 00007fb72448c0c9 [ 1182.354174][T19057] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1182.362152][T19057] RBP: 00007fb7244e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1182.370137][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.378113][T19057] R13: 00007fff5cc4358f R14: 00007fb722ffe300 R15: 0000000000022000 [ 1182.386112][T19057] [ 1182.404356][T18856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.447822][T19025] chnl_net:caif_netlink_parms(): no params data found [ 1182.632081][T11188] device hsr_slave_0 left promiscuous mode [ 1182.655811][T19057] memory: usage 10788kB, limit 0kB, failcnt 430 [ 1182.662291][T19057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1182.669296][T19057] Memory cgroup stats for /syz0: [ 1182.669500][T19057] anon 135168 [ 1182.669500][T19057] file 10477568 [ 1182.669500][T19057] kernel 303104 [ 1182.669500][T19057] kernel_stack 32768 [ 1182.669500][T19057] pagetables 81920 [ 1182.669500][T19057] sec_pagetables 0 [ 1182.669500][T19057] percpu 64 [ 1182.669500][T19057] sock 0 [ 1182.669500][T19057] vmalloc 0 [ 1182.669500][T19057] shmem 10477568 [ 1182.669500][T19057] zswap 0 [ 1182.669500][T19057] zswapped 0 [ 1182.669500][T19057] file_mapped 237568 [ 1182.669500][T19057] file_dirty 0 [ 1182.669500][T19057] file_writeback 0 [ 1182.669500][T19057] swapcached 0 [ 1182.669500][T19057] anon_thp 0 [ 1182.669500][T19057] file_thp 0 [ 1182.669500][T19057] shmem_thp 0 [ 1182.669500][T19057] inactive_anon 2232320 [ 1182.669500][T19057] active_anon 8380416 [ 1182.669500][T19057] inactive_file 0 [ 1182.669500][T19057] active_file 0 [ 1182.669500][T19057] unevictable 0 [ 1182.669500][T19057] slab_reclaimable 42632 [ 1182.669500][T19057] slab_unreclaimable 122304 [ 1182.669500][T19057] slab 164936 [ 1182.774988][T11188] device hsr_slave_1 left promiscuous mode [ 1182.784448][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.794147][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.802842][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.804752][T19057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19056,uid=0 00:21:31 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) [ 1182.833563][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.841212][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1182.844026][T19057] Memory cgroup out of memory: Killed process 19057 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1182.868823][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1182.894685][T18814] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1182.904832][T18814] CPU: 1 PID: 18814 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1182.915283][T18814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1182.925367][T18814] Call Trace: [ 1182.928668][T18814] [ 1182.931621][T18814] dump_stack_lvl+0xd1/0x138 [ 1182.936251][T18814] dump_header+0x10b/0x85f [ 1182.940726][T18814] oom_kill_process.cold+0x10/0x15 [ 1182.946404][T18814] out_of_memory+0x35c/0x14a0 [ 1182.951134][T18814] ? find_held_lock+0x2d/0x110 [ 1182.955946][T18814] ? oom_killer_disable+0x280/0x280 [ 1182.961218][T18814] ? find_held_lock+0x2d/0x110 [ 1182.966028][T18814] mem_cgroup_out_of_memory+0x206/0x270 [ 1182.971606][T18814] ? mem_cgroup_margin+0x130/0x130 [ 1182.976737][T18814] ? lock_downgrade+0x6e0/0x6e0 [ 1182.981638][T18814] try_charge_memcg+0xefb/0x12f0 [ 1182.986627][T18814] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1182.992662][T18814] ? lock_downgrade+0x6e0/0x6e0 [ 1182.997570][T18814] charge_memcg+0x90/0x3b0 [ 1183.002042][T18814] __mem_cgroup_charge+0x2b/0x90 [ 1183.007014][T18814] ? _compound_head+0x5d/0x150 [ 1183.013037][T18814] __handle_mm_fault+0x187d/0x3c90 [ 1183.018197][T18814] ? vm_iomap_memory+0x190/0x190 [ 1183.023202][T18814] handle_mm_fault+0x1b6/0x850 [ 1183.028011][T18814] do_user_addr_fault+0x475/0x1210 [ 1183.033160][T18814] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1183.038750][T18814] exc_page_fault+0x98/0x170 [ 1183.043375][T18814] asm_exc_page_fault+0x26/0x30 [ 1183.048276][T18814] RIP: 0033:0x7fb72445a7d5 [ 1183.052720][T18814] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 1183.072360][T18814] RSP: 002b:00007fff5cc42530 EFLAGS: 00010206 [ 1183.078453][T18814] RAX: 00000000000187c1 RBX: 00007fb7245885e0 RCX: 00005555555cf840 [ 1183.086456][T18814] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1183.094461][T18814] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fb724588640 [ 1183.102468][T18814] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 1183.110474][T18814] R13: 0000000000008040 R14: 0000000000000804 R15: 00005555555c7800 [ 1183.118497][T18814] [ 1183.125930][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.136266][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.144863][T18814] memory: usage 10424kB, limit 0kB, failcnt 449 [ 1183.154526][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.162094][T18814] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1183.168968][T18814] Memory cgroup stats for /syz0: [ 1183.169168][T18814] anon 36864 [ 1183.169168][T18814] file 10477568 [ 1183.169168][T18814] kernel 147456 [ 1183.169168][T18814] kernel_stack 0 [ 1183.169168][T18814] pagetables 8192 [ 1183.169168][T18814] sec_pagetables 0 [ 1183.169168][T18814] percpu 64 [ 1183.169168][T18814] sock 0 [ 1183.169168][T18814] vmalloc 0 [ 1183.169168][T18814] shmem 10477568 [ 1183.169168][T18814] zswap 0 [ 1183.169168][T18814] zswapped 0 [ 1183.169168][T18814] file_mapped 208896 [ 1183.169168][T18814] file_dirty 0 [ 1183.169168][T18814] file_writeback 0 [ 1183.169168][T18814] swapcached 0 [ 1183.169168][T18814] anon_thp 0 [ 1183.169168][T18814] file_thp 0 [ 1183.169168][T18814] shmem_thp 0 [ 1183.169168][T18814] inactive_anon 2134016 [ 1183.169168][T18814] active_anon 8380416 [ 1183.169168][T18814] inactive_file 0 [ 1183.169168][T18814] active_file 0 [ 1183.169168][T18814] unevictable 0 [ 1183.169168][T18814] slab_reclaimable 39672 [ 1183.169168][T18814] slab_unreclaimable 94424 [ 1183.169168][T18814] slab 134096 [ 1183.284490][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.294950][T11188] device bridge_slave_1 left promiscuous mode [ 1183.301243][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.329817][T11188] device bridge_slave_0 left promiscuous mode [ 1183.342017][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.365752][T18814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18814,uid=0 [ 1183.399185][T18814] Memory cgroup out of memory: Killed process 18814 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1183.422169][T11188] device hsr_slave_0 left promiscuous mode [ 1183.432654][T11188] device hsr_slave_1 left promiscuous mode [ 1183.463489][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.470999][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.507901][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.541932][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.551586][T11188] device bridge_slave_1 left promiscuous mode [ 1183.558596][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.567935][T11188] device bridge_slave_0 left promiscuous mode [ 1183.574676][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.627361][T11188] device hsr_slave_0 left promiscuous mode [ 1183.655441][T11188] device hsr_slave_1 left promiscuous mode [ 1183.667481][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.675317][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.693633][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.701100][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.727285][T11188] device bridge_slave_1 left promiscuous mode [ 1183.734116][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.743390][T11188] device bridge_slave_0 left promiscuous mode [ 1183.749615][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.766715][T11188] device hsr_slave_0 left promiscuous mode [ 1183.773477][T11188] device hsr_slave_1 left promiscuous mode [ 1183.780025][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.787949][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.797990][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.805578][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.815671][T11188] device bridge_slave_1 left promiscuous mode [ 1183.822512][ T5120] Bluetooth: hci0: command 0x041b tx timeout [ 1183.828677][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.839607][T11188] device bridge_slave_0 left promiscuous mode [ 1183.846151][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.859064][T11188] device hsr_slave_0 left promiscuous mode [ 1183.865769][T11188] device hsr_slave_1 left promiscuous mode [ 1183.872442][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.879922][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.888728][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.896271][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.906626][T11188] device bridge_slave_1 left promiscuous mode [ 1183.913456][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.924125][T11188] device bridge_slave_0 left promiscuous mode [ 1183.930298][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.957026][T11188] device veth1_macvtap left promiscuous mode [ 1183.963321][T11188] device veth0_macvtap left promiscuous mode [ 1183.969393][T11188] device veth1_vlan left promiscuous mode [ 1183.975566][T11188] device veth0_vlan left promiscuous mode [ 1183.985903][T11188] device