x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:21 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:21 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0xc}, 0x10) 04:33:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:21 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 04:33:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 635.071175][ C0] net_ratelimit: 2790 callbacks suppressed [ 635.071193][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 635.088738][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 635.101138][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 635.112810][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 635.125128][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.138143][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.149733][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:33:21 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 635.162032][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.174684][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.387630][T11254] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 635.415511][T11254] CPU: 0 PID: 11254 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 635.425983][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 635.436070][T11254] Call Trace: [ 635.439367][T11254] [ 635.442317][T11254] dump_stack_lvl+0xd1/0x138 [ 635.446958][T11254] dump_header+0x10b/0x85f [ 635.451410][T11254] oom_kill_process.cold+0x10/0x15 [ 635.456556][T11254] out_of_memory+0x35c/0x14a0 [ 635.461364][T11254] ? oom_killer_disable+0x280/0x280 [ 635.466682][T11254] ? mark_held_locks+0x9f/0xe0 [ 635.471669][T11254] mem_cgroup_out_of_memory+0x206/0x270 [ 635.477250][T11254] ? mem_cgroup_margin+0x130/0x130 [ 635.482430][T11254] memory_max_write+0x2f9/0x3c0 [ 635.487492][T11254] ? mem_cgroup_force_empty_write+0x160/0x160 [ 635.493597][T11254] ? lock_release+0x810/0x810 [ 635.498323][T11254] cgroup_file_write+0x1e2/0x770 [ 635.503316][T11254] ? mem_cgroup_force_empty_write+0x160/0x160 [ 635.509431][T11254] ? kill_css+0x370/0x370 [ 635.513909][T11254] ? __virt_addr_valid+0x61/0x2e0 [ 635.519171][T11254] ? kill_css+0x370/0x370 [ 635.523546][T11254] kernfs_fop_write_iter+0x3f1/0x600 [ 635.528892][T11254] vfs_write+0x9ed/0xdd0 [ 635.533164][T11254] ? kernel_write+0x630/0x630 [ 635.537866][T11254] ? __fget_files+0x26a/0x440 [ 635.542573][T11254] ksys_write+0x12b/0x250 [ 635.546925][T11254] ? __ia32_sys_read+0xb0/0xb0 [ 635.551722][T11254] do_syscall_64+0x39/0xb0 [ 635.556340][T11254] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.562255][T11254] RIP: 0033:0x7ff689a8c0c9 [ 635.566676][T11254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.586313][T11254] RSP: 002b:00007ff6885fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.594735][T11254] RAX: ffffffffffffffda RBX: 00007ff689babf80 RCX: 00007ff689a8c0c9 [ 635.602710][T11254] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 635.610685][T11254] RBP: 00007ff689ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 635.618658][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.626637][T11254] R13: 00007ffee887248f R14: 00007ff6885fe300 R15: 0000000000022000 [ 635.634638][T11254] [ 635.742284][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 635.823363][T11254] memory: usage 8600kB, limit 0kB, failcnt 487 [ 635.831863][T11254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 635.838871][T11254] Memory cgroup stats for /syz2: [ 635.839105][T11254] anon 143360 [ 635.839105][T11254] file 8355840 [ 635.839105][T11254] kernel 262144 [ 635.839105][T11254] kernel_stack 32768 [ 635.839105][T11254] pagetables 81920 [ 635.839105][T11254] sec_pagetables 0 [ 635.839105][T11254] percpu 64 [ 635.839105][T11254] sock 0 [ 635.839105][T11254] vmalloc 0 [ 635.839105][T11254] shmem 8351744 [ 635.839105][T11254] zswap 0 [ 635.839105][T11254] zswapped 0 [ 635.839105][T11254] file_mapped 180224 [ 635.839105][T11254] file_dirty 4096 [ 635.839105][T11254] file_writeback 0 [ 635.839105][T11254] swapcached 0 [ 635.839105][T11254] anon_thp 0 [ 635.839105][T11254] file_thp 0 [ 635.839105][T11254] shmem_thp 0 [ 635.839105][T11254] inactive_anon 8314880 [ 635.839105][T11254] active_anon 180224 [ 635.839105][T11254] inactive_file 0 [ 635.839105][T11254] active_file 4096 [ 635.839105][T11254] unevictable 0 [ 635.839105][T11254] slab_reclaimable 46872 [ 635.839105][T11254] slab_unreclaimable 74704 [ 635.839105][T11254] slab 121576 04:33:22 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:22 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:22 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:22 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 636.003459][T11254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11253,uid=0 [ 636.026598][T11254] Memory cgroup out of memory: Killed process 11254 (syz-executor.2) total-vm:54540kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 04:33:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:22 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000004f80)={0xffffffff}, 0x8) 04:33:22 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:22 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x5, &(0x7f0000000780)=@framed={{}, [@btf_id={0x30}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 636.370755][T11146] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 636.493994][T11146] CPU: 1 PID: 11146 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 636.504477][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 636.514563][T11146] Call Trace: [ 636.517867][T11146] [ 636.520834][T11146] dump_stack_lvl+0xd1/0x138 [ 636.525474][T11146] dump_header+0x10b/0x85f [ 636.529930][T11146] oom_kill_process.cold+0x10/0x15 [ 636.535071][T11146] out_of_memory+0x35c/0x14a0 [ 636.539877][T11146] ? find_held_lock+0x2d/0x110 [ 636.544876][T11146] ? oom_killer_disable+0x280/0x280 [ 636.550292][T11146] ? find_held_lock+0x2d/0x110 [ 636.555101][T11146] mem_cgroup_out_of_memory+0x206/0x270 [ 636.560681][T11146] ? mem_cgroup_margin+0x130/0x130 [ 636.565824][T11146] ? lock_downgrade+0x6e0/0x6e0 [ 636.570718][T11146] try_charge_memcg+0xefb/0x12f0 [ 636.575695][T11146] ? mem_cgroup_handle_over_high+0x520/0x520 [ 636.581719][T11146] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 636.587474][T11146] ? lock_downgrade+0x6e0/0x6e0 [ 636.592359][T11146] ? lock_downgrade+0x6e0/0x6e0 [ 636.597242][T11146] ? rcu_read_unlock+0x9/0x60 [ 636.601984][T11146] obj_cgroup_charge+0x2af/0x5e0 [ 636.606970][T11146] __kmem_cache_alloc_node+0xb2/0x430 [ 636.612377][T11146] ? kvmalloc_node+0xa2/0x1a0 [ 636.617184][T11146] ? kvmalloc_node+0xa2/0x1a0 [ 636.621896][T11146] __kmalloc_node+0x4d/0xd0 [ 636.626446][T11146] kvmalloc_node+0xa2/0x1a0 [ 636.631013][T11146] xt_alloc_table_info+0x40/0xa0 [ 636.635989][T11146] do_ip6t_set_ctl+0x514/0xb30 [ 636.640873][T11146] ? trace_contention_end+0x153/0x1e0 [ 636.646376][T11146] ? __mutex_lock+0x231/0x1360 [ 636.651195][T11146] ? compat_do_replace.constprop.0+0x410/0x410 [ 636.657403][T11146] ? wait_for_completion_io_timeout+0x20/0x20 [ 636.663515][T11146] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 636.668942][T11146] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 636.674957][T11146] nf_setsockopt+0x87/0xe0 [ 636.679418][T11146] ipv6_setsockopt+0x12b/0x190 [ 636.684375][T11146] tcp_setsockopt+0x9f/0x100 [ 636.689002][T11146] ? sock_common_recvmsg+0x190/0x190 [ 636.694320][T11146] __sys_setsockopt+0x2c6/0x5b0 [ 636.699203][T11146] ? __ia32_sys_recv+0x100/0x100 [ 636.704164][T11146] ? up_write+0x520/0x520 [ 636.708546][T11146] ? handle_mm_fault+0x25b/0x850 [ 636.713546][T11146] __x64_sys_setsockopt+0xbe/0x160 [ 636.718697][T11146] ? syscall_enter_from_user_mode+0x26/0xb0 [ 636.724636][T11146] do_syscall_64+0x39/0xb0 [ 636.729188][T11146] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.735118][T11146] RIP: 0033:0x7ff689a8d71a [ 636.739561][T11146] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 636.759203][T11146] RSP: 002b:00007ffee8871ff8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 636.767664][T11146] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007ff689a8d71a [ 636.775668][T11146] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 636.783753][T11146] RBP: 00007ffee8872020 R08: 0000000000000488 R09: ffffffffff000000 [ 636.792621][T11146] R10: 00007ff689b84280 R11: 0000000000000202 R12: 00007ffee8872080 [ 636.800621][T11146] R13: 0000000000000003 R14: 00007ffee887201c R15: 00007ff689b84220 [ 636.808638][T11146] [ 636.895335][T11146] memory: usage 8308kB, limit 0kB, failcnt 538 [ 636.906893][T11146] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 636.935169][T11146] Memory cgroup stats for /syz2: [ 636.935384][T11146] anon 45056 [ 636.935384][T11146] file 8355840 [ 636.935384][T11146] kernel 106496 [ 636.935384][T11146] kernel_stack 0 [ 636.935384][T11146] pagetables 8192 [ 636.935384][T11146] sec_pagetables 0 [ 636.935384][T11146] percpu 64 [ 636.935384][T11146] sock 0 [ 636.935384][T11146] vmalloc 0 [ 636.935384][T11146] shmem 8351744 [ 636.935384][T11146] zswap 0 [ 636.935384][T11146] zswapped 0 [ 636.935384][T11146] file_mapped 147456 [ 636.935384][T11146] file_dirty 4096 [ 636.935384][T11146] file_writeback 0 [ 636.935384][T11146] swapcached 0 [ 636.935384][T11146] anon_thp 0 [ 636.935384][T11146] file_thp 0 [ 636.935384][T11146] shmem_thp 0 [ 636.935384][T11146] inactive_anon 8216576 [ 636.935384][T11146] active_anon 180224 [ 636.935384][T11146] inactive_file 0 [ 636.935384][T11146] active_file 4096 [ 636.935384][T11146] unevictable 0 [ 636.935384][T11146] slab_reclaimable 36152 [ 636.935384][T11146] slab_unreclaimable 48000 [ 636.935384][T11146] slab 84152 [ 637.181179][T11146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11146,uid=0 [ 637.218441][T11146] Memory cgroup out of memory: Killed process 11146 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 640.081986][ C0] net_ratelimit: 3865 callbacks suppressed [ 640.082000][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.099369][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 640.111438][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.123465][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.135272][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 640.146856][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 640.159106][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 640.170716][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 640.183105][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.196128][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:33:27 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:33:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 04:33:27 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:27 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:27 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x4, &(0x7f0000000780)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x7, &(0x7f0000000780)=@framed={{}, [@btf_id, @func={0x85, 0x0, 0x2}, @call]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 641.212374][ T5698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:27 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:33:27 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xd, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:27 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="ee") 04:33:27 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:27 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff76, 0xfffffffffffffffe, 0x3}, 0x0) [ 641.703313][ T5698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:27 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="ee") 04:33:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8000, 0x9, 0x1, 0x1}, 0x48) 04:33:28 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:28 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:28 executing program 3: syz_clone(0x9a001040, 0x0, 0x0, 0x0, 0x0, 0x0) [ 642.620984][ T5698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.001586][ T5698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.161399][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.170253][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.181946][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.207236][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 644.226834][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.643521][T11435] chnl_net:caif_netlink_parms(): no params data found [ 644.805188][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.823336][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.843083][T11435] device bridge_slave_0 entered promiscuous mode [ 644.864906][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.888727][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.897404][T11435] device bridge_slave_1 entered promiscuous mode [ 644.939454][ T5698] device hsr_slave_0 left promiscuous mode [ 644.979448][ T5698] device hsr_slave_1 left promiscuous mode [ 644.994316][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.025291][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.035140][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.050499][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.075928][ T5698] device bridge_slave_1 left promiscuous mode [ 645.090879][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.098809][ C0] net_ratelimit: 3528 callbacks suppressed [ 645.098825][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.116313][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 645.128701][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.141383][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.153317][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 645.164966][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 645.181584][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 645.193249][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.204856][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 645.217278][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.232628][ T5698] device bridge_slave_0 left promiscuous mode [ 645.239055][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.277049][ T5698] device veth1_macvtap left promiscuous mode [ 645.284473][ T5698] device veth0_macvtap left promiscuous mode [ 645.290623][ T5698] device veth1_vlan left promiscuous mode [ 645.330657][ T5698] device veth0_vlan left promiscuous mode [ 645.950394][ T5698] team0 (unregistering): Port device team_slave_1 removed [ 645.982805][ T5698] team0 (unregistering): Port device team_slave_0 removed [ 646.022533][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.087254][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.268954][ T5698] bond0 (unregistering): Released all slaves [ 646.301120][ T5126] Bluetooth: hci3: command 0x0409 tx timeout [ 646.557795][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.614437][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.706165][T11435] team0: Port device team_slave_0 added [ 646.723462][T11435] team0: Port device team_slave_1 added [ 646.842097][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.849087][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.886483][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.906524][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.915020][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.958248][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.127010][T11435] device hsr_slave_0 entered promiscuous mode [ 647.147167][T11435] device hsr_slave_1 entered promiscuous mode [ 648.361568][ T5126] Bluetooth: hci3: command 0x041b tx timeout [ 648.865686][T11435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 648.889146][T11435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 648.914717][T11435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.928369][T11435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.191183][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.233944][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.242568][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.279047][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.303084][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.312381][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.320875][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.328049][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.391505][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.416317][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.448774][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.491771][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.498898][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.537207][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.555571][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.596037][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.641407][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.649496][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.692246][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.732980][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.751502][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.760035][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.804060][T11435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.111345][ C0] net_ratelimit: 3620 callbacks suppressed [ 650.111366][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.128820][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 650.141266][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.153984][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.165915][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 650.177499][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 650.189799][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 650.201451][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.213061][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 650.225482][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.451569][ T5126] Bluetooth: hci3: command 0x040f tx timeout [ 650.551435][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.558921][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 650.571633][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.597528][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 650.607860][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 650.634194][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 650.643224][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 650.654037][T11435] device veth0_vlan entered promiscuous mode [ 650.664278][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 650.673439][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 650.686913][T11435] device veth1_vlan entered promiscuous mode [ 650.737206][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 650.751791][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 650.775719][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 650.797708][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 650.813123][T11435] device veth0_macvtap entered promiscuous mode [ 650.837751][T11435] device veth1_macvtap entered promiscuous mode [ 650.869778][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.891775][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.910136][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.921258][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.941541][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.960548][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.983315][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.001560][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.022532][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.040289][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.057841][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.078202][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 651.099567][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 651.114712][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 651.129198][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 651.148625][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.163300][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.182939][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.201391][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.231073][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.251084][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.260930][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.295359][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.311475][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.322628][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.338066][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.351197][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 651.360416][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 651.373683][T11435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.388939][T11435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.404141][T11435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.417860][T11435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.538405][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.551066][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.585598][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 651.638286][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.662598][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.688921][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:33:38 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:33:38 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 3: syz_clone(0x9a001040, 0x0, 0x0, 0x0, 0x0, 0x0) 04:33:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18}, 0x48) 04:33:38 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:33:38 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:38 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 652.531545][ T5126] Bluetooth: hci3: command 0x0419 tx timeout 04:33:38 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:38 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:38 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:39 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:39 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:39 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:39 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:40 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 653.880713][T11588] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 653.921165][T11588] CPU: 0 PID: 11588 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 653.931632][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 653.941698][T11588] Call Trace: [ 653.944984][T11588] [ 653.947925][T11588] dump_stack_lvl+0xd1/0x138 [ 653.952539][T11588] dump_header+0x10b/0x85f [ 653.956970][T11588] oom_kill_process.cold+0x10/0x15 [ 653.962101][T11588] out_of_memory+0x35c/0x14a0 [ 653.966797][T11588] ? oom_killer_disable+0x280/0x280 [ 653.972007][T11588] ? mark_held_locks+0x9f/0xe0 [ 653.976789][T11588] mem_cgroup_out_of_memory+0x206/0x270 [ 653.982345][T11588] ? mem_cgroup_margin+0x130/0x130 [ 653.987483][T11588] memory_max_write+0x2f9/0x3c0 [ 653.992441][T11588] ? mem_cgroup_force_empty_write+0x160/0x160 [ 653.998519][T11588] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.004689][T11588] ? lockdep_hardirqs_on+0x7d/0x100 [ 654.010249][T11588] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.016438][T11588] cgroup_file_write+0x1e2/0x770 [ 654.021404][T11588] ? mem_cgroup_force_empty_write+0x160/0x160 [ 654.027482][T11588] ? kill_css+0x370/0x370 [ 654.031828][T11588] ? lock_is_held_type+0x103/0x140 [ 654.036961][T11588] ? kill_css+0x370/0x370 [ 654.041313][T11588] kernfs_fop_write_iter+0x3f1/0x600 [ 654.046627][T11588] vfs_write+0x9ed/0xdd0 [ 654.050886][T11588] ? kernel_write+0x630/0x630 [ 654.055754][T11588] ? __fget_files+0x26a/0x440 [ 654.060458][T11588] ksys_write+0x12b/0x250 [ 654.064909][T11588] ? __ia32_sys_read+0xb0/0xb0 [ 654.069693][T11588] ? syscall_enter_from_user_mode+0x26/0xb0 [ 654.075607][T11588] do_syscall_64+0x39/0xb0 [ 654.080044][T11588] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 654.085958][T11588] RIP: 0033:0x7fc79288c0c9 [ 654.090554][T11588] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 654.110186][T11588] RSP: 002b:00007fc7935ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.118608][T11588] RAX: ffffffffffffffda RBX: 00007fc7929abf80 RCX: 00007fc79288c0c9 04:33:40 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 654.126587][T11588] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 654.134565][T11588] RBP: 00007fc7928e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 654.142545][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.150523][T11588] R13: 00007fffc83b0dff R14: 00007fc7935ba300 R15: 0000000000022000 [ 654.158518][T11588] 04:33:40 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:40 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 654.431672][T11588] memory: usage 8596kB, limit 0kB, failcnt 555 [ 654.442692][T11588] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 654.495162][T11588] Memory cgroup stats for /syz2: [ 654.495392][T11588] anon 143360 [ 654.495392][T11588] file 8355840 [ 654.495392][T11588] kernel 294912 [ 654.495392][T11588] kernel_stack 32768 [ 654.495392][T11588] pagetables 77824 [ 654.495392][T11588] sec_pagetables 0 [ 654.495392][T11588] percpu 64 [ 654.495392][T11588] sock 0 [ 654.495392][T11588] vmalloc 0 [ 654.495392][T11588] shmem 8351744 [ 654.495392][T11588] zswap 0 [ 654.495392][T11588] zswapped 0 [ 654.495392][T11588] file_mapped 180224 [ 654.495392][T11588] file_dirty 0 [ 654.495392][T11588] file_writeback 0 [ 654.495392][T11588] swapcached 0 [ 654.495392][T11588] anon_thp 0 [ 654.495392][T11588] file_thp 0 [ 654.495392][T11588] shmem_thp 0 [ 654.495392][T11588] inactive_anon 8314880 [ 654.495392][T11588] active_anon 180224 [ 654.495392][T11588] inactive_file 0 [ 654.495392][T11588] active_file 4096 [ 654.495392][T11588] unevictable 0 [ 654.495392][T11588] slab_reclaimable 65784 [ 654.495392][T11588] slab_unreclaimable 92000 04:33:40 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 654.495392][T11588] slab 157784 04:33:41 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:41 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:41 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 655.067699][T11588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11583,uid=0 [ 655.123223][ C0] net_ratelimit: 1920 callbacks suppressed [ 655.123244][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.140746][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 655.151297][T11588] Memory cgroup out of memory: Killed process 11588 (syz-executor.2) total-vm:54540kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 04:33:41 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:41 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:41 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:41 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 655.153085][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.182059][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.194127][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 655.205763][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:33:41 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 655.218541][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 655.230181][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.261965][T11435] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 655.299939][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 655.312418][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.376111][T11435] CPU: 1 PID: 11435 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 655.386674][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 655.396748][T11435] Call Trace: [ 655.400238][T11435] [ 655.403173][T11435] dump_stack_lvl+0xd1/0x138 [ 655.407789][T11435] dump_header+0x10b/0x85f [ 655.412219][T11435] oom_kill_process.cold+0x10/0x15 [ 655.417355][T11435] out_of_memory+0x35c/0x14a0 [ 655.422056][T11435] ? find_held_lock+0x2d/0x110 [ 655.426855][T11435] ? oom_killer_disable+0x280/0x280 [ 655.432069][T11435] ? find_held_lock+0x2d/0x110 [ 655.436859][T11435] mem_cgroup_out_of_memory+0x206/0x270 [ 655.442437][T11435] ? mem_cgroup_margin+0x130/0x130 [ 655.447654][T11435] ? lock_downgrade+0x6e0/0x6e0 [ 655.452537][T11435] try_charge_memcg+0xefb/0x12f0 [ 655.457513][T11435] ? mem_cgroup_handle_over_high+0x520/0x520 [ 655.463604][T11435] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 655.469615][T11435] ? lock_downgrade+0x6e0/0x6e0 [ 655.474487][T11435] ? lock_downgrade+0x6e0/0x6e0 [ 655.479349][T11435] ? rcu_read_unlock+0x9/0x60 [ 655.484146][T11435] obj_cgroup_charge+0x2af/0x5e0 [ 655.489111][T11435] ? __alloc_file+0x21/0x270 [ 655.493740][T11435] kmem_cache_alloc+0xb5/0x430 [ 655.498521][T11435] __alloc_file+0x21/0x270 [ 655.502953][T11435] alloc_empty_file+0x71/0x170 [ 655.507740][T11435] path_openat+0xe1/0x2a50 [ 655.512188][T11435] ? path_lookupat+0x840/0x840 [ 655.516998][T11435] do_filp_open+0x1ba/0x410 [ 655.521607][T11435] ? may_open_dev+0xf0/0xf0 [ 655.526131][T11435] ? find_held_lock+0x2d/0x110 [ 655.530921][T11435] ? do_raw_spin_lock+0x124/0x2b0 [ 655.535971][T11435] ? rwlock_bug.part.0+0x90/0x90 [ 655.540922][T11435] ? _raw_spin_unlock+0x28/0x40 [ 655.545802][T11435] ? alloc_fd+0x2d8/0x6d0 [ 655.550151][T11435] do_sys_openat2+0x16d/0x4c0 [ 655.554843][T11435] ? path_umount+0x6b8/0x10b0 [ 655.559531][T11435] ? putname+0x102/0x140 [ 655.563791][T11435] ? build_open_flags+0x6f0/0x6f0 [ 655.568829][T11435] ? may_mount+0xa0/0xa0 [ 655.573090][T11435] __x64_sys_openat+0x143/0x1f0 [ 655.577951][T11435] ? __ia32_sys_open+0x1c0/0x1c0 [ 655.582897][T11435] ? syscall_enter_from_user_mode+0x26/0xb0 [ 655.588805][T11435] do_syscall_64+0x39/0xb0 [ 655.593244][T11435] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 655.599170][T11435] RIP: 0033:0x7fc79288bc38 [ 655.603591][T11435] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 655.623206][T11435] RSP: 002b:00007fffc83afef0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 655.631633][T11435] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007fc79288bc38 [ 655.639790][T11435] RDX: 0000000000090800 RSI: 00007fffc83b10e0 RDI: 00000000ffffff9c [ 655.647940][T11435] RBP: 00007fffc83b10bc R08: 0000000000090800 R09: 00007fffc83b10e0 [ 655.656022][T11435] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fc7928e6b24 [ 655.664014][T11435] R13: 00007fffc83b10e0 R14: 0000000000000018 R15: 00007fffc83b1120 [ 655.672014][T11435] 04:33:41 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:42 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:42 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:42 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:42 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 656.464055][T11435] memory: usage 8300kB, limit 0kB, failcnt 574 [ 656.470509][T11435] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 656.487842][T11435] Memory cgroup stats for /syz2: [ 656.488062][T11435] anon 45056 [ 656.488062][T11435] file 8355840 [ 656.488062][T11435] kernel 98304 [ 656.488062][T11435] kernel_stack 0 [ 656.488062][T11435] pagetables 8192 [ 656.488062][T11435] sec_pagetables 0 [ 656.488062][T11435] percpu 64 [ 656.488062][T11435] sock 0 [ 656.488062][T11435] vmalloc 0 [ 656.488062][T11435] shmem 8351744 [ 656.488062][T11435] zswap 0 [ 656.488062][T11435] zswapped 0 [ 656.488062][T11435] file_mapped 147456 [ 656.488062][T11435] file_dirty 4096 [ 656.488062][T11435] file_writeback 0 [ 656.488062][T11435] swapcached 0 [ 656.488062][T11435] anon_thp 0 [ 656.488062][T11435] file_thp 0 [ 656.488062][T11435] shmem_thp 0 [ 656.488062][T11435] inactive_anon 8216576 [ 656.488062][T11435] active_anon 180224 04:33:42 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 656.488062][T11435] inactive_file 0 [ 656.488062][T11435] active_file 4096 [ 656.488062][T11435] unevictable 0 [ 656.488062][T11435] slab_reclaimable 31648 [ 656.488062][T11435] slab_unreclaimable 44384 [ 656.488062][T11435] slab 76032 04:33:42 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 656.796355][T11435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11435,uid=0 [ 656.879819][T11435] Memory cgroup out of memory: Killed process 11435 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 657.241699][ T8481] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 657.265226][ T8481] CPU: 1 PID: 8481 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 657.276132][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 657.286321][ T8481] Call Trace: [ 657.289620][ T8481] [ 657.292571][ T8481] dump_stack_lvl+0xd1/0x138 [ 657.297387][ T8481] dump_header+0x10b/0x85f [ 657.301940][ T8481] oom_kill_process.cold+0x10/0x15 [ 657.307091][ T8481] out_of_memory+0x35c/0x14a0 [ 657.311813][ T8481] ? oom_killer_disable+0x280/0x280 [ 657.317044][ T8481] ? find_held_lock+0x2d/0x110 [ 657.321862][ T8481] mem_cgroup_out_of_memory+0x206/0x270 [ 657.327454][ T8481] ? mem_cgroup_margin+0x130/0x130 [ 657.332594][ T8481] ? lock_downgrade+0x6e0/0x6e0 [ 657.337495][ T8481] try_charge_memcg+0xefb/0x12f0 [ 657.342475][ T8481] ? mem_cgroup_handle_over_high+0x520/0x520 [ 657.348491][ T8481] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 657.354244][ T8481] ? lock_downgrade+0x6e0/0x6e0 [ 657.359128][ T8481] ? lock_downgrade+0x6e0/0x6e0 [ 657.364007][ T8481] ? rcu_read_unlock+0x9/0x60 [ 657.368742][ T8481] obj_cgroup_charge+0x2af/0x5e0 [ 657.373718][ T8481] ? sk_prot_alloc+0x5f/0x290 [ 657.378425][ T8481] kmem_cache_alloc+0xb5/0x430 [ 657.383220][ T8481] ? inet_create+0x324/0xea0 [ 657.387879][ T8481] sk_prot_alloc+0x5f/0x290 [ 657.392416][ T8481] sk_alloc+0x3a/0x7a0 [ 657.396528][ T8481] inet_create+0x399/0xea0 [ 657.401077][ T8481] __sock_create+0x359/0x790 [ 657.405775][ T8481] __sys_socket+0x133/0x250 [ 657.410315][ T8481] ? __sys_socket_file+0x1f0/0x1f0 [ 657.415565][ T8481] __x64_sys_socket+0x73/0xb0 [ 657.420295][ T8481] do_syscall_64+0x39/0xb0 [ 657.424768][ T8481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.430700][ T8481] RIP: 0033:0x7f6bcc08d747 [ 657.435267][ T8481] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 657.454913][ T8481] RSP: 002b:00007ffc7dec1e38 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 657.463453][ T8481] RAX: ffffffffffffffda RBX: 00007ffc7dec25a0 RCX: 00007f6bcc08d747 [ 657.471455][ T8481] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 657.479456][ T8481] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc7dec23b0 [ 657.487458][ T8481] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 657.495459][ T8481] R13: 00000000000a0543 R14: 0000000000000018 R15: 00007ffc7dec25e0 [ 657.503495][ T8481] [ 657.719568][ T8481] memory: usage 276kB, limit 0kB, failcnt 254 [ 657.734362][ T8481] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 657.751549][ T8481] Memory cgroup stats for /syz4: [ 657.751773][ T8481] anon 49152 [ 657.751773][ T8481] file 126976 [ 657.751773][ T8481] kernel 106496 [ 657.751773][ T8481] kernel_stack 0 [ 657.751773][ T8481] pagetables 8192 [ 657.751773][ T8481] sec_pagetables 0 [ 657.751773][ T8481] percpu 0 [ 657.751773][ T8481] sock 0 [ 657.751773][ T8481] vmalloc 0 [ 657.751773][ T8481] shmem 122880 [ 657.751773][ T8481] zswap 0 [ 657.751773][ T8481] zswapped 0 [ 657.751773][ T8481] file_mapped 122880 [ 657.751773][ T8481] file_dirty 0 [ 657.751773][ T8481] file_writeback 0 [ 657.751773][ T8481] swapcached 0 [ 657.751773][ T8481] anon_thp 0 [ 657.751773][ T8481] file_thp 0 [ 657.751773][ T8481] shmem_thp 0 [ 657.751773][ T8481] inactive_anon 49152 [ 657.751773][ T8481] active_anon 122880 [ 657.751773][ T8481] inactive_file 0 [ 657.751773][ T8481] active_file 4096 [ 657.751773][ T8481] unevictable 0 [ 657.751773][ T8481] slab_reclaimable 32680 [ 657.751773][ T8481] slab_unreclaimable 56080 [ 657.751773][ T8481] slab 88760 [ 657.876172][ T8481] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8481,uid=0 [ 657.919670][ T8481] Memory cgroup out of memory: Killed process 8481 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 04:33:44 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:44 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:33:44 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:44 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:44 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:33:44 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 658.289400][ T5204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:44 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:44 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:44 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:33:44 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 658.619370][ T5204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:45 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:33:45 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:45 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:45 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:45 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:33:45 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 659.582289][ T5204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:46 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:46 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:33:46 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 660.132005][ C0] net_ratelimit: 1556 callbacks suppressed [ 660.132025][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 660.149579][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.161302][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 660.173800][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.187583][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.199292][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 660.211834][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.224785][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.240398][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 660.252091][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:33:46 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 660.590490][ T5204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:33:46 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:46 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 662.062204][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.076703][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 662.087574][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 662.104593][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 662.121870][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 662.129307][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.635966][T11761] chnl_net:caif_netlink_parms(): no params data found [ 662.857330][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.887598][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.922225][T11761] device bridge_slave_0 entered promiscuous mode [ 662.989576][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.001149][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.034282][T11761] device bridge_slave_1 entered promiscuous mode [ 663.051130][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.059160][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.102087][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.117162][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.132903][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.180961][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.286477][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.469469][T11761] team0: Port device team_slave_0 added [ 663.567593][T11761] team0: Port device team_slave_1 added [ 663.694650][ T5204] device hsr_slave_0 left promiscuous mode [ 663.741325][ T5204] device hsr_slave_1 left promiscuous mode [ 663.770287][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.779304][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.808676][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.850542][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.882589][ T5204] device bridge_slave_1 left promiscuous mode [ 663.890900][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.940988][ T5204] device bridge_slave_0 left promiscuous mode [ 663.947304][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.046184][ T5204] device veth1_macvtap left promiscuous mode [ 664.054411][ T5204] device veth0_macvtap left promiscuous mode [ 664.060559][ T5204] device veth1_vlan left promiscuous mode [ 664.067175][ T5204] device veth0_vlan left promiscuous mode [ 664.217313][ T5119] Bluetooth: hci0: command 0x0409 tx timeout [ 664.740351][ T5204] team0 (unregistering): Port device team_slave_1 removed [ 664.786701][ T5204] team0 (unregistering): Port device team_slave_0 removed [ 664.828289][ T5204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.865935][ T5204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.080003][ T5204] bond0 (unregistering): Released all slaves [ 665.141786][ C0] net_ratelimit: 3697 callbacks suppressed [ 665.141808][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.159245][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 665.170622][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 665.171354][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 665.183092][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 665.199451][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.212015][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 665.224282][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.237012][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.248646][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 665.260392][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.308215][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.319364][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.368575][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.382796][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.389779][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.417955][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.593504][T11761] device hsr_slave_0 entered promiscuous mode [ 665.603207][T11761] device hsr_slave_1 entered promiscuous mode [ 665.670023][T11783] chnl_net:caif_netlink_parms(): no params data found [ 666.157865][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.191229][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.199655][T11783] device bridge_slave_0 entered promiscuous mode [ 666.285472][ T5119] Bluetooth: hci0: command 0x041b tx timeout [ 666.300909][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.331160][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.339535][T11783] device bridge_slave_1 entered promiscuous mode [ 666.504428][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.551387][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.675805][T11783] team0: Port device team_slave_0 added [ 666.694641][T11783] team0: Port device team_slave_1 added [ 666.838149][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.857619][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.941121][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.015860][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.041334][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.169076][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.241318][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 667.374436][T11783] device hsr_slave_0 entered promiscuous mode [ 667.396284][T11783] device hsr_slave_1 entered promiscuous mode [ 667.441223][T11783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.449082][T11783] Cannot create hsr debugfs directory [ 667.919501][T11761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 667.997906][T11783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.027584][T11761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.049391][T11761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.068918][T11761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.160005][T11783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.338105][T11783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.361224][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 668.438673][T11761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.552796][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.671829][T11783] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.727152][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.735198][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.781423][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.790158][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.821606][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.828744][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.887180][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.896112][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.930292][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.937508][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.974419][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.024108][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.033079][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.059422][T11761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.125908][T11761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.161718][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.169938][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.179968][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.204751][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.229055][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.238059][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.262179][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.291719][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.332151][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 669.536808][T11783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 669.590629][T11783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 669.625979][T11783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 669.673427][T11783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 669.910765][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.969750][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.978561][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.015383][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.035678][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.062312][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.074469][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.081683][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.152214][ C0] net_ratelimit: 2353 callbacks suppressed [ 670.152233][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 670.169483][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.180883][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 670.192649][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.206402][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.218101][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 670.229855][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.242503][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.254260][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 670.265791][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 670.298948][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.307939][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.329360][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.343665][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.350793][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.366338][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.380626][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.395423][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 670.408675][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.451323][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 670.469576][T11761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.484353][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.496164][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.505865][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.514958][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.523818][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.532653][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.542893][T11783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 670.573132][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.605775][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 670.632231][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 670.806251][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 670.822403][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 670.844689][T11761] device veth0_vlan entered promiscuous mode [ 670.870009][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 670.878162][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.916785][T11761] device veth1_vlan entered promiscuous mode [ 671.007746][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 671.026406][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 671.060166][T11761] device veth0_macvtap entered promiscuous mode [ 671.151728][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 671.182889][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 671.203003][T11761] device veth1_macvtap entered promiscuous mode [ 671.238741][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 671.247297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 671.269231][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.281583][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.301670][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.312757][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.338955][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.350574][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.360854][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.374244][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.401989][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 671.408266][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.419146][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.438962][T11761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.465862][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 671.483029][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.503187][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.514943][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.525850][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.536630][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.546878][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.561720][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.576339][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.587328][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.603602][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.631089][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.653104][T11761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.681131][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 671.703526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.717892][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.741562][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.753762][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.794275][T11761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.809030][T11761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.831313][T11761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.840108][T11761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.049777][ T958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.081070][ T958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.093570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 672.172108][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.180409][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.218764][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 672.540172][T11875] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 672.577981][T11875] CPU: 1 PID: 11875 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 672.588454][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 672.598541][T11875] Call Trace: [ 672.601846][T11875] [ 672.604802][T11875] dump_stack_lvl+0xd1/0x138 [ 672.609447][T11875] dump_header+0x10b/0x85f [ 672.613905][T11875] oom_kill_process.cold+0x10/0x15 [ 672.619059][T11875] out_of_memory+0x35c/0x14a0 [ 672.623780][T11875] ? oom_killer_disable+0x280/0x280 [ 672.629025][T11875] mem_cgroup_out_of_memory+0x206/0x270 [ 672.634621][T11875] ? mem_cgroup_margin+0x130/0x130 [ 672.639790][T11875] memory_max_write+0x2f9/0x3c0 [ 672.644704][T11875] ? mem_cgroup_force_empty_write+0x160/0x160 [ 672.650816][T11875] ? lock_release+0x810/0x810 [ 672.655538][T11875] cgroup_file_write+0x1e2/0x770 [ 672.660517][T11875] ? mem_cgroup_force_empty_write+0x160/0x160 [ 672.666618][T11875] ? kill_css+0x370/0x370 [ 672.671500][T11875] ? __virt_addr_valid+0x61/0x2e0 [ 672.676580][T11875] ? kill_css+0x370/0x370 [ 672.680957][T11875] kernfs_fop_write_iter+0x3f1/0x600 [ 672.686299][T11875] vfs_write+0x9ed/0xdd0 [ 672.690593][T11875] ? kernel_write+0x630/0x630 [ 672.695317][T11875] ? __fget_files+0x26a/0x440 [ 672.700050][T11875] ksys_write+0x12b/0x250 [ 672.704420][T11875] ? __ia32_sys_read+0xb0/0xb0 [ 672.709229][T11875] ? syscall_enter_from_user_mode+0x26/0xb0 [ 672.715174][T11875] do_syscall_64+0x39/0xb0 [ 672.719667][T11875] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 672.725596][T11875] RIP: 0033:0x7f5ae6a8c0c9 [ 672.730040][T11875] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 672.749684][T11875] RSP: 002b:00007f5ae7704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.758134][T11875] RAX: ffffffffffffffda RBX: 00007f5ae6bac050 RCX: 00007f5ae6a8c0c9 [ 672.766134][T11875] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 672.766496][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.774104][T11875] RBP: 00007f5ae6ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 672.774123][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.774138][T11875] R13: 00007ffe39bf4dcf R14: 00007f5ae7704300 R15: 0000000000022000 [ 672.774176][T11875] [ 672.784264][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.836617][T11875] memory: usage 8704kB, limit 0kB, failcnt 591 [ 672.868262][T11875] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.882647][T11875] Memory cgroup stats for /syz2: [ 672.882860][T11875] anon 126976 [ 672.882860][T11875] file 8355840 [ 672.882860][T11875] kernel 397312 [ 672.882860][T11875] kernel_stack 131072 [ 672.882860][T11875] pagetables 81920 [ 672.882860][T11875] sec_pagetables 0 [ 672.882860][T11875] percpu 64 [ 672.882860][T11875] sock 0 [ 672.882860][T11875] vmalloc 0 [ 672.882860][T11875] shmem 8351744 [ 672.882860][T11875] zswap 0 [ 672.882860][T11875] zswapped 0 [ 672.882860][T11875] file_mapped 180224 [ 672.882860][T11875] file_dirty 0 [ 672.882860][T11875] file_writeback 0 [ 672.882860][T11875] swapcached 0 [ 672.882860][T11875] anon_thp 0 [ 672.882860][T11875] file_thp 0 [ 672.882860][T11875] shmem_thp 0 [ 672.882860][T11875] inactive_anon 8298496 [ 672.882860][T11875] active_anon 180224 [ 672.882860][T11875] inactive_file 0 [ 672.882860][T11875] active_file 4096 [ 672.882860][T11875] unevictable 0 [ 672.882860][T11875] slab_reclaimable 51888 [ 672.882860][T11875] slab_unreclaimable 103888 [ 672.882860][T11875] slab 155776 [ 672.951659][T11783] device veth0_vlan entered promiscuous mode [ 673.005776][T11875] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11871,uid=0 [ 673.046196][T11875] Memory cgroup out of memory: Killed process 11871 (syz-executor.2) total-vm:54804kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 04:33:59 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:33:59 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 673.130020][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.159572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.197898][T11783] device veth1_vlan entered promiscuous mode [ 673.246900][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.254939][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.471513][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.483123][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.513966][T11783] device veth0_macvtap entered promiscuous mode [ 673.587877][T11783] device veth1_macvtap entered promiscuous mode [ 673.707615][ T5204] device hsr_slave_0 left promiscuous mode [ 673.730007][ T5204] device hsr_slave_1 left promiscuous mode [ 673.768236][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.800001][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.820747][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.877272][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.894642][ T5204] device bridge_slave_1 left promiscuous mode [ 673.900988][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.927037][ T5204] device bridge_slave_0 left promiscuous mode [ 673.933385][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.963641][ T5204] device veth1_macvtap left promiscuous mode [ 673.969732][ T5204] device veth0_macvtap left promiscuous mode [ 673.991314][ T5204] device veth1_vlan left promiscuous mode [ 673.997200][ T5204] device veth0_vlan left promiscuous mode [ 674.703513][ T5204] team0 (unregistering): Port device team_slave_1 removed [ 674.754671][ T5204] team0 (unregistering): Port device team_slave_0 removed [ 674.790629][ T5204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.827246][ T5204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.061883][ T5204] bond0 (unregistering): Released all slaves [ 675.158640][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.162039][ C0] net_ratelimit: 3530 callbacks suppressed [ 675.162056][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 675.181154][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.186609][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.207670][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 675.211100][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.221440][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.242828][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.244114][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.254454][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 675.255535][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.287819][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.289266][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.298469][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.310400][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 675.324007][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.331151][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 675.341662][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.389185][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.443809][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.467743][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.550486][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.563892][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 675.589355][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.599871][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.621713][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.644367][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.680038][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.690821][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.708588][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.736929][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.762206][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.788383][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.806406][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.832581][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.873772][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.909064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.918751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.939174][T11783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.956422][T11783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.973942][T11783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.006401][T11783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.144444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.167693][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.203224][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.205812][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 676.220156][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.240818][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:34:02 