ffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:17:12 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 841.300688][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.307903][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.349278][T14957] device bridge_slave_0 entered promiscuous mode [ 841.358627][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.392028][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.448959][T14957] device bridge_slave_1 entered promiscuous mode [ 841.627834][T14957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.682942][T14957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.824098][T14957] team0: Port device team_slave_0 added [ 841.869614][T14957] team0: Port device team_slave_1 added [ 841.941140][T14957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.949721][T13757] Bluetooth: hci0: command 0x0409 tx timeout [ 841.985907][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.089060][T14957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.140985][T14957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.163022][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.225956][T13761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.229073][T14957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.246104][T13761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.254053][T13761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.262260][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 842.270452][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.416963][T14957] device hsr_slave_0 entered promiscuous mode [ 842.460585][T14957] device hsr_slave_1 entered promiscuous mode [ 842.634390][T13757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.645287][T13757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.655747][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.663645][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 842.671331][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 843.426859][T15012] chnl_net:caif_netlink_parms(): no params data found [ 843.608244][T15021] chnl_net:caif_netlink_parms(): no params data found [ 843.712469][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.725023][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.734221][T15012] device bridge_slave_0 entered promiscuous mode [ 843.757897][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.803649][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.820178][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.837627][T15012] device bridge_slave_1 entered promiscuous mode [ 843.885306][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.937727][T14957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 843.978549][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.018161][T14957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 844.025029][T13757] Bluetooth: hci0: command 0x041b tx timeout [ 844.039894][T14957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 844.062512][T15012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.113621][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.137905][T14957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 844.152669][T15012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.189903][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.209454][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.217806][T15021] device bridge_slave_0 entered promiscuous mode [ 844.228377][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.237252][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.246631][T15021] device bridge_slave_1 entered promiscuous mode [ 844.261454][T15012] team0: Port device team_slave_0 added [ 844.271933][T15012] team0: Port device team_slave_1 added [ 844.324960][T15012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.331999][T15012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.358213][T15012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.360375][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 844.380640][T15012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.387614][T15012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.415706][T15012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.483356][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.507651][T15012] device hsr_slave_0 entered promiscuous mode [ 844.529589][T15012] device hsr_slave_1 entered promiscuous mode [ 844.536388][T15012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.554262][T15012] Cannot create hsr debugfs directory [ 844.610961][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.694960][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.739194][T13757] Bluetooth: hci4: command 0x0409 tx timeout [ 844.778279][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.822979][T15021] team0: Port device team_slave_0 added [ 844.853173][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.869856][T15021] team0: Port device team_slave_1 added [ 844.912257][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.920489][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 844.935805][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.988957][T14957] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.027377][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.043259][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.050828][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.077162][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.109772][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.118596][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.128624][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.135800][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.145106][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.154190][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.162873][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.170132][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.178542][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.199749][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.226526][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.254346][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.262767][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.301356][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.316535][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 