veth1_macvtap left promiscuous mode [ 1183.992162][T11188] device veth0_macvtap left promiscuous mode [ 1183.998226][T11188] device veth1_vlan left promiscuous mode [ 1184.004572][T11188] device veth0_vlan left promiscuous mode [ 1184.011403][T11188] device veth1_macvtap left promiscuous mode [ 1184.017916][T11188] device veth0_macvtap left promiscuous mode [ 1184.024750][T11188] device veth1_vlan left promiscuous mode [ 1184.030607][T11188] device veth0_vlan left promiscuous mode [ 1184.038411][T11188] device veth1_macvtap left promiscuous mode [ 1184.044706][T11188] device veth0_macvtap left promiscuous mode [ 1184.050779][T11188] device veth1_vlan left promiscuous mode [ 1184.056678][T11188] device veth0_vlan left promiscuous mode [ 1184.065317][T11188] device veth1_macvtap left promiscuous mode [ 1184.071398][T11188] device veth0_macvtap left promiscuous mode [ 1184.077622][T11188] device veth1_vlan left promiscuous mode [ 1184.083708][T11188] device veth0_vlan left promiscuous mode [ 1184.707966][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1184.725219][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1184.741659][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.757821][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.847059][T11188] bond0 (unregistering): Released all slaves [ 1184.942189][ T5120] Bluetooth: hci1: command 0x0409 tx timeout [ 1185.010074][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1185.028344][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1185.044109][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.063320][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.143097][T11188] bond0 (unregistering): Released all slaves [ 1185.323601][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1185.339502][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1185.359646][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.376886][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.468875][T11188] bond0 (unregistering): Released all slaves [ 1185.631454][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1185.653208][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1185.668655][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.688043][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.766796][T11188] bond0 (unregistering): Released all slaves [ 1185.904694][T11188] team0 (unregistering): Port device team_slave_1 removed [ 1185.912968][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 1185.927929][T11188] team0 (unregistering): Port device team_slave_0 removed [ 1185.942022][T11188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.957605][T11188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.031665][T11188] bond0 (unregistering): Released all slaves [ 1186.125382][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1186.134545][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1186.144579][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.151750][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.161015][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1186.172468][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1186.181068][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.188273][T16163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.306103][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1186.323241][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1186.333080][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1186.342601][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1186.352385][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1186.366770][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1186.402150][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1186.410466][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1186.471423][T18856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1186.528139][T18856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1186.549589][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1186.559943][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1186.570056][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1186.577808][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1186.586478][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1186.595494][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1186.608736][T18811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.658411][T18808] device veth0_vlan entered promiscuous mode [ 1186.733352][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1186.749933][T15894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1186.767642][T18808] device veth1_vlan entered promiscuous mode [ 1186.826189][T19025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.833609][T19025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.844255][T19025] device bridge_slave_0 entered promiscuous mode [ 1186.854403][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1186.871565][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1186.883209][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1186.894915][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1186.904219][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1186.929145][T18811] device veth0_vlan entered promiscuous mode [ 1186.941318][T19025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.950847][T19025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.960799][T19025] device bridge_slave_1 entered promiscuous mode [ 1186.979975][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1187.002921][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1187.011391][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1187.028047][ T5119] Bluetooth: hci1: command 0x041b tx timeout [ 1187.051287][T18808] device veth0_macvtap entered promiscuous mode [ 1187.064633][T18811] device veth1_vlan entered promiscuous mode [ 1187.076517][T18808] device veth1_macvtap entered promiscuous mode [ 1187.114299][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1187.132502][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1187.142988][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1187.151651][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1187.160992][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1187.169792][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1187.179059][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1187.214166][T19025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.238528][T19025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.268913][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.280481][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.290848][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.319295][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.344081][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.361864][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.383876][T18808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.410881][T18811] device veth0_macvtap entered promiscuous mode [ 1187.450408][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1187.472725][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1187.481687][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1187.501418][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1187.522280][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1187.532730][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1187.555082][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1187.634306][T19025] team0: Port device team_slave_0 added [ 1187.643607][T18856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.657561][T18811] device veth1_macvtap entered promiscuous mode [ 1187.703298][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1187.715858][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.727858][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1187.747546][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.757641][T18808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1187.768282][T18808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.780337][T18808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.790582][T19025] team0: Port device team_slave_1 added [ 1187.819301][T19072] chnl_net:caif_netlink_parms(): no params data found [ 1187.834574][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1187.853814][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1187.867916][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1187.877523][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1187.887041][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1187.982540][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 