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:02 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:02 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:02 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:02 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:02 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 676.581331][T11761] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 676.634708][T11761] CPU: 1 PID: 11761 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 676.645310][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 676.655416][T11761] Call Trace: [ 676.658727][T11761] [ 676.661680][T11761] dump_stack_lvl+0xd1/0x138 [ 676.666407][T11761] dump_header+0x10b/0x85f [ 676.671038][T11761] oom_kill_process.cold+0x10/0x15 [ 676.676198][T11761] out_of_memory+0x35c/0x14a0 [ 676.680914][T11761] ? find_held_lock+0x2d/0x110 [ 676.685738][T11761] ? oom_killer_disable+0x280/0x280 [ 676.690985][T11761] ? find_held_lock+0x2d/0x110 [ 676.695870][T11761] mem_cgroup_out_of_memory+0x206/0x270 [ 676.701444][T11761] ? mem_cgroup_margin+0x130/0x130 [ 676.706582][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 676.711481][T11761] try_charge_memcg+0xefb/0x12f0 [ 676.716460][T11761] ? mem_cgroup_handle_over_high+0x520/0x520 [ 676.722523][T11761] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 676.728359][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 676.733256][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 676.738147][T11761] ? rcu_read_unlock+0x9/0x60 [ 676.742871][T11761] obj_cgroup_charge+0x2af/0x5e0 [ 676.747828][T11761] ? copy_process+0x3aa/0x7520 [ 676.752773][T11761] kmem_cache_alloc_node+0xb7/0x460 [ 676.757993][T11761] copy_process+0x3aa/0x7520 [ 676.762598][T11761] ? _raw_spin_unlock+0x28/0x40 [ 676.767464][T11761] ? wp_page_reuse+0x197/0x570 [ 676.772245][T11761] ? do_wp_page+0x844/0x3370 [ 676.776859][T11761] ? __cleanup_sighand+0xb0/0xb0 [ 676.781804][T11761] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 676.787210][T11761] ? rwlock_bug.part.0+0x90/0x90 [ 676.792156][T11761] ? lock_chain_count+0x20/0x20 [ 676.797019][T11761] kernel_clone+0xeb/0x990 [ 676.801456][T11761] ? create_io_thread+0xf0/0xf0 [ 676.806321][T11761] ? find_held_lock+0x2d/0x110 [ 676.811109][T11761] __do_sys_clone+0xba/0x100 [ 676.815712][T11761] ? kernel_clone+0x990/0x990 [ 676.820410][T11761] ? syscall_enter_from_user_mode+0x26/0xb0 [ 676.826321][T11761] do_syscall_64+0x39/0xb0 [ 676.830756][T11761] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 676.836679][T11761] RIP: 0033:0x7f5ae6a89dfb [ 676.841108][T11761] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 676.860806][T11761] RSP: 002b:00007ffe39bf5010 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.869317][T11761] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ae6a89dfb [ 676.877289][T11761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 04:34:02 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:03 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 676.885264][T11761] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555563f4400 [ 676.893238][T11761] R10: 00005555563f46d0 R11: 0000000000000246 R12: 0000000000000001 [ 676.901218][T11761] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe39bf50f0 [ 676.909210][T11761] 04:34:03 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:03 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:03 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:03 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 677.457197][T11761] memory: usage 8284kB, limit 0kB, failcnt 610 [ 677.478892][T11761] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.521405][T11761] Memory cgroup stats for /syz2: [ 677.521641][T11761] anon 40960 [ 677.521641][T11761] file 8355840 [ 677.521641][T11761] kernel 86016 [ 677.521641][T11761] kernel_stack 0 [ 677.521641][T11761] pagetables 8192 [ 677.521641][T11761] sec_pagetables 0 [ 677.521641][T11761] percpu 0 [ 677.521641][T11761] sock 0 [ 677.521641][T11761] vmalloc 0 [ 677.521641][T11761] shmem 8351744 [ 677.521641][T11761] zswap 0 [ 677.521641][T11761] zswapped 0 [ 677.521641][T11761] file_mapped 147456 [ 677.521641][T11761] file_dirty 4096 [ 677.521641][T11761] file_writeback 0 [ 677.521641][T11761] swapcached 0 [ 677.521641][T11761] anon_thp 0 [ 677.521641][T11761] file_thp 0 [ 677.521641][T11761] shmem_thp 0 [ 677.521641][T11761] inactive_anon 8212480 [ 677.521641][T11761] active_anon 180224 [ 677.521641][T11761] inactive_file 0 [ 677.521641][T11761] active_file 4096 [ 677.521641][T11761] unevictable 0 [ 677.521641][T11761] slab_reclaimable 34224 [ 677.521641][T11761] slab_unreclaimable 32296 [ 677.521641][T11761] slab 66520 04:34:04 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:04 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:04 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 677.982626][T11761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11761,uid=0 [ 678.103428][T11761] Memory cgroup out of memory: Killed process 11761 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 678.185589][T11783] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 678.201144][T11783] CPU: 0 PID: 11783 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 678.211605][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 678.221777][T11783] Call Trace: [ 678.225084][T11783] [ 678.228125][T11783] dump_stack_lvl+0xd1/0x138 [ 678.232761][T11783] dump_header+0x10b/0x85f [ 678.237232][T11783] oom_kill_process.cold+0x10/0x15 [ 678.242382][T11783] out_of_memory+0x35c/0x14a0 [ 678.247109][T11783] ? oom_killer_disable+0x280/0x280 [ 678.252339][T11783] ? find_held_lock+0x2d/0x110 [ 678.257149][T11783] mem_cgroup_out_of_memory+0x206/0x270 [ 678.262744][T11783] ? mem_cgroup_margin+0x130/0x130 [ 678.267896][T11783] ? lock_downgrade+0x6e0/0x6e0 [ 678.272881][T11783] try_charge_memcg+0xefb/0x12f0 [ 678.277861][T11783] ? mem_cgroup_handle_over_high+0x520/0x520 [ 678.283877][T11783] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 678.289639][T11783] ? lock_downgrade+0x6e0/0x6e0 [ 678.294549][T11783] obj_cgroup_charge+0x2af/0x5e0 [ 678.299619][T11783] kmem_cache_alloc_lru+0x145/0x760 [ 678.304851][T11783] ? __d_alloc+0x32/0x980 [ 678.309230][T11783] __d_alloc+0x32/0x980 [ 678.313424][T11783] ? __lock_acquire+0x166e/0x56d0 [ 678.318486][T11783] d_alloc+0x4e/0x240 [ 678.322514][T11783] d_alloc_parallel+0xe8/0x1410 [ 678.332624][T11783] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 678.338644][T11783] ? __d_lookup_rcu+0x4c0/0x4c0 [ 678.343625][T11783] ? lockdep_init_map_type+0x21e/0x800 [ 678.349117][T11783] ? lockdep_init_map_type+0x21e/0x800 [ 678.354620][T11783] __lookup_slow+0x193/0x460 [ 678.359257][T11783] ? __lookup_hash+0x180/0x180 [ 678.364068][T11783] ? azx_position_ok.cold+0x1ae/0x281 [ 678.369577][T11783] ? azx_position_ok.cold+0x1ae/0x281 [ 678.375089][T11783] ? lookup_fast+0x14e/0x520 [ 678.379785][T11783] walk_component+0x33f/0x5a0 [ 678.384512][T11783] path_lookupat+0x1ba/0x840 [ 678.389150][T11783] filename_lookup+0x1d2/0x590 [ 678.393959][T11783] ? may_linkat+0x500/0x500 [ 678.398498][T11783] ? __might_fault+0xd9/0x180 [ 678.403270][T11783] ? __phys_addr_symbol+0x30/0x70 [ 678.408341][T11783] ? __check_object_size+0x2e2/0x5a0 [ 678.413777][T11783] ? strncpy_from_user+0x28b/0x3c0 [ 678.418937][T11783] ? getname_flags.part.0+0x1dd/0x4f0 [ 678.424367][T11783] user_path_at_empty+0x46/0x60 [ 678.429278][T11783] __x64_sys_umount+0xfc/0x190 [ 678.434084][T11783] ? path_umount+0x10b0/0x10b0 [ 678.438900][T11783] ? syscall_enter_from_user_mode+0x26/0xb0 [ 678.444840][T11783] do_syscall_64+0x39/0xb0 [ 678.449305][T11783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 678.455246][T11783] RIP: 0033:0x7f747028d537 [ 678.459692][T11783] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 678.479421][T11783] RSP: 002b:00007ffd72d64238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 678.487877][T11783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f747028d537 [ 678.495929][T11783] RDX: 00007ffd72d6430e RSI: 000000000000000a RDI: 00007ffd72d64300 [ 678.503948][T11783] RBP: 00007ffd72d64300 R08: 00000000ffffffff R09: 00007ffd72d640d0 [ 678.512382][T11783] R10: 00005555563188e3 R11: 0000000000000246 R12: 00007f74702e6b24 [ 678.520431][T11783] R13: 00007ffd72d653c0 R14: 0000555556318810 R15: 00007ffd72d65400 [ 678.528462][T11783] [ 678.649839][T11783] memory: usage 268kB, limit 0kB, failcnt 290 [ 678.664409][T11783] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.707916][T11783] Memory cgroup stats for /syz4: [ 678.708141][T11783] anon 45056 [ 678.708141][T11783] file 122880 [ 678.708141][T11783] kernel 106496 [ 678.708141][T11783] kernel_stack 0 [ 678.708141][T11783] pagetables 8192 [ 678.708141][T11783] sec_pagetables 0 [ 678.708141][T11783] percpu 0 [ 678.708141][T11783] sock 0 [ 678.708141][T11783] vmalloc 0 [ 678.708141][T11783] shmem 122880 [ 678.708141][T11783] zswap 0 [ 678.708141][T11783] zswapped 0 [ 678.708141][T11783] file_mapped 122880 [ 678.708141][T11783] file_dirty 0 [ 678.708141][T11783] file_writeback 0 [ 678.708141][T11783] swapcached 0 [ 678.708141][T11783] anon_thp 0 [ 678.708141][T11783] file_thp 0 [ 678.708141][T11783] shmem_thp 0 [ 678.708141][T11783] inactive_anon 45056 [ 678.708141][T11783] active_anon 122880 [ 678.708141][T11783] inactive_file 0 [ 678.708141][T11783] active_file 0 [ 678.708141][T11783] unevictable 0 [ 678.708141][T11783] slab_reclaimable 16304 [ 678.708141][T11783] slab_unreclaimable 72760 [ 678.708141][T11783] slab 89064 [ 678.917253][T11783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11783,uid=0 [ 678.961243][T11783] Memory cgroup out of memory: Killed process 11783 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 679.001818][ T7725] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 679.026176][ T7725] CPU: 1 PID: 7725 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 679.036556][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 679.046629][ T7725] Call Trace: [ 679.049926][ T7725] [ 679.052876][ T7725] dump_stack_lvl+0xd1/0x138 [ 679.057502][ T7725] dump_header+0x10b/0x85f [ 679.061966][ T7725] oom_kill_process.cold+0x10/0x15 [ 679.067116][ T7725] out_of_memory+0x35c/0x14a0 [ 679.071933][ T7725] ? oom_killer_disable+0x280/0x280 [ 679.077159][ T7725] ? find_held_lock+0x2d/0x110 [ 679.081963][ T7725] mem_cgroup_out_of_memory+0x206/0x270 [ 679.087542][ T7725] ? mem_cgroup_margin+0x130/0x130 [ 679.092768][ T7725] ? lock_downgrade+0x6e0/0x6e0 [ 679.097664][ T7725] try_charge_memcg+0xefb/0x12f0 [ 679.102660][ T7725] ? mem_cgroup_handle_over_high+0x520/0x520 [ 679.108674][ T7725] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 679.114405][ T7725] ? lock_downgrade+0x6e0/0x6e0 [ 679.119292][ T7725] obj_cgroup_charge+0x2af/0x5e0 [ 679.124251][ T7725] kmem_cache_alloc_lru+0x145/0x760 [ 679.129543][ T7725] ? ext4_alloc_inode+0x28/0x680 [ 679.134504][ T7725] ? ext4_free_in_core_inode+0x70/0x70 [ 679.139994][ T7725] ext4_alloc_inode+0x28/0x680 [ 679.144772][ T7725] ? ext4_free_in_core_inode+0x70/0x70 [ 679.150266][ T7725] alloc_inode+0x61/0x230 [ 679.154622][ T7725] iget_locked+0x1bb/0x700 [ 679.159140][ T7725] __ext4_iget+0x3af/0x4230 [ 679.163676][ T7725] ? ext4_get_projid+0x190/0x190 [ 679.168888][ T7725] ? ext4_fname_prepare_lookup+0x163/0x200 [ 679.174706][ T7725] ? ext4_fname_setup_filename+0x110/0x110 [ 679.180532][ T7725] ? rcu_read_lock_sched_held+0x3e/0x70 [ 679.186099][ T7725] ext4_lookup+0x387/0x700 [ 679.190532][ T7725] ? ext4_resetent+0x2d0/0x2d0 [ 679.195327][ T7725] __lookup_slow+0x24c/0x460 [ 679.199934][ T7725] ? __lookup_hash+0x180/0x180 [ 679.204714][ T7725] ? azx_position_ok.cold+0x1ae/0x281 [ 679.210110][ T7725] ? azx_position_ok.cold+0x1ae/0x281 [ 679.215502][ T7725] ? lookup_fast+0x14e/0x520 [ 679.220285][ T7725] walk_component+0x33f/0x5a0 [ 679.224988][ T7725] path_lookupat+0x1ba/0x840 [ 679.229599][ T7725] filename_lookup+0x1d2/0x590 [ 679.234394][ T7725] ? may_linkat+0x500/0x500 [ 679.239460][ T7725] ? __might_fault+0xd9/0x180 [ 679.244163][ T7725] ? __phys_addr_symbol+0x30/0x70 [ 679.249291][ T7725] ? __check_object_size+0x2e2/0x5a0 [ 679.254608][ T7725] ? strncpy_from_user+0x28b/0x3c0 [ 679.259832][ T7725] ? getname_flags.part.0+0x1dd/0x4f0 [ 679.265257][ T7725] user_path_at_empty+0x46/0x60 [ 679.270130][ T7725] __x64_sys_umount+0xfc/0x190 [ 679.275085][ T7725] ? path_umount+0x10b0/0x10b0 [ 679.279867][ T7725] ? syscall_enter_from_user_mode+0x26/0xb0 [ 679.285838][ T7725] do_syscall_64+0x39/0xb0 [ 679.290316][ T7725] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 679.296222][ T7725] RIP: 0033:0x7f1622e8d537 [ 679.300645][ T7725] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 679.320257][ T7725] RSP: 002b:00007ffd697078e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 679.328680][ T7725] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1622e8d537 [ 679.336657][ T7725] RDX: 00007ffd697079bf RSI: 000000000000000a RDI: 00007ffd697079b0 [ 679.344636][ T7725] RBP: 00007ffd697079b0 R08: 00000000ffffffff R09: 00007ffd69707780 [ 679.352613][ T7725] R10: 00005555565b5893 R11: 0000000000000246 R12: 00007f1622ee6b24 [ 679.360698][ T7725] R13: 00007ffd69708a70 R14: 00005555565b5810 R15: 00007ffd69708ab0 [ 679.368686][ T7725] [ 679.406056][ T7725] memory: usage 224kB, limit 0kB, failcnt 213 [ 679.413978][ T7725] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 679.436637][ T7725] Memory cgroup stats for /syz5: [ 679.436845][ T7725] anon 40960 [ 679.436845][ T7725] file 126976 [ 679.436845][ T7725] kernel 61440 [ 679.436845][ T7725] kernel_stack 0 [ 679.436845][ T7725] pagetables 8192 [ 679.436845][ T7725] sec_pagetables 0 [ 679.436845][ T7725] percpu 0 [ 679.436845][ T7725] sock 0 [ 679.436845][ T7725] vmalloc 0 [ 679.436845][ T7725] shmem 126976 [ 679.436845][ T7725] zswap 0 [ 679.436845][ T7725] zswapped 0 [ 679.436845][ T7725] file_mapped 126976 [ 679.436845][ T7725] file_dirty 0 [ 679.436845][ T7725] file_writeback 0 [ 679.436845][ T7725] swapcached 0 [ 679.436845][ T7725] anon_thp 0 [ 679.436845][ T7725] file_thp 0 [ 679.436845][ T7725] shmem_thp 0 [ 679.436845][ T7725] inactive_anon 73728 04:34:05 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:05 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:05 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:05 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:05 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 679.436845][ T7725] active_anon 94208 [ 679.436845][ T7725] inactive_file 0 [ 679.436845][ T7725] active_file 0 [ 679.436845][ T7725] unevictable 0 [ 679.436845][ T7725] slab_reclaimable 9624 [ 679.436845][ T7725] slab_unreclaimable 32944 [ 679.436845][ T7725] slab 42568 [ 679.541391][ T7725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=7725,uid=0 [ 679.577894][ T7725] Memory cgroup out of memory: Killed process 7725 (syz-executor.5) total-vm:50568kB, anon-rss:344kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 04:34:06 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:06 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:06 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:06 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:06 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 680.172981][ C0] net_ratelimit: 1714 callbacks suppressed [ 680.173002][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.190641][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 680.203104][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:34:06 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 680.216742][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.228704][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 680.240297][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 680.253077][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 680.265111][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.276737][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 680.289170][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:34:06 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 682.643743][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.660912][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.680163][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.696317][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.708101][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.007592][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.018593][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.027012][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.034940][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 683.043225][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.346968][T12028] chnl_net:caif_netlink_parms(): no params data found [ 683.437066][T12034] chnl_net:caif_netlink_parms(): no params data found [ 683.491988][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.500599][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.508975][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.510003][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.517045][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.535270][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.543107][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.042408][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.049549][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.082684][T12028] device bridge_slave_0 entered promiscuous mode [ 684.147753][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.176746][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.191227][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.216141][T12034] device bridge_slave_0 entered promiscuous mode [ 684.245853][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.259289][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.303623][T12028] device bridge_slave_1 entered promiscuous mode [ 684.492939][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.500082][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.535177][T12034] device bridge_slave_1 entered promiscuous mode [ 684.610304][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.771607][ T5126] Bluetooth: hci0: command 0x0409 tx timeout [ 684.787441][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.809174][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.877837][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.970146][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.046263][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.081307][ T5126] Bluetooth: hci2: command 0x0409 tx timeout [ 685.163479][T12028] team0: Port device team_slave_0 added [ 685.180283][T12048] chnl_net:caif_netlink_parms(): no params data found [ 685.188019][ C0] net_ratelimit: 2362 callbacks suppressed [ 685.188040][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.193249][T12034] team0: Port device team_slave_0 added [ 685.195312][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.207639][T12028] team0: Port device team_slave_1 added [ 685.211493][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 685.239204][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 685.245423][T12034] team0: Port device team_slave_1 added [ 685.251791][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 685.267808][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.279456][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 685.291920][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.306167][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.317921][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 685.429940][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.448253][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.477264][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.537297][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.545503][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.574148][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.574245][ T5126] Bluetooth: hci3: command 0x0409 tx timeout [ 685.580435][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.588423][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.636958][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.691681][T12034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.699793][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.729598][T12034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.789175][T12034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.801776][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.845709][T12034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.897784][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.949358][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.964627][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.995708][T12048] device bridge_slave_0 entered promiscuous mode [ 686.056546][T12028] device hsr_slave_0 entered promiscuous mode [ 686.091358][T12028] device hsr_slave_1 entered promiscuous mode [ 686.111139][T12028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.118739][T12028] Cannot create hsr debugfs directory [ 686.174751][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.221733][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.229713][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.260484][T12048] device bridge_slave_1 entered promiscuous mode [ 686.315728][T12034] device hsr_slave_0 entered promiscuous mode [ 686.351480][T12034] device hsr_slave_1 entered promiscuous mode [ 686.360630][T12034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.381175][T12034] Cannot create hsr debugfs directory [ 686.392371][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.487558][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.663707][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.842997][ T5126] Bluetooth: hci0: command 0x041b tx timeout [ 686.857551][T12048] team0: Port device team_slave_0 added [ 686.884533][T12048] team0: Port device team_slave_1 added [ 686.959801][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.001173][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.081071][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.161443][ T5126] Bluetooth: hci2: command 0x041b tx timeout [ 687.220642][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.233171][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.293126][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.333847][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.514195][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.651638][ T5126] Bluetooth: hci3: command 0x041b tx timeout [ 687.900608][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.955166][T12048] device hsr_slave_0 entered promiscuous mode [ 688.071592][T12048] device hsr_slave_1 entered promiscuous mode [ 688.122795][T12048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.130391][T12048] Cannot create hsr debugfs directory [ 688.291482][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.931602][ T5126] Bluetooth: hci0: command 0x040f tx timeout [ 689.241224][ T5126] Bluetooth: hci2: command 0x040f tx timeout [ 689.721742][ T5126] Bluetooth: hci3: command 0x040f tx timeout [ 690.197143][ C0] net_ratelimit: 2348 callbacks suppressed [ 690.197166][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.214681][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 690.226996][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.239679][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.251623][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 690.263248][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 690.276305][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 690.288372][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.318350][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 690.330761][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.753428][T12028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.833300][T12028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 690.946300][T12028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.010353][T12028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 691.017829][ T5126] Bluetooth: hci0: command 0x0419 tx timeout [ 691.321652][ T5126] Bluetooth: hci2: command 0x0419 tx timeout [ 691.518187][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.804316][ T5126] Bluetooth: hci3: command 0x0419 tx timeout [ 691.860532][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.905422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.913544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.143913][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 692.152798][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.177541][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.184706][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.208474][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 692.217542][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 692.234205][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.241381][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.274219][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 692.292615][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 692.344509][T12028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.387798][T12028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.409175][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 692.425839][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 692.443440][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 692.462950][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 692.497487][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.521986][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.530511][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.635354][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 692.651924][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 692.759125][T12048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 692.820637][T12048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 692.899302][T12048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 692.914640][T12048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 693.058553][T12034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 693.094590][T12034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.143205][T12034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.170196][T12034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.542235][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.551011][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 693.558577][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 693.611524][T12048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.648395][T12034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.672825][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 693.683753][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.723581][T12048] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.730604][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.752036][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.774383][T12028] device veth0_vlan entered promiscuous mode [ 693.793621][T12034] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.803601][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.812737][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.820710][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.851930][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.871951][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.880749][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.927007][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.934200][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.983501][T12028] device veth1_vlan entered promiscuous mode [ 694.063723][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 694.081928][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 694.089888][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 694.112128][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.120591][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.144734][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.181587][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.188715][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.209432][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.225103][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.244434][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.262946][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.270070][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.287733][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.322042][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.347260][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.354441][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.451799][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.459933][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.482563][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.501663][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.515221][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.532307][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.558656][T12028] device veth0_macvtap entered promiscuous mode [ 694.582748][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.602014][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.611733][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.632603][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 694.646537][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 694.663170][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.683140][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.717995][T12034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.741250][T12034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.770365][T12048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.782790][T12048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.797155][T12028] device veth1_macvtap entered promiscuous mode [ 694.849674][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.868156][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.891947][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.900676][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.909808][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.941618][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.950273][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.978994][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.993396][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.063445][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.082090][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.111611][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.141414][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.171751][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.201500][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.202139][ C0] net_ratelimit: 2629 callbacks suppressed [ 695.202154][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.230595][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.234975][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.242155][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 695.264673][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.277246][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.289257][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 695.300709][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.300910][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 695.351314][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.382521][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 695.388936][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.394435][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.415200][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 695.424173][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.450750][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.481123][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.521077][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.547611][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.622924][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 695.633895][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 695.673728][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.715548][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.741775][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.781086][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.790941][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.854907][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.897697][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.921568][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.981358][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.011450][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.021650][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.042785][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.082213][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.151230][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 696.160134][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 696.182536][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.194420][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.210181][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.234096][T12028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.246633][T12028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.261227][T12028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.269980][T12028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.305609][T12048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.339639][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.351328][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.576750][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.629004][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.650068][ T34] device hsr_slave_0 left promiscuous mode [ 696.660746][ T34] device hsr_slave_1 left promiscuous mode [ 696.708448][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.721223][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.743981][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.770602][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.796686][ T34] device bridge_slave_1 left promiscuous mode [ 696.820140][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.854232][ T34] device bridge_slave_0 left promiscuous mode [ 696.861063][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.917685][ T34] device hsr_slave_0 left promiscuous mode [ 696.943785][ T34] device hsr_slave_1 left promiscuous mode [ 696.965523][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.988107][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.009968][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.034051][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.045348][ T34] device bridge_slave_1 left promiscuous mode [ 697.061231][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.087824][ T34] device bridge_slave_0 left promiscuous mode [ 697.098377][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.163470][ T34] device hsr_slave_0 left promiscuous mode [ 697.194499][ T34] device hsr_slave_1 left promiscuous mode [ 697.215571][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.231123][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.246300][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.268669][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.287816][ T34] device bridge_slave_1 left promiscuous mode [ 697.301224][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.310596][ T34] device bridge_slave_0 left promiscuous mode [ 697.329754][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.424203][ T34] device veth1_macvtap left promiscuous mode [ 697.433609][ T34] device veth0_macvtap left promiscuous mode [ 697.439768][ T34] device veth1_vlan left promiscuous mode [ 697.455759][ T34] device veth0_vlan left promiscuous mode [ 697.515903][ T34] device veth1_macvtap left promiscuous mode [ 697.531527][ T34] device veth0_macvtap left promiscuous mode [ 697.537692][ T34] device veth1_vlan left promiscuous mode [ 697.551278][ T34] device veth0_vlan left promiscuous mode [ 697.591766][ T34] device veth1_macvtap left promiscuous mode [ 697.597867][ T34] device veth0_macvtap left promiscuous mode [ 697.608550][ T34] device veth1_vlan left promiscuous mode [ 697.627174][ T34] device veth0_vlan left promiscuous mode [ 699.017288][ T34] team0 (unregistering): Port device team_slave_1 removed [ 699.057287][ T34] team0 (unregistering): Port device team_slave_0 removed [ 699.096809][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.148518][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.370212][ T34] bond0 (unregistering): Released all slaves [ 699.770890][ T34] team0 (unregistering): Port device team_slave_1 removed [ 699.827042][ T34] team0 (unregistering): Port device team_slave_0 removed [ 699.868790][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.928682][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.150536][ T34] bond0 (unregistering): Released all slaves [ 700.211720][ C0] net_ratelimit: 4435 callbacks suppressed [ 700.211742][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 700.229077][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 700.242002][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 700.253948][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.265405][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 700.277672][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.290962][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.302800][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 700.315142][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.327601][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.672794][ T34] team0 (unregistering): Port device team_slave_1 removed [ 700.709868][ T34] team0 (unregistering): Port device team_slave_0 removed [ 700.771498][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.813377][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.030674][ T34] bond0 (unregistering): Released all slaves [ 701.125535][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 701.225825][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.251146][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.261117][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 701.692295][T12198] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 701.711649][T12198] CPU: 0 PID: 12198 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 701.722117][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 701.732206][T12198] Call Trace: [ 701.735518][T12198] [ 701.738477][T12198] dump_stack_lvl+0xd1/0x138 [ 701.743212][T12198] dump_header+0x10b/0x85f [ 701.747679][T12198] oom_kill_process.cold+0x10/0x15 [ 701.752835][T12198] out_of_memory+0x35c/0x14a0 [ 701.757563][T12198] ? oom_killer_disable+0x280/0x280 [ 701.762812][T12198] mem_cgroup_out_of_memory+0x206/0x270 [ 701.768586][T12198] ? mem_cgroup_margin+0x130/0x130 [ 701.773762][T12198] memory_max_write+0x2f9/0x3c0 [ 701.778666][T12198] ? mem_cgroup_force_empty_write+0x160/0x160 [ 701.784775][T12198] ? lock_release+0x810/0x810 [ 701.789757][T12198] cgroup_file_write+0x1e2/0x770 [ 701.794736][T12198] ? mem_cgroup_force_empty_write+0x160/0x160 [ 701.800841][T12198] ? kill_css+0x370/0x370 [ 701.805215][T12198] ? __virt_addr_valid+0x61/0x2e0 [ 701.810476][T12198] ? kill_css+0x370/0x370 [ 701.815021][T12198] kernfs_fop_write_iter+0x3f1/0x600 [ 701.820358][T12198] vfs_write+0x9ed/0xdd0 [ 701.824642][T12198] ? kernel_write+0x630/0x630 [ 701.829343][T12198] ? __fget_files+0x26a/0x440 [ 701.834052][T12198] ksys_write+0x12b/0x250 [ 701.838400][T12198] ? __ia32_sys_read+0xb0/0xb0 [ 701.843181][T12198] ? syscall_enter_from_user_mode+0x26/0xb0 [ 701.849098][T12198] do_syscall_64+0x39/0xb0 [ 701.853629][T12198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 701.859535][T12198] RIP: 0033:0x7f256a68c0c9 [ 701.863956][T12198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 701.883582][T12198] RSP: 002b:00007f256b38d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 701.892094][T12198] RAX: ffffffffffffffda RBX: 00007f256a7ac050 RCX: 00007f256a68c0c9 [ 701.900308][T12198] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 701.908284][T12198] RBP: 00007f256a6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 701.916261][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.924326][T12198] R13: 00007fff1dd8ec9f R14: 00007f256b38d300 R15: 0000000000022000 [ 701.932497][T12198] [ 702.004734][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 702.019673][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 702.101509][T12198] memory: usage 8656kB, limit 0kB, failcnt 627 [ 702.112386][T12198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 702.143120][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 702.152746][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 702.179465][T12034] device veth0_vlan entered promiscuous mode [ 702.198066][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 702.217043][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 702.237903][T12034] device veth1_vlan entered promiscuous mode [ 702.308865][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 702.322949][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 702.331661][T12198] Memory cgroup stats for /syz2: [ 702.331869][T12198] anon 118784 [ 702.331869][T12198] file 8355840 [ 702.331869][T12198] kernel 282624 [ 702.331869][T12198] kernel_stack 32768 [ 702.331869][T12198] pagetables 77824 [ 702.331869][T12198] sec_pagetables 0 [ 702.331869][T12198] percpu 64 [ 702.331869][T12198] sock 0 [ 702.331869][T12198] vmalloc 0 [ 702.331869][T12198] shmem 8351744 [ 702.331869][T12198] zswap 0 [ 702.331869][T12198] zswapped 0 [ 702.331869][T12198] file_mapped 180224 [ 702.331869][T12198] file_dirty 4096 [ 702.331869][T12198] file_writeback 0 [ 702.331869][T12198] swapcached 0 [ 702.331869][T12198] anon_thp 0 [ 702.331869][T12198] file_thp 0 [ 702.331869][T12198] shmem_thp 0 [ 702.331869][T12198] inactive_anon 8290304 [ 702.331869][T12198] active_anon 180224 [ 702.331869][T12198] inactive_file 0 [ 702.331869][T12198] active_file 4096 [ 702.331869][T12198] unevictable 0 [ 702.331869][T12198] slab_reclaimable 42248 [ 702.331869][T12198] slab_unreclaimable 100032 [ 702.331869][T12198] slab 142280 [ 702.454468][T12034] device veth0_macvtap entered promiscuous mode [ 702.488496][T12034] device veth1_macvtap entered promiscuous mode [ 702.524101][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.546744][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.561521][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.585402][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.606771][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.641090][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.651427][T12198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12028,uid=0 [ 702.678040][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.695330][T12198] Memory cgroup out of memory: Killed process 12028 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 702.729662][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.743013][T12034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.751186][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 702.759485][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 702.788527][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 702.820907][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 702.846940][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.871074][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.880948][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.920433][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.950927][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.969380][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.983736][T12034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.994915][T12034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.032691][T12034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.042228][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 703.071296][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 703.080510][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.112930][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.230960][T12034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.260116][T12034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.280500][T12034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.289858][T12034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.360529][T12048] device veth0_vlan entered promiscuous mode [ 703.388185][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 703.404135][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 04:34:29 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:29 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:34:29 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:29 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 703.478127][T12048] device veth1_vlan entered promiscuous mode [ 703.506153][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 703.519400][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 04:34:29 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 703.545015][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 703.747483][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 703.766440][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 04:34:30 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:30 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 703.798353][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 703.853614][T12048] device veth0_macvtap entered promiscuous mode [ 703.878663][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.921603][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.968093][T12048] device veth1_macvtap entered promiscuous mode [ 704.011245][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 704.035776][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 704.057838][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.139745][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.168036][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.184994][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.235964][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.262849][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.281730][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.314529][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.332825][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.361365][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.371892][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.412203][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.431623][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.467583][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.494760][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.508673][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.532031][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.556269][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.585205][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.611652][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.631093][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.651098][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.682236][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.711497][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.732643][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.741666][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.750515][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 704.773156][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.791867][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.813658][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.828993][T12048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.851757][T12048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.860501][T12048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.875105][T12048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 04:34:31 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:31 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:31 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:31 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 705.098506][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.139908][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.254049][ C0] net_ratelimit: 2746 callbacks suppressed [ 705.254071][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.271768][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 705.284088][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.296756][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.308888][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 705.320542][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 705.333033][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 705.345052][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.356709][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 705.369207][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 705.391784][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.410265][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.503723][T12262] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 705.541122][T12262] CPU: 0 PID: 12262 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 705.551608][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 705.561693][T12262] Call Trace: [ 705.565000][T12262] [ 705.567952][T12262] dump_stack_lvl+0xd1/0x138 [ 705.572590][T12262] dump_header+0x10b/0x85f [ 705.577037][T12262] oom_kill_process.cold+0x10/0x15 [ 705.582272][T12262] out_of_memory+0x35c/0x14a0 [ 705.586995][T12262] ? oom_killer_disable+0x280/0x280 [ 705.592239][T12262] mem_cgroup_out_of_memory+0x206/0x270 [ 705.597905][T12262] ? mem_cgroup_margin+0x130/0x130 [ 705.603064][T12262] memory_max_write+0x2f9/0x3c0 [ 705.607953][T12262] ? mem_cgroup_force_empty_write+0x160/0x160 [ 705.614059][T12262] ? lock_release+0x810/0x810 [ 705.618766][T12262] cgroup_file_write+0x1e2/0x770 [ 705.623738][T12262] ? mem_cgroup_force_empty_write+0x160/0x160 [ 705.629836][T12262] ? kill_css+0x370/0x370 [ 705.634202][T12262] ? __virt_addr_valid+0x61/0x2e0 [ 705.639294][T12262] ? kill_css+0x370/0x370 [ 705.643671][T12262] kernfs_fop_write_iter+0x3f1/0x600 [ 705.649017][T12262] vfs_write+0x9ed/0xdd0 [ 705.653309][T12262] ? kernel_write+0x630/0x630 [ 705.658121][T12262] ? __fget_files+0x26a/0x440 [ 705.662847][T12262] ksys_write+0x12b/0x250 [ 705.667215][T12262] ? __ia32_sys_read+0xb0/0xb0 [ 705.672015][T12262] ? syscall_enter_from_user_mode+0x26/0xb0 [ 705.677957][T12262] do_syscall_64+0x39/0xb0 [ 705.682420][T12262] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 705.688351][T12262] RIP: 0033:0x7ff5ebc8c0c9 [ 705.692793][T12262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 705.712428][T12262] RSP: 002b:00007ff5ea7fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.720874][T12262] RAX: ffffffffffffffda RBX: 00007ff5ebdac050 RCX: 00007ff5ebc8c0c9 [ 705.728878][T12262] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 705.737054][T12262] RBP: 00007ff5ebce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 705.745059][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.753151][T12262] R13: 00007ffcaea92ddf R14: 00007ff5ea7fe300 R15: 0000000000022000 [ 705.761174][T12262] [ 705.784172][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 705.803043][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.837477][T12262] memory: usage 620kB, limit 0kB, failcnt 307 [ 705.878066][T12262] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 705.918689][T12262] Memory cgroup stats for /syz4: [ 705.918913][T12262] anon 147456 [ 705.918913][T12262] file 122880 [ 705.918913][T12262] kernel 364544 [ 705.918913][T12262] kernel_stack 98304 [ 705.918913][T12262] pagetables 81920 [ 705.918913][T12262] sec_pagetables 0 [ 705.918913][T12262] percpu 64 [ 705.918913][T12262] sock 0 [ 705.918913][T12262] vmalloc 0 [ 705.918913][T12262] shmem 122880 [ 705.918913][T12262] zswap 0 [ 705.918913][T12262] zswapped 0 [ 705.918913][T12262] file_mapped 122880 [ 705.918913][T12262] file_dirty 0 [ 705.918913][T12262] file_writeback 0 [ 705.918913][T12262] swapcached 0 [ 705.918913][T12262] anon_thp 0 [ 705.918913][T12262] file_thp 0 [ 705.918913][T12262] shmem_thp 0 [ 705.918913][T12262] inactive_anon 143360 [ 705.918913][T12262] active_anon 122880 [ 705.918913][T12262] inactive_file 0 [ 705.918913][T12262] active_file 0 [ 705.918913][T12262] unevictable 0 [ 705.918913][T12262] slab_reclaimable 34920 [ 705.918913][T12262] slab_unreclaimable 120984 [ 705.918913][T12262] slab 155904 04:34:32 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:32 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:32 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:32 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:32 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:32 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:32 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 706.595794][T12262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12034,uid=0 [ 706.797502][T12262] Memory cgroup out of memory: Killed process 12034 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 04:34:33 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 707.305100][ T6915] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 707.341088][ T6915] CPU: 0 PID: 6915 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 707.351469][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 707.361640][ T6915] Call Trace: [ 707.364935][ T6915] [ 707.367899][ T6915] dump_stack_lvl+0xd1/0x138 [ 707.372532][ T6915] dump_header+0x10b/0x85f [ 707.376997][ T6915] oom_kill_process.cold+0x10/0x15 [ 707.382148][ T6915] out_of_memory+0x35c/0x14a0 [ 707.386866][ T6915] ? oom_killer_disable+0x280/0x280 [ 707.392116][ T6915] ? find_held_lock+0x2d/0x110 [ 707.396939][ T6915] mem_cgroup_out_of_memory+0x206/0x270 [ 707.402516][ T6915] ? mem_cgroup_margin+0x130/0x130 [ 707.407650][ T6915] ? lock_downgrade+0x6e0/0x6e0 [ 707.412591][ T6915] try_charge_memcg+0xefb/0x12f0 [ 707.417576][ T6915] ? mem_cgroup_handle_over_high+0x520/0x520 [ 707.423581][ T6915] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 707.429327][ T6915] ? lock_downgrade+0x6e0/0x6e0 [ 707.434229][ T6915] obj_cgroup_charge+0x2af/0x5e0 [ 707.439203][ T6915] kmem_cache_alloc_lru+0x145/0x760 [ 707.444503][ T6915] ? ext4_alloc_inode+0x28/0x680 [ 707.449457][ T6915] ? ext4_free_in_core_inode+0x70/0x70 [ 707.454929][ T6915] ext4_alloc_inode+0x28/0x680 [ 707.459703][ T6915] ? ext4_free_in_core_inode+0x70/0x70 [ 707.465178][ T6915] alloc_inode+0x61/0x230 [ 707.469526][ T6915] iget_locked+0x1bb/0x700 [ 707.473954][ T6915] __ext4_iget+0x3af/0x4230 [ 707.478502][ T6915] ? ext4_get_projid+0x190/0x190 [ 707.483464][ T6915] ? ext4_fname_prepare_lookup+0x163/0x200 [ 707.489304][ T6915] ? ext4_fname_setup_filename+0x110/0x110 [ 707.495185][ T6915] ? rcu_read_lock_sched_held+0x3e/0x70 [ 707.500771][ T6915] ext4_lookup+0x387/0x700 [ 707.505204][ T6915] ? ext4_resetent+0x2d0/0x2d0 [ 707.510008][ T6915] __lookup_slow+0x24c/0x460 [ 707.514623][ T6915] ? __lookup_hash+0x180/0x180 [ 707.519413][ T6915] ? azx_position_ok.cold+0x1ae/0x281 [ 707.524813][ T6915] ? azx_position_ok.cold+0x1ae/0x281 [ 707.530213][ T6915] ? lookup_fast+0x14e/0x520 [ 707.534908][ T6915] walk_component+0x33f/0x5a0 [ 707.539604][ T6915] path_lookupat+0x1ba/0x840 [ 707.544214][ T6915] filename_lookup+0x1d2/0x590 [ 707.548997][ T6915] ? may_linkat+0x500/0x500 [ 707.553523][ T6915] ? __might_fault+0xd9/0x180 [ 707.558227][ T6915] ? __phys_addr_symbol+0x30/0x70 [ 707.563271][ T6915] ? __check_object_size+0x2e2/0x5a0 [ 707.568576][ T6915] ? strncpy_from_user+0x28b/0x3c0 [ 707.573708][ T6915] ? getname_flags.part.0+0x1dd/0x4f0 [ 707.579119][ T6915] user_path_at_empty+0x46/0x60 [ 707.583988][ T6915] __x64_sys_umount+0xfc/0x190 [ 707.588856][ T6915] ? path_umount+0x10b0/0x10b0 [ 707.593644][ T6915] ? syscall_enter_from_user_mode+0x26/0xb0 [ 707.599553][ T6915] do_syscall_64+0x39/0xb0 [ 707.603989][ T6915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 707.609908][ T6915] RIP: 0033:0x7fd762a8d537 [ 707.614427][ T6915] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 707.634056][ T6915] RSP: 002b:00007fff85c77658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 707.642657][ T6915] RAX: ffffffffffffffda RBX: 000000000000013f RCX: 00007fd762a8d537 [ 707.650633][ T6915] RDX: 00007fff85c7772e RSI: 000000000000000a RDI: 00007fff85c77720 [ 707.658610][ T6915] RBP: 00007fff85c77720 R08: 00000000ffffffff R09: 00007fff85c774f0 [ 707.666592][ T6915] R10: 0000555556c9a853 R11: 0000000000000246 R12: 00007fd762ae6b24 [ 707.674570][ T6915] R13: 00007fff85c787e0 R14: 0000555556c9a810 R15: 00007fff85c78820 [ 707.682562][ T6915] [ 707.722644][ T6915] memory: usage 10392kB, limit 0kB, failcnt 440 [ 707.728961][ T6915] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 707.757038][ T6915] Memory cgroup stats for /syz1: [ 707.762921][ T6915] anon 49152 [ 707.762921][ T6915] file 10498048 [ 707.762921][ T6915] kernel 94208 [ 707.762921][ T6915] kernel_stack 0 [ 707.762921][ T6915] pagetables 8192 [ 707.762921][ T6915] sec_pagetables 0 [ 707.762921][ T6915] percpu 0 [ 707.762921][ T6915] sock 0 [ 707.762921][ T6915] vmalloc 0 [ 707.762921][ T6915] shmem 10477568 [ 707.762921][ T6915] zswap 0 [ 707.762921][ T6915] zswapped 0 [ 707.762921][ T6915] file_mapped 147456 [ 707.762921][ T6915] file_dirty 0 [ 707.762921][ T6915] file_writeback 0 [ 707.762921][ T6915] swapcached 0 [ 707.762921][ T6915] anon_thp 0 [ 707.762921][ T6915] file_thp 0 [ 707.762921][ T6915] shmem_thp 0 [ 707.762921][ T6915] inactive_anon 49152 [ 707.762921][ T6915] active_anon 10477568 [ 707.762921][ T6915] inactive_file 20480 [ 707.762921][ T6915] active_file 0 [ 707.762921][ T6915] unevictable 0 [ 707.762921][ T6915] slab_reclaimable 46056 [ 707.762921][ T6915] slab_unreclaimable 33248 [ 707.762921][ T6915] slab 79304 [ 707.870164][ T6915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6915,uid=0 [ 707.900879][ T6915] Memory cgroup out of memory: Killed process 6915 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 04:34:34 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 708.321867][T12038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.337463][T12038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.355321][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.381942][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.389474][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 708.396762][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.039199][T12297] chnl_net:caif_netlink_parms(): no params data found [ 709.247033][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.271286][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.292980][T12297] device bridge_slave_0 entered promiscuous mode [ 709.311928][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.319143][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.329075][T12297] device bridge_slave_1 entered promiscuous mode [ 709.380452][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.403857][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.475529][T12297] team0: Port device team_slave_0 added [ 709.502373][T12297] team0: Port device team_slave_1 added [ 709.556364][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.581142][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.631093][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.653257][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.681075][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.735743][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.849360][T12297] device hsr_slave_0 entered promiscuous mode [ 709.861012][T12297] device hsr_slave_1 entered promiscuous mode [ 710.261362][ C0] net_ratelimit: 2541 callbacks suppressed [ 710.261383][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 710.279238][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.291802][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.304052][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 710.315815][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 710.328643][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 710.340669][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.352276][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 710.365027][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.378348][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.449836][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.461049][ T5124] Bluetooth: hci0: command 0x0409 tx timeout [ 710.640075][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.754051][T12297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.902528][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.027636][T12297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.168547][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.475298][T12297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.580573][T12297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.803397][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.038330][T12297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.057016][T12297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.130649][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.201935][T12297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.212380][T12297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.344600][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.521606][ T5124] Bluetooth: hci0: command 0x041b tx timeout [ 712.583680][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.634389][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.689521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 712.697985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 712.738751][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.773694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 712.787294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 712.811642][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.818779][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.873920][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 712.907105][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 712.921684][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 712.971662][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.978969][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.002869][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.040535][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.049538][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.094947][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.120114][T12297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.166717][T12297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.207456][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.222836][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.264917][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.273674][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.308226][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.324830][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.873409][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.897088][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.915965][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.949093][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 713.970010][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 714.186326][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 714.199851][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 714.293685][T12297] device veth0_vlan entered promiscuous mode [ 714.321871][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 714.330469][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 714.368069][T12297] device veth1_vlan entered promiscuous mode [ 714.599012][T12297] device veth0_macvtap entered promiscuous mode [ 714.606126][ T5124] Bluetooth: hci0: command 0x040f tx timeout [ 714.629949][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 714.642768][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 714.662326][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 714.681137][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 714.750417][T12297] device veth1_macvtap entered promiscuous mode [ 714.775176][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 714.797879][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 714.837216][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.881074][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.895546][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.920512][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.942770][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.968436][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.979415][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.021108][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.040548][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.061074][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.091938][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.114286][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.126148][T12297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.214587][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 715.232752][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 715.257949][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.271352][ C0] net_ratelimit: 3644 callbacks suppressed [ 715.271373][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 715.285083][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.289887][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 715.300379][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.310033][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.331600][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 715.343966][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.357328][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.357582][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.368885][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 715.390704][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.399500][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.413843][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.421425][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.425716][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 715.441070][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.466004][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.479842][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.508628][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.530167][T12297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.551972][T12297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.564267][T12297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.628606][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 715.657867][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 715.685402][T12297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.716557][T12297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.750786][T12297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.775484][T12297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.166444][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.188837][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.266693][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 716.313932][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.337635][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.378539][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 716.681993][ T5124] Bluetooth: hci0: command 0x0419 tx timeout [ 716.774525][T12359] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 716.786235][T12359] CPU: 1 PID: 12359 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 716.796696][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 716.806959][T12359] Call Trace: [ 716.810264][T12359] [ 716.813219][T12359] dump_stack_lvl+0xd1/0x138 [ 716.817861][T12359] dump_header+0x10b/0x85f [ 716.822318][T12359] oom_kill_process.cold+0x10/0x15 [ 716.827471][T12359] out_of_memory+0x35c/0x14a0 [ 716.832538][T12359] ? oom_killer_disable+0x280/0x280 [ 716.837798][T12359] mem_cgroup_out_of_memory+0x206/0x270 [ 716.843387][T12359] ? mem_cgroup_margin+0x130/0x130 [ 716.848558][T12359] memory_max_write+0x2f9/0x3c0 [ 716.853450][T12359] ? mem_cgroup_force_empty_write+0x160/0x160 [ 716.859560][T12359] ? lock_release+0x810/0x810 [ 716.864256][T12359] cgroup_file_write+0x1e2/0x770 [ 716.869215][T12359] ? mem_cgroup_force_empty_write+0x160/0x160 [ 716.875301][T12359] ? kill_css+0x370/0x370 [ 716.879642][T12359] ? __virt_addr_valid+0x61/0x2e0 [ 716.884693][T12359] ? kill_css+0x370/0x370 [ 716.889035][T12359] kernfs_fop_write_iter+0x3f1/0x600 [ 716.894364][T12359] vfs_write+0x9ed/0xdd0 [ 716.898628][T12359] ? kernel_write+0x630/0x630 [ 716.903324][T12359] ? __fget_files+0x26a/0x440 [ 716.908027][T12359] ksys_write+0x12b/0x250 [ 716.912370][T12359] ? __ia32_sys_read+0xb0/0xb0 [ 716.917155][T12359] ? syscall_enter_from_user_mode+0x26/0xb0 [ 716.923419][T12359] do_syscall_64+0x39/0xb0 [ 716.927868][T12359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 716.933786][T12359] RIP: 0033:0x7f9a4bc8c0c9 [ 716.938646][T12359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.958303][T12359] RSP: 002b:00007f9a4c96e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.967683][T12359] RAX: ffffffffffffffda RBX: 00007f9a4bdac050 RCX: 00007f9a4bc8c0c9 [ 716.975682][T12359] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 716.983712][T12359] RBP: 00007f9a4bce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 716.991687][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.999662][T12359] R13: 00007ffc6f63da4f R14: 00007f9a4c96e300 R15: 0000000000022000 [ 717.007658][T12359] [ 717.030960][T12359] memory: usage 8668kB, limit 0kB, failcnt 627 [ 717.037370][T12359] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 717.050682][T12359] Memory cgroup stats for /syz2: [ 717.050871][T12359] anon 118784 [ 717.050871][T12359] file 8355840 [ 717.050871][T12359] kernel 397312 [ 717.050871][T12359] kernel_stack 98304 [ 717.050871][T12359] pagetables 77824 [ 717.050871][T12359] sec_pagetables 0 [ 717.050871][T12359] percpu 64 [ 717.050871][T12359] sock 0 [ 717.050871][T12359] vmalloc 0 [ 717.050871][T12359] shmem 8351744 [ 717.050871][T12359] zswap 0 [ 717.050871][T12359] zswapped 0 [ 717.050871][T12359] file_mapped 180224 [ 717.050871][T12359] file_dirty 4096 [ 717.050871][T12359] file_writeback 0 [ 717.050871][T12359] swapcached 0 [ 717.050871][T12359] anon_thp 0 [ 717.050871][T12359] file_thp 0 [ 717.050871][T12359] shmem_thp 0 [ 717.050871][T12359] inactive_anon 8290304 [ 717.050871][T12359] active_anon 180224 [ 717.050871][T12359] inactive_file 0 [ 717.050871][T12359] active_file 4096 [ 717.050871][T12359] unevictable 0 [ 717.050871][T12359] slab_reclaimable 63856 [ 717.050871][T12359] slab_unreclaimable 131312 [ 717.050871][T12359] slab 195168 [ 717.228654][T12359] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12355,uid=0 [ 717.258076][T12359] Memory cgroup out of memory: Killed process 12355 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 04:34:43 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:43 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:43 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:43 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:43 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:43 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 717.442202][T12297] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 717.504926][T12297] CPU: 0 PID: 12297 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 717.515411][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 717.525588][T12297] Call Trace: [ 717.528907][T12297] [ 717.531959][T12297] dump_stack_lvl+0xd1/0x138 [ 717.536602][T12297] dump_header+0x10b/0x85f [ 717.541072][T12297] oom_kill_process.cold+0x10/0x15 [ 717.546231][T12297] out_of_memory+0x35c/0x14a0 [ 717.550946][T12297] ? find_held_lock+0x2d/0x110 [ 717.555928][T12297] ? oom_killer_disable+0x280/0x280 [ 717.561160][T12297] ? find_held_lock+0x2d/0x110 [ 717.565973][T12297] mem_cgroup_out_of_memory+0x206/0x270 [ 717.571556][T12297] ? mem_cgroup_margin+0x130/0x130 [ 717.576694][T12297] ? lock_downgrade+0x6e0/0x6e0 [ 717.581621][T12297] try_charge_memcg+0xefb/0x12f0 [ 717.586608][T12297] ? mem_cgroup_handle_over_high+0x520/0x520 [ 717.592716][T12297] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 717.598481][T12297] ? lock_downgrade+0x6e0/0x6e0 [ 717.603371][T12297] ? lock_downgrade+0x6e0/0x6e0 [ 717.608266][T12297] ? rcu_read_unlock+0x9/0x60 [ 717.613005][T12297] obj_cgroup_charge+0x2af/0x5e0 [ 717.618085][T12297] __kmem_cache_alloc_node+0xb2/0x430 [ 717.623578][T12297] ? kvmalloc_node+0xa2/0x1a0 [ 717.628478][T12297] ? kvmalloc_node+0xa2/0x1a0 [ 717.633198][T12297] __kmalloc_node+0x4d/0xd0 [ 717.637752][T12297] kvmalloc_node+0xa2/0x1a0 [ 717.642299][T12297] xt_alloc_table_info+0x40/0xa0 [ 717.647273][T12297] do_ip6t_set_ctl+0x514/0xb30 [ 717.652076][T12297] ? trace_contention_end+0x153/0x1e0 [ 717.657492][T12297] ? __mutex_lock+0x231/0x1360 [ 717.662301][T12297] ? compat_do_replace.constprop.0+0x410/0x410 [ 717.668498][T12297] ? wait_for_completion_io_timeout+0x20/0x20 [ 717.674604][T12297] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 717.680033][T12297] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 717.686137][T12297] nf_setsockopt+0x87/0xe0 [ 717.690590][T12297] ipv6_setsockopt+0x12b/0x190 [ 717.695395][T12297] tcp_setsockopt+0x9f/0x100 [ 717.700017][T12297] ? sock_common_recvmsg+0x190/0x190 04:34:43 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 717.705351][T12297] __sys_setsockopt+0x2c6/0x5b0 [ 717.710229][T12297] ? __ia32_sys_recv+0x100/0x100 [ 717.715193][T12297] ? up_write+0x520/0x520 [ 717.719557][T12297] ? handle_mm_fault+0x25b/0x850 [ 717.724527][T12297] __x64_sys_setsockopt+0xbe/0x160 [ 717.729737][T12297] ? syscall_enter_from_user_mode+0x26/0xb0 [ 717.735729][T12297] do_syscall_64+0x39/0xb0 [ 717.740165][T12297] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 717.746070][T12297] RIP: 0033:0x7f9a4bc8d71a [ 717.750487][T12297] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.770537][T12297] RSP: 002b:00007ffc6f63d5b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 717.778958][T12297] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f9a4bc8d71a [ 717.786932][T12297] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 717.794907][T12297] RBP: 00007ffc6f63d5e0 R08: 0000000000000488 R09: ffffffffff000000 [ 717.802895][T12297] R10: 00007f9a4bd84280 R11: 0000000000000206 R12: 00007ffc6f63d640 [ 717.810960][T12297] R13: 0000000000000003 R14: 00007ffc6f63d5dc R15: 00007f9a4bd84220 [ 717.818949][T12297] 04:34:44 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:44 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:44 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 718.181194][T12297] memory: usage 8356kB, limit 0kB, failcnt 646 [ 718.187411][T12297] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 718.241144][T12297] Memory cgroup stats for /syz2: [ 718.241375][T12297] anon 40960 [ 718.241375][T12297] file 8355840 [ 718.241375][T12297] kernel 159744 [ 718.241375][T12297] kernel_stack 0 [ 718.241375][T12297] pagetables 8192 [ 718.241375][T12297] sec_pagetables 0 [ 718.241375][T12297] percpu 64 [ 718.241375][T12297] sock 0 [ 718.241375][T12297] vmalloc 0 [ 718.241375][T12297] shmem 8351744 [ 718.241375][T12297] zswap 0 [ 718.241375][T12297] zswapped 0 [ 718.241375][T12297] file_mapped 147456 [ 718.241375][T12297] file_dirty 4096 [ 718.241375][T12297] file_writeback 0 [ 718.241375][T12297] swapcached 0 [ 718.241375][T12297] anon_thp 0 [ 718.241375][T12297] file_thp 0 [ 718.241375][T12297] shmem_thp 0 [ 718.241375][T12297] inactive_anon 8212480 [ 718.241375][T12297] active_anon 180224 [ 718.241375][T12297] inactive_file 0 [ 718.241375][T12297] active_file 4096 [ 718.241375][T12297] unevictable 0 [ 718.241375][T12297] slab_reclaimable 59488 [ 718.241375][T12297] slab_unreclaimable 78280 [ 718.241375][T12297] slab 137768 04:34:44 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:44 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 718.760638][T12297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12297,uid=0 [ 718.855161][T12297] Memory cgroup out of memory: Killed process 12297 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 720.222634][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.239367][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.256480][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.281315][ C0] net_ratelimit: 2243 callbacks suppressed [ 720.281333][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 720.281816][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.288180][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.318970][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.330651][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 720.343037][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.355720][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.368715][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 720.380445][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 720.387246][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 720.400050][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 720.412035][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.441967][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.782826][ T34] device hsr_slave_0 left promiscuous mode [ 720.807694][ T34] device hsr_slave_1 left promiscuous mode [ 720.843128][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.850683][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.889533][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.905793][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.908239][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.941828][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.949967][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.958093][T12038] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 720.965418][T12038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.974821][ T34] device bridge_slave_1 left promiscuous mode [ 720.981399][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.990078][ T34] device bridge_slave_0 left promiscuous mode [ 721.004642][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.064166][ T34] device hsr_slave_0 left promiscuous mode [ 721.079558][ T34] device hsr_slave_1 left promiscuous mode [ 721.102258][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.109736][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.161358][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.168826][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.204119][ T34] device bridge_slave_1 left promiscuous mode [ 721.228283][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.268511][ T34] device bridge_slave_0 left promiscuous mode [ 721.289634][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.335847][ T34] device hsr_slave_0 left promiscuous mode [ 721.362561][ T34] device hsr_slave_1 left promiscuous mode [ 721.372937][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.380388][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.421881][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.429340][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.484858][ T34] device bridge_slave_1 left promiscuous mode [ 721.501195][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.521698][ T34] device bridge_slave_0 left promiscuous mode [ 721.527952][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.578579][ T34] device veth1_macvtap left promiscuous mode [ 721.591401][ T34] device veth0_macvtap left promiscuous mode [ 721.601747][ T34] device veth1_vlan left promiscuous mode [ 721.607699][ T34] device veth0_vlan left promiscuous mode [ 721.664133][ T34] device veth1_macvtap left promiscuous mode [ 721.670221][ T34] device veth0_macvtap left promiscuous mode [ 721.691304][ T34] device veth1_vlan left promiscuous mode [ 721.697231][ T34] device veth0_vlan left promiscuous mode [ 721.760815][ T34] device veth1_macvtap left promiscuous mode [ 721.773882][ T34] device veth0_macvtap left promiscuous mode [ 721.780079][ T34] device veth1_vlan left promiscuous mode [ 721.793097][ T34] device veth0_vlan left promiscuous mode [ 722.536813][T12038] Bluetooth: hci0: command 0x0409 tx timeout [ 723.001482][T12038] Bluetooth: hci2: command 0x0409 tx timeout [ 723.147485][ T34] team0 (unregistering): Port device team_slave_1 removed [ 723.181559][ T34] team0 (unregistering): Port device team_slave_0 removed [ 723.218317][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.255685][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.487581][ T34] bond0 (unregistering): Released all slaves [ 723.840532][ T34] team0 (unregistering): Port device team_slave_1 removed [ 723.887805][ T34] team0 (unregistering): Port device team_slave_0 removed [ 723.935989][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.975569][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.222768][ T34] bond0 (unregistering): Released all slaves [ 724.613797][T12038] Bluetooth: hci0: command 0x041b tx timeout [ 724.615153][ T34] team0 (unregistering): Port device team_slave_1 removed [ 724.654833][ T34] team0 (unregistering): Port device team_slave_0 removed [ 724.686904][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.740894][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.970431][ T34] bond0 (unregistering): Released all slaves [ 725.059681][T12415] chnl_net:caif_netlink_parms(): no params data found [ 725.086010][ T5124] Bluetooth: hci2: command 0x041b tx timeout [ 725.292028][ C0] net_ratelimit: 4845 callbacks suppressed [ 725.292050][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.309949][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 725.321419][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 725.333394][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 725.344968][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.356362][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 725.368416][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.381336][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.392965][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 725.405280][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:34:51 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:34:51 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:34:51 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:34:51 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 725.448991][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.455132][T12048] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 725.472654][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.490282][T12415] device bridge_slave_0 entered promiscuous mode [ 725.511077][T12048] CPU: 0 PID: 12048 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 725.521579][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 725.531660][T12048] Call Trace: [ 725.534961][T12048] [ 725.537912][T12048] dump_stack_lvl+0xd1/0x138 [ 725.542552][T12048] dump_header+0x10b/0x85f [ 725.547006][T12048] oom_kill_process.cold+0x10/0x15 [ 725.552154][T12048] out_of_memory+0x35c/0x14a0 [ 725.552726][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.556850][T12048] ? find_held_lock+0x2d/0x110 [ 725.568738][T12048] ? oom_killer_disable+0x280/0x280 [ 725.573973][T12048] ? find_held_lock+0x2d/0x110 [ 725.578871][T12048] mem_cgroup_out_of_memory+0x206/0x270 [ 725.584451][T12048] ? mem_cgroup_margin+0x130/0x130 [ 725.589581][T12048] ? lock_downgrade+0x6e0/0x6e0 [ 725.594460][T12048] try_charge_memcg+0xefb/0x12f0 [ 725.599421][T12048] ? mem_cgroup_handle_over_high+0x520/0x520 [ 725.605519][T12048] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 725.611271][T12048] ? lock_downgrade+0x6e0/0x6e0 [ 725.616427][T12048] ? lock_downgrade+0x6e0/0x6e0 [ 725.621286][T12048] ? rcu_read_unlock+0x9/0x60 [ 725.626013][T12048] obj_cgroup_charge+0x2af/0x5e0 [ 725.630978][T12048] ? copy_process+0x3aa/0x7520 [ 725.635754][T12048] kmem_cache_alloc_node+0xb7/0x460 [ 725.640979][T12048] copy_process+0x3aa/0x7520 [ 725.645583][T12048] ? _raw_spin_unlock+0x28/0x40 [ 725.650480][T12048] ? __cleanup_sighand+0xb0/0xb0 [ 725.655460][T12048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.661644][T12048] kernel_clone+0xeb/0x990 [ 725.666268][T12048] ? create_io_thread+0xf0/0xf0 [ 725.674976][T12048] ? find_held_lock+0x2d/0x110 [ 725.679781][T12048] __do_sys_clone+0xba/0x100 [ 725.684389][T12048] ? kernel_clone+0x990/0x990 [ 725.689090][T12048] ? syscall_enter_from_user_mode+0x26/0xb0 [ 725.695000][T12048] do_syscall_64+0x39/0xb0 [ 725.699437][T12048] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 725.705341][T12048] RIP: 0033:0x7ff8e6289dfb [ 725.709761][T12048] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 725.729464][T12048] RSP: 002b:00007fff25c6c5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 725.737902][T12048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff8e6289dfb [ 725.745894][T12048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 725.753878][T12048] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555744b400 [ 725.761854][T12048] R10: 000055555744b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 725.773998][T12048] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff25c6c6a0 [ 725.782002][T12048] [ 725.821316][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.847538][T12415] device bridge_slave_1 entered promiscuous mode [ 725.953388][T12048] memory: usage 228kB, limit 0kB, failcnt 249 [ 725.977154][T12048] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 725.987051][T12048] Memory cgroup stats for /syz5: [ 725.987267][T12048] anon 45056 [ 725.987267][T12048] file 126976 [ 725.987267][T12048] kernel 57344 [ 725.987267][T12048] kernel_stack 0 [ 725.987267][T12048] pagetables 8192 [ 725.987267][T12048] sec_pagetables 0 [ 725.987267][T12048] percpu 0 [ 725.987267][T12048] sock 0 [ 725.987267][T12048] vmalloc 0 [ 725.987267][T12048] shmem 126976 [ 725.987267][T12048] zswap 0 [ 725.987267][T12048] zswapped 0 [ 725.987267][T12048] file_mapped 126976 [ 725.987267][T12048] file_dirty 0 [ 725.987267][T12048] file_writeback 0 [ 725.987267][T12048] swapcached 0 [ 725.987267][T12048] anon_thp 0 [ 725.987267][T12048] file_thp 0 [ 725.987267][T12048] shmem_thp 0 [ 725.987267][T12048] inactive_anon 57344 [ 725.987267][T12048] active_anon 114688 [ 725.987267][T12048] inactive_file 0 [ 725.987267][T12048] active_file 0 [ 725.987267][T12048] unevictable 0 [ 725.987267][T12048] slab_reclaimable 8088 [ 725.987267][T12048] slab_unreclaimable 32296 [ 725.987267][T12048] slab 40384 [ 726.087658][T12048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12048,uid=0 [ 726.106686][T12415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.159560][T12415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.168854][T12048] Memory cgroup out of memory: Killed process 12048 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 726.232383][T12415] team0: Port device team_slave_0 added [ 726.240386][T12415] team0: Port device team_slave_1 added [ 726.326027][T12415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.361094][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.400084][T12415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.502670][T12415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.509654][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.571349][T12415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.597666][T12432] chnl_net:caif_netlink_parms(): no params data found [ 726.699317][T12038] Bluetooth: hci0: command 0x040f tx timeout [ 726.808634][T12415] device hsr_slave_0 entered promiscuous mode [ 726.822469][T12415] device hsr_slave_1 entered promiscuous mode [ 726.839755][T12415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.877692][T12415] Cannot create hsr debugfs directory [ 726.948991][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.959075][T12432] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.992960][T12432] device bridge_slave_0 entered promiscuous mode [ 727.061251][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.069099][T12432] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.100639][T12432] device bridge_slave_1 entered promiscuous mode [ 727.162300][T12038] Bluetooth: hci2: command 0x040f tx timeout [ 727.241603][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.299026][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.456398][T12432] team0: Port device team_slave_0 added [ 727.473933][T12432] team0: Port device team_slave_1 added [ 727.570297][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.595344][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.667855][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.724378][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.739332][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.815334][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.930313][T12432] device hsr_slave_0 entered promiscuous mode [ 727.942703][T12432] device hsr_slave_1 entered promiscuous mode [ 727.956900][T12432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.981120][T12432] Cannot create hsr debugfs directory [ 728.771267][T12038] Bluetooth: hci0: command 0x0419 tx timeout [ 728.810850][T12415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.873553][T12415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.909618][T12415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 728.948747][T12415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 729.241338][T12038] Bluetooth: hci2: command 0x0419 tx timeout [ 729.386981][T12415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.449803][T12415] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.499523][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.521841][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.571510][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.585248][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.601570][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.608720][ T7347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.645725][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 729.671977][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.680634][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.687829][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.721912][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 729.732631][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 729.791404][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.800323][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 729.823524][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 729.833727][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 729.861797][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 729.872694][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 730.085093][T12415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.132460][T12415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 730.175765][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 730.189628][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 730.321285][ C0] net_ratelimit: 2361 callbacks suppressed [ 730.321305][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 730.338965][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 730.351701][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 730.363761][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.375400][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 730.387718][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.401134][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.412848][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 730.591577][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.604406][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.965607][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.982034][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 731.011833][T12415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.293368][T12432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.341930][T12432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.381864][T12432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 731.405883][T12432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.661646][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.707604][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.722057][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.753511][T12432] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.782131][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 731.800398][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 731.823912][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.831137][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.885093][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 731.908638][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 731.949749][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 731.992443][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.999574][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.041105][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 732.084626][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 732.098371][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 732.109069][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 732.131771][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 732.148094][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 732.171200][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 732.236492][T12432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.270985][T12432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.306896][T12415] device veth0_vlan entered promiscuous mode [ 732.335550][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 732.354435][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 732.367656][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 732.376884][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 732.385779][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 732.395153][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 732.432538][T12415] device veth1_vlan entered promiscuous mode [ 732.443693][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 732.460948][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 732.476936][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 732.501936][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 732.556999][T12415] device veth0_macvtap entered promiscuous mode [ 732.598806][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 732.608186][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 732.629382][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 732.654367][T12415] device veth1_macvtap entered promiscuous mode [ 732.673769][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 732.682875][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 732.708735][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.732998][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.773815][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.804027][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.822287][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.840022][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.862757][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.879200][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.905302][T12415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.921602][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 732.942541][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 732.976018][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.005929][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.065470][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.110054][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.137079][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.188981][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.229706][T12415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.271325][T12415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.283352][T12415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.333984][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.392827][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 733.406682][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 733.434442][T12415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.471091][T12415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.479866][T12415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.521222][T12415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.568031][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.596933][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 733.609189][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 733.685258][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.802974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.826938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.926447][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.969378][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.991292][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.001080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 734.026946][T12432] device veth0_vlan entered promiscuous mode [ 734.073403][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 734.096741][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 734.117131][T12432] device veth1_vlan entered promiscuous mode [ 734.160274][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 734.194541][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 734.202833][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 734.223215][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.250434][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 734.261923][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.268171][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.270531][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 734.437273][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.507838][T12432] device veth0_macvtap entered promiscuous mode [ 734.528236][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.536324][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 734.580375][T12432] device veth1_macvtap entered promiscuous mode [ 734.688183][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.750848][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.761451][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.798689][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.817798][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.842023][T12558] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 734.886729][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.901120][T12558] CPU: 0 PID: 12558 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 734.911596][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 734.916725][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.921652][T12558] Call Trace: [ 734.921662][T12558] [ 734.921674][T12558] dump_stack_lvl+0xd1/0x138 [ 734.921718][T12558] dump_header+0x10b/0x85f [ 734.947379][T12558] oom_kill_process.cold+0x10/0x15 [ 734.948683][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.952511][T12558] out_of_memory+0x35c/0x14a0 [ 734.952551][T12558] ? oom_killer_disable+0x280/0x280 [ 734.952588][T12558] mem_cgroup_out_of_memory+0x206/0x270 [ 734.952614][T12558] ? mem_cgroup_margin+0x130/0x130 [ 734.952658][T12558] memory_max_write+0x2f9/0x3c0 [ 734.952691][T12558] ? mem_cgroup_force_empty_write+0x160/0x160 [ 734.952726][T12558] ? lock_release+0x810/0x810 [ 734.952757][T12558] cgroup_file_write+0x1e2/0x770 [ 734.952792][T12558] ? mem_cgroup_force_empty_write+0x160/0x160 [ 734.952823][T12558] ? kill_css+0x370/0x370 [ 734.952853][T12558] ? __virt_addr_valid+0x61/0x2e0 [ 734.952908][T12558] ? kill_css+0x370/0x370 [ 734.952938][T12558] kernfs_fop_write_iter+0x3f1/0x600 [ 734.952987][T12558] vfs_write+0x9ed/0xdd0 [ 734.953023][T12558] ? kernel_write+0x630/0x630 [ 734.953061][T12558] ? __fget_files+0x26a/0x440 [ 734.953110][T12558] ksys_write+0x12b/0x250 [ 734.953140][T12558] ? __ia32_sys_read+0xb0/0xb0 [ 734.953174][T12558] ? syscall_enter_from_user_mode+0x26/0xb0 [ 734.953215][T12558] do_syscall_64+0x39/0xb0 [ 734.989320][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.994761][T12558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 734.994799][T12558] RIP: 0033:0x7f406788c0c9 [ 734.994821][T12558] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.104223][T12558] RSP: 002b:00007f4068623168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 735.112825][T12558] RAX: ffffffffffffffda RBX: 00007f40679ac120 RCX: 00007f406788c0c9 [ 735.120810][T12558] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 735.128787][T12558] RBP: 00007f40678e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 735.136777][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.144755][T12558] R13: 00007ffdd47a11df R14: 00007f4068623300 R15: 0000000000022000 [ 735.152926][T12558] [ 735.179061][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.205230][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.314842][T12558] memory: usage 644kB, limit 0kB, failcnt 326 [ 735.331519][ C0] net_ratelimit: 2432 callbacks suppressed [ 735.331540][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 735.349603][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.354797][T12558] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 735.361270][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 735.382042][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.395559][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.407281][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 735.419730][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.428347][T12558] Memory cgroup stats for [ 735.432418][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.446969][T12558] /syz4: [ 735.448351][T12558] anon 126976 [ 735.448351][T12558] file 122880 [ 735.448351][T12558] kernel 364544 [ 735.448351][T12558] kernel_stack 131072 [ 735.448351][T12558] pagetables 81920 [ 735.448351][T12558] sec_pagetables 0 [ 735.448351][T12558] percpu 64 [ 735.448351][T12558] sock 0 [ 735.448351][T12558] vmalloc 0 [ 735.448351][T12558] shmem 122880 [ 735.448351][T12558] zswap 0 [ 735.448351][T12558] zswapped 0 [ 735.448351][T12558] file_mapped 122880 [ 735.448351][T12558] file_dirty 0 [ 735.448351][T12558] file_writeback 0 [ 735.448351][T12558] swapcached 0 [ 735.448351][T12558] anon_thp 0 [ 735.448351][T12558] file_thp 0 [ 735.448351][T12558] shmem_thp 0 [ 735.448351][T12558] inactive_anon 126976 [ 735.448351][T12558] active_anon 122880 [ 735.448351][T12558] inactive_file 0 [ 735.448351][T12558] active_file 0 [ 735.448351][T12558] unevictable 0 [ 735.448351][T12558] slab_reclaimable 19824 [ 735.448351][T12558] slab_unreclaimable 107128 [ 735.448351][T12558] slab 126952 [ 735.448809][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 735.458931][T12558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 735.543001][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 735.602565][T12558] ,cpuset= [ 735.602572][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.603344][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.605826][T12558] syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12554,uid=0 [ 735.621910][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.642110][T12558] Memory cgroup out of memory: Killed process 12554 (syz-executor.4) total-vm:56852kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 04:35:01 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 735.643655][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.704241][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.716571][T12563] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 735.738004][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.749118][T12563] CPU: 1 PID: 12563 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 735.759858][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 735.770136][T12563] Call Trace: [ 735.773451][T12563] [ 735.776407][T12563] dump_stack_lvl+0xd1/0x138 [ 735.781094][T12563] dump_header+0x10b/0x85f [ 735.785553][T12563] oom_kill_process.cold+0x10/0x15 [ 735.790752][T12563] out_of_memory+0x35c/0x14a0 [ 735.795475][T12563] ? find_held_lock+0x2d/0x110 [ 735.800285][T12563] ? oom_killer_disable+0x280/0x280 [ 735.805528][T12563] ? find_held_lock+0x2d/0x110 [ 735.810340][T12563] mem_cgroup_out_of_memory+0x206/0x270 [ 735.815919][T12563] ? mem_cgroup_margin+0x130/0x130 [ 735.821051][T12563] ? lock_downgrade+0x6e0/0x6e0 [ 735.830317][T12563] try_charge_memcg+0xefb/0x12f0 [ 735.835308][T12563] ? mem_cgroup_handle_over_high+0x520/0x520 [ 735.843247][T12563] ? lock_downgrade+0x6e0/0x6e0 [ 735.848244][T12563] charge_memcg+0x90/0x3b0 [ 735.852762][T12563] __mem_cgroup_charge+0x2b/0x90 [ 735.857737][T12563] ? copy_mc_to_kernel+0x3e/0x90 [ 735.862917][T12563] do_wp_page+0x7ec/0x3370 [ 735.867378][T12563] ? lock_release+0x810/0x810 [ 735.872084][T12563] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 735.877558][T12563] ? do_raw_spin_lock+0x124/0x2b0 [ 735.882592][T12563] ? rwlock_bug.part.0+0x90/0x90 [ 735.887884][T12563] ? lock_chain_count+0x20/0x20 [ 735.892842][T12563] __handle_mm_fault+0x1f58/0x3c90 [ 735.897977][T12563] ? vm_iomap_memory+0x190/0x190 [ 735.902956][T12563] handle_mm_fault+0x1b6/0x850 [ 735.907764][T12563] do_user_addr_fault+0x475/0x1210 [ 735.912979][T12563] ? rcu_read_lock_sched_held+0x3e/0x70 [ 735.918554][T12563] exc_page_fault+0x98/0x170 [ 735.923157][T12563] asm_exc_page_fault+0x26/0x30 [ 735.928382][T12563] RIP: 0033:0x7f406783a146 [ 735.932895][T12563] Code: 49 8d 82 c0 02 00 00 48 89 05 ce b5 c9 00 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a b5 c9 00 <4c> 89 0d ab dd 14 00 31 d2 48 c7 05 9e b5 c9 00 00 00 00 00 4c 89 [ 735.952597][T12563] RSP: 002b:00007ffdd47a13e8 EFLAGS: 00010246 [ 735.959300][T12563] RAX: 000055555712e6c0 RBX: 0000000000000001 RCX: 00007f40684d56e0 [ 735.967279][T12563] RDX: 00007f40684d56e0 RSI: 00007f4067987ef0 RDI: 0000000000000001 [ 735.975342][T12563] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f4067987ef0 [ 735.983321][T12563] R10: 000055555712e400 R11: 0000000000000202 R12: 0000000000000001 [ 735.991296][T12563] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdd47a1500 [ 735.999289][T12563] [ 736.031213][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.061085][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.109092][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.126974][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.148925][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.160278][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.191076][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.212732][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.251596][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.271714][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.304180][T12432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.320887][T12432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.342723][T12432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.384903][T12563] memory: usage 440kB, limit 0kB, failcnt 345 [ 736.391122][T12563] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 736.397992][T12563] Memory cgroup stats for /syz4: [ 736.398195][T12563] anon 65536 [ 736.398195][T12563] file 122880 [ 736.398195][T12563] kernel 200704 [ 736.398195][T12563] kernel_stack 32768 [ 736.398195][T12563] pagetables 57344 [ 736.398195][T12563] sec_pagetables 0 [ 736.398195][T12563] percpu 128 [ 736.398195][T12563] sock 0 [ 736.398195][T12563] vmalloc 0 [ 736.398195][T12563] shmem 122880 [ 736.398195][T12563] zswap 0 [ 736.398195][T12563] zswapped 0 [ 736.398195][T12563] file_mapped 122880 [ 736.398195][T12563] file_dirty 0 [ 736.398195][T12563] file_writeback 0 [ 736.398195][T12563] swapcached 0 [ 736.398195][T12563] anon_thp 0 [ 736.398195][T12563] file_thp 0 [ 736.398195][T12563] shmem_thp 0 [ 736.398195][T12563] inactive_anon 65536 [ 736.398195][T12563] active_anon 122880 [ 736.398195][T12563] inactive_file 0 [ 736.398195][T12563] active_file 0 [ 736.398195][T12563] unevictable 0 [ 736.398195][T12563] slab_reclaimable 8328 [ 736.398195][T12563] slab_unreclaimable 74064 [ 736.398195][T12563] slab 82392 [ 736.401130][T12432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.435512][T12563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12415,uid=0 [ 736.882781][T12563] Memory cgroup out of memory: Killed process 12415 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 736.927993][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.036776][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.066177][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.172111][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.199832][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 737.210186][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.242505][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.309030][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.356604][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 737.516320][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:35:03 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:03 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:03 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:03 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:04 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:04 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:04 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 738.307243][T12591] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 738.391093][T12591] CPU: 0 PID: 12591 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 738.402192][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 738.412284][T12591] Call Trace: [ 738.415591][T12591] [ 738.418550][T12591] dump_stack_lvl+0xd1/0x138 [ 738.423190][T12591] dump_header+0x10b/0x85f [ 738.427646][T12591] oom_kill_process.cold+0x10/0x15 [ 738.432794][T12591] out_of_memory+0x35c/0x14a0 [ 738.437522][T12591] ? oom_killer_disable+0x280/0x280 [ 738.442771][T12591] mem_cgroup_out_of_memory+0x206/0x270 [ 738.448349][T12591] ? mem_cgroup_margin+0x130/0x130 [ 738.453515][T12591] memory_max_write+0x2f9/0x3c0 [ 738.458409][T12591] ? mem_cgroup_force_empty_write+0x160/0x160 [ 738.464573][T12591] ? lock_release+0x810/0x810 [ 738.469293][T12591] cgroup_file_write+0x1e2/0x770 [ 738.474273][T12591] ? mem_cgroup_force_empty_write+0x160/0x160 [ 738.480382][T12591] ? kill_css+0x370/0x370 [ 738.484761][T12591] ? __virt_addr_valid+0x61/0x2e0 [ 738.489847][T12591] ? kill_css+0x370/0x370 [ 738.494226][T12591] kernfs_fop_write_iter+0x3f1/0x600 [ 738.499555][T12591] vfs_write+0x9ed/0xdd0 [ 738.503835][T12591] ? kernel_write+0x630/0x630 [ 738.508544][T12591] ? __fget_files+0x26a/0x440 [ 738.513252][T12591] ksys_write+0x12b/0x250 [ 738.517686][T12591] ? __ia32_sys_read+0xb0/0xb0 [ 738.522482][T12591] ? syscall_enter_from_user_mode+0x26/0xb0 [ 738.528410][T12591] do_syscall_64+0x39/0xb0 [ 738.532861][T12591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.538773][T12591] RIP: 0033:0x7f711a48c0c9 [ 738.543204][T12591] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 738.562926][T12591] RSP: 002b:00007f711b1e4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 738.571361][T12591] RAX: ffffffffffffffda RBX: 00007f711a5ac050 RCX: 00007f711a48c0c9 [ 738.579362][T12591] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 738.587362][T12591] RBP: 00007f711a4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 738.595368][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.603374][T12591] R13: 00007fffa8eb556f R14: 00007f711b1e4300 R15: 0000000000022000 [ 738.611652][T12591] 04:35:04 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 738.686677][T12591] memory: usage 10724kB, limit 0kB, failcnt 458 [ 738.710609][T12591] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 738.742691][T12591] Memory cgroup stats for /syz1: [ 738.742926][T12591] anon 147456 [ 738.742926][T12591] file 10477568 [ 738.742926][T12591] kernel 356352 [ 738.742926][T12591] kernel_stack 98304 [ 738.742926][T12591] pagetables 81920 [ 738.742926][T12591] sec_pagetables 0 [ 738.742926][T12591] percpu 64 [ 738.742926][T12591] sock 0 [ 738.742926][T12591] vmalloc 0 [ 738.742926][T12591] shmem 10477568 [ 738.742926][T12591] zswap 0 [ 738.742926][T12591] zswapped 0 [ 738.742926][T12591] file_mapped 192512 [ 738.742926][T12591] file_dirty 0 [ 738.742926][T12591] file_writeback 0 [ 738.742926][T12591] swapcached 0 [ 738.742926][T12591] anon_thp 0 [ 738.742926][T12591] file_thp 0 [ 738.742926][T12591] shmem_thp 0 [ 738.742926][T12591] inactive_anon 147456 [ 738.742926][T12591] active_anon 10477568 [ 738.742926][T12591] inactive_file 0 [ 738.742926][T12591] active_file 0 [ 738.742926][T12591] unevictable 0 [ 738.742926][T12591] slab_reclaimable 50640 [ 738.742926][T12591] slab_unreclaimable 92672 [ 738.742926][T12591] slab 143312 04:35:05 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:05 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 739.235623][T12591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12585,uid=0 04:35:05 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:05 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 739.761406][T12591] Memory cgroup out of memory: Killed process 12591 (syz-executor.1) total-vm:56720kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 04:35:06 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:06 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:06 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 740.032348][T12432] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 740.065187][T12432] CPU: 0 PID: 12432 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 740.075660][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 740.085745][T12432] Call Trace: [ 740.089050][T12432] [ 740.092016][T12432] dump_stack_lvl+0xd1/0x138 [ 740.096656][T12432] dump_header+0x10b/0x85f [ 740.101114][T12432] oom_kill_process.cold+0x10/0x15 [ 740.106259][T12432] out_of_memory+0x35c/0x14a0 [ 740.110977][T12432] ? find_held_lock+0x2d/0x110 [ 740.115782][T12432] ? oom_killer_disable+0x280/0x280 [ 740.121009][T12432] ? find_held_lock+0x2d/0x110 [ 740.125992][T12432] mem_cgroup_out_of_memory+0x206/0x270 [ 740.131568][T12432] ? mem_cgroup_margin+0x130/0x130 [ 740.136708][T12432] ? lock_downgrade+0x6e0/0x6e0 [ 740.141610][T12432] try_charge_memcg+0xefb/0x12f0 [ 740.146681][T12432] ? mem_cgroup_handle_over_high+0x520/0x520 [ 740.152712][T12432] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 740.158559][T12432] ? lock_downgrade+0x6e0/0x6e0 [ 740.163448][T12432] ? lock_downgrade+0x6e0/0x6e0 [ 740.168341][T12432] __memcg_kmem_charge_page+0x16e/0x3b0 [ 740.173917][T12432] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 740.180091][T12432] copy_process+0x4e3/0x7520 [ 740.184697][T12432] ? _raw_spin_unlock+0x28/0x40 [ 740.189561][T12432] ? wp_page_reuse+0x197/0x570 [ 740.194367][T12432] ? do_wp_page+0x844/0x3370 [ 740.198982][T12432] ? __cleanup_sighand+0xb0/0xb0 [ 740.203937][T12432] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 740.209328][T12432] ? rwlock_bug.part.0+0x90/0x90 [ 740.214280][T12432] ? lock_chain_count+0x20/0x20 [ 740.219142][T12432] kernel_clone+0xeb/0x990 [ 740.223658][T12432] ? create_io_thread+0xf0/0xf0 [ 740.228528][T12432] ? find_held_lock+0x2d/0x110 [ 740.233319][T12432] __do_sys_clone+0xba/0x100 [ 740.237928][T12432] ? kernel_clone+0x990/0x990 [ 740.242626][T12432] ? syscall_enter_from_user_mode+0x26/0xb0 [ 740.248543][T12432] do_syscall_64+0x39/0xb0 [ 740.252981][T12432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 740.258885][T12432] RIP: 0033:0x7f711a489dfb [ 740.263311][T12432] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 740.283034][T12432] RSP: 002b:00007fffa8eb57b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 740.291556][T12432] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f711a489dfb [ 740.299533][T12432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 740.307509][T12432] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555644c400 [ 740.315481][T12432] R10: 000055555644c6d0 R11: 0000000000000246 R12: 0000000000000001 [ 740.323456][T12432] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa8eb5890 [ 740.331449][T12432] [ 740.351625][ C0] net_ratelimit: 1812 callbacks suppressed [ 740.351644][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.369107][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 740.381515][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.395015][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.406674][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 740.418964][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.431697][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.443761][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 740.456373][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 740.469550][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 740.721225][T12432] memory: usage 10384kB, limit 0kB, failcnt 477 [ 740.737780][T12432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 740.778228][T12432] Memory cgroup stats for /syz1: [ 740.778542][T12432] anon 45056 [ 740.778542][T12432] file 10477568 [ 740.778542][T12432] kernel 110592 [ 740.778542][T12432] kernel_stack 0 [ 740.778542][T12432] pagetables 8192 [ 740.778542][T12432] sec_pagetables 0 [ 740.778542][T12432] percpu 64 [ 740.778542][T12432] sock 0 [ 740.778542][T12432] vmalloc 0 [ 740.778542][T12432] shmem 10477568 [ 740.778542][T12432] zswap 0 [ 740.778542][T12432] zswapped 0 [ 740.778542][T12432] file_mapped 147456 [ 740.778542][T12432] file_dirty 0 [ 740.778542][T12432] file_writeback 0 [ 740.778542][T12432] swapcached 0 [ 740.778542][T12432] anon_thp 0 [ 740.778542][T12432] file_thp 0 [ 740.778542][T12432] shmem_thp 0 [ 740.778542][T12432] inactive_anon 45056 [ 740.778542][T12432] active_anon 10477568 [ 740.778542][T12432] inactive_file 0 [ 740.778542][T12432] active_file 0 [ 740.778542][T12432] unevictable 0 [ 740.778542][T12432] slab_reclaimable 37992 [ 740.778542][T12432] slab_unreclaimable 51576 [ 740.778542][T12432] slab 89568 [ 741.073992][T12432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12432,uid=0 [ 741.124324][T12432] Memory cgroup out of memory: Killed process 12432 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 741.205696][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.228755][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.244931][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.275689][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.284741][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.297131][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.190619][T12632] chnl_net:caif_netlink_parms(): no params data found [ 742.490386][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.504916][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.515427][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 742.528109][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.528692][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.542923][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 742.558690][T12632] device bridge_slave_0 entered promiscuous mode [ 742.565763][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.576209][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 742.599384][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 742.606844][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.624380][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.639570][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 742.656204][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.698827][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.706791][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.729113][T12632] device bridge_slave_1 entered promiscuous mode [ 742.793109][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.822675][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.986261][T12632] team0: Port device team_slave_0 added [ 743.010288][T12632] team0: Port device team_slave_1 added [ 743.141252][ T34] device hsr_slave_0 left promiscuous mode [ 743.178425][ T34] device hsr_slave_1 left promiscuous mode [ 743.200638][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.222620][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.263467][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.270927][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.310800][ T34] device bridge_slave_1 left promiscuous mode [ 743.331357][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.345872][ T34] device bridge_slave_0 left promiscuous mode [ 743.361222][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.388088][ T34] device hsr_slave_0 left promiscuous mode [ 743.407521][T12038] Bluetooth: hci0: command 0x0409 tx timeout [ 743.415084][ T34] device hsr_slave_1 left promiscuous mode [ 