845.326512][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.335698][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 845.344665][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.353470][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 845.362553][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 845.410248][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 845.422704][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 845.439958][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 845.501645][T15021] device hsr_slave_0 entered promiscuous mode [ 845.513598][T15021] device hsr_slave_1 entered promiscuous mode [ 845.539955][T15021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.547573][T15021] Cannot create hsr debugfs directory [ 845.570938][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.111140][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 846.260218][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 846.267778][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 846.323912][T14957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.413247][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 846.421720][T13757] Bluetooth: hci3: command 0x041b tx timeout [ 846.435053][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 846.453478][T14957] device veth0_vlan entered promiscuous mode [ 846.559809][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 846.568303][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.590554][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.598546][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 846.636664][T14957] device veth1_vlan entered promiscuous mode [ 846.810884][T14957] device veth0_macvtap entered promiscuous mode [ 846.819316][T13757] Bluetooth: hci4: command 0x041b tx timeout [ 846.826692][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 846.835518][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 846.870087][T14957] device veth1_macvtap entered promiscuous mode [ 846.877424][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 846.891683][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 846.943413][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.957545][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.969379][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.980417][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.990686][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.001504][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.011981][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.026131][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.042131][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.063454][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.104455][T14957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.135543][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 847.152462][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.170262][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.188556][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.205839][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.217754][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.227697][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.238215][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.248122][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.259036][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.269444][T14957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.280686][T14957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.293463][T14957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.304921][T14957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.314482][T14957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.325670][T14957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.335301][T14957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.407300][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.416734][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.584316][T15012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 847.597885][T15012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 847.654652][T15012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 847.716105][T15012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 847.822458][T15021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 847.844538][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.851299][T15021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 847.860961][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.909883][T15021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 847.954699][ T11] device hsr_slave_0 left promiscuous mode [ 847.968225][ T11] device hsr_slave_1 left promiscuous mode [ 847.979616][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.987082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.006280][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.018626][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.042707][ T11] device bridge_slave_1 left promiscuous mode [ 848.049046][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.068357][ T11] device bridge_slave_0 left promiscuous mode [ 848.077491][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.109297][ T11] device hsr_slave_0 left promiscuous mode [ 848.115857][ T11] device hsr_slave_1 left promiscuous mode [ 848.133198][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.148136][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.161270][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.168735][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.189355][T13757] Bluetooth: hci0: command 0x0419 tx timeout [ 848.195597][ T11] device bridge_slave_1 left promiscuous mode [ 848.211363][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.227814][ T11] device bridge_slave_0 left promiscuous mode [ 848.237044][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.275713][ T11] device veth1_macvtap left promiscuous mode [ 848.286972][ T11] device veth0_macvtap left promiscuous mode [ 848.299750][ T11] device veth1_vlan left promiscuous mode [ 848.305637][ T11] device veth0_vlan left promiscuous mode [ 848.322929][ T11] device veth1_macvtap left promiscuous mode [ 848.337202][ T11] device veth0_macvtap