1188.001543][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.022095][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.032658][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.043663][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.053971][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.064894][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.082157][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.102192][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.125816][T18811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.143813][T18808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.162310][T18808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.171062][T18808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.181089][T18808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.204492][T19025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.211494][T19025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.257916][T19025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.279066][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1188.288555][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1188.298092][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1188.306950][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1188.334791][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.349050][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.359509][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.370648][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.381053][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.401893][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.413385][T18811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.426003][T18811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.437812][T18811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.448562][T18856] device veth0_vlan entered promiscuous mode [ 1188.485391][T19025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.492613][T19025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.521088][T19025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.540936][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1188.548873][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1188.556881][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1188.565816][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1188.578325][T18811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.588092][T18811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.600155][T18811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.609397][T18811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.676868][T18856] device veth1_vlan entered promiscuous mode [ 1188.847240][T19025] device hsr_slave_0 entered promiscuous mode [ 1188.861420][T19025] device hsr_slave_1 entered promiscuous mode [ 1188.884512][T19025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.902235][T19025] Cannot create hsr debugfs directory [ 1189.006355][T19072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.021945][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.030365][T19072] device bridge_slave_0 entered promiscuous mode [ 1189.055239][T19072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.077308][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.093245][T19072] device bridge_slave_1 entered promiscuous mode [ 1189.112017][ T5119] Bluetooth: hci1: command 0x040f tx timeout [ 1189.120762][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1189.140004][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1189.228870][T18856] device veth0_macvtap entered promiscuous mode [ 1189.269382][T19072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.290377][T18856] device veth1_macvtap entered promiscuous mode [ 1189.316216][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1189.327291][T16898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.346065][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1189.353673][T16898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.369395][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1189.381513][T19072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.443430][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.447092][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.463235][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.472625][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.487085][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.498051][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.508585][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.519702][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.530009][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.540777][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.556847][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.579494][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.609203][T18856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.685356][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1189.695049][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1189.704438][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1189.729464][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.744536][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.755339][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.766329][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.778574][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.789873][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.799907][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.810578][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.820596][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.831598][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.843610][T18856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.861630][T19072] team0: Port device team_slave_0 added [ 1189.884572][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.893879][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.896069][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1189.911162][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1189.920308][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1189.964652][T19072] team0: Port device team_slave_1 added [ 1189.978197][T18856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.988751][T18856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.997859][T18856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.010695][T18856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.091732][T19072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.099718][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.142145][T19072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.167698][T16898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.182890][T16898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.333195][T19025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.407558][T19072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.418174][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.420596][T19141] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1190.490149][T19072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.510486][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1190.519296][T19141] CPU: 1 PID: 19141 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1190.529790][T19141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1190.539854][T19141] Call Trace: [ 1190.543145][T19141] [ 1190.546084][T19141] dump_stack_lvl+0xd1/0x138 [ 1190.550700][T19141] dump_header+0x10b/0x85f [ 1190.555130][T19141] oom_kill_process.cold+0x10/0x15 [ 1190.560257][T19141] out_of_memory+0x35c/0x14a0 [ 1190.564949][T19141] ? find_held_lock+0x2d/0x110 [ 1190.569734][T19141] ? oom_killer_disable+0x280/0x280 [ 1190.574942][T19141] ? find_held_lock+0x2d/0x110 [ 1190.579723][T19141] mem_cgroup_out_of_memory+0x206/0x270 [ 1190.585284][T19141] ? mem_cgroup_margin+0x130/0x130 [ 1190.590401][T19141] ? lock_downgrade+0x6e0/0x6e0 [ 1190.595274][T19141] try_charge_memcg+0xefb/0x12f0 [ 1190.600235][T19141] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1190.606231][T19141] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1190.611960][T19141] ? lock_downgrade+0x6e0/0x6e0 [ 1190.616838][T19141] ? lock_downgrade+0x6e0/0x6e0 [ 1190.621697][T19141] ? rcu_read_unlock+0x9/0x60 [ 1190.626847][T19141] obj_cgroup_charge+0x2af/0x5e0 [ 1190.631805][T19141] ? __alloc_file+0x21/0x270 [ 1190.636411][T19141] kmem_cache_alloc+0xb5/0x430 [ 1190.641188][T19141] __alloc_file+0x21/0x270 [ 1190.645617][T19141] alloc_empty_file+0x71/0x170 [ 1190.650396][T19141] path_openat+0xe1/0x2a50 [ 1190.654846][T19141] ? path_lookupat+0x840/0x840 [ 1190.659633][T19141] do_filp_open+0x1ba/0x410 [ 1190.664153][T19141] ? may_open_dev+0xf0/0xf0 [ 1190.668672][T19141] ? find_held_lock+0x2d/0x110 [ 1190.673462][T19141] ? do_raw_spin_lock+0x124/0x2b0 [ 1190.678495][T19141] ? rwlock_bug.part.0+0x90/0x90 [ 1190.683445][T19141] ? _raw_spin_unlock+0x28/0x40 [ 1190.688309][T19141] ? alloc_fd+0x2d8/0x6d0 [ 1190.692659][T19141] do_sys_openat2+0x16d/0x4c0 [ 1190.697348][T19141] ? build_open_flags+0x6f0/0x6f0 [ 1190.702380][T19141] ? xfd_validate_state+0x5d/0x180 [ 1190.707505][T19141] __x64_sys_openat+0x143/0x1f0 [ 1190.712363][T19141] ? __ia32_sys_open+0x1c0/0x1c0 [ 1190.717313][T19141] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1190.723221][T19141] do_syscall_64+0x39/0xb0 [ 1190.727665][T19141] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1190.733572][T19141] RIP: 0033:0x7ff4b9e8c0c9 [ 1190.737999][T19141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1190.757611][T19141] RSP: 002b:00007ff4babaf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1190.766034][T19141] RAX: ffffffffffffffda RBX: 00007ff4b9fac050 RCX: 00007ff4b9e8c0c9 [ 1190.774010][T19141] RDX: 0000000000200002 RSI: 0000000020000480 RDI: ffffffffffffffff [ 1190.781987][T19141] RBP: 00007ff4b9ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1190.789961][T19141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.797938][T19141] R13: 