743.430892][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.438634][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.448695][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.457253][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.472681][ T34] device bridge_slave_1 left promiscuous mode [ 743.478919][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.489127][ T34] device bridge_slave_0 left promiscuous mode [ 743.495840][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.529734][ T34] device veth1_macvtap left promiscuous mode [ 743.541393][ T34] device veth0_macvtap left promiscuous mode [ 743.547639][ T34] device veth1_vlan left promiscuous mode [ 743.571542][ T34] device veth0_vlan left promiscuous mode [ 743.610994][ T34] device veth1_macvtap left promiscuous mode [ 743.621643][ T34] device veth0_macvtap left promiscuous mode [ 743.627800][ T34] device veth1_vlan left promiscuous mode [ 743.651191][ T34] device veth0_vlan left promiscuous mode [ 744.686248][T12038] Bluetooth: hci2: command 0x0409 tx timeout [ 744.693007][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 744.722178][ T34] team0 (unregistering): Port device team_slave_1 removed [ 744.755555][ T34] team0 (unregistering): Port device team_slave_0 removed [ 744.797770][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.828524][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.047147][ T34] bond0 (unregistering): Released all slaves [ 745.362622][ C0] net_ratelimit: 3693 callbacks suppressed [ 745.362643][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.379860][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 745.392406][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.405169][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.417005][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 745.428575][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 745.440752][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 745.452466][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.464288][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 745.476131][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.491572][ T5119] Bluetooth: hci0: command 0x041b tx timeout [ 745.573534][ T34] team0 (unregistering): Port device team_slave_1 removed [ 745.624961][ T34] team0 (unregistering): Port device team_slave_0 removed [ 745.652857][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.698290][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.932497][ T34] bond0 (unregistering): Released all slaves [ 746.036654][T12632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.054161][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.102498][T12632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.126509][T12632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.147294][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.181320][T12632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.406384][T12632] device hsr_slave_0 entered promiscuous mode [ 746.425115][T12632] device hsr_slave_1 entered promiscuous mode [ 746.560279][T12654] chnl_net:caif_netlink_parms(): no params data found [ 746.698815][T12651] chnl_net:caif_netlink_parms(): no params data found [ 746.764883][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 746.765217][T12038] Bluetooth: hci3: command 0x041b tx timeout [ 746.988275][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.001205][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.017440][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.023817][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.043506][T12654] device bridge_slave_0 entered promiscuous mode [ 747.072130][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.079257][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.131165][T12654] device bridge_slave_1 entered promiscuous mode [ 747.526748][T12654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.571354][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 747.601449][T12654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.611225][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.618366][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.676162][T12651] device bridge_slave_0 entered promiscuous mode [ 747.722595][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.729724][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.761899][T12651] device bridge_slave_1 entered promiscuous mode [ 747.862747][T12654] team0: Port device team_slave_0 added [ 747.872304][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.921670][T12654] team0: Port device team_slave_1 added [ 748.000043][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.208908][T12651] team0: Port device team_slave_0 added [ 748.220995][T12654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.228082][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.347253][T12654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.399184][T12651] team0: Port device team_slave_1 added [ 748.424773][T12654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.454812][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.518439][T12654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.710432][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.725323][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.811131][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.841215][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 748.871909][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 748.898438][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.907653][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.016425][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.069684][T12654] device hsr_slave_0 entered promiscuous mode [ 749.119540][T12654] device hsr_slave_1 entered promiscuous mode [ 749.141821][T12654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.149417][T12654] Cannot create hsr debugfs directory [ 749.196094][T12632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 749.296455][T12632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 749.363302][T12632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 749.382479][T12632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 749.434140][T12651] device hsr_slave_0 entered promiscuous mode [ 749.441198][T12651] device hsr_slave_1 entered promiscuous mode [ 749.491369][T12651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.499004][T12651] Cannot create hsr debugfs directory [ 749.641485][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 749.896784][T12654] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.152877][T12654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.292202][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.369411][T12654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.371263][ C0] net_ratelimit: 2859 callbacks suppressed [ 750.371279][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.399009][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.410654][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 750.422934][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.450696][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.487436][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.512012][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.526921][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.539058][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 750.541953][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.550680][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 750.570981][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 750.583017][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.591789][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.594582][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 750.638594][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.647710][ T7347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.681414][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 750.721139][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.742604][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.749725][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.773628][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 750.835062][T12654] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.871947][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.899300][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 750.921498][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 750.928110][ T5119] Bluetooth: hci2: command 0x0419 tx timeout [ 750.942360][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 750.962213][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 750.985558][T12632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 751.000061][T12632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.013173][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.021891][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 751.031419][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.040039][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 751.048840][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.074338][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.808812][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.821702][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.830002][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.892268][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.912228][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.990730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.999731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.024287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.048228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.083065][T12632] device veth0_vlan entered promiscuous mode [ 752.116761][T12632] device veth1_vlan entered promiscuous mode [ 752.282049][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.290402][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.351957][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.362058][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.401720][T12632] device veth0_macvtap entered promiscuous mode [ 752.422821][T12651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 752.467464][T12651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 752.545419][T12632] device veth1_macvtap entered promiscuous mode [ 752.571237][T12651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 752.631346][T12651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 752.677817][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.721243][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.759062][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.801074][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.810974][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.851072][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.901081][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.941069][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.991840][T12632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.041551][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.049816][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 753.062260][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 753.081557][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 753.103220][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.127440][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.149056][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.161431][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.181526][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.201066][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.220009][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.231051][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.270692][T12632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.292332][T12654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 753.314017][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 753.331872][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.363976][T12632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.385025][T12632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.411831][T12632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.435242][T12632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.460410][T12654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 753.544374][T12654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 753.618106][T12654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 753.708695][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.882639][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.944737][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.961491][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 753.969554][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.034582][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.061132][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.073074][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.185637][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 754.194750][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.204528][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.211704][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.219904][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 754.330603][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.404411][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.425025][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 754.456645][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 754.478849][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.486055][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.504761][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 754.566231][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.588736][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.631878][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.711944][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.722093][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 754.739847][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 754.753161][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 754.802201][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.821659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 754.830760][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 754.843818][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.865471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.880625][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.896139][T12651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 754.969653][T12654] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.010810][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 755.020124][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 755.062101][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 755.081867][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.090557][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.097728][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.116042][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 755.136109][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.150282][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.157464][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.216915][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.291197][T12776] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 755.321119][T12776] CPU: 0 PID: 12776 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 755.331602][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 755.341689][T12776] Call Trace: [ 755.344991][T12776] [ 755.347945][T12776] dump_stack_lvl+0xd1/0x138 [ 755.352580][T12776] dump_header+0x10b/0x85f [ 755.357027][T12776] oom_kill_process.cold+0x10/0x15 [ 755.362265][T12776] out_of_memory+0x35c/0x14a0 [ 755.366991][T12776] ? oom_killer_disable+0x280/0x280 [ 755.372681][T12776] mem_cgroup_out_of_memory+0x206/0x270 [ 755.378276][T12776] ? mem_cgroup_margin+0x130/0x130 [ 755.383440][T12776] memory_max_write+0x2f9/0x3c0 [ 755.388333][T12776] ? mem_cgroup_force_empty_write+0x160/0x160 [ 755.394439][T12776] ? lock_release+0x810/0x810 [ 755.399151][T12776] cgroup_file_write+0x1e2/0x770 [ 755.404124][T12776] ? mem_cgroup_force_empty_write+0x160/0x160 [ 755.410228][T12776] ? kill_css+0x370/0x370 [ 755.414597][T12776] ? __virt_addr_valid+0x61/0x2e0 [ 755.419684][T12776] ? kill_css+0x370/0x370 [ 755.424050][T12776] kernfs_fop_write_iter+0x3f1/0x600 [ 755.429386][T12776] vfs_write+0x9ed/0xdd0 [ 755.433682][T12776] ? kernel_write+0x630/0x630 [ 755.438401][T12776] ? __fget_files+0x26a/0x440 [ 755.443134][T12776] ksys_write+0x12b/0x250 [ 755.447591][T12776] ? __ia32_sys_read+0xb0/0xb0 [ 755.452390][T12776] ? syscall_enter_from_user_mode+0x26/0xb0 [ 755.458323][T12776] do_syscall_64+0x39/0xb0 [ 755.462780][T12776] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 755.468703][T12776] RIP: 0033:0x7fb7f368c0c9 [ 755.473141][T12776] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.492804][T12776] RSP: 002b:00007fb7f4449168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.501261][T12776] RAX: ffffffffffffffda RBX: 00007fb7f37ac050 RCX: 00007fb7f368c0c9 [ 755.509527][T12776] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 755.518049][T12776] RBP: 00007fb7f36e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 755.526495][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.534526][T12776] R13: 00007ffe130e82cf R14: 00007fb7f4449300 R15: 0000000000022000 [ 755.542550][T12776] [ 755.550252][ C0] net_ratelimit: 2331 callbacks suppressed [ 755.550270][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.559727][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 755.567736][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 755.568722][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.599183][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.611220][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 755.612554][T12776] memory: usage 8632kB, limit 0kB, failcnt 663 [ 755.622959][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 755.629647][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.641512][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 755.661014][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.671170][T12776] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.672643][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 755.679185][T12776] Memory cgroup stats for [ 755.691515][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.709291][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 755.740086][T12776] /syz2: [ 755.740293][T12776] anon 122880 [ 755.740293][T12776] file 8355840 [ 755.740293][T12776] kernel 348160 [ 755.740293][T12776] kernel_stack 98304 [ 755.740293][T12776] pagetables 81920 [ 755.740293][T12776] sec_pagetables 0 [ 755.740293][T12776] percpu 64 [ 755.740293][T12776] sock 0 [ 755.740293][T12776] vmalloc 0 [ 755.740293][T12776] shmem 8351744 [ 755.740293][T12776] zswap 0 [ 755.740293][T12776] zswapped 0 [ 755.740293][T12776] file_mapped 180224 [ 755.740293][T12776] file_dirty 0 [ 755.740293][T12776] file_writeback 0 [ 755.740293][T12776] swapcached 0 [ 755.740293][T12776] anon_thp 0 [ 755.740293][T12776] file_thp 0 [ 755.740293][T12776] shmem_thp 0 [ 755.740293][T12776] inactive_anon 8294400 [ 755.740293][T12776] active_anon 180224 [ 755.740293][T12776] inactive_file 0 [ 755.740293][T12776] active_file 4096 [ 755.740293][T12776] unevictable 0 [ 755.740293][T12776] slab_reclaimable 48800 [ 755.740293][T12776] slab_unreclaimable 93968 [ 755.740293][T12776] slab 142768 [ 755.838353][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 755.869310][T12654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 755.931154][T12654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.978573][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.003380][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 756.012482][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 756.030596][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 756.039400][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.136890][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 756.281127][T12776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12632,uid=0 [ 756.362244][T12776] Memory cgroup out of memory: Killed process 12632 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 756.401881][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 756.409416][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 756.443204][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.821432][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 756.828974][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 756.865482][T12654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.672560][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 757.686925][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 757.781141][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 757.806550][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 757.827766][T12651] device veth0_vlan entered promiscuous mode [ 757.841238][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 757.849456][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 757.872367][T12651] device veth1_vlan entered promiscuous mode [ 757.944803][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 757.962742][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 757.984066][T12651] device veth0_macvtap entered promiscuous mode [ 758.120444][T12651] device veth1_macvtap entered promiscuous mode [ 758.240440][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 758.264087][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 758.273401][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 758.297991][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.397312][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.431116][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:35:24 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 758.440979][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.505127][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.560780][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.595002][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.630259][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.651081][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.681900][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.721077][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.745386][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.764997][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 758.775183][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 758.786522][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 758.795380][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.826595][T12654] device veth0_vlan entered promiscuous mode [ 758.844692][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.874587][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.885973][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.911103][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.931145][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.946990][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.961463][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.981390][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.003435][T12651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.024325][T12651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.041907][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.053432][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.070822][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 759.080950][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.102500][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.116621][T12654] device veth1_vlan entered promiscuous mode [ 759.182198][T12651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.218058][T12651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.247708][T12651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.272103][T12651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.376549][T12654] device veth0_macvtap entered promiscuous mode [ 759.422724][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.453870][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.480341][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.504384][T12654] device veth1_macvtap entered promiscuous mode [ 759.544405][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.568887][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.572771][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.612831][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.630713][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.665839][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.675782][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.702898][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.721836][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.741851][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.777524][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.803901][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.821964][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.848352][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.869887][T12654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.903233][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.941716][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 759.949766][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.991501][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 760.018752][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.047632][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.057985][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.104122][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.144415][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.155203][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.188732][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.199511][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.243117][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.263118][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.305746][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.332687][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.344447][T12654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.387521][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.418386][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.511756][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 760.520640][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 760.545801][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 760.557576][T12654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.569240][ C0] net_ratelimit: 2970 callbacks suppressed [ 760.569261][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.586807][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 760.594938][T12654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.599053][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.619294][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.621103][T12654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.631239][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 760.649297][T12654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.650625][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 760.671732][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 760.685107][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.696568][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 760.708864][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.999011][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.020578][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.037016][ T34] device hsr_slave_0 left promiscuous mode [ 761.051777][ T34] device hsr_slave_1 left promiscuous mode [ 761.085694][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.098526][T12850] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 761.109439][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.119625][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.127502][T12850] CPU: 1 PID: 12850 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 761.137982][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 761.148071][T12850] Call Trace: [ 761.151379][T12850] [ 761.154329][T12850] dump_stack_lvl+0xd1/0x138 [ 761.158989][T12850] dump_header+0x10b/0x85f [ 761.163424][T12850] oom_kill_process.cold+0x10/0x15 [ 761.168561][T12850] out_of_memory+0x35c/0x14a0 [ 761.173257][T12850] ? oom_killer_disable+0x280/0x280 [ 761.178476][T12850] mem_cgroup_out_of_memory+0x206/0x270 [ 761.184039][T12850] ? mem_cgroup_margin+0x130/0x130 [ 761.189187][T12850] memory_max_write+0x2f9/0x3c0 [ 761.194056][T12850] ? mem_cgroup_force_empty_write+0x160/0x160 [ 761.200135][T12850] ? lock_release+0x810/0x810 [ 761.204825][T12850] cgroup_file_write+0x1e2/0x770 [ 761.209777][T12850] ? mem_cgroup_force_empty_write+0x160/0x160 [ 761.215855][T12850] ? kill_css+0x370/0x370 [ 761.220197][T12850] ? __virt_addr_valid+0x61/0x2e0 [ 761.225281][T12850] ? kill_css+0x370/0x370 [ 761.229628][T12850] kernfs_fop_write_iter+0x3f1/0x600 [ 761.234941][T12850] vfs_write+0x9ed/0xdd0 [ 761.239211][T12850] ? kernel_write+0x630/0x630 [ 761.243904][T12850] ? __fget_files+0x26a/0x440 [ 761.248610][T12850] ksys_write+0x12b/0x250 [ 761.252964][T12850] ? __ia32_sys_read+0xb0/0xb0 [ 761.257756][T12850] ? syscall_enter_from_user_mode+0x26/0xb0 [ 761.263683][T12850] do_syscall_64+0x39/0xb0 [ 761.268124][T12850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 761.274038][T12850] RIP: 0033:0x7fd89fa8c0c9 [ 761.278473][T12850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.298174][T12850] RSP: 002b:00007fd8a0816168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 761.306599][T12850] RAX: ffffffffffffffda RBX: 00007fd89fbac050 RCX: 00007fd89fa8c0c9 [ 761.314576][T12850] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 761.322564][T12850] RBP: 00007fd89fae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 761.330553][T12850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.338535][T12850] R13: 00007ffef0f5179f R14: 00007fd8a0816300 R15: 0000000000022000 [ 761.346614][T12850] [ 761.374866][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.397735][T12850] memory: usage 568kB, limit 0kB, failcnt 266 [ 761.405751][T12850] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 761.414572][T12850] Memory cgroup stats for /syz5: [ 761.414784][T12850] anon 122880 [ 761.414784][T12850] file 126976 [ 761.414784][T12850] kernel 319488 [ 761.414784][T12850] kernel_stack 98304 [ 761.414784][T12850] pagetables 81920 [ 761.414784][T12850] sec_pagetables 0 [ 761.414784][T12850] percpu 64 [ 761.414784][T12850] sock 0 [ 761.414784][T12850] vmalloc 0 [ 761.414784][T12850] shmem 126976 [ 761.414784][T12850] zswap 0 [ 761.414784][T12850] zswapped 0 [ 761.414784][T12850] file_mapped 126976 [ 761.414784][T12850] file_dirty 0 [ 761.414784][T12850] file_writeback 0 [ 761.414784][T12850] swapcached 0 [ 761.414784][T12850] anon_thp 0 [ 761.414784][T12850] file_thp 0 [ 761.414784][T12850] shmem_thp 0 [ 761.414784][T12850] inactive_anon 135168 [ 761.414784][T12850] active_anon 114688 [ 761.414784][T12850] inactive_file 0 [ 761.414784][T12850] active_file 0 [ 761.414784][T12850] unevictable 0 [ 761.414784][T12850] slab_reclaimable 20736 [ 761.414784][T12850] slab_unreclaimable 93320 [ 761.414784][T12850] slab 114056 [ 761.523919][ T34] device bridge_slave_1 left promiscuous mode [ 761.530183][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.555939][T12850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12848,uid=0 [ 761.587914][T12850] Memory cgroup out of memory: Killed process 12848 (syz-executor.5) total-vm:56720kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 761.612431][ T34] device bridge_slave_0 left promiscuous mode [ 761.618708][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.681214][ T34] device hsr_slave_0 left promiscuous mode [ 761.724934][ T34] device hsr_slave_1 left promiscuous mode [ 761.740805][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.748608][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.775564][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.845377][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.868118][ T34] device bridge_slave_1 left promiscuous mode [ 761.874916][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.915922][ T34] device bridge_slave_0 left promiscuous mode [ 761.922264][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.971216][ T34] device veth1_macvtap left promiscuous mode [ 761.977310][ T34] device veth0_macvtap left promiscuous mode [ 761.991623][ T34] device veth1_vlan left promiscuous mode [ 761.997520][ T34] device veth0_vlan left promiscuous mode [ 762.029099][ T34] device veth1_macvtap left promiscuous mode [ 762.035303][ T34] device veth0_macvtap left promiscuous mode [ 762.057191][ T34] device veth1_vlan left promiscuous mode [ 762.063140][ T34] device veth0_vlan left promiscuous mode [ 763.169525][ T34] team0 (unregistering): Port device team_slave_1 removed [ 763.204587][ T34] team0 (unregistering): Port device team_slave_0 removed [ 763.250618][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.289208][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.538522][ T34] bond0 (unregistering): Released all slaves [ 763.645970][ T29] oom_reaper: reaped process 12848 (syz-executor.5), now anon-rss:0kB, file-rss:8196kB, shmem-rss:0kB [ 763.928145][ T34] team0 (unregistering): Port device team_slave_1 removed [ 763.978329][ T34] team0 (unregistering): Port device team_slave_0 removed [ 764.018112][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.075462][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.300197][ T34] bond0 (unregistering): Released all slaves [ 764.601149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 764.675481][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 04:35:30 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 764.731224][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.749920][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 764.827255][T12651] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 764.849198][T12651] CPU: 1 PID: 12651 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 764.859716][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 764.871779][T12651] Call Trace: [ 764.875084][T12651] [ 764.878026][T12651] dump_stack_lvl+0xd1/0x138 [ 764.882640][T12651] dump_header+0x10b/0x85f [ 764.887072][T12651] oom_kill_process.cold+0x10/0x15 [ 764.892197][T12651] out_of_memory+0x35c/0x14a0 [ 764.896893][T12651] ? find_held_lock+0x2d/0x110 [ 764.901675][T12651] ? oom_killer_disable+0x280/0x280 [ 764.906903][T12651] ? find_held_lock+0x2d/0x110 [ 764.911705][T12651] mem_cgroup_out_of_memory+0x206/0x270 [ 764.917339][T12651] ? mem_cgroup_margin+0x130/0x130 [ 764.922459][T12651] ? lock_downgrade+0x6e0/0x6e0 [ 764.927332][T12651] try_charge_memcg+0xefb/0x12f0 [ 764.932296][T12651] ? mem_cgroup_handle_over_high+0x520/0x520 [ 764.938315][T12651] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 764.944047][T12651] ? lock_downgrade+0x6e0/0x6e0 [ 764.948946][T12651] obj_cgroup_charge+0x2af/0x5e0 [ 764.954684][T12651] ? vm_area_dup+0x7d/0x380 [ 764.959198][T12651] kmem_cache_alloc+0xb5/0x430 [ 764.963984][T12651] vm_area_dup+0x7d/0x380 [ 764.968322][T12651] ? copy_page_range+0x1dfe/0x3b40 [ 764.973480][T12651] ? mas_next_nentry+0x610/0xab0 [ 764.978437][T12651] ? vm_area_alloc+0x100/0x100 [ 764.983220][T12651] ? mas_find+0x211/0xd10 [ 764.987572][T12651] dup_mmap+0x655/0x10b0 [ 764.991834][T12651] ? replace_mm_exe_file+0x4b0/0x4b0 [ 764.997482][T12651] ? lock_downgrade+0x6e0/0x6e0 [ 765.002348][T12651] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 765.008269][T12651] ? mm_init+0x8e0/0xc10 [ 765.012526][T12651] copy_process+0x440f/0x7520 [ 765.017218][T12651] ? _raw_spin_unlock+0x28/0x40 [ 765.022099][T12651] ? wp_page_reuse+0x197/0x570 [ 765.026899][T12651] ? __cleanup_sighand+0xb0/0xb0 [ 765.031847][T12651] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 765.037417][T12651] ? rwlock_bug.part.0+0x90/0x90 [ 765.042368][T12651] ? lock_chain_count+0x20/0x20 [ 765.047228][T12651] kernel_clone+0xeb/0x990 [ 765.051743][T12651] ? create_io_thread+0xf0/0xf0 [ 765.056613][T12651] ? find_held_lock+0x2d/0x110 [ 765.061579][T12651] __do_sys_clone+0xba/0x100 [ 765.066350][T12651] ? kernel_clone+0x990/0x990 [ 765.071060][T12651] ? syscall_enter_from_user_mode+0x26/0xb0 [ 765.076972][T12651] do_syscall_64+0x39/0xb0 [ 765.081407][T12651] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 765.087312][T12651] RIP: 0033:0x7fd89fa89dfb [ 765.091732][T12651] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 765.111341][T12651] RSP: 002b:00007ffef0f519e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 765.120203][T12651] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd89fa89dfb [ 765.128177][T12651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 765.136934][T12651] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555565a9400 [ 765.144912][T12651] R10: 00005555565a96d0 R11: 0000000000000246 R12: 0000000000000001 [ 765.152977][T12651] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffef0f51ac0 [ 765.161081][T12651] [ 765.178868][T12651] memory: usage 368kB, limit 0kB, failcnt 285 [ 765.241098][T12651] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 765.248018][T12651] Memory cgroup stats for /syz5: [ 765.248351][T12651] anon 40960 [ 765.248351][T12651] file 126976 [ 765.248351][T12651] kernel 192512 [ 765.248351][T12651] kernel_stack 32768 [ 765.248351][T12651] pagetables 32768 [ 765.248351][T12651] sec_pagetables 0 [ 765.248351][T12651] percpu 128 [ 765.248351][T12651] sock 0 [ 765.248351][T12651] vmalloc 0 [ 765.248351][T12651] shmem 126976 [ 765.248351][T12651] zswap 0 [ 765.248351][T12651] zswapped 0 [ 765.248351][T12651] file_mapped 126976 [ 765.248351][T12651] file_dirty 0 [ 765.248351][T12651] file_writeback 0 [ 765.248351][T12651] swapcached 0 [ 765.248351][T12651] anon_thp 0 [ 765.248351][T12651] file_thp 0 [ 765.248351][T12651] shmem_thp 0 [ 765.248351][T12651] inactive_anon 53248 [ 765.248351][T12651] active_anon 114688 [ 765.248351][T12651] inactive_file 0 [ 765.248351][T12651] active_file 0 [ 765.248351][T12651] unevictable 0 [ 765.248351][T12651] slab_reclaimable 29448 [ 765.248351][T12651] slab_unreclaimable 70984 [ 765.248351][T12651] slab 100432 04:35:31 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:31 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) 04:35:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:31 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:31 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 765.593122][ C0] net_ratelimit: 2906 callbacks suppressed [ 765.593161][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 765.628450][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.645878][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 765.676731][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.753534][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.765179][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 765.777657][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.790336][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.802369][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 765.814228][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:35:32 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 766.044649][T12651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12651,uid=0 04:35:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 766.108405][T12651] Memory cgroup out of memory: Killed process 12651 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 766.198179][T12907] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 766.357646][T12907] CPU: 0 PID: 12907 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 766.368140][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 766.378229][T12907] Call Trace: [ 766.381535][T12907] [ 766.384492][T12907] dump_stack_lvl+0xd1/0x138 [ 766.389129][T12907] dump_header+0x10b/0x85f [ 766.393586][T12907] oom_kill_process.cold+0x10/0x15 [ 766.398738][T12907] out_of_memory+0x35c/0x14a0 [ 766.403464][T12907] ? oom_killer_disable+0x280/0x280 [ 766.408698][T12907] ? find_held_lock+0x2d/0x110 [ 766.413608][T12907] mem_cgroup_out_of_memory+0x206/0x270 [ 766.419280][T12907] ? mem_cgroup_margin+0x130/0x130 [ 766.424440][T12907] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 766.430389][T12907] memory_max_write+0x2f9/0x3c0 [ 766.435276][T12907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 766.441475][T12907] ? lock_release+0x810/0x810 [ 766.446202][T12907] cgroup_file_write+0x1e2/0x770 [ 766.451186][T12907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 766.457556][T12907] ? kill_css+0x370/0x370 [ 766.461929][T12907] ? __virt_addr_valid+0x61/0x2e0 [ 766.467009][T12907] ? kill_css+0x370/0x370 [ 766.471462][T12907] kernfs_fop_write_iter+0x3f1/0x600 [ 766.476802][T12907] vfs_write+0x9ed/0xdd0 [ 766.481084][T12907] ? kernel_write+0x630/0x630 [ 766.485804][T12907] ? __fget_files+0x26a/0x440 [ 766.490530][T12907] ksys_write+0x12b/0x250 [ 766.494916][T12907] ? __ia32_sys_read+0xb0/0xb0 [ 766.499720][T12907] ? syscall_enter_from_user_mode+0x26/0xb0 [ 766.505662][T12907] do_syscall_64+0x39/0xb0 [ 766.510128][T12907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 766.516067][T12907] RIP: 0033:0x7f29e788c0c9 [ 766.520513][T12907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.540246][T12907] RSP: 002b:00007f29e8616168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.548715][T12907] RAX: ffffffffffffffda RBX: 00007f29e79ac050 RCX: 00007f29e788c0c9 [ 766.556720][T12907] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 766.564730][T12907] RBP: 00007f29e78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 766.572761][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.580779][T12907] R13: 00007ffe4d955a9f R14: 00007f29e8616300 R15: 0000000000022000 [ 766.588900][T12907] [ 766.661306][T12907] memory: usage 528kB, limit 0kB, failcnt 345 [ 766.677025][T12907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 04:35:32 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6609, 0x0) [ 766.752331][T12907] Memory cgroup stats for /syz4: [ 766.752558][T12907] anon 139264 [ 766.752558][T12907] file 126976 [ 766.752558][T12907] kernel 258048 [ 766.752558][T12907] kernel_stack 32768 [ 766.752558][T12907] pagetables 81920 [ 766.752558][T12907] sec_pagetables 0 [ 766.752558][T12907] percpu 64 [ 766.752558][T12907] sock 0 [ 766.752558][T12907] vmalloc 0 [ 766.752558][T12907] shmem 122880 [ 766.752558][T12907] zswap 0 [ 766.752558][T12907] zswapped 0 [ 766.752558][T12907] file_mapped 122880 [ 766.752558][T12907] file_dirty 4096 [ 766.752558][T12907] file_writeback 0 [ 766.752558][T12907] swapcached 0 [ 766.752558][T12907] anon_thp 0 [ 766.752558][T12907] file_thp 0 [ 766.752558][T12907] shmem_thp 0 [ 766.752558][T12907] inactive_anon 139264 [ 766.752558][T12907] active_anon 122880 [ 766.752558][T12907] inactive_file 0 [ 766.752558][T12907] active_file 4096 [ 766.752558][T12907] unevictable 0 [ 766.752558][T12907] slab_reclaimable 14280 [ 766.752558][T12907] slab_unreclaimable 98736 [ 766.752558][T12907] slab 113016 04:35:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 767.267405][T12907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12903,uid=0 [ 767.315854][T12907] Memory cgroup out of memory: Killed process 12907 (syz-executor.4) total-vm:56720kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 04:35:33 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 767.581848][T12654] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 767.612176][T12654] CPU: 1 PID: 12654 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 767.622831][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 767.632916][T12654] Call Trace: [ 767.636217][T12654] [ 767.639256][T12654] dump_stack_lvl+0xd1/0x138 [ 767.643893][T12654] dump_header+0x10b/0x85f [ 767.648344][T12654] oom_kill_process.cold+0x10/0x15 [ 767.653493][T12654] out_of_memory+0x35c/0x14a0 [ 767.658217][T12654] ? find_held_lock+0x2d/0x110 [ 767.663020][T12654] ? oom_killer_disable+0x280/0x280 [ 767.668273][T12654] ? find_held_lock+0x2d/0x110 [ 767.673170][T12654] mem_cgroup_out_of_memory+0x206/0x270 [ 767.678752][T12654] ? mem_cgroup_margin+0x130/0x130 [ 767.683896][T12654] ? lock_downgrade+0x6e0/0x6e0 [ 767.688792][T12654] try_charge_memcg+0xefb/0x12f0 [ 767.693777][T12654] ? mem_cgroup_handle_over_high+0x520/0x520 [ 767.699786][T12654] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 767.705539][T12654] ? lock_downgrade+0x6e0/0x6e0 [ 767.710445][T12654] obj_cgroup_charge+0x2af/0x5e0 [ 767.715433][T12654] kmem_cache_alloc_lru+0x145/0x760 [ 767.720897][T12654] ? ext4_alloc_inode+0x28/0x680 [ 767.725869][T12654] ? tomoyo_path_number_perm+0x242/0x570 [ 767.731621][T12654] ? ext4_free_in_core_inode+0x70/0x70 [ 767.737153][T12654] ext4_alloc_inode+0x28/0x680 [ 767.741966][T12654] ? ext4_free_in_core_inode+0x70/0x70 [ 767.747457][T12654] alloc_inode+0x61/0x230 [ 767.751831][T12654] new_inode+0x2b/0x280 [ 767.756467][T12654] __ext4_new_inode+0x399/0x57d0 [ 767.761470][T12654] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 767.767340][T12654] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 767.772949][T12654] ext4_mkdir+0x33e/0xb20 [ 767.777587][T12654] ? ext4_init_new_dir+0x4c0/0x4c0 [ 767.782736][T12654] ? bpf_lsm_inode_permission+0x9/0x10 [ 767.788321][T12654] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 767.793401][T12654] vfs_mkdir+0x48d/0x740 [ 767.797786][T12654] do_mkdirat+0x27b/0x2f0 [ 767.802250][T12654] ? __ia32_sys_mknod+0xb0/0xb0 [ 767.807233][T12654] ? getname_flags.part.0+0x1dd/0x4f0 [ 767.812652][T12654] __x64_sys_mkdirat+0x119/0x170 [ 767.817638][T12654] do_syscall_64+0x39/0xb0 [ 767.822112][T12654] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.828064][T12654] RIP: 0033:0x7f29e788b0e7 [ 767.832507][T12654] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.852270][T12654] RSP: 002b:00007ffe4d955cf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 767.860807][T12654] RAX: ffffffffffffffda RBX: 00007ffe4d955d80 RCX: 00007f29e788b0e7 [ 767.868983][T12654] RDX: 00000000000001ff RSI: 00007ffe4d955d80 RDI: 00000000ffffff9c 04:35:34 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:34 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:34 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 767.876988][T12654] RBP: 00007ffe4d955d5c R08: 0000000000000000 R09: 0000000000000003 [ 767.884992][T12654] R10: 00007ffe4d955a97 R11: 0000000000000202 R12: 0000000000000032 [ 767.892995][T12654] R13: 00000000000bb229 R14: 0000000000000017 R15: 00007ffe4d955dc0 [ 767.901103][T12654] [ 768.962199][T12654] memory: usage 260kB, limit 0kB, failcnt 372 [ 768.992406][T12654] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 769.039171][T12654] Memory cgroup stats for /syz4: [ 769.039353][T12654] anon 40960 [ 769.039353][T12654] file 126976 [ 769.039353][T12654] kernel 98304 [ 769.039353][T12654] kernel_stack 0 [ 769.039353][T12654] pagetables 8192 [ 769.039353][T12654] sec_pagetables 0 [ 769.039353][T12654] percpu 64 [ 769.039353][T12654] sock 0 [ 769.039353][T12654] vmalloc 0 [ 769.039353][T12654] shmem 122880 [ 769.039353][T12654] zswap 0 [ 769.039353][T12654] zswapped 0 [ 769.039353][T12654] file_mapped 122880 [ 769.039353][T12654] file_dirty 4096 [ 769.039353][T12654] file_writeback 0 [ 769.039353][T12654] swapcached 0 [ 769.039353][T12654] anon_thp 0 [ 769.039353][T12654] file_thp 0 [ 769.039353][T12654] shmem_thp 0 [ 769.039353][T12654] inactive_anon 40960 [ 769.039353][T12654] active_anon 122880 [ 769.039353][T12654] inactive_file 4096 [ 769.039353][T12654] active_file 0 [ 769.039353][T12654] unevictable 0 [ 769.039353][T12654] slab_reclaimable 5992 [ 769.039353][T12654] slab_unreclaimable 70792 [ 769.039353][T12654] slab 76784 [ 769.167807][T12038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 769.176900][T12038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 769.185028][T12038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 769.192974][T12038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 769.201707][T12038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 769.208950][T12654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12654,uid=0 [ 769.230357][T12038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.321161][T12654] Memory cgroup out of memory: Killed process 12654 (syz-executor.4) total-vm:50568kB, anon-rss:356kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 770.073362][T12952] chnl_net:caif_netlink_parms(): no params data found [ 770.241713][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 770.255860][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 770.263890][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 770.275965][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 770.319702][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 770.327150][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.406063][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.451157][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.495186][T12952] device bridge_slave_0 entered promiscuous mode [ 770.582047][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.589233][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.601959][ C0] net_ratelimit: 1666 callbacks suppressed [ 770.601980][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.620535][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.632523][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 770.644160][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 770.656910][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 770.670626][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.682359][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 770.695066][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.708637][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.720638][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 770.737732][T12952] device bridge_slave_1 entered promiscuous mode [ 770.806900][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.846142][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.945968][T12952] team0: Port device team_slave_0 added [ 770.991455][T12952] team0: Port device team_slave_1 added [ 771.041376][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.050522][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.059019][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.105829][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.137781][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 771.138272][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.163987][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.201229][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.296690][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.324927][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.332056][ T5119] Bluetooth: hci0: command 0x0409 tx timeout [ 771.339235][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.430177][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.636908][T12952] device hsr_slave_0 entered promiscuous mode [ 771.688429][T12952] device hsr_slave_1 entered promiscuous mode [ 771.724017][T12952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.749444][T12952] Cannot create hsr debugfs directory [ 771.988424][T12967] chnl_net:caif_netlink_parms(): no params data found [ 772.274701][T12952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.371158][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 772.662771][T12952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.899938][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.921237][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.929581][T12967] device bridge_slave_0 entered promiscuous mode [ 772.966030][T12981] chnl_net:caif_netlink_parms(): no params data found [ 773.082342][T12952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.251799][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 773.272027][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.317176][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.341161][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.349477][T12967] device bridge_slave_1 entered promiscuous mode [ 773.413287][T12952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.440147][ T5119] Bluetooth: hci0: command 0x041b tx timeout [ 773.560658][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.634935][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.688365][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.732300][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.933650][T12967] team0: Port device team_slave_0 added [ 773.982103][T12967] team0: Port device team_slave_1 added [ 773.988585][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.997070][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.042273][T12981] device bridge_slave_0 entered promiscuous mode [ 774.088799][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.111256][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.122133][T12981] device bridge_slave_1 entered promiscuous mode [ 774.362998][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.449383][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 774.458153][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.471121][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.568674][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.617976][T12981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.661229][T12952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 774.684417][T12952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 774.705723][T12952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 774.732050][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.739040][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.805665][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.826405][T12981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.843466][T12952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 775.010784][T12981] team0: Port device team_slave_0 added [ 775.068837][T12967] device hsr_slave_0 entered promiscuous mode [ 775.096470][T12967] device hsr_slave_1 entered promiscuous mode [ 775.111770][T12967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.119379][T12967] Cannot create hsr debugfs directory [ 775.145402][T12981] team0: Port device team_slave_1 added [ 775.330105][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 775.436250][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.488941][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 775.500258][T12981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.522543][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.623028][ C0] net_ratelimit: 2928 callbacks suppressed [ 775.623050][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.627325][T12981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.629272][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 775.662965][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.675634][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.683243][T12981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.687496][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 775.705288][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 775.718007][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 775.730415][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.731451][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.768050][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 775.780620][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.849335][T12981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.015162][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.214998][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.440099][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.514382][T12981] device hsr_slave_0 entered promiscuous mode [ 776.542119][T12981] device hsr_slave_1 entered promiscuous mode [ 776.548425][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 776.563756][T12981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.601101][T12981] Cannot create hsr debugfs directory [ 776.615963][T12952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.837017][T12952] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.879762][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.893965][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.020804][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 777.043276][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.063546][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.070790][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.204061][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.221880][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.230876][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.252228][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.259371][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.281609][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 777.426346][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 777.443240][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 777.463316][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.523543][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.533652][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.559943][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.574374][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.574607][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 777.600936][T12952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.645299][T12952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 777.692164][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.705843][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 778.578466][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.592582][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.603130][T12952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.618747][ T5119] Bluetooth: hci2: command 0x0419 tx timeout [ 778.804901][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.819279][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.992936][T12952] device veth0_vlan entered promiscuous mode [ 779.018081][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 779.027916][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 779.042601][T12952] device veth1_vlan entered promiscuous mode [ 779.076231][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 779.084655][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 779.094781][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 779.148661][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 779.158246][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 779.182109][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 779.205787][T12952] device veth0_macvtap entered promiscuous mode [ 779.383951][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.402836][T12952] device veth1_macvtap entered promiscuous mode [ 779.491086][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 779.572044][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.636749][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.647279][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.682247][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.692820][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.750878][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.787724][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.817416][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.845729][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.864361][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.900709][T12952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.964837][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.983944][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 780.036922][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.053286][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.081397][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.101139][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.131088][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.171067][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.180926][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.241156][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.251020][T12952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.301079][T12952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.332664][T12952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.340049][T12967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 