left promiscuous mode [ 848.349942][ T11] device veth1_vlan left promiscuous mode [ 848.355813][ T11] device veth0_vlan left promiscuous mode [ 848.499577][T13757] Bluetooth: hci3: command 0x040f tx timeout [ 848.710568][ T11] team0 (unregistering): Port device team_slave_1 removed [ 848.725647][ T11] team0 (unregistering): Port device team_slave_0 removed [ 848.737791][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.760206][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.834678][ T11] bond0 (unregistering): Released all slaves [ 848.909254][T13757] Bluetooth: hci4: command 0x040f tx timeout [ 848.968904][ T11] team0 (unregistering): Port device team_slave_1 removed [ 848.984259][ T11] team0 (unregistering): Port device team_slave_0 removed [ 848.997791][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.014200][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.086599][ T11] bond0 (unregistering): Released all slaves [ 849.134461][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.144186][T15021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 849.180611][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.188696][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.200011][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.221538][T15012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.302728][T15012] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.313259][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.327756][T15095] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 849.329970][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.338442][T15095] CPU: 0 PID: 15095 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 849.353667][T15095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 849.363763][T15095] Call Trace: [ 849.367084][T15095] [ 849.370058][T15095] dump_stack_lvl+0x1e3/0x2cb [ 849.374791][T15095] ? nf_tcp_handle_invalid+0x642/0x642 [ 849.380297][T15095] ? panic+0x75d/0x75d [ 849.384501][T15095] ? ___ratelimit+0x4c0/0x670 [ 849.389247][T15095] ? local_lock_release+0x170/0x170 [ 849.394494][T15095] dump_header+0xdf/0x9c0 [ 849.398875][T15095] oom_kill_process+0xf8/0x520 [ 849.403684][T15095] out_of_memory+0xf30/0x12f0 [ 849.408414][T15095] ? mutex_lock_io_nested+0x60/0x60 [ 849.413673][T15095] ? preempt_schedule+0xd9/0xe0 [ 849.418574][T15095] ? unregister_oom_notifier+0x20/0x20 [ 849.424079][T15095] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 849.430125][T15095] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 849.435716][T15095] ? preempt_schedule_thunk+0x16/0x18 [ 849.438010][T15021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.441126][T15095] ? mem_cgroup_oom_trylock+0x210/0x210 [ 849.441176][T15095] ? cgroup_file_notify+0x123/0x190 [ 849.441215][T15095] memory_max_write+0x34d/0x470 [ 849.441271][T15095] ? memory_max_show+0xa0/0xa0 [ 849.468304][T15095] ? read_lock_is_recursive+0x10/0x10 [ 849.473731][T15095] ? memory_max_show+0xa0/0xa0 [ 849.478580][T15095] cgroup_file_write+0x2c6/0x690 [ 849.483578][T15095] ? mutex_lock_io_nested+0x60/0x60 [ 849.487830][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.488897][T15095] ? cgroup_seqfile_stop+0xd0/0xd0 [ 849.500690][T15095] ? __virt_addr_valid+0x22b/0x2e0 [ 849.505859][T15095] ? cgroup_seqfile_stop+0xd0/0xd0 [ 849.511052][T15095] kernfs_fop_write_iter+0x3a2/0x4f0 [ 849.516407][T15095] vfs_write+0x7ae/0xba0 [ 849.520727][T15095] ? file_end_write+0x250/0x250 [ 849.525648][T15095] ? mutex_lock_nested+0x17/0x20 [ 849.530634][T15095] ? __fdget_pos+0x250/0x2f0 [ 849.535274][T15095] ? ksys_write+0x77/0x2c0 [ 849.539753][T15095] ksys_write+0x19c/0x2c0 [ 849.544136][T15095] ? print_irqtrace_events+0x210/0x210 [ 849.549683][T15095] ? __ia32_sys_read+0x80/0x80 [ 849.554585][T15095] ? syscall_enter_from_user_mode+0x2e/0x220 [ 849.560619][T15095] ? lockdep_hardirqs_on+0x94/0x130 [ 849.565867][T15095] ? syscall_enter_from_user_mode+0x2e/0x220 [ 849.571927][T15095] do_syscall_64+0x3d/0xb0 [ 849.576385][T15095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 849.577171][T15021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.582562][T15095] RIP: 0033:0x7f8f24e8c169 [ 849.582587][T15095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.582605][T15095] RSP: 002b:00007f8f25c21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.582632][T15095] RAX: ffffffffffffffda RBX: 00007f8f24fabf80 RCX: 00007f8f24e8c169 [ 849.582648][T15095] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 849.582664][T15095] RBP: 00007f8f24ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 849.582680][T15095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.582695][T15095] R13: 00007ffc9d0e93bf R14: 00007f8f25c21300 R15: 0000000000022000 [ 849.582731][T15095] [ 849.589571][T15095] memory: usage 10604kB, limit 0kB, failcnt 256 [ 849.638273][T15021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.643937][T15095] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 849.694807][T15095] Memory cgroup stats for /syz0: [ 849.694985][T15095] anon 114688 [ 849.694985][T15095] file 10440704 [ 849.694985][T15095] kernel 290816 [ 849.694985][T15095] kernel_stack 65536 [ 849.694985][T15095] pagetables 81920 [ 849.694985][T15095] sec_pagetables 0 [ 849.694985][T15095] percpu 0 [ 849.694985][T15095] sock 0 [ 849.694985][T15095] vmalloc 0 [ 849.694985][T15095] shmem 10436608 [ 849.694985][T15095] zswap 0 [ 849.694985][T15095] zswapped 0 [ 849.694985][T15095] file_mapped 81920 [ 849.694985][T15095] file_dirty 4096 [ 849.694985][T15095] file_writeback 0 [ 849.694985][T15095] swapcached 0 [ 849.694985][T15095] anon_thp 0 [ 849.694985][T15095] file_thp 0 [ 849.694985][T15095] shmem_thp 0 [ 849.694985][T15095] inactive_anon 0 [ 849.694985][T15095] active_anon 10551296 [ 849.694985][T15095] inactive_file 0 [ 849.694985][T15095] active_file 4096 [ 849.694985][T15095] unevictable 0 [ 849.694985][T15095] slab_reclaimable 46520 [ 849.694985][T15095] slab_unreclaimable 71304 [ 849.694985][T15095] slab 117824 [ 849.803607][T15095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14957,uid=0 [ 849.824569][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.825413][T15095] Memory cgroup out of memory: Killed process 14957 (syz-executor.0) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 