00007ffd073fcdef R14: 00007ff4babaf300 R15: 0000000000022000 [ 1190.805927][T19141] [ 1190.832111][T19141] memory: usage 8700kB, limit 0kB, failcnt 507 [ 1190.838973][T19141] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1190.862049][T19141] Memory cgroup stats for /syz3: [ 1190.862320][T19141] anon 135168 [ 1190.862320][T19141] file 8347648 [ 1190.862320][T19141] kernel 368640 [ 1190.862320][T19141] kernel_stack 98304 [ 1190.862320][T19141] pagetables 81920 [ 1190.862320][T19141] sec_pagetables 0 [ 1190.862320][T19141] percpu 64 [ 1190.862320][T19141] sock 0 [ 1190.862320][T19141] vmalloc 0 [ 1190.862320][T19141] shmem 8347648 [ 1190.862320][T19141] zswap 0 [ 1190.862320][T19141] zswapped 0 [ 1190.862320][T19141] file_mapped 204800 [ 1190.862320][T19141] file_dirty 0 [ 1190.862320][T19141] file_writeback 0 [ 1190.862320][T19141] swapcached 0 [ 1190.862320][T19141] anon_thp 0 [ 1190.862320][T19141] file_thp 0 [ 1190.862320][T19141] shmem_thp 0 [ 1190.862320][T19141] inactive_anon 8179712 [ 1190.862320][T19141] active_anon 258048 [ 1190.862320][T19141] inactive_file 0 [ 1190.862320][T19141] active_file 0 [ 1190.862320][T19141] unevictable 0 [ 1190.862320][T19141] slab_reclaimable 39424 [ 1190.862320][T19141] slab_unreclaimable 122040 [ 1190.862320][T19141] slab 161464 [ 1190.965908][T19025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.081286][T19141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19138,uid=0 [ 1191.158802][T19141] Memory cgroup out of memory: Killed process 19141 (syz-executor.3) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1191.177584][T19025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.192852][ T5119] Bluetooth: hci1: command 0x0419 tx timeout [ 1191.216743][T19072] device hsr_slave_0 entered promiscuous mode [ 1191.239545][T19142] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1191.260854][T19072] device hsr_slave_1 entered promiscuous mode [ 1191.272448][T19142] CPU: 1 PID: 19142 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1191.282920][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1191.293008][T19142] Call Trace: [ 1191.296307][T19142] [ 1191.299258][T19142] dump_stack_lvl+0xd1/0x138 [ 1191.303890][T19142] dump_header+0x10b/0x85f [ 1191.308340][T19142] oom_kill_process.cold+0x10/0x15 [ 1191.313482][T19142] out_of_memory+0x35c/0x14a0 [ 1191.318200][T19142] ? oom_killer_disable+0x280/0x280 [ 1191.323425][T19142] ? find_held_lock+0x2d/0x110 [ 1191.328213][T19142] mem_cgroup_out_of_memory+0x206/0x270 [ 1191.333773][T19142] ? mem_cgroup_margin+0x130/0x130 [ 1191.338896][T19142] ? lock_downgrade+0x6e0/0x6e0 [ 1191.343775][T19142] try_charge_memcg+0xefb/0x12f0 [ 1191.348738][T19142] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1191.354733][T19142] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1191.360460][T19142] ? lock_downgrade+0x6e0/0x6e0 [ 1191.365337][T19142] obj_cgroup_charge+0x2af/0x5e0 [ 1191.370292][T19142] ? vm_area_dup+0x7d/0x380 [ 1191.374808][T19142] kmem_cache_alloc+0xb5/0x430 [ 1191.379588][T19142] vm_area_dup+0x7d/0x380 [ 1191.383926][T19142] ? mt_slot+0xa1/0x170 [ 1191.388088][T19142] ? mas_next_nentry+0x610/0xab0 [ 1191.393034][T19142] ? mas_next_node+0x547/0xa00 [ 1191.397818][T19142] ? mas_find+0x211/0xd10 [ 1191.402182][T19142] ? vm_area_alloc+0x100/0x100 [ 1191.406977][T19142] ? validate_mm_mt+0x149/0x1b0 [ 1191.411861][T19142] ? remove_vma+0x130/0x130 [ 1191.416384][T19142] ? can_vma_merge_before+0x390/0x390 [ 1191.421775][T19142] __split_vma+0xae/0x5e0 [ 1191.426122][T19142] ? vma_merge+0x2cf/0x870 [ 1191.430553][T19142] split_vma+0xa3/0xe0 [ 1191.434636][T19142] mprotect_fixup+0x686/0x960 [ 1191.439350][T19142] ? mas_find+0x211/0xd10 [ 1191.443699][T19142] ? change_protection+0x3b30/0x3b30 [ 1191.449014][T19142] do_mprotect_pkey+0x6fd/0xa70 [ 1191.453889][T19142] ? mprotect_fixup+0x960/0x960 [ 1191.458752][T19142] ? up_write+0x1b0/0x520 [ 1191.463134][T19142] __x64_sys_mprotect+0x78/0xb0 [ 1191.468007][T19142] do_syscall_64+0x39/0xb0 [ 1191.472446][T19142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1191.478351][T19142] RIP: 0033:0x7f1d6188c1d7 [ 1191.482771][T19142] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.502392][T19142] RSP: 002b:00007ffd2579a758 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1191.510815][T19142] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f1d6188c1d7 00:21:40 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000003c0)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1191.518790][T19142] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f1d62642000 [ 1191.526789][T19142] RBP: 00007ffd2579a830 R08: 00000000ffffffff R09: 00007f1d62661700 [ 1191.534790][T19142] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd2579a950 [ 1191.542779][T19142] R13: 00007f1d62661700 R14: 0000000000000000 R15: 0000000000022000 [ 1191.550784][T19142] [ 1191.566364][T19072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.591897][T19072] Cannot create hsr debugfs directory [ 1191.762850][T19025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.895734][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.916114][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.965257][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1191.981886][T19142] memory: usage 8624kB, limit 0kB, failcnt 1267 [ 1191.989272][T19142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1192.004857][T19142] Memory cgroup stats for /syz1: [ 1192.005051][T19142] anon 122880 [ 1192.005051][T19142] file 8376320 [ 1192.005051][T19142] kernel 331776 [ 1192.005051][T19142] kernel_stack 65536 [ 1192.005051][T19142] pagetables 81920 [ 1192.005051][T19142] sec_pagetables 0 [ 1192.005051][T19142] percpu 64 [ 1192.005051][T19142] sock 0 [ 1192.005051][T19142] vmalloc 0 [ 1192.005051][T19142] shmem 8376320 [ 1192.005051][T19142] zswap 0 [ 1192.005051][T19142] zswapped 0 [ 1192.005051][T19142] file_mapped 233472 [ 1192.005051][T19142] file_dirty 0 [ 1192.005051][T19142] file_writeback 0 [ 1192.005051][T19142] swapcached 0 [ 1192.005051][T19142] anon_thp 0 [ 1192.005051][T19142] file_thp 0 [ 1192.005051][T19142] shmem_thp 0 [ 1192.005051][T19142] inactive_anon 122880 [ 1192.005051][T19142] active_anon 8376320 [ 1192.005051][T19142] inactive_file 0 [ 1192.005051][T19142] active_file 0 [ 1192.005051][T19142] unevictable 0 [ 1192.005051][T19142] slab_reclaimable 39488 [ 1192.005051][T19142] slab_unreclaimable 112704 [ 1192.005051][T19142] slab 152192 [ 1192.021942][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.217202][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.250098][T19142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19142,uid=0 [ 1192.270065][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1192.289720][T19142] Memory cgroup out of memory: Killed process 19142 (syz-executor.1) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1192.302359][T19025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1192.357867][T18811] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1192.382339][T18811] CPU: 1 PID: 18811 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1192.392816][T18811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1192.402897][T18811] Call Trace: [ 1192.406186][T18811] [ 1192.409122][T18811] dump_stack_lvl+0xd1/0x138 [ 1192.413736][T18811] dump_header+0x10b/0x85f [ 1192.418164][T18811] oom_kill_process.cold+0x10/0x15 [ 1192.423290][T18811] out_of_memory+0x35c/0x14a0 [ 1192.427986][T18811] ? oom_killer_disable+0x280/0x280 [ 1192.433197][T18811] ? find_held_lock+0x2d/0x110 [ 1192.437984][T18811] mem_cgroup_out_of_memory+0x206/0x270 [ 1192.443567][T18811] ? mem_cgroup_margin+0x130/0x130 [ 1192.448685][T18811] ? lock_downgrade+0x6e0/0x6e0 [ 1192.453556][T18811] try_charge_memcg+0xefb/0x12f0 [ 1192.458510][T18811] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1192.464505][T18811] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1192.470233][T18811] ? lock_downgrade+0x6e0/0x6e0 [ 1192.475092][T18811] ? lock_downgrade+0x6e0/0x6e0 [ 1192.479949][T18811] ? rcu_read_unlock+0x9/0x60 [ 1192.484659][T18811] obj_cgroup_charge+0x2af/0x5e0 [ 1192.489610][T18811] ? copy_process+0x43a0/0x7520 [ 1192.494477][T18811] kmem_cache_alloc+0xb5/0x430 [ 1192.499255][T18811] copy_process+0x43a0/0x7520 [ 1192.503944][T18811] ? _raw_spin_unlock+0x28/0x40 [ 1192.508812][T18811] ? wp_page_reuse+0x197/0x570 [ 1192.513606][T18811] ? __cleanup_sighand+0xb0/0xb0 [ 1192.518560][T18811] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1192.523953][T18811] ? rwlock_bug.part.0+0x90/0x90 [ 1192.528901][T18811] ? lock_chain_count+0x20/0x20 [ 1192.533764][T18811] kernel_clone+0xeb/0x990 [ 1192.538193][T18811] ? create_io_thread+0xf0/0xf0 [ 1192.543061][T18811] ? find_held_lock+0x2d/0x110 [ 1192.547851][T18811] __do_sys_clone+0xba/0x100 [ 1192.552451][T18811] ? kernel_clone+0x990/0x990 [ 1192.557152][T18811] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1192.563065][T18811] do_syscall_64+0x39/0xb0 [ 1192.567501][T18811] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1192.573404][T18811] RIP: 0033:0x7ff4b9e89dfb [ 1192.577830][T18811] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1192.597444][T18811] RSP: 002b:00007ffd073fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 00:21:41 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000040), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:41 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000040), 