780.503598][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.521850][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.530786][T12967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.572157][T12967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.595848][T12952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.611219][T12952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.620063][T12952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.632052][ C0] net_ratelimit: 2990 callbacks suppressed [ 780.632072][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.649810][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 780.664956][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.671769][T12952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.677497][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.696983][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 780.708803][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 780.723278][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 780.735331][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.747086][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 780.759504][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.906313][T12967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 781.606478][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.637078][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.843047][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.856703][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 781.932299][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 781.941495][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 781.957762][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.010564][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.033643][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 782.041095][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.062242][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 782.087319][T12788] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.094704][T12788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.112326][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.131317][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.139906][T12788] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.147089][T12788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.279108][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 782.301739][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.309917][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 782.329868][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 782.403853][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 782.433669][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 782.444542][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 782.471968][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 782.481532][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 782.501129][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 782.519427][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 782.622853][T12967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 782.824526][T13089] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 782.852854][T13089] CPU: 1 PID: 13089 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 782.863418][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 782.873509][T13089] Call Trace: [ 782.876822][T13089] [ 782.879780][T13089] dump_stack_lvl+0xd1/0x138 [ 782.884418][T13089] dump_header+0x10b/0x85f [ 782.888870][T13089] oom_kill_process.cold+0x10/0x15 [ 782.894022][T13089] out_of_memory+0x35c/0x14a0 [ 782.898757][T13089] ? oom_killer_disable+0x280/0x280 [ 782.899765][T12981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 782.903982][T13089] ? find_held_lock+0x2d/0x110 [ 782.904026][T13089] mem_cgroup_out_of_memory+0x206/0x270 [ 782.921070][T13089] ? mem_cgroup_margin+0x130/0x130 [ 782.926207][T13089] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 782.932045][T13089] memory_max_write+0x2f9/0x3c0 [ 782.936940][T13089] ? mem_cgroup_force_empty_write+0x160/0x160 [ 782.943029][T13089] ? lock_release+0x810/0x810 [ 782.947723][T13089] cgroup_file_write+0x1e2/0x770 [ 782.952680][T13089] ? mem_cgroup_force_empty_write+0x160/0x160 [ 782.958768][T13089] ? kill_css+0x370/0x370 [ 782.963114][T13089] ? __virt_addr_valid+0x61/0x2e0 [ 782.968173][T13089] ? kill_css+0x370/0x370 [ 782.972550][T13089] kernfs_fop_write_iter+0x3f1/0x600 [ 782.977866][T13089] vfs_write+0x9ed/0xdd0 [ 782.982129][T13089] ? kernel_write+0x630/0x630 [ 782.986829][T13089] ? __fget_files+0x26a/0x440 [ 782.991537][T13089] ksys_write+0x12b/0x250 [ 782.995884][T13089] ? __ia32_sys_read+0xb0/0xb0 [ 783.000667][T13089] ? syscall_enter_from_user_mode+0x26/0xb0 [ 783.006587][T13089] do_syscall_64+0x39/0xb0 [ 783.011030][T13089] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 783.017038][T13089] RIP: 0033:0x7f849348c0c9 [ 783.021466][T13089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.041203][T13089] RSP: 002b:00007f849411d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.049647][T13089] RAX: ffffffffffffffda RBX: 00007f84935ac050 RCX: 00007f849348c0c9 [ 783.058074][T13089] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 783.066084][T13089] RBP: 00007f84934e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 783.074070][T13089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.082048][T13089] R13: 00007ffcf6e7059f R14: 00007f849411d300 R15: 0000000000022000 [ 783.090048][T13089] [ 783.118151][T13089] memory: usage 8644kB, limit 0kB, failcnt 663 [ 783.124578][T13089] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 783.132131][T13089] Memory cgroup stats for /syz2: [ 783.132344][T13089] anon 118784 [ 783.132344][T13089] file 8355840 [ 783.132344][T13089] kernel 368640 [ 783.132344][T13089] kernel_stack 98304 [ 783.132344][T13089] pagetables 77824 [ 783.132344][T13089] sec_pagetables 0 [ 783.132344][T13089] percpu 64 [ 783.132344][T13089] sock 0 [ 783.132344][T13089] vmalloc 0 [ 783.132344][T13089] shmem 8351744 [ 783.132344][T13089] zswap 0 [ 783.132344][T13089] zswapped 0 [ 783.132344][T13089] file_mapped 180224 [ 783.132344][T13089] file_dirty 4096 [ 783.132344][T13089] file_writeback 0 [ 783.132344][T13089] swapcached 0 [ 783.132344][T13089] anon_thp 0 [ 783.132344][T13089] file_thp 0 [ 783.132344][T13089] shmem_thp 0 [ 783.132344][T13089] inactive_anon 8290304 [ 783.132344][T13089] active_anon 180224 [ 783.132344][T13089] inactive_file 0 [ 783.132344][T13089] active_file 4096 [ 783.132344][T13089] unevictable 0 [ 783.132344][T13089] slab_reclaimable 46872 [ 783.132344][T13089] slab_unreclaimable 118672 [ 783.132344][T13089] slab 165544 [ 783.235541][T12981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 783.236103][T13089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13086,uid=0 [ 783.265083][T13089] Memory cgroup out of memory: Killed process 13086 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 783.278887][T12981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 783.577276][T12981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 784.106078][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.116155][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.156351][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.228456][T12981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.265156][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 784.287086][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 784.326146][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 784.336584][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 784.344857][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 784.359178][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.373367][ T34] device hsr_slave_0 left promiscuous mode [ 784.396072][ T34] device hsr_slave_1 left promiscuous mode [ 784.418516][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.452491][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.486574][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.494097][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.519608][ T34] device bridge_slave_1 left promiscuous mode [ 784.526145][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.576357][ T34] device bridge_slave_0 left promiscuous mode [ 784.586526][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.621521][ T34] device hsr_slave_0 left promiscuous mode [ 784.642692][ T34] device hsr_slave_1 left promiscuous mode [ 784.671695][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.679167][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.721432][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.728889][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.787928][ T34] device bridge_slave_1 left promiscuous mode [ 784.818001][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.860194][ T34] device bridge_slave_0 left promiscuous mode [ 784.877691][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.936618][ T34] device hsr_slave_0 left promiscuous mode [ 784.959928][ T34] device hsr_slave_1 left promiscuous mode [ 784.989931][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.021307][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.031917][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.039372][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.094585][ T34] device bridge_slave_1 left promiscuous mode [ 785.100837][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.126163][ T34] device bridge_slave_0 left promiscuous mode [ 785.141265][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.186735][ T34] device veth1_macvtap left promiscuous mode [ 785.201914][ T34] device veth0_macvtap left promiscuous mode [ 785.208080][ T34] device veth1_vlan left promiscuous mode [ 785.230988][ T34] device veth0_vlan left promiscuous mode [ 785.249225][ T34] device veth1_macvtap left promiscuous mode [ 785.261385][ T34] device veth0_macvtap left promiscuous mode [ 785.267564][ T34] device veth1_vlan left promiscuous mode [ 785.291247][ T34] device veth0_vlan left promiscuous mode [ 785.305310][ T34] device veth1_macvtap left promiscuous mode [ 785.318865][ T34] device veth0_macvtap left promiscuous mode [ 785.341487][ T34] device veth1_vlan left promiscuous mode [ 785.347366][ T34] device veth0_vlan left promiscuous mode [ 785.643156][ C0] net_ratelimit: 2940 callbacks suppressed [ 785.643175][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.660788][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 785.673277][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.686029][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.698063][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 785.709815][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 785.722693][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 785.735294][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.746960][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 785.759526][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.889142][ T34] team0 (unregistering): Port device team_slave_1 removed [ 786.956182][ T34] team0 (unregistering): Port device team_slave_0 removed [ 786.995898][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.041894][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.239088][ T34] bond0 (unregistering): Released all slaves [ 787.620707][ T34] team0 (unregistering): Port device team_slave_1 removed [ 787.659868][ T34] team0 (unregistering): Port device team_slave_0 removed [ 787.701015][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.730122][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.942978][ T34] bond0 (unregistering): Released all slaves [ 788.306279][ T34] team0 (unregistering): Port device team_slave_1 removed [ 788.346724][ T34] team0 (unregistering): Port device team_slave_0 removed [ 788.383581][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.429747][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.647637][ T34] bond0 (unregistering): Released all slaves [ 788.733431][T12967] device veth0_vlan entered promiscuous mode [ 788.760078][T12981] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.788713][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 788.796726][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 788.836997][T12967] device veth1_vlan entered promiscuous mode [ 788.910352][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 788.919641][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 788.962021][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.969152][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.001953][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 789.010783][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 789.036494][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.043663][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.081853][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 789.115354][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 789.124393][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.148710][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.165300][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 789.194553][T12967] device veth0_macvtap entered promiscuous mode [ 789.215482][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.224286][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 789.257752][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 789.275697][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 789.292291][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 789.305539][T12981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.344297][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 789.378868][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 789.387858][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 789.404700][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 789.432873][T12967] device veth1_macvtap entered promiscuous mode [ 789.493420][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.512377][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.546324][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.591083][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.625208][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.671786][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.702693][T12967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.712836][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 789.769522][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.802671][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 789.846945][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.881081][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.890940][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.929162][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.981452][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.010438][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.044898][T12967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.065877][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.075495][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.103006][T12967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.134107][T12967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.147082][T12967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.171188][T12967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.202349][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.210522][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.250043][T12981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.396065][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.421242][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.440470][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 790.461145][ T5204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.470408][ T5204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.507212][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 790.651552][ C0] net_ratelimit: 4029 callbacks suppressed [ 790.651579][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.700745][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.712464][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 790.724836][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.737813][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.749989][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 790.761649][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 790.774479][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 790.786457][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.798785][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:35:57 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:57 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:57 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:35:57 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:57 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:35:57 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 791.035231][T12952] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 791.099395][T12952] CPU: 1 PID: 12952 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 791.109874][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 791.120002][T12952] Call Trace: [ 791.123305][T12952] [ 791.126267][T12952] dump_stack_lvl+0xd1/0x138 [ 791.130906][T12952] dump_header+0x10b/0x85f [ 791.135374][T12952] oom_kill_process.cold+0x10/0x15 [ 791.140570][T12952] out_of_memory+0x35c/0x14a0 [ 791.145283][T12952] ? find_held_lock+0x2d/0x110 [ 791.150091][T12952] ? oom_killer_disable+0x280/0x280 [ 791.155334][T12952] ? find_held_lock+0x2d/0x110 [ 791.160153][T12952] mem_cgroup_out_of_memory+0x206/0x270 [ 791.165727][T12952] ? mem_cgroup_margin+0x130/0x130 [ 791.170860][T12952] ? lock_downgrade+0x6e0/0x6e0 [ 791.175752][T12952] try_charge_memcg+0xefb/0x12f0 [ 791.180731][T12952] ? mem_cgroup_handle_over_high+0x520/0x520 [ 791.186743][T12952] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 791.192483][T12952] ? lock_downgrade+0x6e0/0x6e0 [ 791.197349][T12952] ? lock_downgrade+0x6e0/0x6e0 [ 791.202213][T12952] ? rcu_read_unlock+0x9/0x60 [ 791.206920][T12952] obj_cgroup_charge+0x2af/0x5e0 [ 791.211875][T12952] ? copy_process+0x3aa/0x7520 [ 791.216648][T12952] kmem_cache_alloc_node+0xb7/0x460 [ 791.221858][T12952] copy_process+0x3aa/0x7520 [ 791.226460][T12952] ? _raw_spin_unlock+0x28/0x40 [ 791.231321][T12952] ? wp_page_reuse+0x197/0x570 [ 791.236101][T12952] ? do_wp_page+0x844/0x3370 [ 791.240712][T12952] ? __cleanup_sighand+0xb0/0xb0 [ 791.245654][T12952] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 791.251049][T12952] ? rwlock_bug.part.0+0x90/0x90 [ 791.255998][T12952] ? lock_chain_count+0x20/0x20 [ 791.260857][T12952] kernel_clone+0xeb/0x990 [ 791.265288][T12952] ? create_io_thread+0xf0/0xf0 [ 791.270154][T12952] ? find_held_lock+0x2d/0x110 [ 791.274940][T12952] __do_sys_clone+0xba/0x100 [ 791.279559][T12952] ? kernel_clone+0x990/0x990 [ 791.284258][T12952] ? syscall_enter_from_user_mode+0x26/0xb0 [ 791.290170][T12952] do_syscall_64+0x39/0xb0 [ 791.294614][T12952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 791.300948][T12952] RIP: 0033:0x7f8493489dfb [ 791.305385][T12952] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 791.325083][T12952] RSP: 002b:00007ffcf6e707e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 791.333590][T12952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8493489dfb [ 791.341565][T12952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 791.349543][T12952] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556138400 [ 791.357512][T12952] R10: 00005555561386d0 R11: 0000000000000246 R12: 0000000000000001 [ 791.365490][T12952] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcf6e708c0 [ 791.373480][T12952] [ 791.499880][T12952] memory: usage 8312kB, limit 0kB, failcnt 682 [ 791.621085][T12952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 791.627992][T12952] Memory cgroup stats for /syz2: [ 791.628169][T12952] anon 45056 [ 791.628169][T12952] file 8355840 [ 791.628169][T12952] kernel 110592 [ 791.628169][T12952] kernel_stack 0 [ 791.628169][T12952] pagetables 8192 [ 791.628169][T12952] sec_pagetables 0 [ 791.628169][T12952] percpu 0 [ 791.628169][T12952] sock 0 [ 791.628169][T12952] vmalloc 0 [ 791.628169][T12952] shmem 8351744 [ 791.628169][T12952] zswap 0 [ 791.628169][T12952] zswapped 0 [ 791.628169][T12952] file_mapped 147456 [ 791.628169][T12952] file_dirty 4096 [ 791.628169][T12952] file_writeback 0 [ 791.628169][T12952] swapcached 0 [ 791.628169][T12952] anon_thp 0 [ 791.628169][T12952] file_thp 0 [ 791.628169][T12952] shmem_thp 0 [ 791.628169][T12952] inactive_anon 8216576 [ 791.628169][T12952] active_anon 180224 [ 791.628169][T12952] inactive_file 0 [ 791.628169][T12952] active_file 4096 [ 791.628169][T12952] unevictable 0 [ 791.628169][T12952] slab_reclaimable 34224 [ 791.628169][T12952] slab_unreclaimable 59008 [ 791.628169][T12952] slab 93232 04:35:58 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 791.909947][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 791.925652][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 04:35:58 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 792.066738][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 792.085593][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 792.128702][T12981] device veth0_vlan entered promiscuous mode [ 792.155698][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 792.170464][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 792.215896][T12981] device veth1_vlan entered promiscuous mode [ 792.223536][T12952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12952,uid=0 [ 792.347280][T12952] Memory cgroup out of memory: Killed process 12952 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 792.423963][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 792.454109][T12967] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 792.464837][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 792.488300][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 792.511006][T12967] CPU: 1 PID: 12967 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 792.521482][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 792.531592][T12967] Call Trace: [ 792.534890][T12967] [ 792.537843][T12967] dump_stack_lvl+0xd1/0x138 [ 792.542476][T12967] dump_header+0x10b/0x85f [ 792.546927][T12967] oom_kill_process.cold+0x10/0x15 [ 792.552071][T12967] out_of_memory+0x35c/0x14a0 [ 792.556783][T12967] ? find_held_lock+0x2d/0x110 [ 792.561587][T12967] ? oom_killer_disable+0x280/0x280 [ 792.566823][T12967] ? find_held_lock+0x2d/0x110 [ 792.571634][T12967] mem_cgroup_out_of_memory+0x206/0x270 [ 792.577217][T12967] ? mem_cgroup_margin+0x130/0x130 [ 792.582353][T12967] ? lock_downgrade+0x6e0/0x6e0 [ 792.587254][T12967] try_charge_memcg+0xefb/0x12f0 [ 792.592238][T12967] ? mem_cgroup_handle_over_high+0x520/0x520 [ 792.598252][T12967] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 792.604609][T12967] ? lock_downgrade+0x6e0/0x6e0 [ 792.609508][T12967] ? lock_downgrade+0x6e0/0x6e0 [ 792.614749][T12967] obj_cgroup_charge+0x2af/0x5e0 [ 792.619723][T12967] kmem_cache_alloc_lru+0x145/0x760 [ 792.625042][T12967] ? sock_alloc_inode+0x27/0x1d0 [ 792.630025][T12967] sock_alloc_inode+0x27/0x1d0 [ 792.634826][T12967] ? sock_free_inode+0x30/0x30 [ 792.639632][T12967] alloc_inode+0x61/0x230 [ 792.644005][T12967] new_inode_pseudo+0x17/0x80 [ 792.648706][T12967] sock_alloc+0x40/0x260 [ 792.653177][T12967] __sock_create+0xbd/0x790 [ 792.657731][T12967] __sys_socket+0x133/0x250 [ 792.662273][T12967] ? __sys_socket_file+0x1f0/0x1f0 [ 792.667435][T12967] __x64_sys_socket+0x73/0xb0 [ 792.672155][T12967] do_syscall_64+0x39/0xb0 [ 792.676615][T12967] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 792.682556][T12967] RIP: 0033:0x7f6221a8d747 [ 792.687000][T12967] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 792.706635][T12967] RSP: 002b:00007fff5f4edb68 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 792.715091][T12967] RAX: ffffffffffffffda RBX: 00007fff5f4ee2d0 RCX: 00007f6221a8d747 [ 792.723093][T12967] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 792.731086][T12967] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff5f4ee0e0 [ 792.739076][T12967] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 792.747075][T12967] R13: 00000000000c16be R14: 0000000000000017 R15: 00007fff5f4ee310 [ 792.755108][T12967] [ 792.788767][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 792.995635][T12981] device veth0_macvtap entered promiscuous mode [ 793.012965][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 793.024459][T12981] device veth1_macvtap entered promiscuous mode [ 793.072917][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.111082][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.135199][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.161226][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.177099][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.211072][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.231087][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.261106][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.272940][T12981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.282336][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 793.291460][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 793.317980][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.351743][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.368969][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.396605][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.433880][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.471099][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.480959][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.491544][T12967] memory: usage 10364kB, limit 0kB, failcnt 513 [ 793.497809][T12967] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 793.528876][T12967] Memory cgroup stats for /syz1: [ 793.529100][T12967] anon 40960 [ 793.529100][T12967] file 10481664 [ 793.529100][T12967] kernel 90112 [ 793.529100][T12967] kernel_stack 0 [ 793.529100][T12967] pagetables 8192 [ 793.529100][T12967] sec_pagetables 0 [ 793.529100][T12967] percpu 0 [ 793.529100][T12967] sock 0 [ 793.529100][T12967] vmalloc 0 [ 793.529100][T12967] shmem 10477568 [ 793.529100][T12967] zswap 0 [ 793.529100][T12967] zswapped 0 [ 793.529100][T12967] file_mapped 147456 [ 793.529100][T12967] file_dirty 0 [ 793.529100][T12967] file_writeback 0 [ 793.529100][T12967] swapcached 0 [ 793.529100][T12967] anon_thp 0 [ 793.529100][T12967] file_thp 0 [ 793.529100][T12967] shmem_thp 0 [ 793.529100][T12967] inactive_anon 40960 [ 793.529100][T12967] active_anon 10477568 [ 793.529100][T12967] inactive_file 4096 [ 793.529100][T12967] active_file 0 [ 793.529100][T12967] unevictable 0 [ 793.529100][T12967] slab_reclaimable 38232 [ 793.529100][T12967] slab_unreclaimable 32296 [ 793.529100][T12967] slab 70528 [ 793.651098][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.672654][T12981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.680920][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 793.701394][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 793.739373][T12981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.779086][T12981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.816442][T12981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.851163][T12981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.890790][T12967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12967,uid=0 [ 793.916925][T12967] Memory cgroup out of memory: Killed process 12967 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 794.054198][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.088731][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.274293][T12038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.299152][T12038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.307364][T12038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.341197][T12038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.367594][T12038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 794.375015][T12038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 794.398394][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.477307][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.511758][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.555914][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 794.920883][T13216] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 794.935072][T13216] CPU: 1 PID: 13216 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 794.945528][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 794.955607][T13216] Call Trace: [ 794.958904][T13216] [ 794.961858][T13216] dump_stack_lvl+0xd1/0x138 [ 794.966492][T13216] dump_header+0x10b/0x85f [ 794.970937][T13216] oom_kill_process.cold+0x10/0x15 [ 794.976091][T13216] out_of_memory+0x35c/0x14a0 [ 794.980829][T13216] ? oom_killer_disable+0x280/0x280 [ 794.986076][T13216] mem_cgroup_out_of_memory+0x206/0x270 [ 794.991654][T13216] ? mem_cgroup_margin+0x130/0x130 [ 794.996817][T13216] memory_max_write+0x2f9/0x3c0 [ 795.001795][T13216] ? mem_cgroup_force_empty_write+0x160/0x160 [ 795.007901][T13216] ? lock_release+0x810/0x810 [ 795.012785][T13216] cgroup_file_write+0x1e2/0x770 [ 795.017758][T13216] ? mem_cgroup_force_empty_write+0x160/0x160 [ 795.023954][T13216] ? kill_css+0x370/0x370 [ 795.028317][T13216] ? __virt_addr_valid+0x61/0x2e0 [ 795.033389][T13216] ? kill_css+0x370/0x370 [ 795.037747][T13216] kernfs_fop_write_iter+0x3f1/0x600 [ 795.043091][T13216] vfs_write+0x9ed/0xdd0 [ 795.047373][T13216] ? kernel_write+0x630/0x630 [ 795.052088][T13216] ? __fget_files+0x26a/0x440 [ 795.056790][T13216] ksys_write+0x12b/0x250 [ 795.061154][T13216] ? __ia32_sys_read+0xb0/0xb0 [ 795.065933][T13216] ? syscall_enter_from_user_mode+0x26/0xb0 [ 795.071857][T13216] do_syscall_64+0x39/0xb0 [ 795.076296][T13216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 795.082200][T13216] RIP: 0033:0x7f992708c0c9 [ 795.086621][T13216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 795.106667][T13216] RSP: 002b:00007f9927d1e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.115087][T13216] RAX: ffffffffffffffda RBX: 00007f99271ac050 RCX: 00007f992708c0c9 [ 795.123066][T13216] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 795.131044][T13216] RBP: 00007f99270e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 795.139022][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.146998][T13216] R13: 00007fff5f5e15ef R14: 00007f9927d1e300 R15: 0000000000022000 [ 795.155006][T13216] [ 795.213827][T13216] memory: usage 592kB, limit 0kB, failcnt 302 [ 795.245792][T13216] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.282211][T13216] Memory cgroup stats for /syz5: [ 795.282422][T13216] anon 122880 [ 795.282422][T13216] file 126976 [ 795.282422][T13216] kernel 348160 [ 795.282422][T13216] kernel_stack 98304 [ 795.282422][T13216] pagetables 77824 [ 795.282422][T13216] sec_pagetables 0 [ 795.282422][T13216] percpu 64 [ 795.282422][T13216] sock 0 [ 795.282422][T13216] vmalloc 0 [ 795.282422][T13216] shmem 126976 [ 795.282422][T13216] zswap 0 [ 795.282422][T13216] zswapped 0 [ 795.282422][T13216] file_mapped 126976 [ 795.282422][T13216] file_dirty 0 [ 795.282422][T13216] file_writeback 0 [ 795.282422][T13216] swapcached 0 [ 795.282422][T13216] anon_thp 0 [ 795.282422][T13216] file_thp 0 [ 795.282422][T13216] shmem_thp 0 [ 795.282422][T13216] inactive_anon 135168 [ 795.282422][T13216] active_anon 114688 [ 795.282422][T13216] inactive_file 0 [ 795.282422][T13216] active_file 0 [ 795.282422][T13216] unevictable 0 [ 795.282422][T13216] slab_reclaimable 22664 [ 795.282422][T13216] slab_unreclaimable 121328 [ 795.282422][T13216] slab 143992 [ 795.559352][T13209] chnl_net:caif_netlink_parms(): no params data found [ 795.661966][ C0] net_ratelimit: 2052 callbacks suppressed [ 795.661987][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.679773][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 795.692327][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.705070][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.731150][T13216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13214,uid=0 [ 795.761385][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 795.773052][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 795.785769][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 795.797743][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.799510][T13216] Memory cgroup out of memory: Killed process 13216 (syz-executor.5) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 795.809302][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 795.838776][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:36:02 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:02 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:02 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:02 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:02 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 795.876616][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.908765][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.960256][T12981] syz-executor.5 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 795.984849][T13209] device bridge_slave_0 entered promiscuous mode [ 796.033207][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.038948][T12981] CPU: 0 PID: 12981 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 796.040382][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.050651][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 796.050666][T12981] Call Trace: [ 796.050673][T12981] [ 796.050682][T12981] dump_stack_lvl+0xd1/0x138 [ 796.050721][T12981] dump_header+0x10b/0x85f [ 796.050749][T12981] oom_kill_process.cold+0x10/0x15 [ 796.088185][T12981] out_of_memory+0x35c/0x14a0 [ 796.093512][T12981] ? find_held_lock+0x2d/0x110 [ 796.098320][T12981] ? oom_killer_disable+0x280/0x280 [ 796.103638][T12981] ? find_held_lock+0x2d/0x110 [ 796.108443][T12981] mem_cgroup_out_of_memory+0x206/0x270 [ 796.114014][T12981] ? mem_cgroup_margin+0x130/0x130 [ 796.119151][T12981] ? lock_downgrade+0x6e0/0x6e0 [ 796.124050][T12981] try_charge_memcg+0xefb/0x12f0 [ 796.129053][T12981] ? mem_cgroup_handle_over_high+0x520/0x520 [ 796.135106][T13209] device bridge_slave_1 entered promiscuous mode [ 796.135393][T12981] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 796.147533][T12981] ? lock_downgrade+0x6e0/0x6e0 [ 796.152506][T12981] ? lock_downgrade+0x6e0/0x6e0 [ 796.157474][T12981] ? rcu_read_unlock+0x9/0x60 [ 796.162203][T12981] obj_cgroup_charge+0x2af/0x5e0 [ 796.167172][T12981] ? __alloc_file+0x21/0x270 [ 796.171795][T12981] kmem_cache_alloc+0xb5/0x430 [ 796.176591][T12981] __alloc_file+0x21/0x270 [ 796.181047][T12981] alloc_empty_file+0x71/0x170 [ 796.185851][T12981] path_openat+0xe1/0x2a50 [ 796.190321][T12981] ? path_lookupat+0x840/0x840 [ 796.195133][T12981] do_filp_open+0x1ba/0x410 [ 796.199675][T12981] ? may_open_dev+0xf0/0xf0 [ 796.204214][T12981] ? find_held_lock+0x2d/0x110 [ 796.209032][T12981] ? do_raw_spin_lock+0x124/0x2b0 [ 796.214082][T12981] ? rwlock_bug.part.0+0x90/0x90 [ 796.219051][T12981] ? _raw_spin_unlock+0x28/0x40 [ 796.223933][T12981] ? alloc_fd+0x2d8/0x6d0 [ 796.228309][T12981] do_sys_openat2+0x16d/0x4c0 [ 796.233022][T12981] ? path_umount+0x6b8/0x10b0 [ 796.237726][T12981] ? putname+0x102/0x140 [ 796.242262][T12981] ? build_open_flags+0x6f0/0x6f0 [ 796.247318][T12981] ? may_mount+0xa0/0xa0 [ 796.251598][T12981] __x64_sys_openat+0x143/0x1f0 [ 796.256472][T12981] ? __ia32_sys_open+0x1c0/0x1c0 [ 796.261445][T12981] ? syscall_enter_from_user_mode+0x26/0xb0 [ 796.267378][T12981] do_syscall_64+0x39/0xb0 [ 796.271831][T12981] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 796.277757][T12981] RIP: 0033:0x7f992708bc38 [ 796.282190][T12981] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 796.301823][T12981] RSP: 002b:00007fff5f5e06e0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 796.310266][T12981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f992708bc38 [ 796.318263][T12981] RDX: 0000000000090800 RSI: 00007fff5f5e18d0 RDI: 00000000ffffff9c [ 796.326257][T12981] RBP: 00007fff5f5e18ac R08: 0000000000090800 R09: 00007fff5f5e18d0 04:36:02 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 796.334260][T12981] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f99270e6b24 [ 796.342258][T12981] R13: 00007fff5f5e18d0 R14: 0000000000000017 R15: 00007fff5f5e1910 [ 796.350359][T12981] [ 796.457199][T12038] Bluetooth: hci0: command 0x0409 tx timeout [ 796.485078][T12981] memory: usage 260kB, limit 0kB, failcnt 321 [ 796.495627][T12981] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.565400][T12981] Memory cgroup stats for /syz5: [ 796.565581][T12981] anon 36864 [ 796.565581][T12981] file 126976 [ 796.565581][T12981] kernel 102400 [ 796.565581][T12981] kernel_stack 0 [ 796.565581][T12981] pagetables 8192 [ 796.565581][T12981] sec_pagetables 0 [ 796.565581][T12981] percpu 64 [ 796.565581][T12981] sock 0 [ 796.565581][T12981] vmalloc 0 [ 796.565581][T12981] shmem 126976 [ 796.565581][T12981] zswap 0 [ 796.565581][T12981] zswapped 0 [ 796.565581][T12981] file_mapped 126976 [ 796.565581][T12981] file_dirty 0 [ 796.565581][T12981] file_writeback 0 [ 796.565581][T12981] swapcached 0 [ 796.565581][T12981] anon_thp 0 [ 796.565581][T12981] file_thp 0 [ 796.565581][T12981] shmem_thp 0 [ 796.565581][T12981] inactive_anon 49152 [ 796.565581][T12981] active_anon 114688 [ 796.565581][T12981] inactive_file 0 [ 796.565581][T12981] active_file 0 [ 796.565581][T12981] unevictable 0 [ 796.565581][T12981] slab_reclaimable 10664 [ 796.565581][T12981] slab_unreclaimable 70792 [ 796.565581][T12981] slab 81456 04:36:02 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 796.769798][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.824586][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.014229][T13209] team0: Port device team_slave_0 added [ 797.057830][T13209] team0: Port device team_slave_1 added [ 797.188938][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.243804][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.401080][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.448351][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.483854][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.511307][T12981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12981,uid=0 [ 797.578536][T12981] Memory cgroup out of memory: Killed process 12981 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 797.580946][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.067814][T13209] device hsr_slave_0 entered promiscuous mode [ 798.102142][T13209] device hsr_slave_1 entered promiscuous mode [ 798.549176][T12038] Bluetooth: hci0: command 0x041b tx timeout [ 798.982894][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 798.991946][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.000296][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.023020][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 799.047030][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 800.061894][T12038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.071975][T12038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.086116][T12038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.102194][T12038] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.109785][T12038] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 800.118273][T12038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.227710][T13256] chnl_net:caif_netlink_parms(): no params data found [ 800.301100][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.381109][T13209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 800.411905][T13209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 800.461183][T13209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 800.510177][T13209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 800.609292][T12038] Bluetooth: hci0: command 0x040f tx timeout [ 800.657567][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.681524][ C0] net_ratelimit: 2384 callbacks suppressed [ 800.681544][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 800.699113][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 800.711869][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 800.723811][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.735531][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 800.747901][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.761426][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.773022][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 800.925587][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.927471][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.938155][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.994325][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.003507][T13256] device bridge_slave_0 entered promiscuous mode [ 801.032343][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.039472][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.082290][T13256] device bridge_slave_1 entered promiscuous mode [ 801.161342][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 801.313999][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.354676][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.383852][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.538820][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.550663][T13256] team0: Port device team_slave_0 added [ 801.590250][T13256] team0: Port device team_slave_1 added [ 801.776959][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.804956][T13272] chnl_net:caif_netlink_parms(): no params data found [ 801.817100][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 801.843048][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 801.876827][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.886224][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.954314][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.101170][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.181722][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.188711][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.215439][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 802.333393][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.431557][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 802.440425][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 802.478635][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.485952][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.526934][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.543830][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.568206][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.576039][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.683429][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 802.719288][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 802.751104][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.760013][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.810773][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.839231][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 802.907893][T13209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.927579][T13209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.946120][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.954500][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 802.980860][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 803.005375][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 803.031851][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 803.113642][T13256] device hsr_slave_0 entered promiscuous mode [ 803.144377][T13256] device hsr_slave_1 entered promiscuous mode [ 803.171206][T13256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.178820][T13256] Cannot create hsr debugfs directory [ 803.237705][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 803.247507][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.255628][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 803.281185][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.289489][T13272] device bridge_slave_0 entered promiscuous mode [ 803.406850][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.422144][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.451183][T13272] device bridge_slave_1 entered promiscuous mode [ 803.783721][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.860672][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.926462][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.974450][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.067049][T13272] team0: Port device team_slave_0 added [ 804.116139][T13272] team0: Port device team_slave_1 added [ 804.160863][T13256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.281487][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 804.464228][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.515356][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.522391][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.621085][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.666844][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.741937][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.749457][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 804.772216][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.779275][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.882082][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.985854][T13256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.144909][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.319416][T13256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.330797][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 805.464536][T13272] device hsr_slave_0 entered promiscuous mode [ 805.531726][T13272] device hsr_slave_1 entered promiscuous mode [ 805.571145][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.578760][T13272] Cannot create hsr debugfs directory [ 805.711607][ C0] net_ratelimit: 2126 callbacks suppressed [ 805.711627][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.729410][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 805.741833][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.754503][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.766601][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 805.778343][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 805.791269][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 805.803396][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.815060][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 805.828755][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.872035][T13256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.361739][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 806.375428][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 806.384952][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 806.408269][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 806.417613][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 806.429646][T13209] device veth0_vlan entered promiscuous mode [ 806.437674][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 806.446439][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 806.486267][T13209] device veth1_vlan entered promiscuous mode [ 806.527976][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 806.540565][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 806.549353][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 806.559059][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 806.575619][T13209] device veth0_macvtap entered promiscuous mode [ 806.761841][T13256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 806.809179][T13209] device veth1_macvtap entered promiscuous mode [ 806.831321][T13256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 806.899822][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.946641][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.970908][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.016135][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.051224][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.090554][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.131162][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.160569][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.211154][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.241758][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.282913][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.290749][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 807.310603][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 807.320761][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 807.340801][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 807.401317][T12038] Bluetooth: hci2: command 0x0419 tx timeout [ 807.531257][T13256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 807.634270][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.679482][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.689835][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.716655][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.735040][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.762620][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.781313][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.851214][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.891081][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.931090][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.963002][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.991575][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 808.000476][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 808.020762][T13256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 808.314037][T13209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.342963][T13209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.371270][T13209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.391249][T13209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.442492][T12038] Bluetooth: hci3: command 0x0419 tx timeout [ 808.453258][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.459683][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.742786][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.750876][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.819302][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.883912][T13256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.910390][ T5204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.928156][ T5204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.957520][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 809.044361][T13256] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.082734][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.114883][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.158842][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 809.174410][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 809.208880][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.216088][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.223628][T13369] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 809.251886][T13369] CPU: 1 PID: 13369 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 809.262364][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 809.272457][T13369] Call Trace: [ 809.275760][T13369] [ 809.278724][T13369] dump_stack_lvl+0xd1/0x138 [ 809.283363][T13369] dump_header+0x10b/0x85f [ 809.283624][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 809.287811][T13369] oom_kill_process.cold+0x10/0x15 [ 809.301174][T13369] out_of_memory+0x35c/0x14a0 [ 809.305902][T13369] ? oom_killer_disable+0x280/0x280 [ 809.311136][T13369] ? find_held_lock+0x2d/0x110 [ 809.316037][T13369] mem_cgroup_out_of_memory+0x206/0x270 [ 809.321618][T13369] ? mem_cgroup_margin+0x130/0x130 [ 809.322427][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.326750][T13369] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 809.340732][T13369] memory_max_write+0x2f9/0x3c0 [ 809.345625][T13369] ? mem_cgroup_force_empty_write+0x160/0x160 [ 809.350353][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.351717][T13369] ? lock_release+0x810/0x810 [ 809.351751][T13369] cgroup_file_write+0x1e2/0x770 [ 809.351785][T13369] ? mem_cgroup_force_empty_write+0x160/0x160 [ 809.358828][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.363440][T13369] ? kill_css+0x370/0x370 [ 809.363471][T13369] ? __virt_addr_valid+0x61/0x2e0 [ 809.391083][T13369] ? kill_css+0x370/0x370 [ 809.395450][T13369] kernfs_fop_write_iter+0x3f1/0x600 [ 809.400794][T13369] vfs_write+0x9ed/0xdd0 [ 809.402187][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 809.405053][T13369] ? kernel_write+0x630/0x630 [ 809.417818][T13369] ? __fget_files+0x26a/0x440 [ 809.422557][T13369] ksys_write+0x12b/0x250 [ 809.426930][T13369] ? __ia32_sys_read+0xb0/0xb0 [ 809.431736][T13369] ? syscall_enter_from_user_mode+0x26/0xb0 [ 809.437682][T13369] do_syscall_64+0x39/0xb0 [ 809.442151][T13369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 809.448066][T13369] RIP: 0033:0x7ff96808c0c9 [ 809.452503][T13369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 809.472318][T13369] RSP: 002b:00007ff968ddc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.480854][T13369] RAX: ffffffffffffffda RBX: 00007ff9681ac050 RCX: 00007ff96808c0c9 [ 809.489016][T13369] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 809.497113][T13369] RBP: 00007ff9680e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 809.505095][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.513074][T13369] R13: 00007fff39514e0f R14: 00007ff968ddc300 R15: 0000000000022000 [ 809.521078][T13369] [ 809.542487][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 809.753043][T13369] memory: usage 592kB, limit 0kB, failcnt 389 [ 809.779580][T13369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.936718][T13369] Memory cgroup stats for /syz4: [ 809.936942][T13369] anon 122880 [ 809.936942][T13369] file 122880 [ 809.936942][T13369] kernel 335872 [ 809.936942][T13369] kernel_stack 98304 [ 809.936942][T13369] pagetables 77824 [ 809.936942][T13369] sec_pagetables 0 [ 809.936942][T13369] percpu 64 [ 809.936942][T13369] sock 0 [ 809.936942][T13369] vmalloc 0 [ 809.936942][T13369] shmem 122880 [ 809.936942][T13369] zswap 0 [ 809.936942][T13369] zswapped 0 [ 809.936942][T13369] file_mapped 122880 [ 809.936942][T13369] file_dirty 0 [ 809.936942][T13369] file_writeback 0 [ 809.936942][T13369] swapcached 0 [ 809.936942][T13369] anon_thp 0 [ 809.936942][T13369] file_thp 0 [ 809.936942][T13369] shmem_thp 0 [ 809.936942][T13369] inactive_anon 122880 [ 809.936942][T13369] active_anon 122880 [ 809.936942][T13369] inactive_file 0 [ 809.936942][T13369] active_file 0 [ 809.936942][T13369] unevictable 0 [ 809.936942][T13369] slab_reclaimable 34488 [ 809.936942][T13369] slab_unreclaimable 102872 [ 809.936942][T13369] slab 137360 [ 810.280611][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 810.289694][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.307374][T13369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13366,uid=0 [ 810.341603][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.349382][T13369] Memory cgroup out of memory: Killed process 13369 (syz-executor.4) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 04:36:16 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:16 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:16 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:16 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 810.388771][T13256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 810.424628][T13256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.458974][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.465294][ T9216] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 810.470513][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.527051][ T9216] CPU: 1 PID: 9216 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 810.537528][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 810.547639][ T9216] Call Trace: [ 810.550965][ T9216] [ 810.554007][ T9216] dump_stack_lvl+0xd1/0x138 [ 810.558635][ T9216] dump_header+0x10b/0x85f [ 810.563080][ T9216] oom_kill_process.cold+0x10/0x15 [ 810.568292][ T9216] out_of_memory+0x35c/0x14a0 [ 810.573066][ T9216] ? find_held_lock+0x2d/0x110 [ 810.577986][ T9216] ? oom_killer_disable+0x280/0x280 [ 810.583192][ T9216] ? find_held_lock+0x2d/0x110 [ 810.587991][ T9216] mem_cgroup_out_of_memory+0x206/0x270 [ 810.593577][ T9216] ? mem_cgroup_margin+0x130/0x130 [ 810.598705][ T9216] ? lock_downgrade+0x6e0/0x6e0 [ 810.603605][ T9216] try_charge_memcg+0xefb/0x12f0 [ 810.608569][ T9216] ? mem_cgroup_handle_over_high+0x520/0x520 [ 810.614567][ T9216] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 810.620313][ T9216] ? lock_downgrade+0x6e0/0x6e0 [ 810.625272][ T9216] ? lock_downgrade+0x6e0/0x6e0 [ 810.630130][ T9216] ? rcu_read_unlock+0x9/0x60 [ 810.634841][ T9216] obj_cgroup_charge+0x2af/0x5e0 [ 810.639811][ T9216] ? copy_process+0x3aa/0x7520 [ 810.644601][ T9216] kmem_cache_alloc_node+0xb7/0x460 [ 810.649829][ T9216] copy_process+0x3aa/0x7520 [ 810.654450][ T9216] ? _raw_spin_unlock+0x28/0x40 [ 810.659330][ T9216] ? wp_page_reuse+0x197/0x570 [ 810.665592][ T9216] ? do_wp_page+0x844/0x3370 [ 810.670218][ T9216] ? __cleanup_sighand+0xb0/0xb0 [ 810.675173][ T9216] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 810.680584][ T9216] ? rwlock_bug.part.0+0x90/0x90 [ 810.685535][ T9216] ? lock_chain_count+0x20/0x20 [ 810.690401][ T9216] kernel_clone+0xeb/0x990 [ 810.694834][ T9216] ? create_io_thread+0xf0/0xf0 [ 810.699787][ T9216] ? find_held_lock+0x2d/0x110 [ 810.704664][ T9216] __do_sys_clone+0xba/0x100 [ 810.709285][ T9216] ? kernel_clone+0x990/0x990 [ 810.714083][ T9216] ? syscall_enter_from_user_mode+0x26/0xb0 [ 810.719991][ T9216] do_syscall_64+0x39/0xb0 [ 810.726355][ T9216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 810.732260][ T9216] RIP: 0033:0x7f7dbb089dfb [ 810.736770][ T9216] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 810.756391][ T9216] RSP: 002b:00007ffe72be32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 810.764896][ T9216] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7dbb089dfb [ 810.772871][ T9216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 810.780849][ T9216] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556ab0400 [ 810.788821][ T9216] R10: 0000555556ab06d0 R11: 0000000000000246 R12: 0000000000000001 [ 810.796801][ T9216] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe72be33d0 [ 810.804803][ T9216] [ 810.809624][ C0] net_ratelimit: 2260 callbacks suppressed [ 810.809643][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.827178][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 810.839723][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.852297][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.864358][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 810.876040][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 810.888845][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 810.900864][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.912524][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 810.931442][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:36:17 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 810.971822][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.984670][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.996425][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.168535][ T9216] memory: usage 228kB, limit 0kB, failcnt 140 [ 811.181080][ T9216] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 811.187995][ T9216] Memory cgroup stats for /syz0: [ 811.188206][ T9216] anon 45056 [ 811.188206][ T9216] file 126976 [ 811.188206][ T9216] kernel 61440 [ 811.188206][ T9216] kernel_stack 0 [ 811.188206][ T9216] pagetables 8192 [ 811.188206][ T9216] sec_pagetables 0 [ 811.188206][ T9216] percpu 0 [ 811.188206][ T9216] sock 0 [ 811.188206][ T9216] vmalloc 0 [ 811.188206][ T9216] shmem 126976 [ 811.188206][ T9216] zswap 0 [ 811.188206][ T9216] zswapped 0 [ 811.188206][ T9216] file_mapped 126976 [ 811.188206][ T9216] file_dirty 0 [ 811.188206][ T9216] file_writeback 0 [ 811.188206][ T9216] swapcached 0 [ 811.188206][ T9216] anon_thp 0 [ 811.188206][ T9216] file_thp 0 [ 811.188206][ T9216] shmem_thp 0 [ 811.188206][ T9216] inactive_anon 45056 [ 811.188206][ T9216] active_anon 126976 [ 811.188206][ T9216] inactive_file 0 [ 811.188206][ T9216] active_file 0 [ 811.188206][ T9216] unevictable 0 [ 811.188206][ T9216] slab_reclaimable 10936 [ 811.188206][ T9216] slab_unreclaimable 32296 [ 811.188206][ T9216] slab 43232 [ 811.396229][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:36:17 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 811.557757][T13272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 811.594308][T13272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 811.653781][T13272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 811.682114][T13272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 811.731080][ T9216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9216,uid=0 [ 811.819177][ T9216] Memory cgroup out of memory: Killed process 9216 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 811.962070][T13209] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 811.964426][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.987014][T13209] CPU: 1 PID: 13209 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 811.997479][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 812.007648][T13209] Call Trace: [ 812.010958][T13209] [ 812.011106][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.013890][T13209] dump_stack_lvl+0xd1/0x138 [ 812.026051][T13209] dump_header+0x10b/0x85f [ 812.030549][T13209] oom_kill_process.cold+0x10/0x15 [ 812.035699][T13209] out_of_memory+0x35c/0x14a0 [ 812.040416][T13209] ? oom_killer_disable+0x280/0x280 [ 812.045648][T13209] ? find_held_lock+0x2d/0x110 [ 812.050461][T13209] mem_cgroup_out_of_memory+0x206/0x270 [ 812.056043][T13209] ? mem_cgroup_margin+0x130/0x130 [ 812.056725][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.061165][T13209] ? lock_downgrade+0x6e0/0x6e0 [ 812.061205][T13209] try_charge_memcg+0xefb/0x12f0 [ 812.061240][T13209] ? mem_cgroup_handle_over_high+0x520/0x520 [ 812.083761][T13209] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 812.089525][T13209] ? lock_downgrade+0x6e0/0x6e0 [ 812.094411][T13209] ? lock_downgrade+0x6e0/0x6e0 [ 812.099297][T13209] ? rcu_read_unlock+0x9/0x60 [ 812.104040][T13209] obj_cgroup_charge+0x2af/0x5e0 [ 812.109022][T13209] ? __alloc_file+0x21/0x270 [ 812.113651][T13209] kmem_cache_alloc+0xb5/0x430 [ 812.118451][T13209] __alloc_file+0x21/0x270 [ 812.122915][T13209] alloc_empty_file+0x71/0x170 [ 812.127809][T13209] path_openat+0xe1/0x2a50 [ 812.132481][T13209] ? path_lookupat+0x840/0x840 [ 812.137300][T13209] do_filp_open+0x1ba/0x410 [ 812.141843][T13209] ? may_open_dev+0xf0/0xf0 [ 812.144080][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.146367][T13209] ? find_held_lock+0x2d/0x110 [ 812.157754][T13209] ? do_raw_spin_lock+0x124/0x2b0 [ 812.162816][T13209] ? rwlock_bug.part.0+0x90/0x90 [ 812.167802][T13209] ? _raw_spin_unlock+0x28/0x40 [ 812.172690][T13209] ? alloc_fd+0x2d8/0x6d0 [ 812.177063][T13209] do_sys_openat2+0x16d/0x4c0 [ 812.181772][T13209] ? path_umount+0x6b8/0x10b0 [ 812.186483][T13209] ? putname+0x102/0x140 [ 812.190758][T13209] ? build_open_flags+0x6f0/0x6f0 [ 812.195815][T13209] ? may_mount+0xa0/0xa0 [ 812.200102][T13209] __x64_sys_openat+0x143/0x1f0 [ 812.204983][T13209] ? __ia32_sys_open+0x1c0/0x1c0 [ 812.209961][T13209] ? syscall_enter_from_user_mode+0x26/0xb0 [ 812.215894][T13209] do_syscall_64+0x39/0xb0 [ 812.220350][T13209] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 812.226448][T13209] RIP: 0033:0x7ff96808bc38 [ 812.230886][T13209] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 812.250611][T13209] RSP: 002b:00007fff39513f00 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 812.259318][T13209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff96808bc38 [ 812.267582][T13209] RDX: 0000000000090800 RSI: 00007fff395150f0 RDI: 00000000ffffff9c [ 812.275588][T13209] RBP: 00007fff395150cc R08: 0000000000090800 R09: 00007fff395150f0 [ 812.283587][T13209] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ff9680e6b24 [ 812.291588][T13209] R13: 00007fff395150f0 R14: 0000000000000017 R15: 00007fff39515130 [ 812.299611][T13209] [ 812.380136][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 812.401937][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 812.430623][T13209] memory: usage 232kB, limit 0kB, failcnt 408 [ 812.436610][T13256] device veth0_vlan entered promiscuous mode [ 812.438861][T13209] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.450743][T13209] Memory cgroup stats for /syz4: [ 812.450955][T13209] anon 36864 [ 812.450955][T13209] file 122880 [ 812.450955][T13209] kernel 61440 [ 812.450955][T13209] kernel_stack 0 [ 812.450955][T13209] pagetables 8192 [ 812.450955][T13209] sec_pagetables 0 [ 812.450955][T13209] percpu 0 [ 812.450955][T13209] sock 0 [ 812.450955][T13209] vmalloc 0 [ 812.450955][T13209] shmem 122880 [ 812.450955][T13209] zswap 0 [ 812.450955][T13209] zswapped 0 [ 812.450955][T13209] file_mapped 122880 [ 812.450955][T13209] file_dirty 0 [ 812.450955][T13209] file_writeback 0 [ 812.450955][T13209] swapcached 0 [ 812.450955][T13209] anon_thp 0 [ 812.450955][T13209] file_thp 0 [ 812.450955][T13209] shmem_thp 0 [ 812.450955][T13209] inactive_anon 36864 [ 812.450955][T13209] active_anon 122880 [ 812.450955][T13209] inactive_file 0 [ 812.450955][T13209] active_file 0 [ 812.450955][T13209] unevictable 0 [ 812.450955][T13209] slab_reclaimable 10136 [ 812.450955][T13209] slab_unreclaimable 34848 [ 812.450955][T13209] slab 44984 [ 812.557070][T13209] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13209,uid=0 [ 812.600255][T13209] Memory cgroup out of memory: Killed process 13209 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 812.651275][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 812.659843][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 812.676753][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.703184][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.720248][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 812.746575][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 812.774736][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.871316][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 812.890066][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 812.902798][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.909934][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.930436][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.965839][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 812.999187][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.006496][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.064643][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.081776][T13256] device veth1_vlan entered promiscuous mode [ 813.144515][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 813.163661][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.243027][T13272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 813.273807][T13272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.315182][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.330419][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.372312][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.401842][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.410573][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.471852][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.495051][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.500805][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.509899][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.521290][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.522125][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.545733][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.568324][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 813.576979][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.626616][T13256] device veth0_macvtap entered promiscuous mode [ 813.941706][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 813.958239][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.004309][T13256] device veth1_macvtap entered promiscuous mode [ 814.052697][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.069633][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.160284][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.221216][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.270611][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.301552][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.340664][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.364588][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.383624][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.407235][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.425777][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.445256][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.481816][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.504719][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.553740][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.583451][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.903762][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.951078][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.971099][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.011112][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.020961][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.058743][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.069200][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.091359][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.113168][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.135230][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.161594][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.195305][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.242672][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.260959][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.333199][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.360955][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.391851][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 815.400434][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 815.421471][T13256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.433653][T13256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.456531][T13256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.473169][T13256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.648178][T12038] Bluetooth: hci0: command 0x0409 tx timeout [ 815.666489][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 815.675824][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 815.767944][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.776777][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.813327][ C0] net_ratelimit: 2200 callbacks suppressed [ 815.813347][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.831171][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 815.843539][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.856262][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.868309][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 815.879959][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 815.893440][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 815.905625][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.917354][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 815.930479][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.970131][T13272] device veth0_vlan entered promiscuous mode [ 815.988738][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.011920][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 816.027609][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 816.093363][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 816.111660][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 816.160389][T13272] device veth1_vlan entered promiscuous mode [ 816.243709][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.264621][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.273152][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 816.285900][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 816.317294][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 816.347663][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.368965][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.398833][T13272] device veth0_macvtap entered promiscuous mode [ 816.413404][T13417] chnl_net:caif_netlink_parms(): no params data found [ 816.446049][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 816.464602][T13272] device veth1_macvtap entered promiscuous mode [ 816.550467][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.591080][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.600944][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.650925][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.681493][T13453] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 816.685491][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.711193][T13453] CPU: 0 PID: 13453 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 816.721756][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 816.731844][T13453] Call Trace: [ 816.735166][T13453] [ 816.738125][T13453] dump_stack_lvl+0xd1/0x138 [ 816.742772][T13453] dump_header+0x10b/0x85f [ 816.747240][T13453] oom_kill_process.cold+0x10/0x15 [ 816.752394][T13453] out_of_memory+0x35c/0x14a0 [ 816.757295][T13453] ? oom_killer_disable+0x280/0x280 [ 816.762548][T13453] mem_cgroup_out_of_memory+0x206/0x270 [ 816.768132][T13453] ? mem_cgroup_margin+0x130/0x130 [ 816.773305][T13453] memory_max_write+0x2f9/0x3c0 [ 816.778198][T13453] ? mem_cgroup_force_empty_write+0x160/0x160 [ 816.784405][T13453] ? lock_release+0x810/0x810 [ 816.786334][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.789109][T13453] cgroup_file_write+0x1e2/0x770 [ 816.803870][T13453] ? mem_cgroup_force_empty_write+0x160/0x160 [ 816.809984][T13453] ? kill_css+0x370/0x370 [ 816.814455][T13453] ? __virt_addr_valid+0x61/0x2e0 [ 816.819415][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.819604][T13453] ? kill_css+0x370/0x370 [ 816.834365][T13453] kernfs_fop_write_iter+0x3f1/0x600 [ 816.839707][T13453] vfs_write+0x9ed/0xdd0 [ 816.843990][T13453] ? kernel_write+0x630/0x630 [ 816.848707][T13453] ? __fget_files+0x26a/0x440 [ 816.853411][T13453] ksys_write+0x12b/0x250 [ 816.857847][T13453] ? __ia32_sys_read+0xb0/0xb0 [ 816.862819][T13453] ? syscall_enter_from_user_mode+0x26/0xb0 [ 816.868744][T13453] do_syscall_64+0x39/0xb0 [ 816.873186][T13453] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 816.879095][T13453] RIP: 0033:0x7f873cc8c0c9 [ 816.883520][T13453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.903138][T13453] RSP: 002b:00007f873d9ee168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 816.911650][T13453] RAX: ffffffffffffffda RBX: 00007f873cdac050 RCX: 00007f873cc8c0c9 [ 816.919628][T13453] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 816.927624][T13453] RBP: 00007f873cce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 816.935604][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.947230][T13453] R13: 00007ffc7c8d2e8f R14: 00007f873d9ee300 R15: 0000000000022000 [ 816.955229][T13453] [ 816.978855][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.988929][T13453] memory: usage 8684kB, limit 0kB, failcnt 699 [ 817.002445][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.006867][T13453] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 817.045763][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.051118][T13453] Memory cgroup stats for /syz2: [ 817.055787][T13453] anon 118784 [ 817.055787][T13453] file 8359936 [ 817.055787][T13453] kernel 385024 [ 817.055787][T13453] kernel_stack 98304 [ 817.055787][T13453] pagetables 81920 [ 817.055787][T13453] sec_pagetables 0 [ 817.055787][T13453] percpu 64 [ 817.055787][T13453] sock 0 [ 817.055787][T13453] vmalloc 0 [ 817.055787][T13453] shmem 8351744 [ 817.055787][T13453] zswap 0 [ 817.055787][T13453] zswapped 0 [ 817.055787][T13453] file_mapped 180224 [ 817.055787][T13453] file_dirty 4096 [ 817.055787][T13453] file_writeback 0 [ 817.055787][T13453] swapcached 0 [ 817.055787][T13453] anon_thp 0 [ 817.055787][T13453] file_thp 0 [ 817.055787][T13453] shmem_thp 0 [ 817.055787][T13453] inactive_anon 8290304 [ 817.055787][T13453] active_anon 180224 [ 817.055787][T13453] inactive_file 4096 [ 817.055787][T13453] active_file 4096 [ 817.055787][T13453] unevictable 0 [ 817.055787][T13453] slab_reclaimable 61008 [ 817.055787][T13453] slab_unreclaimable 119968 [ 817.063154][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.237261][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.259298][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.289964][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.333798][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.433358][T13453] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13450,uid=0 [ 817.500939][T13453] Memory cgroup out of memory: Killed process 13452 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 817.562148][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.571631][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.601394][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.624233][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.636822][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.649031][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.659241][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.671245][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.691968][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.716573][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.727259][T12038] Bluetooth: hci0: command 0x041b tx timeout [ 817.751094][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.763691][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.773985][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.784829][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.796442][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.809311][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.821494][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.871186][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.880092][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.931495][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.941361][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.952739][T13417] device bridge_slave_0 entered promiscuous mode [ 817.974909][T13272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.985170][T13272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.021090][T13272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.029845][T13272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.095675][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.121012][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.130665][T13417] device bridge_slave_1 entered promiscuous mode [ 818.274884][T13417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.307558][T13417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.446689][T13417] team0: Port device team_slave_0 added [ 818.486505][T13417] team0: Port device team_slave_1 added [ 818.509778][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.540020][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.599996][T13417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.613939][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.691206][T13417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.758225][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 818.778004][T13417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.796855][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.848918][T13417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.881085][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.890399][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.967772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 818.988755][T13417] device hsr_slave_0 entered promiscuous mode [ 819.031667][T13417] device hsr_slave_1 entered promiscuous mode [ 819.074882][T13417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.114466][T13417] Cannot create hsr debugfs directory [ 819.326385][T13485] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 819.409495][T13485] CPU: 1 PID: 13485 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 819.419998][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 819.430088][T13485] Call Trace: [ 819.433391][T13485] [ 819.436351][T13485] dump_stack_lvl+0xd1/0x138 [ 819.441079][T13485] dump_header+0x10b/0x85f [ 819.445540][T13485] oom_kill_process.cold+0x10/0x15 [ 819.450776][T13485] out_of_memory+0x35c/0x14a0 [ 819.455666][T13485] ? oom_killer_disable+0x280/0x280 [ 819.460913][T13485] mem_cgroup_out_of_memory+0x206/0x270 [ 819.466494][T13485] ? mem_cgroup_margin+0x130/0x130 [ 819.471660][T13485] memory_max_write+0x2f9/0x3c0 [ 819.476557][T13485] ? mem_cgroup_force_empty_write+0x160/0x160 [ 819.482670][T13485] ? lock_release+0x810/0x810 [ 819.487512][T13485] cgroup_file_write+0x1e2/0x770 [ 819.492497][T13485] ? mem_cgroup_force_empty_write+0x160/0x160 [ 819.498625][T13485] ? kill_css+0x370/0x370 [ 819.503053][T13485] ? __virt_addr_valid+0x61/0x2e0 [ 819.508140][T13485] ? kill_css+0x370/0x370 [ 819.512633][T13485] kernfs_fop_write_iter+0x3f1/0x600 [ 819.518002][T13485] vfs_write+0x9ed/0xdd0 [ 819.522299][T13485] ? kernel_write+0x630/0x630 [ 819.527050][T13485] ? __fget_files+0x26a/0x440 [ 819.531879][T13485] ksys_write+0x12b/0x250 [ 819.536249][T13485] ? __ia32_sys_read+0xb0/0xb0 [ 819.541143][T13485] ? syscall_enter_from_user_mode+0x26/0xb0 [ 819.547962][T13485] do_syscall_64+0x39/0xb0 [ 819.552441][T13485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 819.558826][T13485] RIP: 0033:0x7fc1c608c0c9 [ 819.563273][T13485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.583006][T13485] RSP: 002b:00007fc1c6d72168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.591487][T13485] RAX: ffffffffffffffda RBX: 00007fc1c61ac050 RCX: 00007fc1c608c0c9 [ 819.599493][T13485] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 819.607494][T13485] RBP: 00007fc1c60e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 819.615721][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.623826][T13485] R13: 00007ffcea3f45af R14: 00007fc1c6d72300 R15: 0000000000022000 [ 819.631853][T13485] [ 819.785074][ T34] device hsr_slave_0 left promiscuous mode [ 819.801515][T12038] Bluetooth: hci0: command 0x040f tx timeout [ 819.822357][ T34] device hsr_slave_1 left promiscuous mode [ 819.830661][T13485] memory: usage 10720kB, limit 0kB, failcnt 531 [ 819.838416][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.846016][T13485] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 819.892926][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.900795][T13485] Memory cgroup stats for /syz1: [ 819.900988][T13485] anon 122880 [ 819.900988][T13485] file 10477568 [ 819.900988][T13485] kernel 372736 [ 819.900988][T13485] kernel_stack 98304 [ 819.900988][T13485] pagetables 77824 [ 819.900988][T13485] sec_pagetables 0 [ 819.900988][T13485] percpu 64 [ 819.900988][T13485] sock 0 [ 819.900988][T13485] vmalloc 0 [ 819.900988][T13485] shmem 10477568 [ 819.900988][T13485] zswap 0 [ 819.900988][T13485] zswapped 0 [ 819.900988][T13485] file_mapped 192512 [ 819.900988][T13485] file_dirty 0 [ 819.900988][T13485] file_writeback 0 [ 819.900988][T13485] swapcached 0 [ 819.900988][T13485] anon_thp 0 [ 819.900988][T13485] file_thp 0 [ 819.900988][T13485] shmem_thp 0 [ 819.900988][T13485] inactive_anon 114688 [ 819.900988][T13485] active_anon 10477568 [ 819.900988][T13485] inactive_file 0 [ 819.900988][T13485] active_file 0 [ 819.900988][T13485] unevictable 0 [ 819.900988][T13485] slab_reclaimable 52184 [ 819.900988][T13485] slab_unreclaimable 120032 [ 819.900988][T13485] slab 172216 [ 820.022108][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.030009][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.066599][ T34] device bridge_slave_1 left promiscuous mode [ 820.074565][T13485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13482,uid=0 [ 820.088291][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.124520][T13485] Memory cgroup out of memory: Killed process 13485 (syz-executor.1) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 04:36:26 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:26 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:26 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:26 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:26 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 820.171612][ T34] device bridge_slave_0 left promiscuous mode [ 820.177913][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.264264][T13256] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 820.278233][ T34] device hsr_slave_0 left promiscuous mode [ 820.291257][T13256] CPU: 1 PID: 13256 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 820.301724][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 820.311808][T13256] Call Trace: [ 820.315127][T13256] [ 820.318084][T13256] dump_stack_lvl+0xd1/0x138 [ 820.322722][T13256] dump_header+0x10b/0x85f [ 820.327185][T13256] oom_kill_process.cold+0x10/0x15 [ 820.332330][T13256] out_of_memory+0x35c/0x14a0 [ 820.337045][T13256] ? find_held_lock+0x2d/0x110 [ 820.341848][T13256] ? oom_killer_disable+0x280/0x280 [ 820.347079][T13256] ? find_held_lock+0x2d/0x110 [ 820.351884][T13256] mem_cgroup_out_of_memory+0x206/0x270 [ 820.357457][T13256] ? mem_cgroup_margin+0x130/0x130 [ 820.362600][T13256] ? lock_downgrade+0x6e0/0x6e0 [ 820.367471][T13256] try_charge_memcg+0xefb/0x12f0 [ 820.372427][T13256] ? mem_cgroup_handle_over_high+0x520/0x520 [ 820.378452][T13256] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 820.384187][T13256] ? lock_downgrade+0x6e0/0x6e0 [ 820.389044][T13256] ? lock_downgrade+0x6e0/0x6e0 [ 820.393903][T13256] ? rcu_read_unlock+0x9/0x60 [ 820.398608][T13256] obj_cgroup_charge+0x2af/0x5e0 [ 820.403664][T13256] ? copy_process+0x3aa/0x7520 [ 820.408437][T13256] kmem_cache_alloc_node+0xb7/0x460 [ 820.413649][T13256] copy_process+0x3aa/0x7520 [ 820.418359][T13256] ? _raw_spin_unlock+0x28/0x40 [ 820.423222][T13256] ? wp_page_reuse+0x197/0x570 [ 820.428006][T13256] ? do_wp_page+0x844/0x3370 [ 820.432623][T13256] ? __cleanup_sighand+0xb0/0xb0 [ 820.437570][T13256] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 820.443018][T13256] ? rwlock_bug.part.0+0x90/0x90 [ 820.447986][T13256] ? lock_chain_count+0x20/0x20 [ 820.452847][T13256] kernel_clone+0xeb/0x990 [ 820.457276][T13256] ? create_io_thread+0xf0/0xf0 [ 820.462141][T13256] ? find_held_lock+0x2d/0x110 [ 820.466932][T13256] __do_sys_clone+0xba/0x100 [ 820.471531][T13256] ? kernel_clone+0x990/0x990 [ 820.476237][T13256] ? syscall_enter_from_user_mode+0x26/0xb0 [ 820.482147][T13256] do_syscall_64+0x39/0xb0 [ 820.486592][T13256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 820.492496][T13256] RIP: 0033:0x7f873cc89dfb [ 820.496916][T13256] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 820.516537][T13256] RSP: 002b:00007ffc7c8d30d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 820.524969][T13256] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f873cc89dfb [ 820.533127][T13256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 820.541195][T13256] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555666b400 [ 820.549275][T13256] R10: 000055555666b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 820.557249][T13256] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7c8d31b0 [ 820.565349][T13256] [ 820.581174][ T34] device hsr_slave_1 left promiscuous mode [ 820.591064][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.598525][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.663646][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.705400][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 04:36:26 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 820.755694][ T34] device bridge_slave_1 left promiscuous mode [ 820.821218][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.844991][ C0] net_ratelimit: 2340 callbacks suppressed [ 820.845009][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.862971][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 820.875132][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.887659][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.899637][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 820.911378][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 820.923896][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 820.935973][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.947602][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 820.959821][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.981571][ T34] device bridge_slave_0 left promiscuous mode [ 820.987819][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.021012][ T34] device hsr_slave_0 left promiscuous mode [ 821.058632][T13256] memory: usage 8312kB, limit 0kB, failcnt 718 [ 821.064989][T13256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 821.080591][ T34] device hsr_slave_1 left promiscuous mode [ 821.089441][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.111100][T13256] Memory cgroup stats for /syz2: [ 821.111309][T13256] anon 40960 [ 821.111309][T13256] file 8359936 [ 821.111309][T13256] kernel 110592 [ 821.111309][T13256] kernel_stack 0 [ 821.111309][T13256] pagetables 8192 [ 821.111309][T13256] sec_pagetables 0 [ 821.111309][T13256] percpu 0 [ 821.111309][T13256] sock 0 [ 821.111309][T13256] vmalloc 0 [ 821.111309][T13256] shmem 8351744 [ 821.111309][T13256] zswap 0 [ 821.111309][T13256] zswapped 0 [ 821.111309][T13256] file_mapped 147456 [ 821.111309][T13256] file_dirty 8192 04:36:27 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 821.111309][T13256] file_writeback 0 [ 821.111309][T13256] swapcached 0 [ 821.111309][T13256] anon_thp 0 [ 821.111309][T13256] file_thp 0 [ 821.111309][T13256] shmem_thp 0 [ 821.111309][T13256] inactive_anon 8212480 [ 821.111309][T13256] active_anon 180224 [ 821.111309][T13256] inactive_file 4096 [ 821.111309][T13256] active_file 4096 [ 821.111309][T13256] unevictable 0 [ 821.111309][T13256] slab_reclaimable 34464 [ 821.111309][T13256] slab_unreclaimable 59008 [ 821.111309][T13256] slab 93472 [ 821.205122][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.251229][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.271423][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.305286][ T34] device bridge_slave_1 left promiscuous mode [ 821.322074][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.379597][ T34] device bridge_slave_0 left promiscuous mode [ 821.388296][ T34] bridge0: port 1(bridge_slave_0) entered disabled state 04:36:27 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 821.472452][T13256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13256,uid=0 [ 821.512328][ T34] device veth1_macvtap left promiscuous mode [ 821.521296][ T34] device veth0_macvtap left promiscuous mode [ 821.538903][ T34] device veth1_vlan left promiscuous mode [ 821.549004][T13256] Memory cgroup out of memory: Killed process 13256 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 821.577176][ T34] device veth0_vlan left promiscuous mode [ 821.603283][ T34] device veth1_macvtap left promiscuous mode [ 821.621336][T13272] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 821.636339][ T34] device veth0_macvtap left promiscuous mode [ 821.651919][T13272] CPU: 1 PID: 13272 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 821.662373][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 821.672462][T13272] Call Trace: [ 821.675920][T13272] [ 821.678857][T13272] dump_stack_lvl+0xd1/0x138 [ 821.683553][T13272] dump_header+0x10b/0x85f [ 821.687982][T13272] oom_kill_process.cold+0x10/0x15 [ 821.693111][T13272] out_of_memory+0x35c/0x14a0 [ 821.697800][T13272] ? oom_killer_disable+0x280/0x280 [ 821.703007][T13272] ? find_held_lock+0x2d/0x110 [ 821.708059][T13272] mem_cgroup_out_of_memory+0x206/0x270 [ 821.713617][T13272] ? mem_cgroup_margin+0x130/0x130 [ 821.718731][T13272] ? lock_downgrade+0x6e0/0x6e0 [ 821.723621][T13272] try_charge_memcg+0xefb/0x12f0 [ 821.728601][T13272] ? mem_cgroup_handle_over_high+0x520/0x520 [ 821.734634][T13272] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 821.740385][T13272] ? lock_downgrade+0x6e0/0x6e0 [ 821.745249][T13272] ? lock_downgrade+0x6e0/0x6e0 [ 821.750132][T13272] obj_cgroup_charge+0x2af/0x5e0 [ 821.755194][T13272] kmem_cache_alloc_lru+0x145/0x760 [ 821.760398][T13272] ? sock_alloc_inode+0x27/0x1d0 [ 821.765358][T13272] sock_alloc_inode+0x27/0x1d0 [ 821.770136][T13272] ? sock_free_inode+0x30/0x30 [ 821.774914][T13272] alloc_inode+0x61/0x230 [ 821.779272][T13272] new_inode_pseudo+0x17/0x80 [ 821.783958][T13272] sock_alloc+0x40/0x260 [ 821.788214][T13272] __sock_create+0xbd/0x790 [ 821.792737][T13272] __sys_socket+0x133/0x250 [ 821.797254][T13272] ? __sys_socket_file+0x1f0/0x1f0 [ 821.802576][T13272] __x64_sys_socket+0x73/0xb0 [ 821.807266][T13272] do_syscall_64+0x39/0xb0 [ 821.811735][T13272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 821.817726][T13272] RIP: 0033:0x7fc1c608d747 [ 821.822149][T13272] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 821.841770][T13272] RSP: 002b:00007ffcea3f4128 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 821.850365][T13272] RAX: ffffffffffffffda RBX: 00007ffcea3f4890 RCX: 00007fc1c608d747 [ 821.858337][T13272] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 821.866325][T13272] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffcea3f46a0 [ 821.874559][T13272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 821.882530][T13272] R13: 00000000000c8383 R14: 0000000000000018 R15: 00007ffcea3f48d0 [ 821.890612][T13272] [ 821.909059][T12038] Bluetooth: hci0: command 0x0419 tx timeout [ 821.940557][T13272] memory: usage 10404kB, limit 0kB, failcnt 550 [ 821.959046][T13272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 821.974571][ T34] device veth1_vlan left promiscuous mode [ 822.001088][T13272] Memory cgroup stats for /syz1: [ 822.001283][T13272] anon 45056 [ 822.001283][T13272] file 10477568 [ 822.001283][T13272] kernel 131072 [ 822.001283][T13272] kernel_stack 0 [ 822.001283][T13272] pagetables 8192 [ 822.001283][T13272] sec_pagetables 0 [ 822.001283][T13272] percpu 64 [ 822.001283][T13272] sock 0 [ 822.001283][T13272] vmalloc 0 [ 822.001283][T13272] shmem 10477568 [ 822.001283][T13272] zswap 0 [ 822.001283][T13272] zswapped 0 [ 822.001283][T13272] file_mapped 147456 [ 822.001283][T13272] file_dirty 0 [ 822.001283][T13272] file_writeback 0 [ 822.001283][T13272] swapcached 0 [ 822.001283][T13272] anon_thp 0 [ 822.001283][T13272] file_thp 0 [ 822.001283][T13272] shmem_thp 0 [ 822.001283][T13272] inactive_anon 45056 [ 822.001283][T13272] active_anon 10477568 [ 822.001283][T13272] inactive_file 0 [ 822.001283][T13272] active_file 0 [ 822.001283][T13272] unevictable 0 [ 822.001283][T13272] slab_reclaimable 37992 [ 822.001283][T13272] slab_unreclaimable 70792 [ 822.001283][T13272] slab 108784 [ 822.065547][ T34] device veth0_vlan left promiscuous mode 04:36:28 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 822.127842][T13272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13272,uid=0 [ 822.170651][T13272] Memory cgroup out of memory: Killed process 13272 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 822.200926][ T34] device veth1_macvtap left promiscuous mode [ 822.212172][ T34] device veth0_macvtap left promiscuous mode [ 822.218383][ T34] device veth1_vlan left promiscuous mode [ 822.231224][ T34] device veth0_vlan left promiscuous mode [ 822.742798][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.755248][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.769412][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.787703][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.799090][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 822.810571][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.503574][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.512483][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.525677][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.538506][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 823.553991][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 824.160928][ T34] team0 (unregistering): Port device team_slave_1 removed [ 824.201932][ T34] team0 (unregistering): Port device team_slave_0 removed [ 824.236127][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.265494][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.496872][ T34] bond0 (unregistering): Released all slaves [ 824.841478][ T5124] Bluetooth: hci1: command 0x0409 tx timeout [ 824.897380][ T34] team0 (unregistering): Port device team_slave_1 removed [ 824.938688][ T34] team0 (unregistering): Port device team_slave_0 removed [ 824.987164][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.047817][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.266449][ T34] bond0 (unregistering): Released all slaves [ 825.651312][ T5124] Bluetooth: hci2: command 0x0409 tx timeout [ 825.676570][ T34] team0 (unregistering): Port device team_slave_1 removed [ 825.712192][ T34] team0 (unregistering): Port device team_slave_0 removed [ 825.741699][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.764069][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.851599][ C0] net_ratelimit: 3661 callbacks suppressed [ 825.851625][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.868996][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 825.880806][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.892854][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.904918][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 825.916593][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 825.929248][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 825.940993][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.952365][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 825.964713][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.104349][ T34] bond0 (unregistering): Released all slaves [ 826.921176][ T5124] Bluetooth: hci1: command 0x041b tx timeout [ 827.292501][T13519] chnl_net:caif_netlink_parms(): no params data found [ 827.323484][T13516] chnl_net:caif_netlink_parms(): no params data found [ 827.731135][ T5124] Bluetooth: hci2: command 0x041b tx timeout [ 827.777037][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.791154][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.827673][T13519] device bridge_slave_0 entered promiscuous mode [ 827.871360][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.897523][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.927774][T13516] device bridge_slave_0 entered promiscuous mode [ 827.960925][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.969703][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.992598][T13519] device bridge_slave_1 entered promiscuous mode [ 828.000163][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.018891][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.052292][T13516] device bridge_slave_1 entered promiscuous mode [ 828.191168][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.203339][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.234061][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.295522][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.417551][T13519] team0: Port device team_slave_0 added [ 828.444429][T13516] team0: Port device team_slave_0 added [ 828.453810][T13519] team0: Port device team_slave_1 added [ 828.517674][T13516] team0: Port device team_slave_1 added [ 828.617711][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.639654][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.666019][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.729841][T13417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.764295][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.774809][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.846407][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.896193][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.911094][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.971287][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.001447][ T5124] Bluetooth: hci1: command 0x040f tx timeout [ 829.007777][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.023125][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.049638][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.068814][T13417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 829.090926][T13417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 829.140436][T13417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 829.288531][T13516] device hsr_slave_0 entered promiscuous mode [ 829.313403][T13516] device hsr_slave_1 entered promiscuous mode [ 829.327654][T13516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.351222][T13516] Cannot create hsr debugfs directory [ 829.363744][T13519] device hsr_slave_0 entered promiscuous mode [ 829.385564][T13519] device hsr_slave_1 entered promiscuous mode [ 829.403994][T13519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.431371][T13519] Cannot create hsr debugfs directory [ 829.801601][ T5124] Bluetooth: hci2: command 0x040f tx timeout [ 829.860627][T13417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.963818][T13519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.042068][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 830.050024][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 830.078158][T13417] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.106150][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 830.115706][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 830.141338][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.148504][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.183267][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 830.217378][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 830.239392][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 830.267995][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.275186][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.332123][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 830.341589][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 830.408102][T13519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.478130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 830.490875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 830.532456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 830.561984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 830.591934][T13417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.612696][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 830.624964][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 830.642213][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 830.664434][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 830.732371][T13519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.872442][ C0] net_ratelimit: 2559 callbacks suppressed [ 830.872463][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.892763][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.904409][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 830.916796][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.929530][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.953990][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 830.965890][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 830.978596][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 830.990682][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.002340][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 831.084937][ T5124] Bluetooth: hci1: command 0x0419 tx timeout [ 831.173658][T13519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.486781][T13417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.535067][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.552275][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.714922][T13516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.881289][ T5124] Bluetooth: hci2: command 0x0419 tx timeout [ 831.914366][T13516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.225434][T13516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.592163][T13516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.661384][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 832.701631][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 832.742294][T13417] device veth0_vlan entered promiscuous mode [ 832.783722][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 832.792967][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 832.814155][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 832.831859][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 832.885578][T13417] device veth1_vlan entered promiscuous mode [ 832.941901][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 832.956275][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 832.972533][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 832.986784][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 833.004022][T13417] device veth0_macvtap entered promiscuous mode [ 833.072762][T13417] device veth1_macvtap entered promiscuous mode [ 833.117566][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.130293][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.141366][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.154764][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.181214][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.201072][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.221079][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.241453][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.262523][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.274989][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.287213][T13417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.304378][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 833.321315][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 833.329498][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 833.347705][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 833.367537][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.401493][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.413862][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.424961][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.435668][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.446535][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.456759][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.468823][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.479044][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.489960][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.507534][T13417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.531675][T13516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.549849][T13516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.680114][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 833.691537][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 833.727790][T13417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.748433][T13417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.771261][T13417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.780016][T13417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.827468][T13516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.872745][T13516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 833.955526][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.015328][T13519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.066166][T13519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.186297][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.241459][T13519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.362006][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.438139][T13519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.591551][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.688954][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.719781][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.794970][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 834.845702][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.880866][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.889899][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.967390][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.991967][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 835.000799][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 835.010110][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 835.113311][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 835.152418][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.167420][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.174641][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.189422][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 835.199209][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 835.210614][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.217816][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.372108][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.401885][T13591] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 835.417637][T13591] CPU: 1 PID: 13591 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 835.428125][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 835.438220][T13591] Call Trace: [ 835.442052][T13591] [ 835.445021][T13591] dump_stack_lvl+0xd1/0x138 [ 835.449659][T13591] dump_header+0x10b/0x85f [ 835.454117][T13591] oom_kill_process.cold+0x10/0x15 [ 835.459326][T13591] out_of_memory+0x35c/0x14a0 [ 835.464044][T13591] ? oom_killer_disable+0x280/0x280 [ 835.469303][T13591] mem_cgroup_out_of_memory+0x206/0x270 [ 835.474881][T13591] ? mem_cgroup_margin+0x130/0x130 [ 835.480053][T13591] memory_max_write+0x2f9/0x3c0 [ 835.484979][T13591] ? mem_cgroup_force_empty_write+0x160/0x160 [ 835.491124][T13591] ? lock_release+0x810/0x810 [ 835.495845][T13591] cgroup_file_write+0x1e2/0x770 [ 835.500832][T13591] ? mem_cgroup_force_empty_write+0x160/0x160 [ 835.506947][T13591] ? kill_css+0x370/0x370 [ 835.511323][T13591] ? __virt_addr_valid+0x61/0x2e0 [ 835.516412][T13591] ? kill_css+0x370/0x370 [ 835.520814][T13591] kernfs_fop_write_iter+0x3f1/0x600 [ 835.526168][T13591] vfs_write+0x9ed/0xdd0 [ 835.530472][T13591] ? kernel_write+0x630/0x630 [ 835.535193][T13591] ? __fget_files+0x26a/0x440 [ 835.539915][T13591] ksys_write+0x12b/0x250 [ 835.544265][T13591] ? __ia32_sys_read+0xb0/0xb0 [ 835.549047][T13591] ? syscall_enter_from_user_mode+0x26/0xb0 [ 835.554975][T13591] do_syscall_64+0x39/0xb0 [ 835.559420][T13591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 835.565331][T13591] RIP: 0033:0x7f082ee8c0c9 [ 835.569755][T13591] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 835.589485][T13591] RSP: 002b:00007f082fbfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 835.597999][T13591] RAX: ffffffffffffffda RBX: 00007f082efac050 RCX: 00007f082ee8c0c9 [ 835.606079][T13591] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 835.614256][T13591] RBP: 00007f082eee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 835.622352][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.630337][T13591] R13: 00007ffd65a648cf R14: 00007f082fbfe300 R15: 0000000000022000 [ 835.638345][T13591] [ 835.685456][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 835.696199][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.745135][T13591] memory: usage 572kB, limit 0kB, failcnt 338 [ 835.759309][T13591] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 835.850854][T13591] Memory cgroup stats for /syz5: [ 835.858740][T13591] anon 122880 [ 835.858740][T13591] file 126976 [ 835.858740][T13591] kernel 323584 [ 835.858740][T13591] kernel_stack 98304 [ 835.858740][T13591] pagetables 81920 [ 835.858740][T13591] sec_pagetables 0 [ 835.858740][T13591] percpu 64 [ 835.858740][T13591] sock 0 [ 835.858740][T13591] vmalloc 0 [ 835.858740][T13591] shmem 126976 [ 835.858740][T13591] zswap 0 [ 835.858740][T13591] zswapped 0 [ 835.858740][T13591] file_mapped 126976 [ 835.858740][T13591] file_dirty 0 [ 835.858740][T13591] file_writeback 0 [ 835.858740][T13591] swapcached 0 [ 835.858740][T13591] anon_thp 0 [ 835.858740][T13591] file_thp 0 [ 835.858740][T13591] shmem_thp 0 [ 835.858740][T13591] inactive_anon 135168 [ 835.858740][T13591] active_anon 114688 [ 835.858740][T13591] inactive_file 0 [ 835.858740][T13591] active_file 0 [ 835.858740][T13591] unevictable 0 [ 835.858740][T13591] slab_reclaimable 20736 [ 835.858740][T13591] slab_unreclaimable 93320 [ 835.858740][T13591] slab 114056 [ 835.891453][ C0] net_ratelimit: 2711 callbacks suppressed [ 835.891473][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.973771][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 835.986584][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.999872][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.012514][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 836.024149][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 836.036930][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 836.049095][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.061220][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 836.141438][T13591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13588,uid=0 [ 836.181839][T13591] Memory cgroup out of memory: Killed process 13591 (syz-executor.5) total-vm:56720kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 836.197362][T13519] 8021q: adding VLAN 0 to HW filter on device bond0 04:36:42 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:42 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:42 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:36:42 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 836.280682][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.310622][T13417] syz-executor.5 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 836.362659][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.371318][T13417] CPU: 1 PID: 13417 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 836.381775][T13417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 836.381920][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.391823][T13417] Call Trace: [ 836.391833][T13417] [ 836.391843][T13417] dump_stack_lvl+0xd1/0x138 [ 836.391881][T13417] dump_header+0x10b/0x85f [ 836.415202][T13417] oom_kill_process.cold+0x10/0x15 [ 836.420355][T13417] out_of_memory+0x35c/0x14a0 [ 836.422788][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.425049][T13417] ? find_held_lock+0x2d/0x110 [ 836.437706][T13417] ? oom_killer_disable+0x280/0x280 [ 836.442934][T13417] ? find_held_lock+0x2d/0x110 [ 836.447742][T13417] mem_cgroup_out_of_memory+0x206/0x270 [ 836.452319][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.453297][T13417] ? mem_cgroup_margin+0x130/0x130 [ 836.462770][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.465560][T13417] ? lock_downgrade+0x6e0/0x6e0 [ 836.481599][T13417] try_charge_memcg+0xefb/0x12f0 [ 836.486582][T13417] ? mem_cgroup_handle_over_high+0x520/0x520 [ 836.492600][T13417] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 836.498331][T13417] ? lock_downgrade+0x6e0/0x6e0 [ 836.503211][T13417] ? lock_downgrade+0x6e0/0x6e0 [ 836.508098][T13417] ? rcu_read_unlock+0x9/0x60 [ 836.512823][T13417] obj_cgroup_charge+0x2af/0x5e0 [ 836.517800][T13417] ? __alloc_file+0x21/0x270 [ 836.522415][T13417] kmem_cache_alloc+0xb5/0x430 [ 836.527192][T13417] __alloc_file+0x21/0x270 [ 836.531622][T13417] alloc_empty_file+0x71/0x170 [ 836.536402][T13417] path_openat+0xe1/0x2a50 [ 836.541105][T13417] ? path_lookupat+0x840/0x840 [ 836.545914][T13417] do_filp_open+0x1ba/0x410 [ 836.550443][T13417] ? may_open_dev+0xf0/0xf0 [ 836.554973][T13417] ? find_held_lock+0x2d/0x110 [ 836.559760][T13417] ? do_raw_spin_lock+0x124/0x2b0 [ 836.564790][T13417] ? rwlock_bug.part.0+0x90/0x90 [ 836.569751][T13417] ? _raw_spin_unlock+0x28/0x40 [ 836.574616][T13417] ? alloc_fd+0x2d8/0x6d0 [ 836.578967][T13417] do_sys_openat2+0x16d/0x4c0 [ 836.583664][T13417] ? path_umount+0x6b8/0x10b0 [ 836.588353][T13417] ? putname+0x102/0x140 [ 836.592610][T13417] ? build_open_flags+0x6f0/0x6f0 [ 836.597652][T13417] ? xfd_validate_state+0x5d/0x180 [ 836.602780][T13417] __x64_sys_openat+0x143/0x1f0 [ 836.607643][T13417] ? __ia32_sys_open+0x1c0/0x1c0 [ 836.612606][T13417] ? syscall_enter_from_user_mode+0x26/0xb0 [ 836.618950][T13417] do_syscall_64+0x39/0xb0 [ 836.623473][T13417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 836.629375][T13417] RIP: 0033:0x7f082ee8bc38 [ 836.633825][T13417] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 836.653453][T13417] RSP: 002b:00007ffd65a639c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 836.661879][T13417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f082ee8bc38 [ 836.669940][T13417] RDX: 0000000000090800 RSI: 00007ffd65a64bb0 RDI: 00000000ffffff9c [ 836.677912][T13417] RBP: 00007ffd65a64b8c R08: 0000000000090800 R09: 00007ffd65a64bb0 [ 836.685887][T13417] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f082eee6b24 [ 836.693861][T13417] R13: 00007ffd65a64bb0 R14: 0000000000000018 R15: 00007ffd65a64bf0 [ 836.701851][T13417] [ 836.708369][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.716923][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.728255][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.758512][T13516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 836.837242][T13516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.890459][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.911945][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.951227][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.994439][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.076727][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.086961][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 837.121804][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.161193][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.168336][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.221463][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.271543][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.280123][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.286386][T13417] memory: usage 236kB, limit 0kB, failcnt 357 [ 837.287376][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.300865][T13417] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 837.323401][T13417] Memory cgroup stats for /syz5: [ 837.323828][T13417] anon 36864 [ 837.323828][T13417] file 126976 [ 837.323828][T13417] kernel 77824 [ 837.323828][T13417] kernel_stack 0 [ 837.323828][T13417] pagetables 8192 [ 837.323828][T13417] sec_pagetables 0 [ 837.323828][T13417] percpu 64 [ 837.323828][T13417] sock 0 [ 837.323828][T13417] vmalloc 0 [ 837.323828][T13417] shmem 126976 [ 837.323828][T13417] zswap 0 [ 837.323828][T13417] zswapped 0 [ 837.323828][T13417] file_mapped 126976 [ 837.323828][T13417] file_dirty 0 [ 837.323828][T13417] file_writeback 0 [ 837.323828][T13417] swapcached 0 [ 837.323828][T13417] anon_thp 0 [ 837.323828][T13417] file_thp 0 [ 837.323828][T13417] shmem_thp 0 [ 837.323828][T13417] inactive_anon 49152 [ 837.323828][T13417] active_anon 114688 [ 837.323828][T13417] inactive_file 0 [ 837.323828][T13417] active_file 0 [ 837.323828][T13417] unevictable 0 [ 837.323828][T13417] slab_reclaimable 10664 [ 837.323828][T13417] slab_unreclaimable 44080 [ 837.323828][T13417] slab 54744 [ 837.412402][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.581722][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.626395][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.652024][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.707760][T13417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13417,uid=0 [ 837.811139][T13417] Memory cgroup out of memory: Killed process 13417 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 837.881857][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.919066][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.952601][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 837.992271][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.013521][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 838.038044][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 838.078021][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 838.146123][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 838.192947][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 838.401975][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.419892][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.442342][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.574055][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 