0x12) [ 1192.605952][T18811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4b9e89dfb [ 1192.613929][T18811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1192.621906][T18811] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556967400 [ 1192.629879][T18811] R10: 00005555569676d0 R11: 0000000000000246 R12: 0000000000000001 [ 1192.637852][T18811] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd073fd110 [ 1192.645848][T18811] [ 1192.814177][T19072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.879906][T19025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1193.225768][T19072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.282801][T19025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1193.306465][T19025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1193.352475][T19072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.445979][T18811] memory: usage 8380kB, limit 0kB, failcnt 543 [ 1193.458844][T18811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1193.473082][T18811] Memory cgroup stats for /syz3: [ 1193.473289][T18811] anon 40960 [ 1193.473289][T18811] file 8347648 [ 1193.473289][T18811] kernel 176128 [ 1193.473289][T18811] kernel_stack 32768 [ 1193.473289][T18811] pagetables 8192 [ 1193.473289][T18811] sec_pagetables 0 [ 1193.473289][T18811] percpu 0 [ 1193.473289][T18811] sock 0 [ 1193.473289][T18811] vmalloc 0 [ 1193.473289][T18811] shmem 8347648 [ 1193.473289][T18811] zswap 0 [ 1193.473289][T18811] zswapped 0 [ 1193.473289][T18811] file_mapped 180224 [ 1193.473289][T18811] file_dirty 0 [ 1193.473289][T18811] file_writeback 0 [ 1193.473289][T18811] swapcached 0 [ 1193.473289][T18811] anon_thp 0 [ 1193.473289][T18811] file_thp 0 [ 1193.473289][T18811] shmem_thp 0 [ 1193.473289][T18811] inactive_anon 8130560 [ 1193.473289][T18811] active_anon 258048 [ 1193.473289][T18811] inactive_file 0 [ 1193.473289][T18811] active_file 0 [ 1193.473289][T18811] unevictable 0 [ 1193.473289][T18811] slab_reclaimable 32560 [ 1193.473289][T18811] slab_unreclaimable 93592 [ 1193.473289][T18811] slab 126152 [ 1193.595684][T19072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.626446][T18811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18811,uid=0 [ 1193.652231][T18811] Memory cgroup out of memory: Killed process 18811 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1193.700655][T19025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.718012][T18808] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1193.733404][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1193.744621][T18808] CPU: 0 PID: 18808 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1193.745932][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1193.755065][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1193.755081][T18808] Call Trace: [ 1193.755089][T18808] [ 1193.755099][T18808] dump_stack_lvl+0xd1/0x138 [ 1193.755138][T18808] dump_header+0x10b/0x85f [ 1193.755165][T18808] oom_kill_process.cold+0x10/0x15 [ 1193.755193][T18808] out_of_memory+0x35c/0x14a0 [ 1193.755226][T18808] ? oom_killer_disable+0x280/0x280 [ 1193.755255][T18808] ? find_held_lock+0x2d/0x110 [ 1193.755295][T18808] mem_cgroup_out_of_memory+0x206/0x270 [ 1193.755323][T18808] ? mem_cgroup_margin+0x130/0x130 [ 1193.755344][T18808] ? lock_downgrade+0x6e0/0x6e0 [ 1193.755388][T18808] try_charge_memcg+0xefb/0x12f0 [ 1193.755427][T18808] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1193.755456][T18808] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1193.755483][T18808] ? lock_downgrade+0x6e0/0x6e0 [ 1193.755532][T18808] obj_cgroup_charge+0x2af/0x5e0 [ 1193.755569][T18808] kmem_cache_alloc_lru+0x145/0x760 [ 1193.755594][T18808] ? ext4_alloc_inode+0x28/0x680 [ 1193.755624][T18808] ? tomoyo_path_number_perm+0x242/0x570 [ 1193.755661][T18808] ? ext4_free_in_core_inode+0x70/0x70 [ 1193.755692][T18808] ext4_alloc_inode+0x28/0x680 [ 1193.755722][T18808] ? ext4_free_in_core_inode+0x70/0x70 [ 1193.755750][T18808] alloc_inode+0x61/0x230 [ 1193.805945][T19025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.807941][T18808] new_inode+0x2b/0x280 [ 1193.853203][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1193.855048][T18808] __ext4_new_inode+0x399/0x57d0 [ 1193.860655][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1193.865614][T18808] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1193.865669][T18808] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1193.883126][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.885664][T18808] ext4_mkdir+0x33e/0xb20 [ 1193.892339][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.896388][T18808] ? ext4_init_new_dir+0x4c0/0x4c0 [ 1193.952468][T18808] ? bpf_lsm_inode_permission+0x9/0x10 [ 1193.957980][T18808] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1193.963062][T18808] vfs_mkdir+0x48d/0x740 [ 1193.967355][T18808] do_mkdirat+0x27b/0x2f0 [ 1193.971742][T18808] ? __ia32_sys_mknod+0xb0/0xb0 [ 1193.976641][T18808] ? getname_flags.part.0+0x1dd/0x4f0 [ 1193.982069][T18808] __x64_sys_mkdirat+0x119/0x170 [ 1193.982127][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1193.987033][T18808] do_syscall_64+0x39/0xb0 [ 1193.987074][T18808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1194.004756][T18808] RIP: 0033:0x7f1d6188b0e7 [ 1194.005709][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.009182][T18808] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1194.009206][T18808] RSP: 002b:00007ffd2579aa18 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1194.032488][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.036857][T18808] RAX: ffffffffffffffda RBX: 00007ffd2579aaa0 RCX: 00007f1d6188b0e7 [ 1194.036877][T18808] RDX: 00000000000001ff RSI: 00007ffd2579aaa0 RDI: 00000000ffffff9c [ 1194.036892][T18808] RBP: 00007ffd2579aa7c R08: 0000000000000000 R09: 0000000000000003 [ 1194.060359][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.061223][T18808] R10: 00007ffd2579a7b7 R11: 0000000000000206 R12: 0000000000000032 [ 1194.061242][T18808] R13: 0000000000122c43 R14: 0000000000000012 R15: 00007ffd2579aae0 [ 1194.061278][T18808] [ 1194.069321][T16161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.157711][T18808] memory: usage 8356kB, limit 0kB, failcnt 1303 [ 1194.164164][T18808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1194.171041][T18808] Memory cgroup stats for /syz1: [ 1194.171247][T18808] anon 40960 [ 1194.171247][T18808] file 8376320 [ 1194.171247][T18808] kernel 139264 [ 1194.171247][T18808] kernel_stack 0 [ 1194.171247][T18808] pagetables 8192 [ 1194.171247][T18808] sec_pagetables 0 [ 1194.171247][T18808] percpu 64 [ 1194.171247][T18808] sock 0 [ 1194.171247][T18808] vmalloc 0 [ 1194.171247][T18808] shmem 8376320 [ 1194.171247][T18808] zswap 0 [ 1194.171247][T18808] zswapped 0 [ 1194.171247][T18808] file_mapped 208896 [ 1194.171247][T18808] file_dirty 0 [ 1194.171247][T18808] file_writeback 0 [ 1194.171247][T18808] swapcached 0 [ 1194.171247][T18808] anon_thp 0 [ 1194.171247][T18808] file_thp 0 [ 1194.171247][T18808] shmem_thp 0 [ 1194.171247][T18808] inactive_anon 40960 [ 1194.171247][T18808] active_anon 8376320 [ 1194.171247][T18808] inactive_file 0 [ 1194.171247][T18808] active_file 0 [ 1194.171247][T18808] unevictable 0 [ 1194.171247][T18808] slab_reclaimable 31200 [ 1194.171247][T18808] slab_unreclaimable 85304 [ 1194.171247][T18808] slab 116504 [ 1194.199559][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1194.287898][T18808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18808,uid=0 [ 1194.311953][T18808] Memory cgroup out of memory: Killed process 18808 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1194.340492][T16161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1194.348627][T19145] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1194.378437][T19145] CPU: 1 PID: 19145 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1194.388920][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1194.398996][T19145] Call Trace: [ 1194.402274][T19145] [ 1194.405202][T19145] dump_stack_lvl+0xd1/0x138 [ 1194.409802][T19145] dump_header+0x10b/0x85f [ 1194.414234][T19145] oom_kill_process.cold+0x10/0x15 [ 1194.419369][T19145] out_of_memory+0x35c/0x14a0 [ 1194.424048][T19145] ? oom_killer_disable+0x280/0x280 [ 1194.429259][T19145] ? find_held_lock+0x2d/0x110 [ 1194.434071][T19145] mem_cgroup_out_of_memory+0x206/0x270 [ 1194.439654][T19145] ? mem_cgroup_margin+0x130/0x130 [ 1194.444801][T19145] ? lock_downgrade+0x6e0/0x6e0 [ 1194.449705][T19145] try_charge_memcg+0xefb/0x12f0 [ 1194.454689][T19145] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1194.460704][T19145] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1194.466456][T19145] ? lock_downgrade+0x6e0/0x6e0 [ 1194.471342][T19145] ? lock_downgrade+0x6e0/0x6e0 [ 1194.476233][T19145] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1194.481809][T19145] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1194.488001][T19145] copy_process+0x1359/0x7520 [ 1194.492716][T19145] ? find_held_lock+0x2d/0x110 [ 1194.497543][T19145] ? __cleanup_sighand+0xb0/0xb0 [ 1194.502509][T19145] ? lock_downgrade+0x6e0/0x6e0 [ 1194.507388][T19145] ? folio_flags.constprop.0+0x53/0x150 [ 1194.512970][T19145] ? folio_add_lru+0x37b/0x680 [ 1194.517775][T19145] kernel_clone+0xeb/0x990 [ 1194.522226][T19145] ? create_io_thread+0xf0/0xf0 [ 1194.527115][T19145] ? find_held_lock+0x2d/0x110 [ 1194.531929][T19145] __do_sys_clone+0xba/0x100 [ 1194.536561][T19145] ? kernel_clone+0x990/0x990 [ 1194.541286][T19145] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1194.547226][T19145] do_syscall_64+0x39/0xb0 [ 1194.551685][T19145] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1194.557611][T19145] RIP: 0033:0x7f9aab08d4f1 [ 1194.562050][T19145] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1194.581692][T19145] RSP: 002b:00007ffdf22a01e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1194.590142][T19145] RAX: ffffffffffffffda RBX: 00007f9aabda1700 RCX: 00007f9aab08d4f1 [ 1194.598146][T19145] RDX: 00007f9aabda19d0 RSI: 00007f9aabda12f0 RDI: 00000000003d0f00 [ 1194.606146][T19145] RBP: 00007ffdf22a0430 R08: 00007f9aabda1700 R09: 00007f9aabda1700 [ 1194.614152][T19145] R10: 00007f9aabda19d0 R11: 0000000000000206 R12: 00007ffdf22a029e [ 1194.622148][T19145] R13: 00007ffdf22a029f R14: 00007f9aabda1300 R15: 0000000000022000 [ 1194.630169][T19145] [ 1194.777361][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1194.789708][T19145] memory: usage 8732kB, limit 0kB, failcnt 513 [ 1194.799615][T19145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1194.803406][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.811195][T19145] Memory cgroup stats for /syz2: [ 1194.814778][T19145] anon 143360 [ 1194.814778][T19145] file 8384512 [ 1194.814778][T19145] kernel 409600 [ 1194.814778][T19145] kernel_stack 131072 [ 1194.814778][T19145] pagetables 90112 [ 1194.814778][T19145] sec_pagetables 0 [ 1194.814778][T19145] percpu 64 [ 1194.814778][T19145] sock 0 [ 1194.814778][T19145] vmalloc 0 [ 1194.814778][T19145] shmem 8380416 [ 1194.814778][T19145] zswap 0 [ 1194.814778][T19145] zswapped 0 [ 1194.814778][T19145] file_mapped 237568 [ 1194.814778][T19145] file_dirty 4096 [ 1194.814778][T19145] file_writeback 0 [ 1194.814778][T19145] swapcached 0 [ 1194.814778][T19145] anon_thp 0 [ 1194.814778][T19145] file_thp 0 [ 1194.814778][T19145] shmem_thp 0 [ 1194.814778][T19145] inactive_anon 143360 [ 1194.814778][T19145] active_anon 8380416 [ 1194.814778][T19145] inactive_file 0 [ 1194.814778][T19145] active_file 4096 [ 1194.814778][T19145] unevictable 0 [ 1194.814778][T19145] slab_reclaimable 37448 [ 1194.814778][T19145] slab_unreclaimable 124944 [ 1194.814778][T19145] slab 162392 [ 1194.828189][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 00:21:43 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1194.918726][T19145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19145,uid=0 [ 1194.920532][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1194.945265][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1194.953415][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.970122][T19145] Memory cgroup out of memory: Killed process 19145 (syz-executor.2) total-vm:56984kB, anon-rss:372kB, file-rss:10880kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 1194.988308][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1194.996539][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1195.003963][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 00:21:44 executing program 2: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) 00:21:44 executing program 3: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000040), 0x12) openat$cgroup(r1, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1195.118905][T18856] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1195.130014][T18856] CPU: 1 PID: 18856 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1195.140449][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1195.150509][T18856] Call Trace: [ 1195.153793][T18856] [ 1195.156728][T18856] dump_stack_lvl+0xd1/0x138 [ 1195.161343][T18856] dump_header+0x10b/0x85f [ 1195.165773][T18856] oom_kill_process.cold+0x10/0x15 [ 1195.170896][T18856] out_of_memory+0x35c/0x14a0 [ 1195.175609][T18856] ? find_held_lock+0x2d/0x110 [ 1195.180413][T18856] ? oom_killer_disable+0x280/0x280 [ 1195.185637][T18856] ? find_held_lock+0x2d/0x110 [ 1195.190430][T18856] mem_cgroup_out_of_memory+0x206/0x270 [ 1195.195986][T18856] ? mem_cgroup_margin+0x130/0x130 [ 1195.201103][T18856] ? lock_downgrade+0x6e0/0x6e0 [ 1195.205976][T18856] try_charge_memcg+0xefb/0x12f0 [ 1195.210930][T18856] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1195.216926][T18856] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1195.222672][T18856] ? lock_downgrade+0x6e0/0x6e0 [ 1195.227569][T18856] ? lock_downgrade+0x6e0/0x6e0 [ 1195.232429][T18856] ? rcu_read_unlock+0x9/0x60 [ 1195.237133][T18856] obj_cgroup_charge+0x2af/0x5e0 [ 1195.242088][T18856] __kmem_cache_alloc_node+0xb2/0x430 [ 1195.247816][T18856] ? kvmalloc_node+0xa2/0x1a0 [ 1195.252526][T18856] ? kvmalloc_node+0xa2/0x1a0 [ 1195.257228][T18856] __kmalloc_node+0x4d/0xd0 [ 1195.261750][T18856] kvmalloc_node+0xa2/0x1a0 [ 1195.266276][T18856] xt_alloc_table_info+0x40/0xa0 [ 1195.271222][T18856] do_ip6t_set_ctl+0x514/0xb30 [ 1195.275999][T18856] ? trace_contention_end+0x153/0x1e0 [ 1195.281390][T18856] ? __mutex_lock+0x231/0x1360 [ 1195.286167][T18856] ? compat_do_replace.constprop.0+0x410/0x410 [ 1195.292340][T18856] ? wait_for_completion_io_timeout+0x20/0x20 [ 1195.298419][T18856] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1195.303846][T18856] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1195.309847][T18856] nf_setsockopt+0x87/0xe0 [ 1195.314279][T18856] ipv6_setsockopt+0x12b/0x190 [ 1195.319061][T18856] tcp_setsockopt+0x9f/0x100 [ 1195.323665][T18856] ? sock_common_recvmsg+0x190/0x190 [ 1195.328963][T18856] __sys_setsockopt+0x2c6/0x5b0 [ 1195.333829][T18856] ? __ia32_sys_recv+0x100/0x100 [ 1195.338771][T18856] ? up_write+0x520/0x520 [ 1195.343123][T18856] ? handle_mm_fault+0x25b/0x850 [ 1195.348098][T18856] __x64_sys_setsockopt+0xbe/0x160 [ 1195.353224][T18856] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1195.359133][T18856] do_syscall_64+0x39/0xb0 [ 1195.363570][T18856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1195.369545][T18856] RIP: 0033:0x7f9aab08d71a [ 1195.374005][T18856] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1195.393900][T18856] RSP: 002b:00007ffdf229fe08 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1195.402350][T18856] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f9aab08d71a [ 1195.410345][T18856] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1195.418324][T18856] RBP: 00007ffdf229fe30 R08: 0000000000000558 R09: fefefefefeff646b [ 1195.426306][T18856] R10: 00007f9aab184940 R11: 0000000000000206 R12: 00007ffdf229fe90 [ 1195.434297][T18856] R13: 0000000000000003 R14: 00007ffdf229fe2c R15: 00007f9aab1848e0 [ 1195.442298][T18856] [ 1195.456631][T18856] memory: usage 8368kB, limit 0kB, failcnt 532 [ 1195.468888][T18856] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1195.492021][T18856] Memory cgroup stats for /syz2: [ 1195.492214][T18856] anon 45056 [ 1195.492214][T18856] file 8384512 [ 1195.492214][T18856] kernel 131072 [ 1195.492214][T18856] kernel_stack 0 [ 1195.492214][T18856] pagetables 8192 [ 1195.492214][T18856] sec_pagetables 0 [ 1195.492214][T18856] percpu 64 [ 1195.492214][T18856] sock 0 [ 1195.492214][T18856] vmalloc 0 [ 1195.492214][T18856] shmem 8380416 [ 1195.492214][T18856] zswap 0 [ 1195.492214][T18856] zswapped 0 [ 1195.492214][T18856] file_mapped 208896 [ 1195.492214][T18856] file_dirty 4096 [ 1195.492214][T18856] file_writeback 0 [ 1195.492214][T18856] swapcached 0 [ 1195.492214][T18856] anon_thp 0 [ 1195.492214][T18856] file_thp 0 [ 1195.492214][T18856] shmem_thp 0 [ 1195.492214][T18856] inactive_anon 45056 [ 1195.492214][T18856] active_anon 8380416 [ 1195.492214][T18856] inactive_file 0 [ 1195.492214][T18856] active_file 4096 [ 1195.492214][T18856] unevictable 0 [ 1195.492214][T18856] slab_reclaimable 34824 [ 1195.492214][T18856] slab_unreclaimable 75496 [ 1195.492214][T18856] slab 110320 [ 1195.597344][T19025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.633208][T19025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1195.652246][T19072] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:21:44 executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x110c0400, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)="e6") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00') openat$cgroup_ro(r0, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svcsock_tcp_state\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000040), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1195.683054][T19072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1195.714674][T19072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1195.731025][T18856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18856,uid=0 [ 1195.749925][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1195.763146][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.792488][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.803763][T18856] Memory cgroup out of memory: Killed process 18856 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1195.832570][T19072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1196.414408][T19072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.458404][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1196.473017][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1196.540882][T19072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.597125][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1196.616626][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1196.645101][T19025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.699292][T19152] chnl_net:caif_netlink_parms(): no params data found [ 1196.889321][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1196.898203][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1196.907353][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.914623][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.963701][T11188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.022797][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1197.032678][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 1197.045381][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1197.054974][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1197.063999][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.071136][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.080008][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1197.162898][T11188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.322063][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1197.335699][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1197.363601][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1197.363726][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1197.380428][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1197.388484][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1197.397516][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1197.412471][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1197.444784][T11188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.472846][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1197.480874][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1197.489966][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1197.499174][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.532000][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.549006][T19152] device bridge_slave_0 entered promiscuous mode [ 1197.590266][T19072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.609089][T19072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1197.634961][T11188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.661347][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1197.683148][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1197.712848][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.722544][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.739073][T19152] device bridge_slave_1 entered promiscuous mode [ 1197.855189][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.877390][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.037581][T19152] team0: Port device team_slave_0 added [ 1198.070863][T19152] team0: Port device team_slave_1 added [ 1198.092797][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1198.105886][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1198.127628][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1198.135860][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1198.144635][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1198.153216][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1198.160519][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1198.187714][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1198.211710][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1198.283250][T19025] device veth0_vlan entered promiscuous mode [ 1198.315893][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.323278][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.349683][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.373182][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1198.381220][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1198.397447][T19025] device veth1_vlan entered promiscuous mode [ 1198.414460][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.421445][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.468497][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.554140][T11188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.572850][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1198.581114][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1198.602350][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1198.609956][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1198.646910][T19072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.735937][T11188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.828092][T19025] device veth0_macvtap entered promiscuous mode [ 1198.846833][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1198.862850][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1198.900225][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1199.062717][T11188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.101977][ T5120] Bluetooth: hci2: command 0x041b tx timeout [ 1199.114937][T19025] device veth1_macvtap entered promiscuous mode [ 1199.146399][T19152] device hsr_slave_0 entered promiscuous mode [ 1199.172737][T19152] device hsr_slave_1 entered promiscuous mode [ 1199.192020][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1199.199634][T19152] Cannot create hsr debugfs directory [ 1199.352845][T11188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.409397][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.441922][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.477967][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.504112][ T5120] Bluetooth: hci3: command 0x0409 tx timeout [ 1199.513166][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.531843][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.561984][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.582641][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.621907][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.631765][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.687025][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.711856][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.731834][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.753534][T19025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.862889][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1199.882118][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1199.945131][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1199.982135][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.032712][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.072066][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.101902][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.121956][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.145319][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.168035][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.194156][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.219751][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.232088][ T5120] Bluetooth: hci4: command 0x0409 tx timeout [ 1200.241389][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.261921][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.283515][T19025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.306370][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1200.315369][T16165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1200.392720][T19025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.404046][T19025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.413001][T19025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.421728][T19025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.545420][T19171] chnl_net:caif_netlink_parms(): no params data found [ 1200.581692][T19178] chnl_net:caif_netlink_parms(): no params data found [ 1200.662345][T11188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.742008][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1200.751510][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1200.822564][T11188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.859591][T19072] device veth0_vlan entered promiscuous mode [ 1200.928265][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1200.937464][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1200.968773][T11188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.061241][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.069748][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.105293][T11188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.126792][T19072] device veth1_vlan entered promiscuous mode [ 1201.182177][ T5120] Bluetooth: hci2: command 0x040f tx timeout [ 1201.373298][T19152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.454370][T19171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.482016][T19171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.490389][T19171] device bridge_slave_0 entered promiscuous mode [ 1201.562411][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1201.571754][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1201.592428][ T5120] Bluetooth: hci3: command 0x041b tx timeout [ 1201.613315][T19152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.644593][T19171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.651729][T19171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.661196][T19171] device bridge_slave_1 entered promiscuous mode [ 1201.737375][T19178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.761921][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.776389][T19178] device bridge_slave_0 entered