838.621928][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.704359][T13516] device veth0_vlan entered promiscuous mode [ 838.711382][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.719788][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.792022][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.810943][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.856980][T13516] device veth1_vlan entered promiscuous mode [ 838.963870][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 839.002229][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 839.023104][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 839.071988][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 839.142022][T13516] device veth0_macvtap entered promiscuous mode [ 839.174789][T13516] device veth1_macvtap entered promiscuous mode [ 839.306975][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.351386][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.410649][T12038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.419769][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.425126][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.433240][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.449270][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.450498][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.468542][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 839.476219][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 839.483646][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.492037][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.531484][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.571081][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.580938][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.642074][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.663624][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.708658][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.743164][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.771439][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 839.782506][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 839.813487][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 839.831902][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 839.864925][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.892676][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.931086][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.958944][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.991219][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.021294][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.060505][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.086755][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.101138][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.107772][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.120469][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.126989][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.139976][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.157547][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.163258][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.190084][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 840.205090][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.205156][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.243626][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.302396][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 840.310134][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 840.342166][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 840.350981][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 840.391159][T13519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.402383][T13516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.453011][T13516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.481762][T13516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.490512][T13516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.901765][ C0] net_ratelimit: 1972 callbacks suppressed [ 840.901785][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.920355][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.932330][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 840.944065][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 840.956758][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 840.968827][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.980466][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 840.992843][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.006083][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.017743][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 841.191634][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.200103][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.443269][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 841.561723][ T5119] Bluetooth: hci0: command 0x0409 tx timeout [ 841.682228][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.686516][T13628] chnl_net:caif_netlink_parms(): no params data found [ 841.695553][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.763439][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 841.995907][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 842.005222][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 842.028181][T13670] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 842.080045][T13670] CPU: 1 PID: 13670 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 842.090532][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 842.100652][T13670] Call Trace: [ 842.103955][T13670] [ 842.106913][T13670] dump_stack_lvl+0xd1/0x138 [ 842.111636][T13670] dump_header+0x10b/0x85f [ 842.116093][T13670] oom_kill_process.cold+0x10/0x15 [ 842.121240][T13670] out_of_memory+0x35c/0x14a0 [ 842.125964][T13670] ? oom_killer_disable+0x280/0x280 [ 842.131207][T13670] mem_cgroup_out_of_memory+0x206/0x270 [ 842.136787][T13670] ? mem_cgroup_margin+0x130/0x130 [ 842.141964][T13670] memory_max_write+0x2f9/0x3c0 [ 842.146860][T13670] ? mem_cgroup_force_empty_write+0x160/0x160 [ 842.152975][T13670] ? lock_release+0x810/0x810 [ 842.157689][T13670] cgroup_file_write+0x1e2/0x770 [ 842.162676][T13670] ? mem_cgroup_force_empty_write+0x160/0x160 [ 842.168811][T13670] ? kill_css+0x370/0x370 [ 842.173180][T13670] ? __virt_addr_valid+0x61/0x2e0 [ 842.178259][T13670] ? kill_css+0x370/0x370 [ 842.182644][T13670] kernfs_fop_write_iter+0x3f1/0x600 [ 842.187987][T13670] vfs_write+0x9ed/0xdd0 [ 842.192275][T13670] ? kernel_write+0x630/0x630 [ 842.197084][T13670] ? __fget_files+0x26a/0x440 [ 842.201823][T13670] ksys_write+0x12b/0x250 [ 842.206186][T13670] ? __ia32_sys_read+0xb0/0xb0 [ 842.210989][T13670] ? syscall_enter_from_user_mode+0x26/0xb0 [ 842.217968][T13670] do_syscall_64+0x39/0xb0 [ 842.222433][T13670] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 842.228367][T13670] RIP: 0033:0x7f3370e8c0c9 [ 842.232816][T13670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.252470][T13670] RSP: 002b:00007f3371be0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.261008][T13670] RAX: ffffffffffffffda RBX: 00007f3370fac050 RCX: 00007f3370e8c0c9 [ 842.269003][T13670] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 842.277005][T13670] RBP: 00007f3370ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 842.285021][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.293031][T13670] R13: 00007fff1383ff6f R14: 00007f3371be0300 R15: 0000000000022000 [ 842.301160][T13670] [ 842.320077][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 842.334496][T13670] memory: usage 612kB, limit 0kB, failcnt 157 [ 842.340742][T13670] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.348119][T13670] Memory cgroup stats for /syz0: [ 842.348331][T13670] anon 122880 [ 842.348331][T13670] file 126976 [ 842.348331][T13670] kernel 356352 [ 842.348331][T13670] kernel_stack 98304 [ 842.348331][T13670] pagetables 81920 [ 842.348331][T13670] sec_pagetables 0 [ 842.348331][T13670] percpu 64 [ 842.348331][T13670] sock 0 [ 842.348331][T13670] vmalloc 0 [ 842.348331][T13670] shmem 126976 [ 842.348331][T13670] zswap 0 [ 842.348331][T13670] zswapped 0 [ 842.348331][T13670] file_mapped 126976 [ 842.348331][T13670] file_dirty 0 [ 842.348331][T13670] file_writeback 0 [ 842.348331][T13670] swapcached 0 [ 842.348331][T13670] anon_thp 0 [ 842.348331][T13670] file_thp 0 [ 842.348331][T13670] shmem_thp 0 [ 842.348331][T13670] inactive_anon 122880 [ 842.348331][T13670] active_anon 126976 [ 842.348331][T13670] inactive_file 0 [ 842.348331][T13670] active_file 0 [ 842.348331][T13670] unevictable 0 [ 842.348331][T13670] slab_reclaimable 25512 [ 842.348331][T13670] slab_unreclaimable 122560 [ 842.348331][T13670] slab 148072 [ 842.448984][T13670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13516,uid=0 [ 842.493880][T13670] Memory cgroup out of memory: Killed process 13516 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 842.541821][T13637] chnl_net:caif_netlink_parms(): no params data found [ 842.560292][T13519] device veth0_vlan entered promiscuous mode [ 842.568330][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 842.593832][T13670] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 842.598110][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.604416][T13670] CPU: 1 PID: 13670 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 842.622165][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 842.632250][T13670] Call Trace: [ 842.635558][T13670] [ 842.638518][T13670] dump_stack_lvl+0xd1/0x138 [ 842.643158][T13670] dump_header+0x10b/0x85f [ 842.647620][T13670] oom_kill_process.cold+0x10/0x15 [ 842.652783][T13670] out_of_memory+0x35c/0x14a0 [ 842.657520][T13670] ? oom_killer_disable+0x280/0x280 [ 842.662758][T13670] ? find_held_lock+0x2d/0x110 [ 842.668443][T13670] mem_cgroup_out_of_memory+0x206/0x270 [ 842.674025][T13670] ? mem_cgroup_margin+0x130/0x130 [ 842.679202][T13670] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 842.685067][T13670] memory_max_write+0x2f9/0x3c0 [ 842.689963][T13670] ? mem_cgroup_force_empty_write+0x160/0x160 [ 842.696079][T13670] ? lock_release+0x810/0x810 [ 842.700795][T13670] cgroup_file_write+0x1e2/0x770 [ 842.705776][T13670] ? mem_cgroup_force_empty_write+0x160/0x160 [ 842.711880][T13670] ? kill_css+0x370/0x370 [ 842.716247][T13670] ? __virt_addr_valid+0x61/0x2e0 [ 842.721326][T13670] ? kill_css+0x370/0x370 [ 842.725705][T13670] kernfs_fop_write_iter+0x3f1/0x600 [ 842.731055][T13670] vfs_write+0x9ed/0xdd0 [ 842.735341][T13670] ? kernel_write+0x630/0x630 [ 842.740064][T13670] ? __fget_files+0x26a/0x440 [ 842.744795][T13670] ksys_write+0x12b/0x250 [ 842.749161][T13670] ? __ia32_sys_read+0xb0/0xb0 [ 842.754143][T13670] ? syscall_enter_from_user_mode+0x26/0xb0 [ 842.760085][T13670] do_syscall_64+0x39/0xb0 [ 842.764596][T13670] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 842.770533][T13670] RIP: 0033:0x7f3370e8c0c9 [ 842.774975][T13670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.794620][T13670] RSP: 002b:00007f3371be0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.803073][T13670] RAX: ffffffffffffffda RBX: 00007f3370fac050 RCX: 00007f3370e8c0c9 [ 842.811077][T13670] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 842.819073][T13670] RBP: 00007f3370ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 842.827158][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.835158][T13670] R13: 00007fff1383ff6f R14: 00007f3371be0300 R15: 0000000000022000 [ 842.843189][T13670] [ 842.856695][T13670] memory: usage 580kB, limit 0kB, failcnt 157 [ 842.862909][T13670] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.869819][T13670] Memory cgroup stats for /syz0: [ 842.869976][T13670] anon 122880 [ 842.869976][T13670] file 126976 [ 842.869976][T13670] kernel 356352 [ 842.869976][T13670] kernel_stack 98304 [ 842.869976][T13670] pagetables 81920 [ 842.869976][T13670] sec_pagetables 0 [ 842.869976][T13670] percpu 64 [ 842.869976][T13670] sock 0 [ 842.869976][T13670] vmalloc 0 [ 842.869976][T13670] shmem 126976 [ 842.869976][T13670] zswap 0 [ 842.869976][T13670] zswapped 0 [ 842.869976][T13670] file_mapped 126976 [ 842.869976][T13670] file_dirty 0 [ 842.869976][T13670] file_writeback 0 [ 842.869976][T13670] swapcached 0 [ 842.869976][T13670] anon_thp 0 [ 842.869976][T13670] file_thp 0 [ 842.869976][T13670] shmem_thp 0 [ 842.869976][T13670] inactive_anon 122880 [ 842.869976][T13670] active_anon 126976 [ 842.869976][T13670] inactive_file 0 [ 842.869976][T13670] active_file 0 [ 842.869976][T13670] unevictable 0 [ 842.869976][T13670] slab_reclaimable 25512 [ 842.869976][T13670] slab_unreclaimable 122560 [ 842.869976][T13670] slab 148072 [ 842.985537][T13670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13667,uid=0 [ 843.002901][T13670] Memory cgroup out of memory: Killed process 13670 (syz-executor.0) total-vm:56720kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 843.125513][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.141449][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.162421][T13628] device bridge_slave_0 entered promiscuous mode [ 843.189066][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 843.244457][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.417228][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.438382][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.448478][T13628] device bridge_slave_1 entered promiscuous mode 04:36:49 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 843.652164][ T5119] Bluetooth: hci0: command 0x041b tx timeout [ 843.683731][T13519] device veth1_vlan entered promiscuous mode [ 843.909919][T13628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.052460][T13628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.105675][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.119365][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.135831][T13637] device bridge_slave_0 entered promiscuous mode [ 844.306686][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.322588][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.358621][T13637] device bridge_slave_1 entered promiscuous mode [ 844.371081][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 844.390310][T13628] team0: Port device team_slave_0 added [ 844.474131][T13628] team0: Port device team_slave_1 added [ 844.513808][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.618686][T13628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.649139][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.688302][T13628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.731603][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 844.740310][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 844.769953][T13519] device veth0_macvtap entered promiscuous mode [ 844.786561][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.861014][T13628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.868097][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.908495][T13628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.923367][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 844.940555][T13519] device veth1_macvtap entered promiscuous mode [ 845.030683][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.058025][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.077925][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.102499][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.132401][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.151078][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.181230][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.211358][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.231083][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.251119][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.271900][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.291080][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.300932][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.324223][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.347619][T13519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.370627][T13637] team0: Port device team_slave_0 added [ 845.470478][T13628] device hsr_slave_0 entered promiscuous mode [ 845.486990][T13628] device hsr_slave_1 entered promiscuous mode [ 845.503423][T13628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.511017][T13628] Cannot create hsr debugfs directory [ 845.545631][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 845.575002][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 845.597294][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.617041][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.641766][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.661076][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.681285][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.712447][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.722783][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 845.742715][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.755084][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.779488][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.811630][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.827332][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.838332][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.861824][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.881082][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.912430][T13519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.916456][ C0] net_ratelimit: 3574 callbacks suppressed [ 845.916473][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 845.937476][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.944854][T13519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.949216][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 845.961752][T13519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.969786][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.981571][T13519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.992476][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.010878][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 846.017666][T13519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.023138][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.044025][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.056074][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 846.067680][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 846.160637][T13637] team0: Port device team_slave_1 added [ 846.235399][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 846.252535][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 846.407634][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.420692][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.448421][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 846.479816][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.552501][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.559499][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.628959][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.864760][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.891989][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.935881][T13637] device hsr_slave_0 entered promiscuous mode [ 846.952102][T13637] device hsr_slave_1 entered promiscuous mode [ 846.960590][T13637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.981465][T13637] Cannot create hsr debugfs directory [ 847.006578][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.198461][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.217509][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.289582][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.563089][T13704] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 847.581270][T13704] CPU: 1 PID: 13704 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 847.591740][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 847.602088][T13704] Call Trace: [ 847.605401][T13704] [ 847.608366][T13704] dump_stack_lvl+0xd1/0x138 [ 847.613009][T13704] dump_header+0x10b/0x85f [ 847.617470][T13704] oom_kill_process.cold+0x10/0x15 [ 847.622633][T13704] out_of_memory+0x35c/0x14a0 [ 847.627447][T13704] ? oom_killer_disable+0x280/0x280 [ 847.632782][T13704] mem_cgroup_out_of_memory+0x206/0x270 [ 847.639325][T13704] ? mem_cgroup_margin+0x130/0x130 [ 847.644545][T13704] memory_max_write+0x2f9/0x3c0 [ 847.649532][T13704] ? mem_cgroup_force_empty_write+0x160/0x160 [ 847.655640][T13704] ? lock_release+0x810/0x810 [ 847.660340][T13704] cgroup_file_write+0x1e2/0x770 [ 847.665300][T13704] ? mem_cgroup_force_empty_write+0x160/0x160 [ 847.671385][T13704] ? kill_css+0x370/0x370 [ 847.675733][T13704] ? __virt_addr_valid+0x61/0x2e0 [ 847.680793][T13704] ? kill_css+0x370/0x370 [ 847.685140][T13704] kernfs_fop_write_iter+0x3f1/0x600 [ 847.690456][T13704] vfs_write+0x9ed/0xdd0 [ 847.694720][T13704] ? kernel_write+0x630/0x630 [ 847.699417][T13704] ? __fget_files+0x26a/0x440 [ 847.704122][T13704] ksys_write+0x12b/0x250 [ 847.708466][T13704] ? __ia32_sys_read+0xb0/0xb0 [ 847.713249][T13704] ? syscall_enter_from_user_mode+0x26/0xb0 [ 847.719164][T13704] do_syscall_64+0x39/0xb0 [ 847.723612][T13704] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.729540][T13704] RIP: 0033:0x7f18bee8c0c9 [ 847.733966][T13704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.753674][T13704] RSP: 002b:00007f18bfc67168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.762099][T13704] RAX: ffffffffffffffda RBX: 00007f18befac050 RCX: 00007f18bee8c0c9 [ 847.770087][T13704] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 847.778077][T13704] RBP: 00007f18beee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 847.786054][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.794121][T13704] R13: 00007ffd76352bef R14: 00007f18bfc67300 R15: 0000000000022000 [ 847.802292][T13704] [ 847.808516][ T5119] Bluetooth: hci0: command 0x0419 tx timeout [ 847.845011][T13704] memory: usage 592kB, limit 0kB, failcnt 408 [ 847.851355][T13704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 847.859643][T13704] Memory cgroup stats for /syz4: [ 847.859868][T13704] anon 118784 [ 847.859868][T13704] file 122880 [ 847.859868][T13704] kernel 356352 [ 847.859868][T13704] kernel_stack 98304 [ 847.859868][T13704] pagetables 81920 [ 847.859868][T13704] sec_pagetables 0 [ 847.859868][T13704] percpu 64 [ 847.859868][T13704] sock 0 [ 847.859868][T13704] vmalloc 0 [ 847.859868][T13704] shmem 122880 [ 847.859868][T13704] zswap 0 [ 847.859868][T13704] zswapped 0 [ 847.859868][T13704] file_mapped 122880 [ 847.859868][T13704] file_dirty 0 [ 847.859868][T13704] file_writeback 0 [ 847.859868][T13704] swapcached 0 [ 847.859868][T13704] anon_thp 0 [ 847.859868][T13704] file_thp 0 [ 847.859868][T13704] shmem_thp 0 [ 847.859868][T13704] inactive_anon 110592 [ 847.859868][T13704] active_anon 122880 [ 847.859868][T13704] inactive_file 0 [ 847.859868][T13704] active_file 0 [ 847.859868][T13704] unevictable 0 [ 847.859868][T13704] slab_reclaimable 28736 [ 847.859868][T13704] slab_unreclaimable 119384 [ 847.859868][T13704] slab 148120 [ 848.288544][T13704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13702,uid=0 [ 848.396432][T13704] Memory cgroup out of memory: Killed process 13704 (syz-executor.4) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 04:36:54 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:36:54 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:54 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:54 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 848.490669][T13519] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 848.521137][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 848.571595][T13519] CPU: 0 PID: 13519 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 848.582058][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 848.592138][T13519] Call Trace: [ 848.595438][T13519] [ 848.598407][T13519] dump_stack_lvl+0xd1/0x138 [ 848.603049][T13519] dump_header+0x10b/0x85f [ 848.607502][T13519] oom_kill_process.cold+0x10/0x15 [ 848.612660][T13519] out_of_memory+0x35c/0x14a0 [ 848.617370][T13519] ? find_held_lock+0x2d/0x110 [ 848.622168][T13519] ? oom_killer_disable+0x280/0x280 [ 848.627399][T13519] ? find_held_lock+0x2d/0x110 [ 848.632199][T13519] mem_cgroup_out_of_memory+0x206/0x270 [ 848.637760][T13519] ? mem_cgroup_margin+0x130/0x130 [ 848.642883][T13519] ? lock_downgrade+0x6e0/0x6e0 [ 848.647781][T13519] try_charge_memcg+0xefb/0x12f0 [ 848.652741][T13519] ? mem_cgroup_handle_over_high+0x520/0x520 [ 848.658738][T13519] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 848.664482][T13519] ? lock_downgrade+0x6e0/0x6e0 [ 848.669354][T13519] ? lock_downgrade+0x6e0/0x6e0 [ 848.674221][T13519] ? rcu_read_unlock+0x9/0x60 [ 848.678932][T13519] obj_cgroup_charge+0x2af/0x5e0 [ 848.683904][T13519] ? __alloc_file+0x21/0x270 [ 848.688511][T13519] kmem_cache_alloc+0xb5/0x430 [ 848.693289][T13519] __alloc_file+0x21/0x270 [ 848.697733][T13519] alloc_empty_file+0x71/0x170 [ 848.702515][T13519] path_openat+0xe1/0x2a50 [ 848.706960][T13519] ? path_lookupat+0x840/0x840 [ 848.711753][T13519] do_filp_open+0x1ba/0x410 [ 848.716270][T13519] ? may_open_dev+0xf0/0xf0 [ 848.720813][T13519] ? find_held_lock+0x2d/0x110 [ 848.725604][T13519] ? do_raw_spin_lock+0x124/0x2b0 [ 848.730665][T13519] ? rwlock_bug.part.0+0x90/0x90 [ 848.735623][T13519] ? _raw_spin_unlock+0x28/0x40 [ 848.740492][T13519] ? alloc_fd+0x2d8/0x6d0 [ 848.744845][T13519] do_sys_openat2+0x16d/0x4c0 [ 848.749624][T13519] ? path_umount+0x6b8/0x10b0 [ 848.754316][T13519] ? putname+0x102/0x140 [ 848.758577][T13519] ? build_open_flags+0x6f0/0x6f0 [ 848.763619][T13519] ? may_mount+0xa0/0xa0 [ 848.767881][T13519] __x64_sys_openat+0x143/0x1f0 [ 848.772739][T13519] ? __ia32_sys_open+0x1c0/0x1c0 [ 848.777690][T13519] ? syscall_enter_from_user_mode+0x26/0xb0 [ 848.783601][T13519] do_syscall_64+0x39/0xb0 [ 848.788208][T13519] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 848.794112][T13519] RIP: 0033:0x7f18bee8bc38 [ 848.798534][T13519] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 848.818176][T13519] RSP: 002b:00007ffd76351ce0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 848.826597][T13519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f18bee8bc38 [ 848.834568][T13519] RDX: 0000000000090800 RSI: 00007ffd76352ed0 RDI: 00000000ffffff9c [ 848.842541][T13519] RBP: 00007ffd76352eac R08: 0000000000090800 R09: 00007ffd76352ed0 [ 848.850514][T13519] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f18beee6b24 [ 848.858496][T13519] R13: 00007ffd76352ed0 R14: 0000000000000018 R15: 00007ffd76352f10 [ 848.866485][T13519] 04:36:55 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:55 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:36:55 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 849.231775][T13519] memory: usage 280kB, limit 0kB, failcnt 427 [ 849.237910][T13519] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 849.245335][T13519] Memory cgroup stats for /syz4: [ 849.245525][T13519] anon 32768 [ 849.245525][T13519] file 122880 [ 849.245525][T13519] kernel 131072 [ 849.245525][T13519] kernel_stack 0 [ 849.245525][T13519] pagetables 8192 [ 849.245525][T13519] sec_pagetables 0 [ 849.245525][T13519] percpu 64 [ 849.245525][T13519] sock 0 [ 849.245525][T13519] vmalloc 0 [ 849.245525][T13519] shmem 122880 [ 849.245525][T13519] zswap 0 [ 849.245525][T13519] zswapped 0 [ 849.245525][T13519] file_mapped 122880 [ 849.245525][T13519] file_dirty 0 [ 849.245525][T13519] file_writeback 0 [ 849.245525][T13519] swapcached 0 [ 849.245525][T13519] anon_thp 0 [ 849.245525][T13519] file_thp 0 [ 849.245525][T13519] shmem_thp 0 [ 849.245525][T13519] inactive_anon 32768 [ 849.245525][T13519] active_anon 122880 [ 849.245525][T13519] inactive_file 0 [ 849.245525][T13519] active_file 0 [ 849.245525][T13519] unevictable 0 [ 849.245525][T13519] slab_reclaimable 18672 [ 849.245525][T13519] slab_unreclaimable 90656 [ 849.245525][T13519] slab 109328 04:36:55 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 849.415855][ T34] device hsr_slave_0 left promiscuous mode [ 849.433312][ T34] device hsr_slave_1 left promiscuous mode [ 849.546936][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.561152][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.605783][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.638705][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 04:36:55 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 849.692179][ T34] device bridge_slave_1 left promiscuous mode [ 849.755741][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.781118][T13519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13519,uid=0 [ 849.841252][T13519] Memory cgroup out of memory: Killed process 13519 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 849.859651][ T34] device bridge_slave_0 left promiscuous mode [ 849.867143][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.934116][ T34] device hsr_slave_0 left promiscuous mode [ 849.964036][ T34] device hsr_slave_1 left promiscuous mode [ 850.088466][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.101139][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.154043][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.191724][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.243312][ T34] device bridge_slave_1 left promiscuous mode [ 850.249562][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.332436][ T34] device bridge_slave_0 left promiscuous mode [ 850.338695][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.471170][ T34] device hsr_slave_0 left promiscuous mode [ 850.501200][ T34] device hsr_slave_1 left promiscuous mode [ 850.531213][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.538700][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.582963][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.590444][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.633482][ T34] device bridge_slave_1 left promiscuous mode [ 850.639750][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.702096][ T34] device bridge_slave_0 left promiscuous mode [ 850.708364][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.781205][ T34] device hsr_slave_0 left promiscuous mode [ 850.821163][ T34] device hsr_slave_1 left promiscuous mode [ 850.836739][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.861222][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.895559][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.921379][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.921959][ C0] net_ratelimit: 2307 callbacks suppressed [ 850.921973][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.954063][ T34] device bridge_slave_1 left promiscuous mode [ 850.954761][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 850.960332][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.971687][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 850.991058][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 851.003103][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.014697][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 851.026989][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.040479][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.052139][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 851.071337][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.081702][ T34] device bridge_slave_0 left promiscuous mode [ 851.088805][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.216578][ T34] device veth1_macvtap left promiscuous mode [ 851.230624][ T34] device veth0_macvtap left promiscuous mode [ 851.237080][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 851.239266][ T34] device veth1_vlan left promiscuous mode [ 851.250482][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 851.259036][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 851.266369][ T34] device veth0_vlan left promiscuous mode [ 851.273434][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 851.281705][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.338041][ T34] device veth1_macvtap left promiscuous mode [ 851.351381][ T34] device veth0_macvtap left promiscuous mode [ 851.357551][ T34] device veth1_vlan left promiscuous mode [ 851.413232][ T34] device veth0_vlan left promiscuous mode [ 851.436708][ T34] device veth1_macvtap left promiscuous mode [ 851.467118][ T34] device veth0_macvtap left promiscuous mode [ 851.487412][ T34] device veth1_vlan left promiscuous mode [ 851.531204][ T34] device veth0_vlan left promiscuous mode [ 851.618967][ T34] device veth1_macvtap left promiscuous mode [ 851.631422][ T34] device veth0_macvtap left promiscuous mode [ 851.641518][ T34] device veth1_vlan left promiscuous mode [ 851.647408][ T34] device veth0_vlan left promiscuous mode [ 852.251789][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.260579][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.279280][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.287425][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 852.295722][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.337639][ T5124] Bluetooth: hci1: command 0x0409 tx timeout [ 854.371230][ T5124] Bluetooth: hci2: command 0x0409 tx timeout [ 854.662107][ T34] team0 (unregistering): Port device team_slave_1 removed [ 854.712545][ T34] team0 (unregistering): Port device team_slave_0 removed [ 854.754358][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.814180][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.098700][ T34] bond0 (unregistering): Released all slaves [ 855.401388][ T5124] Bluetooth: hci1: command 0x041b tx timeout [ 855.683274][ T34] team0 (unregistering): Port device team_slave_1 removed [ 855.722075][ T34] team0 (unregistering): Port device team_slave_0 removed [ 855.761355][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.851659][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.932463][ C0] net_ratelimit: 3323 callbacks suppressed [ 855.932485][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 855.950257][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.961894][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 855.987182][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.000666][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.012641][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 856.025271][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.037960][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.049851][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 856.061761][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 856.270402][ T34] bond0 (unregistering): Released all slaves [ 856.441842][ T5124] Bluetooth: hci2: command 0x041b tx timeout [ 856.836070][ T34] team0 (unregistering): Port device team_slave_1 removed [ 856.923079][ T34] team0 (unregistering): Port device team_slave_0 removed [ 856.971561][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.021364][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.262718][ T34] bond0 (unregistering): Released all slaves [ 857.491368][ T5124] Bluetooth: hci1: command 0x040f tx timeout [ 857.706631][ T34] team0 (unregistering): Port device team_slave_1 removed [ 857.761780][ T34] team0 (unregistering): Port device team_slave_0 removed [ 857.811620][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.879108][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.204962][ T34] bond0 (unregistering): Released all slaves [ 858.521450][ T5124] Bluetooth: hci2: command 0x040f tx timeout [ 859.344644][T13737] chnl_net:caif_netlink_parms(): no params data found [ 859.381718][T13740] chnl_net:caif_netlink_parms(): no params data found [ 859.571382][ T5124] Bluetooth: hci1: command 0x0419 tx timeout [ 859.778596][T13740] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.794962][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.821181][T13740] device bridge_slave_0 entered promiscuous mode [ 859.829257][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.851258][T13737] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.859530][T13737] device bridge_slave_0 entered promiscuous mode [ 859.877113][T13628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 860.064034][T13740] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.072161][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.129631][T13740] device bridge_slave_1 entered promiscuous mode [ 860.144922][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.166905][T13737] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.189606][T13737] device bridge_slave_1 entered promiscuous mode [ 860.211986][T13628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 860.403780][T13628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 860.471501][T13628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 860.483973][T13740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.514905][T13740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.559711][T13737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.603892][T13737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.611274][ T5124] Bluetooth: hci2: command 0x0419 tx timeout [ 860.941882][ C0] net_ratelimit: 2971 callbacks suppressed [ 860.941902][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.959506][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 860.971804][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.985168][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.996750][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 861.009081][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.021764][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.033710][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 861.045853][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 861.058600][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 861.285237][T13740] team0: Port device team_slave_0 added [ 861.343015][T13737] team0: Port device team_slave_0 added [ 861.369014][T13740] team0: Port device team_slave_1 added [ 861.393304][T13737] team0: Port device team_slave_1 added [ 861.830370][T13737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.861139][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.936200][T13737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.965515][T13740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.991086][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.069783][T13740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.103698][T13740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.110675][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.221088][T13740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.306846][T13737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.330128][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.391232][T13737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.579219][T13737] device hsr_slave_0 entered promiscuous mode [ 862.594573][T13737] device hsr_slave_1 entered promiscuous mode [ 862.709718][T13740] device hsr_slave_0 entered promiscuous mode [ 862.725644][T13740] device hsr_slave_1 entered promiscuous mode [ 862.749758][T13740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.769064][T13740] Cannot create hsr debugfs directory [ 862.907084][T13628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.982086][T13628] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.029363][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 863.041779][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 863.152434][T13637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.183639][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 863.198204][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 863.221871][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.229006][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.255368][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 863.279140][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 863.291651][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.298858][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.318079][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 863.327277][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 863.406509][T13637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.467170][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 863.483771][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 863.547444][T13637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.579068][T13637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 863.628744][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 863.646336][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 863.696323][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 863.705460][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 863.757692][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 863.767308][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 863.810277][T13628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 863.866389][T13737] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.161940][T13737] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.331592][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.462020][T13737] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.514771][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.551898][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.590142][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.689385][T13737] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.763708][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.792375][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.821621][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.828752][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.871676][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 864.899442][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.931910][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.939042][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.982369][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 865.042060][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.064468][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.091314][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.098855][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 865.153498][T13628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.173899][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.213004][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.242362][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.250869][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.286680][T13637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.329254][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.366700][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.375524][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.391852][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.443441][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 865.461818][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 865.517100][T13628] device veth0_vlan entered promiscuous mode [ 865.529241][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 865.552611][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 865.585640][T13628] device veth1_vlan entered promiscuous mode [ 865.632721][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 865.640637][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 865.850481][T13740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.913783][T13737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 865.956553][T13628] device veth0_macvtap entered promiscuous mode [ 865.971783][ C0] net_ratelimit: 2453 callbacks suppressed [ 865.971809][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.989373][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 866.001745][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.014493][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.026732][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 866.038470][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 866.043093][T13628] device veth1_macvtap entered promiscuous mode [ 866.051312][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 866.068088][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.079694][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 866.107421][T13737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 866.124296][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.141904][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.150563][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.160528][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.222807][T13740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.261640][T13737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 866.293707][T13737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 866.355275][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.368587][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.393988][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.411284][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.453146][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.478020][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.511110][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.521012][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.592035][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.625565][T13628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.657175][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 866.673717][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 866.711301][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 866.742113][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 866.756381][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.805125][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.854600][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.871100][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.911087][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.920950][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.971180][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.011076][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.052398][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.088590][T13628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.171984][T13740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.221430][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 867.251743][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.284495][T13628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.294699][T13628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.331094][T13628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.340152][T13628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.468921][T13740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.552106][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 867.572133][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 867.654786][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 867.674827][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 867.705154][T13637] device veth0_vlan entered promiscuous mode [ 867.736316][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.751852][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.800138][T13737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.857396][T13637] device veth1_vlan entered promiscuous mode [ 867.939935][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.948999][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.975801][T13737] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.002579][T13637] device veth0_macvtap entered promiscuous mode [ 868.022236][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.030362][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.063315][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 868.073598][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 868.111258][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.138002][T13637] device veth1_macvtap entered promiscuous mode [ 868.218084][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 868.228693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 868.249296][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 868.258506][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.267577][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.274739][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.284631][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 868.310033][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 868.319351][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.326537][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.350792][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.411154][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.421017][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.451152][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.461007][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.511082][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.541103][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.581219][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.606692][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.661278][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.689381][T13637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.765495][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 868.781814][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.801954][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.812642][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 868.826361][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.861084][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.870947][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.942894][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.961088][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.989055][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.041086][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.063501][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.081955][T13637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.117504][T13637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.137200][T13637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.155332][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.159651][T13637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.181469][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.205842][T13637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.237165][T13637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.254165][T13637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.378203][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 869.394933][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 869.420678][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.444586][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 869.453666][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 869.486672][T13740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 869.562020][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.571829][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 869.612701][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 869.659811][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.689501][T13740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 869.709547][T13740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 869.748787][T13737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.774810][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.798928][T13853] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 869.871148][T13853] CPU: 1 PID: 13853 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 869.881638][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 869.891725][T13853] Call Trace: [ 869.895042][T13853] [ 869.897999][T13853] dump_stack_lvl+0xd1/0x138 [ 869.902673][T13853] dump_header+0x10b/0x85f [ 869.907132][T13853] oom_kill_process.cold+0x10/0x15 [ 869.909505][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.912263][T13853] out_of_memory+0x35c/0x14a0 [ 869.912302][T13853] ? oom_killer_disable+0x280/0x280 [ 869.918574][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.923200][T13853] ? find_held_lock+0x2d/0x110 [ 869.923243][T13853] mem_cgroup_out_of_memory+0x206/0x270 [ 869.945045][T13853] ? mem_cgroup_margin+0x130/0x130 [ 869.950205][T13853] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 869.956063][T13853] memory_max_write+0x2f9/0x3c0 [ 869.960966][T13853] ? mem_cgroup_force_empty_write+0x160/0x160 [ 869.967084][T13853] ? lock_release+0x810/0x810 [ 869.971802][T13853] cgroup_file_write+0x1e2/0x770 [ 869.976815][T13853] ? mem_cgroup_force_empty_write+0x160/0x160 [ 869.982928][T13853] ? kill_css+0x370/0x370 [ 869.987292][T13853] ? __virt_addr_valid+0x61/0x2e0 [ 869.992543][T13853] ? kill_css+0x370/0x370 [ 869.996909][T13853] kernfs_fop_write_iter+0x3f1/0x600 [ 870.002281][T13853] vfs_write+0x9ed/0xdd0 [ 870.006569][T13853] ? kernel_write+0x630/0x630 [ 870.011288][T13853] ? __fget_files+0x26a/0x440 [ 870.016020][T13853] ksys_write+0x12b/0x250 [ 870.020393][T13853] ? __ia32_sys_read+0xb0/0xb0 [ 870.025195][T13853] ? syscall_enter_from_user_mode+0x26/0xb0 [ 870.031137][T13853] do_syscall_64+0x39/0xb0 [ 870.035601][T13853] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 870.041546][T13853] RIP: 0033:0x7efc5a08c0c9 [ 870.045987][T13853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 870.065636][T13853] RSP: 002b:00007efc5ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 870.074085][T13853] RAX: ffffffffffffffda RBX: 00007efc5a1ac050 RCX: 00007efc5a08c0c9 [ 870.082099][T13853] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 870.090103][T13853] RBP: 00007efc5a0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 870.098108][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.106111][T13853] R13: 00007ffd85527b6f R14: 00007efc5ad11300 R15: 0000000000022000 [ 870.114137][T13853] [ 870.169786][T13740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 870.189042][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.211697][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.284478][T13853] memory: usage 8616kB, limit 0kB, failcnt 735 [ 870.290696][T13853] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 870.314243][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.331547][T13853] Memory cgroup stats for /syz2: [ 870.331746][T13853] anon 118784 [ 870.331746][T13853] file 8355840 [ 870.331746][T13853] kernel 339968 [ 870.331746][T13853] kernel_stack 98304 [ 870.331746][T13853] pagetables 77824 [ 870.331746][T13853] sec_pagetables 0 [ 870.331746][T13853] percpu 64 [ 870.331746][T13853] sock 0 [ 870.331746][T13853] vmalloc 0 [ 870.331746][T13853] shmem 8351744 [ 870.331746][T13853] zswap 0 [ 870.331746][T13853] zswapped 0 [ 870.331746][T13853] file_mapped 180224 [ 870.331746][T13853] file_dirty 0 [ 870.331746][T13853] file_writeback 0 [ 870.331746][T13853] swapcached 0 [ 870.331746][T13853] anon_thp 0 [ 870.331746][T13853] file_thp 0 [ 870.331746][T13853] shmem_thp 0 [ 870.331746][T13853] inactive_anon 8290304 [ 870.331746][T13853] active_anon 180224 [ 870.331746][T13853] inactive_file 0 [ 870.331746][T13853] active_file 4096 [ 870.331746][T13853] unevictable 0 [ 870.331746][T13853] slab_reclaimable 44944 [ 870.331746][T13853] slab_unreclaimable 87200 [ 870.331746][T13853] slab 132144 [ 870.351086][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.501583][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.509694][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.573660][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 870.744527][T13740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.788852][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 870.838916][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 870.853050][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 870.866436][T13740] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.872627][T13853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13851,uid=0 [ 870.911413][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 870.920184][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 870.947564][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.954751][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.987934][T13853] Memory cgroup out of memory: Killed process 13853 (syz-executor.2) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 871.007814][ C0] net_ratelimit: 2130 callbacks suppressed [ 871.007828][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.025362][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 871.037734][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.050413][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.062398][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 871.074043][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) 04:37:17 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 871.086747][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 871.098797][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.111292][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 871.123808][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.158017][T13871] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 871.168286][T13871] CPU: 0 PID: 13871 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 871.178720][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 871.188788][T13871] Call Trace: [ 871.192099][T13871] [ 871.195038][T13871] dump_stack_lvl+0xd1/0x138 [ 871.199658][T13871] dump_header+0x10b/0x85f [ 871.204093][T13871] oom_kill_process.cold+0x10/0x15 [ 871.209222][T13871] out_of_memory+0x35c/0x14a0 [ 871.213921][T13871] ? oom_killer_disable+0x280/0x280 [ 871.219226][T13871] mem_cgroup_out_of_memory+0x206/0x270 [ 871.224783][T13871] ? mem_cgroup_margin+0x130/0x130 [ 871.229923][T13871] memory_max_write+0x2f9/0x3c0 [ 871.234791][T13871] ? mem_cgroup_force_empty_write+0x160/0x160 [ 871.240877][T13871] ? lock_release+0x810/0x810 [ 871.245571][T13871] cgroup_file_write+0x1e2/0x770 [ 871.250524][T13871] ? mem_cgroup_force_empty_write+0x160/0x160 [ 871.256638][T13871] ? kill_css+0x370/0x370 [ 871.260983][T13871] ? __virt_addr_valid+0x61/0x2e0 [ 871.266053][T13871] ? kill_css+0x370/0x370 [ 871.270396][T13871] kernfs_fop_write_iter+0x3f1/0x600 [ 871.275708][T13871] vfs_write+0x9ed/0xdd0 [ 871.279973][T13871] ? kernel_write+0x630/0x630 [ 871.284683][T13871] ? __fget_files+0x26a/0x440 [ 871.289395][T13871] ksys_write+0x12b/0x250 [ 871.293806][T13871] ? __ia32_sys_read+0xb0/0xb0 [ 871.298610][T13871] ? syscall_enter_from_user_mode+0x26/0xb0 [ 871.305046][T13871] do_syscall_64+0x39/0xb0 [ 871.309493][T13871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 871.315401][T13871] RIP: 0033:0x7f7ba708c0c9 [ 871.319827][T13871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 871.339446][T13871] RSP: 002b:00007f7ba7df9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.348062][T13871] RAX: ffffffffffffffda RBX: 00007f7ba71ac050 RCX: 00007f7ba708c0c9 [ 871.356038][T13871] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 871.364015][T13871] RBP: 00007f7ba70e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 871.371993][T13871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.379972][T13871] R13: 00007ffe718dc9ff R14: 00007f7ba7df9300 R15: 0000000000022000 [ 871.387986][T13871] [ 871.413267][T13871] memory: usage 10736kB, limit 0kB, failcnt 567 [ 871.420085][T13871] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 871.427300][T13871] Memory cgroup stats for /syz1: [ 871.441448][T13871] anon 118784 [ 871.441448][T13871] file 10477568 [ 871.441448][T13871] kernel 397312 [ 871.441448][T13871] kernel_stack 98304 [ 871.441448][T13871] pagetables 81920 [ 871.441448][T13871] sec_pagetables 0 [ 871.441448][T13871] percpu 64 [ 871.441448][T13871] sock 0 [ 871.441448][T13871] vmalloc 0 [ 871.441448][T13871] shmem 10477568 [ 871.441448][T13871] zswap 0 [ 871.441448][T13871] zswapped 0 [ 871.441448][T13871] file_mapped 192512 [ 871.441448][T13871] file_dirty 0 [ 871.441448][T13871] file_writeback 0 [ 871.441448][T13871] swapcached 0 [ 871.441448][T13871] anon_thp 0 [ 871.441448][T13871] file_thp 0 [ 871.441448][T13871] shmem_thp 0 [ 871.441448][T13871] inactive_anon 118784 [ 871.441448][T13871] active_anon 10477568 [ 871.441448][T13871] inactive_file 0 [ 871.441448][T13871] active_file 0 [ 871.441448][T13871] unevictable 0 [ 871.441448][T13871] slab_reclaimable 77176 [ 871.441448][T13871] slab_unreclaimable 107840 [ 871.441448][T13871] slab 185016 [ 871.572822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 871.596215][T13871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13867,uid=0 [ 871.625837][T13871] Memory