promiscuous mode [ 1201.794561][T19178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.801702][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.820123][T19178] device bridge_slave_1 entered promiscuous mode [ 1201.844566][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.883942][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.931199][T19152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.134552][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1202.155415][T19171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.242734][T19152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.302106][ T5120] Bluetooth: hci4: command 0x041b tx timeout [ 1202.324877][T19178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.390916][T19072] device veth0_macvtap entered promiscuous mode [ 1202.415057][T19171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.463969][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1202.473112][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1202.493123][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1202.503825][T19178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.525884][T19072] device veth1_macvtap entered promiscuous mode [ 1202.672399][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.675922][T19171] team0: Port device team_slave_0 added [ 1202.692071][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.734706][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1202.748389][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1202.755902][T11188] ------------[ cut here ]------------ [ 1202.761640][T11188] DEBUG_LOCKS_WARN_ON(1) [ 1202.761689][T11188] WARNING: CPU: 0 PID: 11188 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 1202.776480][T11188] Modules linked in: [ 1202.780357][T11188] CPU: 0 PID: 11188 Comm: kworker/u4:4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1202.790575][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1202.800618][T11188] Workqueue: netns cleanup_net [ 1202.805397][T11188] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 1202.810932][T11188] Code: e8 1c 73 8e e8 42 04 6c 00 8b 05 94 82 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 27 5c 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 1202.830548][T11188] RSP: 0018:ffffc900034ff5e0 EFLAGS: 00010086 [ 1202.836606][T11188] RAX: 0000000000000000 RBX: 00000000000007a7 RCX: 0000000000000000 [ 1202.844582][T11188] RDX: ffff888075d73a80 RSI: ffffffff8166710c RDI: fffff5200069feae [ 1202.852540][T11188] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1202.860498][T11188] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 1202.868560][T11188] R13: ffff888075d73a80 R14: ffff888075d744b8 R15: dffffc0000000000 [ 1202.877503][T11188] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1202.886421][T11188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1202.892999][T11188] CR2: 00005598ea305950 CR3: 00000000517ab000 CR4: 00000000003506f0 [ 1202.900964][T11188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1202.908921][T11188] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1202.916882][T11188] Call Trace: [ 1202.920158][T11188] [ 1202.923084][T11188] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1202.929058][T11188] ? find_held_lock+0x2d/0x110 [ 1202.933822][T11188] lock_acquire+0x1e3/0x630 [ 1202.938312][T11188] ? finish_task_switch.isra.0+0x130/0xc80 [ 1202.944134][T11188] ? lock_release+0x810/0x810 [ 1202.948794][T11188] ? find_held_lock+0x2d/0x110 [ 1202.953548][T11188] ? __schedule+0xb02/0x5450 [ 1202.958123][T11188] ? lock_downgrade+0x6e0/0x6e0 [ 1202.962961][T11188] finish_task_switch.isra.0+0x192/0xc80 [ 1202.968587][T11188] ? finish_task_switch.isra.0+0x130/0xc80 [ 1202.974403][T11188] ? __switch_to+0x5d0/0x10a0 [ 1202.979155][T11188] ? __switch_to_asm+0x3e/0x60 [ 1202.983912][T11188] __schedule+0xb92/0x5450 [ 1202.988315][T11188] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1202.994302][T11188] ? io_schedule_timeout+0x150/0x150 [ 1202.999670][T11188] ? __mutex_lock+0xa43/0x1360 [ 1203.004429][T11188] schedule+0xde/0x1b0 [ 1203.008503][T11188] schedule_preempt_disabled+0x13/0x20 [ 1203.013953][T11188] __mutex_lock+0xa48/0x1360 [ 1203.018533][T11188] ? devlink_pernet_pre_exit+0x10a/0x220 [ 1203.024228][T11188] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1203.029764][T11188] ? lock_downgrade+0x6e0/0x6e0 [ 1203.034603][T11188] ? devlink_try_get+0x15d/0x1e0 [ 1203.039535][T11188] devlink_pernet_pre_exit+0x10a/0x220 [ 1203.044990][T11188] ? devlinks_xa_find_get+0x220/0x220 [ 1203.050376][T11188] ? cttimeout_net_pre_exit+0x10d/0x500 [ 1203.055982][T11188] ? devlinks_xa_find_get+0x220/0x220 [ 1203.061347][T11188] cleanup_net+0x455/0xb10 [ 1203.065755][T11188] ? unregister_pernet_device+0x80/0x80 [ 1203.071293][T11188] process_one_work+0x9bf/0x1710 [ 1203.076221][T11188] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1203.081585][T11188] ? rwlock_bug.part.0+0x90/0x90 [ 1203.086514][T11188] ? _raw_spin_lock_irq+0x45/0x50 [ 1203.091531][T11188] worker_thread+0x669/0x1090 [ 1203.096200][T11188] ? __kthread_parkme+0x163/0x220 [ 1203.101210][T11188] ? process_one_work+0x1710/0x1710 [ 1203.106395][T11188] kthread+0x2e8/0x3a0 [ 1203.110449][T11188] ? kthread_complete_and_exit+0x40/0x40 [ 1203.116069][T11188] ret_from_fork+0x1f/0x30 [ 1203.120478][T11188] [ 1203.123483][T11188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1203.130747][T11188] CPU: 0 PID: 11188 Comm: kworker/u4:4 Not tainted 6.2.0-rc2-syzkaller-00435-g16809afdcbad #0 [ 1203.140968][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1203.151007][T11188] Workqueue: netns cleanup_net [ 1203.155763][T11188] Call Trace: [ 1203.159029][T11188] [ 1203.161950][T11188] dump_stack_lvl+0xd1/0x138 [ 1203.166535][T11188] panic+0x2cc/0x626 [ 1203.170453][T11188] ? panic_print_sys_info.part.0+0x110/0x110 [ 1203.176431][T11188] ? __lock_acquire+0xecf/0x56d0 [ 1203.181463][T11188] check_panic_on_warn.cold+0x19/0x35 [ 1203.186830][T11188] __warn+0xf2/0x1a0 [ 1203.190716][T11188] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1203.196076][T11188] ? __lock_acquire+0xecf/0x56d0 [ 1203.200997][T11188] report_bug+0x1c0/0x210 [ 1203.205334][T11188] handle_bug+0x3c/0x70 [ 1203.209478][T11188] exc_invalid_op+0x18/0x50 [ 1203.213965][T11188] asm_exc_invalid_op+0x1a/0x20 [ 1203.218806][T11188] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 1203.224338][T11188] Code: e8 1c 73 8e e8 42 04 6c 00 8b 05 94 82 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 27 5c 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 1203.243929][T11188] RSP: 0018:ffffc900034ff5e0 EFLAGS: 00010086 [ 1203.249980][T11188] RAX: 0000000000000000 RBX: 00000000000007a7 RCX: 0000000000000000 [ 1203.257936][T11188] RDX: ffff888075d73a80 RSI: ffffffff8166710c RDI: fffff5200069feae [ 1203.265893][T11188] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1203.273851][T11188] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 1203.281807][T11188] R13: ffff888075d73a80 R14: ffff888075d744b8 R15: dffffc0000000000 [ 1203.289788][T11188] ? vprintk+0x8c/0xa0 [ 1203.293854][T11188] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1203.299848][T11188] ? find_held_lock+0x2d/0x110 [ 1203.304610][T11188] lock_acquire+0x1e3/0x630 [ 1203.309099][T11188] ? finish_task_switch.isra.0+0x130/0xc80 [ 1203.314919][T11188] ? lock_release+0x810/0x810 [ 1203.319584][T11188] ? find_held_lock+0x2d/0x110 [ 1203.324344][T11188] ? __schedule+0xb02/0x5450 [ 1203.328922][T11188] ? lock_downgrade+0x6e0/0x6e0 [ 1203.333759][T11188] finish_task_switch.isra.0+0x192/0xc80 [ 1203.339382][T11188] ? finish_task_switch.isra.0+0x130/0xc80 [ 1203.345181][T11188] ? __switch_to+0x5d0/0x10a0 [ 1203.349843][T11188] ? __switch_to_asm+0x3e/0x60 [ 1203.354603][T11188] __schedule+0xb92/0x5450 [ 1203.359027][T11188] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1203.364999][T11188] ? io_schedule_timeout+0x150/0x150 [ 1203.370287][T11188] ? __mutex_lock+0xa43/0x1360 [ 1203.375056][T11188] schedule+0xde/0x1b0 [ 1203.379122][T11188] schedule_preempt_disabled+0x13/0x20 [ 1203.384580][T11188] __mutex_lock+0xa48/0x1360 [ 1203.389162][T11188] ? devlink_pernet_pre_exit+0x10a/0x220 [ 1203.394787][T11188] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1203.400328][T11188] ? lock_downgrade+0x6e0/0x6e0 [ 1203.405196][T11188] ? devlink_try_get+0x15d/0x1e0 [ 1203.410148][T11188] devlink_pernet_pre_exit+0x10a/0x220 [ 1203.415614][T11188] ? devlinks_xa_find_get+0x220/0x220 [ 1203.420990][T11188] ? cttimeout_net_pre_exit+0x10d/0x500 [ 1203.426537][T11188] ? devlinks_xa_find_get+0x220/0x220 [ 1203.432160][T11188] cleanup_net+0x455/0xb10 [ 1203.436576][T11188] ? unregister_pernet_device+0x80/0x80 [ 1203.442116][T11188] process_one_work+0x9bf/0x1710 [ 1203.447047][T11188] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1203.452413][T11188] ? rwlock_bug.part.0+0x90/0x90 [ 1203.457354][T11188] ? _raw_spin_lock_irq+0x45/0x50 [ 1203.462647][T11188] worker_thread+0x669/0x1090 [ 1203.467322][T11188] ? __kthread_parkme+0x163/0x220 [ 1203.472331][T11188] ? process_one_work+0x1710/0x1710 [ 1203.477519][T11188] kthread+0x2e8/0x3a0 [ 1203.481665][T11188] ? kthread_complete_and_exit+0x40/0x40 [ 1203.487288][T11188] ret_from_fork+0x1f/0x30 [ 1203.491717][T11188] [ 1204.560942][T11188] Shutting down cpus with NMI [ 1204.565826][T11188] Kernel Offset: disabled [ 1204.570145][T11188] Rebooting in 86400 seconds..