cgroup out of memory: Killed process 13867 (syz-executor.1) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 871.675381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 871.691352][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 871.699885][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.707067][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.745392][T13628] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 871.763115][T13628] CPU: 0 PID: 13628 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 871.773578][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 871.783982][T13628] Call Trace: [ 871.787262][T13628] [ 871.790208][T13628] dump_stack_lvl+0xd1/0x138 [ 871.794828][T13628] dump_header+0x10b/0x85f [ 871.799252][T13628] oom_kill_process.cold+0x10/0x15 [ 871.804383][T13628] out_of_memory+0x35c/0x14a0 [ 871.809077][T13628] ? oom_killer_disable+0x280/0x280 [ 871.814283][T13628] ? find_held_lock+0x2d/0x110 [ 871.819065][T13628] mem_cgroup_out_of_memory+0x206/0x270 [ 871.824622][T13628] ? mem_cgroup_margin+0x130/0x130 [ 871.829914][T13628] ? lock_downgrade+0x6e0/0x6e0 [ 871.834893][T13628] try_charge_memcg+0xefb/0x12f0 [ 871.839867][T13628] ? mem_cgroup_handle_over_high+0x520/0x520 [ 871.845874][T13628] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 871.851614][T13628] ? lock_downgrade+0x6e0/0x6e0 [ 871.856582][T13628] obj_cgroup_charge+0x2af/0x5e0 [ 871.861536][T13628] kmem_cache_alloc_lru+0x145/0x760 [ 871.866746][T13628] ? __d_alloc+0x32/0x980 [ 871.871095][T13628] __d_alloc+0x32/0x980 [ 871.875257][T13628] ? __lock_acquire+0x166e/0x56d0 [ 871.880288][T13628] d_alloc+0x4e/0x240 [ 871.884283][T13628] d_alloc_parallel+0xe8/0x1410 [ 871.889156][T13628] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 871.895146][T13628] ? __d_lookup_rcu+0x4c0/0x4c0 [ 871.900014][T13628] ? lockdep_init_map_type+0x21e/0x800 [ 871.905479][T13628] ? lockdep_init_map_type+0x21e/0x800 [ 871.910950][T13628] __lookup_slow+0x193/0x460 [ 871.915556][T13628] ? __lookup_hash+0x180/0x180 [ 871.920360][T13628] ? azx_position_ok.cold+0x1ae/0x281 [ 871.925766][T13628] ? azx_position_ok.cold+0x1ae/0x281 [ 871.931162][T13628] ? lookup_fast+0x14e/0x520 [ 871.935767][T13628] walk_component+0x33f/0x5a0 [ 871.940470][T13628] path_lookupat+0x1ba/0x840 [ 871.945081][T13628] filename_lookup+0x1d2/0x590 [ 871.949861][T13628] ? may_linkat+0x500/0x500 [ 871.954386][T13628] ? __might_fault+0xd9/0x180 [ 871.959086][T13628] ? __phys_addr_symbol+0x30/0x70 [ 871.964123][T13628] ? __check_object_size+0x2e2/0x5a0 [ 871.969425][T13628] ? strncpy_from_user+0x28b/0x3c0 [ 871.974555][T13628] ? getname_flags.part.0+0x1dd/0x4f0 [ 871.979951][T13628] user_path_at_empty+0x46/0x60 [ 871.985340][T13628] __x64_sys_umount+0xfc/0x190 [ 871.990118][T13628] ? path_umount+0x10b0/0x10b0 [ 871.994895][T13628] ? syscall_enter_from_user_mode+0x26/0xb0 [ 872.000811][T13628] do_syscall_64+0x39/0xb0 [ 872.005254][T13628] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 872.011157][T13628] RIP: 0033:0x7efc5a08d537 [ 872.015573][T13628] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 872.035270][T13628] RSP: 002b:00007ffd85526cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 872.043692][T13628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc5a08d537 [ 872.051662][T13628] RDX: 00007ffd85526d9e RSI: 000000000000000a RDI: 00007ffd85526d90 [ 872.059632][T13628] RBP: 00007ffd85526d90 R08: 00000000ffffffff R09: 00007ffd85526b60 [ 872.067602][T13628] R10: 00005555561cd8e3 R11: 0000000000000246 R12: 00007efc5a0e6b24 [ 872.075576][T13628] R13: 00007ffd85527e50 R14: 00005555561cd810 R15: 00007ffd85527e90 [ 872.083568][T13628] [ 872.097620][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.129164][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.142190][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 872.157589][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.173369][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.334799][T13628] memory: usage 8304kB, limit 0kB, failcnt 754 [ 872.341099][T13628] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 872.347974][T13628] Memory cgroup stats for /syz2: [ 872.348179][T13628] anon 40960 [ 872.348179][T13628] file 8355840 [ 872.348179][T13628] kernel 102400 [ 872.348179][T13628] kernel_stack 0 [ 872.348179][T13628] pagetables 8192 [ 872.348179][T13628] sec_pagetables 0 [ 872.348179][T13628] percpu 64 [ 872.348179][T13628] sock 0 [ 872.348179][T13628] vmalloc 0 [ 872.348179][T13628] shmem 8351744 [ 872.348179][T13628] zswap 0 [ 872.348179][T13628] zswapped 0 [ 872.348179][T13628] file_mapped 147456 [ 872.348179][T13628] file_dirty 0 [ 872.348179][T13628] file_writeback 0 [ 872.348179][T13628] swapcached 0 [ 872.348179][T13628] anon_thp 0 [ 872.348179][T13628] file_thp 0 [ 872.348179][T13628] shmem_thp 0 [ 872.348179][T13628] inactive_anon 8212480 [ 872.348179][T13628] active_anon 180224 [ 872.348179][T13628] inactive_file 0 [ 872.348179][T13628] active_file 4096 [ 872.348179][T13628] unevictable 0 [ 872.348179][T13628] slab_reclaimable 38336 [ 872.348179][T13628] slab_unreclaimable 44728 [ 872.348179][T13628] slab 83064 [ 872.554920][T13737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.654174][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 872.777789][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:37:19 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:37:19 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:37:19 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 872.841089][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:37:19 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 873.064839][T13740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 873.141245][T13628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13628,uid=0 [ 873.177809][T13740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.229348][T13628] Memory cgroup out of memory: Killed process 13628 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 873.255481][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 873.281917][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.310198][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 873.354232][T13637] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 873.381871][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.390249][T13637] CPU: 1 PID: 13637 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 873.400788][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 873.410873][T13637] Call Trace: [ 873.414178][T13637] [ 873.417126][T13637] dump_stack_lvl+0xd1/0x138 [ 873.421849][T13637] dump_header+0x10b/0x85f [ 873.426298][T13637] oom_kill_process.cold+0x10/0x15 [ 873.431467][T13637] out_of_memory+0x35c/0x14a0 [ 873.436191][T13637] ? oom_killer_disable+0x280/0x280 [ 873.441420][T13637] ? find_held_lock+0x2d/0x110 [ 873.446313][T13637] mem_cgroup_out_of_memory+0x206/0x270 [ 873.451891][T13637] ? mem_cgroup_margin+0x130/0x130 [ 873.457028][T13637] ? lock_downgrade+0x6e0/0x6e0 [ 873.461946][T13637] try_charge_memcg+0xefb/0x12f0 [ 873.466924][T13637] ? mem_cgroup_handle_over_high+0x520/0x520 [ 873.472916][T13637] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 873.478652][T13637] ? lock_downgrade+0x6e0/0x6e0 [ 873.483513][T13637] ? lock_downgrade+0x6e0/0x6e0 [ 873.488368][T13637] ? rcu_read_unlock+0x9/0x60 [ 873.493074][T13637] obj_cgroup_charge+0x2af/0x5e0 [ 873.498051][T13637] __kmem_cache_alloc_node+0xb2/0x430 [ 873.503432][T13637] ? kvmalloc_node+0xa2/0x1a0 [ 873.508215][T13637] ? kvmalloc_node+0xa2/0x1a0 [ 873.513596][T13637] __kmalloc_node+0x4d/0xd0 [ 873.518116][T13637] kvmalloc_node+0xa2/0x1a0 [ 873.522670][T13637] xt_alloc_table_info+0x40/0xa0 [ 873.527614][T13637] do_ip6t_set_ctl+0x514/0xb30 [ 873.532389][T13637] ? trace_contention_end+0x153/0x1e0 [ 873.537779][T13637] ? __mutex_lock+0x231/0x1360 [ 873.542556][T13637] ? compat_do_replace.constprop.0+0x410/0x410 [ 873.548723][T13637] ? find_held_lock+0x2d/0x110 [ 873.553508][T13637] ? wait_for_completion_io_timeout+0x20/0x20 [ 873.559598][T13637] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 873.565604][T13637] nf_setsockopt+0x87/0xe0 [ 873.570207][T13637] ipv6_setsockopt+0x12b/0x190 [ 873.575163][T13637] tcp_setsockopt+0x9f/0x100 [ 873.579768][T13637] ? sock_common_recvmsg+0x190/0x190 [ 873.585060][T13637] __sys_setsockopt+0x2c6/0x5b0 [ 873.589918][T13637] ? __ia32_sys_recv+0x100/0x100 [ 873.594893][T13637] __x64_sys_setsockopt+0xbe/0x160 [ 873.600007][T13637] ? syscall_enter_from_user_mode+0x26/0xb0 [ 873.605910][T13637] do_syscall_64+0x39/0xb0 [ 873.610343][T13637] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 873.616256][T13637] RIP: 0033:0x7f7ba708d71a [ 873.620776][T13637] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 873.640410][T13637] RSP: 002b:00007ffe718dc568 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 873.648853][T13637] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f7ba708d71a [ 873.656837][T13637] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 873.665088][T13637] RBP: 00007ffe718dc590 R08: 00000000000002e8 R09: ffffffffff000000 [ 873.673152][T13637] R10: 00007f7ba7185000 R11: 0000000000000206 R12: 00007ffe718dc5f0 [ 873.681141][T13637] R13: 0000000000000003 R14: 00007ffe718dc58c R15: 00007f7ba7184fa0 [ 873.689141][T13637] [ 873.720366][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.858459][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.174414][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.440864][T13637] memory: usage 10380kB, limit 0kB, failcnt 586 [ 874.453742][T13637] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 874.460648][T13637] Memory cgroup stats for /syz1: [ 874.460861][T13637] anon 36864 [ 874.460861][T13637] file 10481664 [ 874.460861][T13637] kernel 94208 [ 874.460861][T13637] kernel_stack 0 [ 874.460861][T13637] pagetables 8192 [ 874.460861][T13637] sec_pagetables 0 [ 874.460861][T13637] percpu 0 [ 874.460861][T13637] sock 0 [ 874.460861][T13637] vmalloc 0 [ 874.460861][T13637] shmem 10477568 [ 874.460861][T13637] zswap 0 [ 874.460861][T13637] zswapped 0 [ 874.460861][T13637] file_mapped 147456 [ 874.460861][T13637] file_dirty 4096 [ 874.460861][T13637] file_writeback 0 [ 874.460861][T13637] swapcached 0 [ 874.460861][T13637] anon_thp 0 [ 874.460861][T13637] file_thp 0 [ 874.460861][T13637] shmem_thp 0 [ 874.460861][T13637] inactive_anon 36864 [ 874.460861][T13637] active_anon 10477568 [ 874.460861][T13637] inactive_file 0 [ 874.460861][T13637] active_file 4096 [ 874.460861][T13637] unevictable 0 [ 874.460861][T13637] slab_reclaimable 40160 [ 874.460861][T13637] slab_unreclaimable 38768 [ 874.460861][T13637] slab 78928 [ 874.601574][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.823348][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 874.832427][T13637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13637,uid=0 [ 874.832659][T13637] Memory cgroup out of memory: Killed process 13637 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 874.891942][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 874.921655][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 874.932660][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 874.980078][T13737] device veth0_vlan entered promiscuous mode [ 875.004149][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.041914][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 875.422561][T13737] device veth1_vlan entered promiscuous mode [ 875.556619][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.581704][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.600848][T13740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.737248][T13737] device veth0_macvtap entered promiscuous mode [ 875.788618][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 875.805213][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 875.837601][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 875.846809][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 875.901748][T13737] device veth1_macvtap entered promiscuous mode [ 875.923805][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 875.954899][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 875.967603][T13740] device veth0_vlan entered promiscuous mode [ 875.999406][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.013017][ C0] net_ratelimit: 1830 callbacks suppressed [ 876.013035][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.030580][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 876.042903][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.055661][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.066873][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.074618][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 876.083017][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.086207][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 876.093884][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.106036][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 876.118833][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.122778][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.129522][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 876.140550][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 876.148303][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.159571][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.196408][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.206756][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.218866][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.228811][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.239614][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.249723][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.260939][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.272864][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.287977][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.300037][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.310827][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.323015][T13737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.337306][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.348001][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.358291][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.381684][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.401086][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.424228][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.443957][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.470895][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.481342][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.492559][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.502751][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.513607][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.529435][T13737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.548760][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.557472][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.586385][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 876.595155][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 876.610088][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 876.632113][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 876.666306][T13737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.689104][T13737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.702434][T13737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.720964][T13737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.738753][T13740] device veth1_vlan entered promiscuous mode [ 876.777965][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.786586][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.835307][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 876.939446][T13740] device veth0_macvtap entered promiscuous mode [ 877.040670][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.050869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.079907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.115588][T13740] device veth1_macvtap entered promiscuous mode [ 877.169124][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.205510][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.233739][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.271092][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.289639][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.302718][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.327871][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.340115][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.352430][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.373249][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.395674][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.417743][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.429582][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.451281][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.477416][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.494795][T13740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.541614][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.549699][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.564058][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.580559][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.602059][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.612888][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.627796][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.638693][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.649990][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.659979][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.670541][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.680489][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.691088][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.702386][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.713833][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.723863][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.737245][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.751124][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.771103][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.791952][T13740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.850128][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.869936][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 878.072921][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.083093][T13740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.091078][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.108255][T13740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.140452][T13740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.157723][T13740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.183985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 878.202749][ T5119] Bluetooth: hci0: command 0x0409 tx timeout [ 878.376956][T13917] chnl_net:caif_netlink_parms(): no params data found 04:37:24 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 878.871206][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.878340][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.879365][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.902904][T13917] device bridge_slave_0 entered promiscuous mode [ 878.917855][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.917911][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.955196][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.979387][T13917] device bridge_slave_1 entered promiscuous mode [ 879.015840][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.016490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.038536][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.061865][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.230008][T13917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.282790][T13917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.601811][T13966] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 879.617853][T13966] CPU: 1 PID: 13966 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 879.628514][T13966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 879.638608][T13966] Call Trace: [ 879.641919][T13966] [ 879.644875][T13966] dump_stack_lvl+0xd1/0x138 [ 879.649523][T13966] dump_header+0x10b/0x85f [ 879.653978][T13966] oom_kill_process.cold+0x10/0x15 [ 879.659151][T13966] out_of_memory+0x35c/0x14a0 [ 879.663875][T13966] ? oom_killer_disable+0x280/0x280 [ 879.669122][T13966] ? find_held_lock+0x2d/0x110 [ 879.673928][T13966] mem_cgroup_out_of_memory+0x206/0x270 [ 879.679514][T13966] ? mem_cgroup_margin+0x130/0x130 [ 879.684649][T13966] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 879.690491][T13966] memory_max_write+0x2f9/0x3c0 [ 879.695369][T13966] ? mem_cgroup_force_empty_write+0x160/0x160 [ 879.701481][T13966] ? lock_release+0x810/0x810 [ 879.706279][T13966] cgroup_file_write+0x1e2/0x770 [ 879.711282][T13966] ? mem_cgroup_force_empty_write+0x160/0x160 [ 879.717381][T13966] ? kill_css+0x370/0x370 [ 879.721725][T13966] ? __virt_addr_valid+0x61/0x2e0 [ 879.726779][T13966] ? kill_css+0x370/0x370 [ 879.731126][T13966] kernfs_fop_write_iter+0x3f1/0x600 [ 879.736439][T13966] vfs_write+0x9ed/0xdd0 [ 879.740708][T13966] ? kernel_write+0x630/0x630 [ 879.745406][T13966] ? __fget_files+0x26a/0x440 [ 879.750630][T13966] ksys_write+0x12b/0x250 [ 879.754988][T13966] ? __ia32_sys_read+0xb0/0xb0 [ 879.759769][T13966] ? syscall_enter_from_user_mode+0x26/0xb0 [ 879.765689][T13966] do_syscall_64+0x39/0xb0 [ 879.770131][T13966] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 879.776126][T13966] RIP: 0033:0x7f8dac68c0c9 [ 879.780551][T13966] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 879.800169][T13966] RSP: 002b:00007f8dad4a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.808594][T13966] RAX: ffffffffffffffda RBX: 00007f8dac7ac050 RCX: 00007f8dac68c0c9 [ 879.816574][T13966] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 879.824896][T13966] RBP: 00007f8dac6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 879.832874][T13966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.840884][T13966] R13: 00007ffe4ff2e0ef R14: 00007f8dad4a8300 R15: 0000000000022000 [ 879.848879][T13966] [ 880.000936][T13917] team0: Port device team_slave_0 added [ 880.024199][T13917] team0: Port device team_slave_1 added [ 880.085907][T13966] memory: usage 592kB, limit 0kB, failcnt 157 [ 880.099993][T13966] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 880.115891][T13966] Memory cgroup stats for /syz0: [ 880.116096][T13966] anon 118784 [ 880.116096][T13966] file 126976 [ 880.116096][T13966] kernel 348160 [ 880.116096][T13966] kernel_stack 98304 [ 880.116096][T13966] pagetables 81920 [ 880.116096][T13966] sec_pagetables 0 [ 880.116096][T13966] percpu 64 [ 880.116096][T13966] sock 0 [ 880.116096][T13966] vmalloc 0 [ 880.116096][T13966] shmem 126976 [ 880.116096][T13966] zswap 0 [ 880.116096][T13966] zswapped 0 [ 880.116096][T13966] file_mapped 126976 [ 880.116096][T13966] file_dirty 0 [ 880.116096][T13966] file_writeback 0 [ 880.116096][T13966] swapcached 0 [ 880.116096][T13966] anon_thp 0 [ 880.116096][T13966] file_thp 0 [ 880.116096][T13966] shmem_thp 0 [ 880.116096][T13966] inactive_anon 118784 [ 880.116096][T13966] active_anon 126976 [ 880.116096][T13966] inactive_file 0 [ 880.116096][T13966] active_file 0 [ 880.116096][T13966] unevictable 0 [ 880.116096][T13966] slab_reclaimable 23584 [ 880.116096][T13966] slab_unreclaimable 118672 [ 880.116096][T13966] slab 142256 [ 880.291756][ T5124] Bluetooth: hci0: command 0x041b tx timeout [ 880.343366][T13917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.350351][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.421291][T13917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.450842][T13917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.489498][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.513752][T13966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13740,uid=0 [ 880.556524][T13966] Memory cgroup out of memory: Killed process 13740 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 880.570716][T13917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.001761][T13917] device hsr_slave_0 entered promiscuous mode [ 881.010059][T13917] device hsr_slave_1 entered promiscuous mode [ 881.021715][ C0] net_ratelimit: 2620 callbacks suppressed [ 881.021733][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.039181][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 881.051544][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.063722][T13917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.064071][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.079041][T13917] Cannot create hsr debugfs directory [ 881.083309][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 881.099547][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 881.112194][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 881.123871][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.135508][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 881.147859][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) 04:37:27 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:37:27 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:37:27 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:37:27 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:37:27 executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000180)="f0", 0x1}, {0x0}], 0x3}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 04:37:27 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="d1a7a716a85da12f8f9654f9d5a89eabfb75fef64a5fe0b9a34d6987441cded1efd4e16c537448ba2e3869c2a60aa6255c9f37ca6315c1104a8d896fb9c185d2a3ed5b1b000bcadfe1f1faa62d188e0767efcbc90d4d902ad15cb218e7d065b641c949a43b862538b94d19dd3224f4ff5cab92a0fe03f736d185716ea490878453e03f1c58e7512da708fa5295bda537fb2141bba80762d70d4bfbfdbf02fc90d1506065f7a4f9a94a3a1a350b3f30060fdddec2958c064014af29fdbddabc4c459755b1086d5a9736077c96fcc599ad24220b281031d696e3b5b6a1509029d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="2b6465ff69636573202d356e2d6d6f207fc8b353f74f5dd02db12860c91855aa3059fafd409adc55cef10fc8aab2d4fae57056925fb7201d56ed033b750a0bd05cf9b6e696be1ef2b1a0d9a752ad2513f381eded6be0618ec15e9376905931e42fe2d8fa15470c92303adb2b07d9ad868167529324039e7fa5c8b913ad3eb9afadb52fab6c105242fd13c643b0d4cad8d420304dd1772095dc4eca3c9fd134b7740b1e6a309c927f2a5637"], 0x1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000018470064b908e15052ef4492ff94a9b63c0000000000000000000000186a00000100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x7, 0x7f, &(0x7f0000000700)=""/127, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xfffffc01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x80) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2, &(0x7f00000007c0)=""/134, 0x86}, 0x10165) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000001) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 04:37:28 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) 04:37:28 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 881.879570][T13987] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 881.958474][T13987] CPU: 0 PID: 13987 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 881.969046][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 881.979483][T13987] Call Trace: [ 881.982794][T13987] [ 881.985755][T13987] dump_stack_lvl+0xd1/0x138 [ 881.990433][T13987] dump_header+0x10b/0x85f [ 881.994910][T13987] oom_kill_process.cold+0x10/0x15 [ 882.000089][T13987] out_of_memory+0x35c/0x14a0 [ 882.004826][T13987] ? oom_killer_disable+0x280/0x280 [ 882.010084][T13987] mem_cgroup_out_of_memory+0x206/0x270 [ 882.015754][T13987] ? mem_cgroup_margin+0x130/0x130 [ 882.020923][T13987] memory_max_write+0x2f9/0x3c0 [ 882.025814][T13987] ? mem_cgroup_force_empty_write+0x160/0x160 [ 882.032014][T13987] ? lock_release+0x810/0x810 [ 882.036734][T13987] cgroup_file_write+0x1e2/0x770 [ 882.041709][T13987] ? mem_cgroup_force_empty_write+0x160/0x160 [ 882.047816][T13987] ? kill_css+0x370/0x370 [ 882.052187][T13987] ? __virt_addr_valid+0x61/0x2e0 04:37:28 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) [ 882.057261][T13987] ? kill_css+0x370/0x370 [ 882.061649][T13987] kernfs_fop_write_iter+0x3f1/0x600 [ 882.066984][T13987] vfs_write+0x9ed/0xdd0 [ 882.071262][T13987] ? kernel_write+0x630/0x630 [ 882.075980][T13987] ? __fget_files+0x26a/0x440 [ 882.080710][T13987] ksys_write+0x12b/0x250 [ 882.085076][T13987] ? __ia32_sys_read+0xb0/0xb0 [ 882.089875][T13987] ? syscall_enter_from_user_mode+0x26/0xb0 [ 882.095803][T13987] do_syscall_64+0x39/0xb0 [ 882.100258][T13987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 882.106202][T13987] RIP: 0033:0x7f7dd1e8c0c9 [ 882.110648][T13987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 882.130375][T13987] RSP: 002b:00007f7dd2b61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 882.138833][T13987] RAX: ffffffffffffffda RBX: 00007f7dd1fac050 RCX: 00007f7dd1e8c0c9 [ 882.146839][T13987] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 882.154861][T13987] RBP: 00007f7dd1ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 882.162860][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.170857][T13987] R13: 00007ffe36f2ff4f R14: 00007f7dd2b61300 R15: 0000000000022000 [ 882.178880][T13987] [ 882.364961][ T5124] Bluetooth: hci0: command 0x040f tx timeout [ 882.461130][T13987] memory: usage 596kB, limit 0kB, failcnt 374 [ 882.556391][T13987] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 882.669156][T13987] Memory cgroup stats for /syz5: [ 882.669389][T13987] anon 139264 [ 882.669389][T13987] file 126976 [ 882.669389][T13987] kernel 344064 [ 882.669389][T13987] kernel_stack 98304 [ 882.669389][T13987] pagetables 77824 [ 882.669389][T13987] sec_pagetables 0 [ 882.669389][T13987] percpu 64 [ 882.669389][T13987] sock 0 [ 882.669389][T13987] vmalloc 0 [ 882.669389][T13987] shmem 126976 [ 882.669389][T13987] zswap 0 [ 882.669389][T13987] zswapped 0 [ 882.669389][T13987] file_mapped 126976 [ 882.669389][T13987] file_dirty 0 [ 882.669389][T13987] file_writeback 0 [ 882.669389][T13987] swapcached 0 [ 882.669389][T13987] anon_thp 0 [ 882.669389][T13987] file_thp 0 [ 882.669389][T13987] shmem_thp 0 [ 882.669389][T13987] inactive_anon 151552 [ 882.669389][T13987] active_anon 114688 [ 882.669389][T13987] inactive_file 0 [ 882.669389][T13987] active_file 0 [ 882.669389][T13987] unevictable 0 [ 882.669389][T13987] slab_reclaimable 20736 [ 882.669389][T13987] slab_unreclaimable 118024 [ 882.669389][T13987] slab 138760 [ 883.511644][T13917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.529390][T13917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.569498][T13917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.605569][ T34] device hsr_slave_0 left promiscuous mode [ 883.624055][ T34] device hsr_slave_1 left promiscuous mode [ 883.668738][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.694208][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.721479][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.740986][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.753545][ T34] device bridge_slave_1 left promiscuous mode [ 883.759829][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.810545][ T34] device bridge_slave_0 left promiscuous mode [ 883.821213][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.872215][ T34] device hsr_slave_0 left promiscuous mode [ 883.891810][ T34] device hsr_slave_1 left promiscuous mode [ 883.900920][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.923972][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.943844][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.972553][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.003935][ T34] device bridge_slave_1 left promiscuous mode [ 884.021302][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.037994][T13987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13984,uid=0 [ 884.056306][ T34] device bridge_slave_0 left promiscuous mode [ 884.074522][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.120084][ T34] device hsr_slave_0 left promiscuous mode [ 884.136240][ T34] device hsr_slave_1 left promiscuous mode [ 884.142745][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.161202][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.161234][T13987] Memory cgroup out of memory: Killed process 13987 (syz-executor.5) total-vm:56720kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 884.186449][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.204486][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.212120][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.220768][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 884.220787][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.238207][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.283284][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.298308][ T34] device bridge_slave_1 left promiscuous mode [ 884.304808][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.331744][ T34] device bridge_slave_0 left promiscuous mode [ 884.338016][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.386066][ T34] device veth1_macvtap left promiscuous mode [ 884.392359][ T34] device veth0_macvtap left promiscuous mode [ 884.398592][ T34] device veth1_vlan left promiscuous mode [ 884.404987][ T34] device veth0_vlan left promiscuous mode [ 884.442431][ T34] device veth1_macvtap left promiscuous mode [ 884.448520][ T34] device veth0_macvtap left promiscuous mode [ 884.455177][ T5124] Bluetooth: hci0: command 0x0419 tx timeout [ 884.482114][ T34] device veth1_vlan left promiscuous mode [ 884.488025][ T34] device veth0_vlan left promiscuous mode [ 884.541357][ T34] device veth1_macvtap left promiscuous mode [ 884.547450][ T34] device veth0_macvtap left promiscuous mode [ 884.569077][ T34] device veth1_vlan left promiscuous mode [ 884.587831][ T34] device veth0_vlan left promiscuous mode [ 885.089702][T12038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 885.100076][T12038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 885.103573][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.109126][T12038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 885.115963][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.123837][T12038] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.129396][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.136816][T12038] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 885.142977][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.149887][T12038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.156811][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 885.172833][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 886.031573][ C0] net_ratelimit: 2852 callbacks suppressed [ 886.031594][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.050515][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.062478][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 886.074266][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 886.086599][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 886.098192][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.109704][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 886.121899][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.134221][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.145733][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 886.237479][ T34] team0 (unregistering): Port device team_slave_1 removed [ 886.274634][ T34] team0 (unregistering): Port device team_slave_0 removed [ 886.282072][ T5119] Bluetooth: hci2: command 0x0409 tx timeout [ 886.333490][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.381541][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.581456][ T34] bond0 (unregistering): Released all slaves [ 886.959021][ T34] team0 (unregistering): Port device team_slave_1 removed [ 886.999978][ T34] team0 (unregistering): Port device team_slave_0 removed [ 887.042078][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.075501][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.251168][ T5126] Bluetooth: hci5: command 0x0409 tx timeout [ 887.251662][ T5119] Bluetooth: hci3: command 0x0409 tx timeout [ 887.340481][ T34] bond0 (unregistering): Released all slaves [ 887.731164][ T34] team0 (unregistering): Port device team_slave_1 removed [ 887.796189][ T34] team0 (unregistering): Port device team_slave_0 removed [ 887.839460][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.895043][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.115491][ T34] bond0 (unregistering): Released all slaves [ 888.210324][T13917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.369064][ T5119] Bluetooth: hci2: command 0x041b tx timeout [ 888.636500][T13917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.710242][T13917] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.767727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.796203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 888.954255][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 888.963944][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 888.991206][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.998339][T13621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.084870][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.111776][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.161557][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.186240][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.193426][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.211434][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.220361][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.255748][T14019] chnl_net:caif_netlink_parms(): no params data found [ 889.310464][T14012] chnl_net:caif_netlink_parms(): no params data found [ 889.332050][ T5119] Bluetooth: hci5: command 0x041b tx timeout [ 889.338199][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 889.358686][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.372732][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.425151][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 889.451887][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 889.491071][T13621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 889.734740][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 889.752232][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 889.763280][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 889.787289][T14021] chnl_net:caif_netlink_parms(): no params data found [ 890.035485][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.051259][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.063073][T14019] device bridge_slave_0 entered promiscuous mode [ 890.092160][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.099294][T14012] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.132401][T14012] device bridge_slave_0 entered promiscuous mode [ 890.164253][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.182780][T14012] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.221933][T14012] device bridge_slave_1 entered promiscuous mode [ 890.257494][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.274337][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.315869][T14019] device bridge_slave_1 entered promiscuous mode [ 890.441330][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 890.450764][T14012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.500124][T14012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.683186][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.697425][T14012] team0: Port device team_slave_0 added [ 890.729143][T14021] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.751179][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.759449][T14021] device bridge_slave_0 entered promiscuous mode [ 890.791534][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 890.799049][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.826645][T13917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.863587][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.911550][T14012] team0: Port device team_slave_1 added [ 890.964587][T14021] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.981174][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.989466][T14021] device bridge_slave_1 entered promiscuous mode [ 891.051672][ C0] net_ratelimit: 3827 callbacks suppressed [ 891.051694][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.070988][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.082617][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 891.094956][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.107613][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.119953][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 891.131556][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 891.156309][T14019] team0: Port device team_slave_0 added [ 891.173899][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 891.183606][T14019] team0: Port device team_slave_1 added [ 891.185841][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.202267][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 891.363275][T14012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.370273][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.406897][T14012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.413770][T12655] Bluetooth: hci5: command 0x040f tx timeout [ 891.418052][ T5119] Bluetooth: hci3: command 0x040f tx timeout [ 891.451186][T14021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.465084][T14012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.499702][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.561418][T14012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.582674][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.589662][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.688244][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.725891][T14021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.780246][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.810265][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.892420][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.014564][T14021] team0: Port device team_slave_0 added [ 892.064603][T14012] device hsr_slave_0 entered promiscuous mode [ 892.121524][T14012] device hsr_slave_1 entered promiscuous mode [ 892.128354][T14012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.153517][T14012] Cannot create hsr debugfs directory [ 892.234186][T14021] team0: Port device team_slave_1 added [ 892.436618][T14021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.471247][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.531463][ T5119] Bluetooth: hci2: command 0x0419 tx timeout [ 892.546905][T14021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.582529][T14019] device hsr_slave_0 entered promiscuous mode [ 892.595425][T14019] device hsr_slave_1 entered promiscuous mode [ 892.614961][T14019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.631095][T14019] Cannot create hsr debugfs directory [ 892.649205][T14021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.667390][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.720432][T14021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.838442][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 892.871862][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 893.179353][T13917] device veth0_vlan entered promiscuous mode [ 893.191835][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 893.200290][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 893.265017][T14021] device hsr_slave_0 entered promiscuous mode [ 893.282011][T14021] device hsr_slave_1 entered promiscuous mode [ 893.321118][T14021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.351090][T14021] Cannot create hsr debugfs directory [ 893.362255][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 893.370995][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 893.481320][ T5119] Bluetooth: hci5: command 0x0419 tx timeout [ 893.491701][ T5119] Bluetooth: hci3: command 0x0419 tx timeout [ 893.535075][T13917] device veth1_vlan entered promiscuous mode [ 893.662743][T14012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.975024][T14012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.046372][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 894.054739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 894.119425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.143867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.177650][T13917] device veth0_macvtap entered promiscuous mode [ 894.255229][T14012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.299353][T13917] device veth1_macvtap entered promiscuous mode [ 894.477935][T14012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.580372][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.651232][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.691087][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.741378][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.768666][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.800263][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.841095][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.871340][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.902773][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.921073][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.942916][T13917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.989693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 895.010225][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.032079][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.046415][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.071210][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.120156][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.147600][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.181290][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.221081][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.230933][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.281084][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.290940][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.336584][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.372734][T13917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.403949][T13917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.451097][T13917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.459844][T13917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.501094][T13917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.542861][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 895.559678][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 895.766173][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.811531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.899050][T14019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.936981][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 895.962391][T14012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.996435][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.022117][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.034729][T14012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.063032][ C0] net_ratelimit: 2421 callbacks suppressed [ 896.063052][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.080592][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 896.092993][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.105717][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.117690][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 896.142072][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 896.142440][T14012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.154604][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 896.172053][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.183641][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 896.196068][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.226837][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 896.352194][T14019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.381407][T14012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.689476][T14019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.775480][T14134] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 896.809526][T14134] CPU: 0 PID: 14134 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 896.820010][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 896.830183][T14134] Call Trace: [ 896.833494][T14134] [ 896.836479][T14134] dump_stack_lvl+0xd1/0x138 [ 896.841224][T14134] dump_header+0x10b/0x85f [ 896.845681][T14134] oom_kill_process.cold+0x10/0x15 [ 896.850840][T14134] out_of_memory+0x35c/0x14a0 [ 896.855563][T14134] ? oom_killer_disable+0x280/0x280 [ 896.860798][T14134] ? find_held_lock+0x2d/0x110 [ 896.865610][T14134] mem_cgroup_out_of_memory+0x206/0x270 [ 896.871184][T14134] ? mem_cgroup_margin+0x130/0x130 [ 896.876338][T14134] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 896.882198][T14134] memory_max_write+0x2f9/0x3c0 [ 896.887078][T14134] ? mem_cgroup_force_empty_write+0x160/0x160 [ 896.893183][T14134] ? lock_release+0x810/0x810 [ 896.897894][T14134] cgroup_file_write+0x1e2/0x770 [ 896.902875][T14134] ? mem_cgroup_force_empty_write+0x160/0x160 [ 896.908974][T14134] ? kill_css+0x370/0x370 [ 896.913334][T14134] ? __virt_addr_valid+0x61/0x2e0 [ 896.918476][T14134] ? kill_css+0x370/0x370 [ 896.922837][T14134] kernfs_fop_write_iter+0x3f1/0x600 [ 896.928173][T14134] vfs_write+0x9ed/0xdd0 [ 896.932457][T14134] ? kernel_write+0x630/0x630 [ 896.937178][T14134] ? __fget_files+0x26a/0x440 [ 896.941910][T14134] ksys_write+0x12b/0x250 [ 896.946278][T14134] ? __ia32_sys_read+0xb0/0xb0 [ 896.951079][T14134] ? syscall_enter_from_user_mode+0x26/0xb0 [ 896.957016][T14134] do_syscall_64+0x39/0xb0 [ 896.961485][T14134] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 896.967421][T14134] RIP: 0033:0x7f640a28c0c9 [ 896.971863][T14134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 896.991505][T14134] RSP: 002b:00007f640afa5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.999966][T14134] RAX: ffffffffffffffda RBX: 00007f640a3ac050 RCX: 00007f640a28c0c9 [ 897.007968][T14134] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 897.015977][T14134] RBP: 00007f640a2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 897.023977][T14134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.032058][T14134] R13: 00007ffd4b78811f R14: 00007f640afa5300 R15: 0000000000022000 [ 897.040080][T14134] [ 897.060471][T14134] memory: usage 560kB, limit 0kB, failcnt 444 [ 897.092330][T14134] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 897.124381][T14134] Memory cgroup stats for /syz4: [ 897.124598][T14134] anon 118784 [ 897.124598][T14134] file 122880 [ 897.124598][T14134] kernel 331776 [ 897.124598][T14134] kernel_stack 98304 [ 897.124598][T14134] pagetables 77824 [ 897.124598][T14134] sec_pagetables 0 [ 897.124598][T14134] percpu 64 [ 897.124598][T14134] sock 0 [ 897.124598][T14134] vmalloc 0 [ 897.124598][T14134] shmem 122880 [ 897.124598][T14134] zswap 0 [ 897.124598][T14134] zswapped 0 [ 897.124598][T14134] file_mapped 122880 [ 897.124598][T14134] file_dirty 0 [ 897.124598][T14134] file_writeback 0 [ 897.124598][T14134] swapcached 0 [ 897.124598][T14134] anon_thp 0 [ 897.124598][T14134] file_thp 0 [ 897.124598][T14134] shmem_thp 0 [ 897.124598][T14134] inactive_anon 118784 [ 897.124598][T14134] active_anon 122880 [ 897.124598][T14134] inactive_file 0 [ 897.124598][T14134] active_file 0 [ 897.124598][T14134] unevictable 0 [ 897.124598][T14134] slab_reclaimable 32848 [ 897.124598][T14134] slab_unreclaimable 91960 [ 897.124598][T14134] slab 124808 [ 897.233906][T14019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.286587][T14012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.363568][T14012] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.370684][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 897.379767][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.452108][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.463340][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 897.478317][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.485499][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.510251][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.526403][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.542526][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.549751][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.570142][T14134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14131,uid=0 [ 897.601796][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 897.610864][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 897.658945][ T34] ------------[ cut here ]------------ [ 897.664442][ T34] DEBUG_LOCKS_WARN_ON(1) [ 897.664518][ T34] WARNING: CPU: 0 PID: 34 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 897.678295][ T34] Modules linked in: [ 897.682181][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 897.692150][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 897.702197][ T34] Workqueue: netns cleanup_net [ 897.707007][ T34] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 897.712559][ T34] Code: e8 1c 73 8e e8 42 04 6c 00 8b 05 94 82 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 27 5c 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 897.732247][ T34] RSP: 0018:ffffc90000ab7518 EFLAGS: 00010082 [ 897.738306][ T34] RAX: 0000000000000000 RBX: 000000000000090a RCX: 0000000000000000 [ 897.746447][ T34] RDX: ffff888017263a80 RSI: ffffffff8166710c RDI: fffff52000156e95 [ 897.754500][ T34] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 897.762551][ T34] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 897.770513][ T34] R13: ffff888017263a80 R14: ffff8880172644b8 R15: dffffc0000000000 [ 897.778498][ T34] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 897.787425][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.794012][ T34] CR2: 00007f088c50d440 CR3: 000000007901b000 CR4: 00000000003506f0 [ 897.802152][ T34] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.810128][ T34] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.818091][ T34] Call Trace: [ 897.821392][ T34] [ 897.824356][ T34] ? __lock_acquire+0x2567/0x56d0 [ 897.829466][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 897.835445][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 897.841428][ T34] lock_acquire+0x1e3/0x630 [ 897.845921][ T34] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 897.851791][ T34] ? find_held_lock+0x2d/0x110 [ 897.856565][ T34] ? lock_release+0x810/0x810 [ 897.861236][ T34] ? psi_task_switch+0x2de/0x930 [ 897.866184][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 897.871049][ T34] __perf_event_task_sched_in+0xe2/0x6c0 [ 897.876692][ T34] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 897.882503][ T34] ? ctx_sched_in+0x850/0x850 [ 897.887182][ T34] ? __schedule+0xb02/0x5450 [ 897.891768][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 897.896638][ T34] finish_task_switch.isra.0+0x5e5/0xc80 [ 897.902308][ T34] ? __switch_to+0x5d0/0x10a0 [ 897.907093][ T34] ? __switch_to_asm+0x3e/0x60 [ 897.911868][ T34] __schedule+0xb92/0x5450 [ 897.916305][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 897.922381][ T34] ? static_obj+0x22/0xc0 [ 897.926814][ T34] ? io_schedule_timeout+0x150/0x150 [ 897.937240][ T34] ? __mutex_lock+0xa43/0x1360 [ 897.942010][ T34] schedule+0xde/0x1b0 [ 897.946074][ T34] schedule_preempt_disabled+0x13/0x20 [ 897.951525][ T34] __mutex_lock+0xa48/0x1360 [ 897.956119][ T34] ? devlink_pernet_pre_exit+0x10a/0x220 [ 897.961831][ T34] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 897.967386][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 897.972226][ T34] ? devlink_try_get+0x15d/0x1e0 [ 897.977168][ T34] devlink_pernet_pre_exit+0x10a/0x220 [ 897.982640][ T34] ? devlinks_xa_find_get+0x220/0x220 [ 897.988034][ T34] ? cttimeout_net_pre_exit+0x10d/0x500 [ 897.994049][ T34] ? devlinks_xa_find_get+0x220/0x220 [ 897.999436][ T34] cleanup_net+0x455/0xb10 [ 898.003870][ T34] ? unregister_pernet_device+0x80/0x80 [ 898.009430][ T34] process_one_work+0x9bf/0x1710 [ 898.014369][ T34] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 898.019817][ T34] ? rwlock_bug.part.0+0x90/0x90 [ 898.024758][ T34] ? _raw_spin_lock_irq+0x45/0x50 [ 898.029791][ T34] worker_thread+0x669/0x1090 [ 898.034508][ T34] ? process_one_work+0x1710/0x1710 [ 898.039704][ T34] kthread+0x2e8/0x3a0 [ 898.043785][ T34] ? kthread_complete_and_exit+0x40/0x40 [ 898.049605][ T34] ret_from_fork+0x1f/0x30 [ 898.054044][ T34] [ 898.057058][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 898.064433][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.2.0-rc2-syzkaller-00434-gd8285883fd41 #0 [ 898.074413][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 898.084463][ T34] Workqueue: netns cleanup_net [ 898.089232][ T34] Call Trace: [ 898.092500][ T34] [ 898.095439][ T34] dump_stack_lvl+0xd1/0x138 [ 898.100035][ T34] panic+0x2cc/0x626 [ 898.103960][ T34] ? panic_print_sys_info.part.0+0x110/0x110 [ 898.109951][ T34] ? __lock_acquire+0xecf/0x56d0 [ 898.114898][ T34] check_panic_on_warn.cold+0x19/0x35 [ 898.120360][ T34] __warn+0xf2/0x1a0 [ 898.124252][ T34] ? __lock_acquire+0xecf/0x56d0 [ 898.129277][ T34] report_bug+0x1c0/0x210 [ 898.133617][ T34] handle_bug+0x3c/0x70 [ 898.137767][ T34] exc_invalid_op+0x18/0x50 [ 898.142265][ T34] asm_exc_invalid_op+0x1a/0x20 [ 898.147148][ T34] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 898.152688][ T34] Code: e8 1c 73 8e e8 42 04 6c 00 8b 05 94 82 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 27 5c 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 898.172387][ T34] RSP: 0018:ffffc90000ab7518 EFLAGS: 00010082 [ 898.178448][ T34] RAX: 0000000000000000 RBX: 000000000000090a RCX: 0000000000000000 [ 898.186411][ T34] RDX: ffff888017263a80 RSI: ffffffff8166710c RDI: fffff52000156e95 [ 898.194389][ T34] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 898.202365][ T34] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 898.210427][ T34] R13: ffff888017263a80 R14: ffff8880172644b8 R15: dffffc0000000000 [ 898.218402][ T34] ? vprintk+0x8c/0xa0 [ 898.222507][ T34] ? __lock_acquire+0xecf/0x56d0 [ 898.227449][ T34] ? __lock_acquire+0x2567/0x56d0 [ 898.232661][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 898.238633][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 898.244609][ T34] lock_acquire+0x1e3/0x630 [ 898.249452][ T34] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 898.255258][ T34] ? find_held_lock+0x2d/0x110 [ 898.260723][ T34] ? lock_release+0x810/0x810 [ 898.265399][ T34] ? psi_task_switch+0x2de/0x930 [ 898.270333][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 898.275180][ T34] __perf_event_task_sched_in+0xe2/0x6c0 [ 898.280832][ T34] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 898.286645][ T34] ? ctx_sched_in+0x850/0x850 [ 898.291319][ T34] ? __schedule+0xb02/0x5450 [ 898.295903][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 898.300747][ T34] finish_task_switch.isra.0+0x5e5/0xc80 [ 898.306390][ T34] ? __switch_to+0x5d0/0x10a0 [ 898.311060][ T34] ? __switch_to_asm+0x3e/0x60 [ 898.315841][ T34] __schedule+0xb92/0x5450 [ 898.320269][ T34] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 898.326262][ T34] ? static_obj+0x22/0xc0 [ 898.330596][ T34] ? io_schedule_timeout+0x150/0x150 [ 898.335896][ T34] ? __mutex_lock+0xa43/0x1360 [ 898.340659][ T34] schedule+0xde/0x1b0 [ 898.344723][ T34] schedule_preempt_disabled+0x13/0x20 [ 898.350193][ T34] __mutex_lock+0xa48/0x1360 [ 898.354787][ T34] ? devlink_pernet_pre_exit+0x10a/0x220 [ 898.360432][ T34] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 898.365990][ T34] ? lock_downgrade+0x6e0/0x6e0 [ 898.370845][ T34] ? devlink_try_get+0x15d/0x1e0 [ 898.375811][ T34] devlink_pernet_pre_exit+0x10a/0x220 [ 898.381283][ T34] ? devlinks_xa_find_get+0x220/0x220 [ 898.386683][ T34] ? cttimeout_net_pre_exit+0x10d/0x500 [ 898.392238][ T34] ? devlinks_xa_find_get+0x220/0x220 [ 898.397622][ T34] cleanup_net+0x455/0xb10 [ 898.402047][ T34] ? unregister_pernet_device+0x80/0x80 [ 898.407687][ T34] process_one_work+0x9bf/0x1710 [ 898.412628][ T34] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 898.418001][ T34] ? rwlock_bug.part.0+0x90/0x90 [ 898.423022][ T34] ? _raw_spin_lock_irq+0x45/0x50 [ 898.428056][ T34] worker_thread+0x669/0x1090 [ 898.432735][ T34] ? process_one_work+0x1710/0x1710 [ 898.437929][ T34] kthread+0x2e8/0x3a0 [ 898.442002][ T34] ? kthread_complete_and_exit+0x40/0x40 [ 898.447634][ T34] ret_from_fork+0x1f/0x30 [ 898.452073][ T34] [ 899.535958][ T34] Shutting down cpus with NMI [ 899.540842][ T34] Kernel Offset: disabled [ 899.545247][ T34] Rebooting in 86400 seconds..