849.836267][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.863734][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.876098][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.888301][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.895510][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.906196][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.924797][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.937365][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.944576][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.964931][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.976256][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 849.994891][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.007716][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.027995][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.046403][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.057548][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.075915][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.087503][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.106054][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.117411][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.137388][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.147754][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.155036][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.172481][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.187310][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.205839][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.213060][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.231912][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.248183][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.274445][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.292419][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.308202][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.326058][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.464600][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.484262][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.507790][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.525727][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.538730][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.556230][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.566414][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.580928][T13757] Bluetooth: hci3: command 0x0419 tx timeout [ 850.586042][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.598242][T15012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.618897][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:17:22 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:17:22 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x22) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:17:22 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 850.847942][T15122] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 850.969134][T15122] CPU: 0 PID: 15122 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 850.977682][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 850.987782][T15122] Call Trace: [ 850.991112][T15122] [ 850.994081][T15122] dump_stack_lvl+0x1e3/0x2cb [ 850.998820][T15122] ? nf_tcp_handle_invalid+0x642/0x642 [ 851.004335][T15122] ? panic+0x75d/0x75d [ 851.008544][T15122] ? ___ratelimit+0x4c0/0x670 [ 851.013282][T15122] ? local_lock_release+0x170/0x170 [ 851.018538][T15122] dump_header+0xdf/0x9c0 [ 851.022928][T15122] oom_kill_process+0xf8/0x520 [ 851.027737][T15122] out_of_memory+0xf30/0x12f0 [ 851.032464][T15122] ? mutex_lock_io_nested+0x60/0x60 [ 851.037768][T15122] ? preempt_schedule+0xd9/0xe0 [ 851.042664][T15122] ? unregister_oom_notifier+0x20/0x20 [ 851.048164][T15122] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 851.054215][T15122] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 851.059827][T15122] ? preempt_schedule_thunk+0x16/0x18 [ 851.065257][T15122] ? mem_cgroup_oom_trylock+0x210/0x210 [ 851.070861][T15122] ? cgroup_file_notify+0x123/0x190 [ 851.076175][T15122] memory_max_write+0x34d/0x470 [ 851.081060][T15122] ? memory_max_show+0xa0/0xa0 [ 851.085876][T15122] ? read_lock_is_recursive+0x10/0x10 [ 851.091282][T15122] ? memory_max_show+0xa0/0xa0 [ 851.096077][T15122] cgroup_file_write+0x2c6/0x690 [ 851.101053][T15122] ? mutex_lock_io_nested+0x60/0x60 [ 851.106277][T15122] ? cgroup_seqfile_stop+0xd0/0xd0 [ 851.111418][T15122] ? __virt_addr_valid+0x22b/0x2e0 [ 851.116644][T15122] ? cgroup_seqfile_stop+0xd0/0xd0 [ 851.121773][T15122] kernfs_fop_write_iter+0x3a2/0x4f0 [ 851.127111][T15122] vfs_write+0x7ae/0xba0 [ 851.131378][T15122] ? file_end_write+0x250/0x250 [ 851.136266][T15122] ? mutex_lock_nested+0x17/0x20 [ 851.141308][T15122] ? __fdget_pos+0x250/0x2f0 [ 851.145909][T15122] ? ksys_write+0x77/0x2c0 [ 851.150377][T15122] ksys_write+0x19c/0x2c0 [ 851.154726][T15122] ? print_irqtrace_events+0x210/0x210 [ 851.160207][T15122] ? __ia32_sys_read+0x80/0x80 [ 851.164989][T15122] ? syscall_enter_from_user_mode+0x2e/0x220 [ 851.170989][T15122] ? lockdep_hardirqs_on+0x94/0x130 [ 851.176207][T15122] ? syscall_enter_from_user_mode+0x2e/0x220 [ 851.182297][T15122] do_syscall_64+0x3d/0xb0 [ 851.186732][T15122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 851.192636][T15122] RIP: 0033:0x7f6a3828c169 [ 851.197065][T15122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 851.216772][T15122] RSP: 002b:00007f6a39022168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.225201][T15122] RAX: ffffffffffffffda RBX: 00007f6a383abf80 RCX: 00007f6a3828c169 [ 851.233199][T15122] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 851.241183][T15122] RBP: 00007f6a382e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 851.249163][T15122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.257139][T15122] R13: 00007ffe103ef9cf R14: 00007f6a39022300 R15: 0000000000022000 [ 851.265134][T15122] [ 851.272545][T13757] Bluetooth: hci4: command 0x0419 tx timeout [ 851.399841][T15122] memory: usage 8560kB, limit 0kB, failcnt 104 [ 851.406259][T15122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 851.598107][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.599555][T15122] Memory cgroup stats for [ 851.617867][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.639215][T15122] /syz1: [ 851.639418][T15122] anon 131072 [ 851.639418][T15122] file 8343552 [ 851.639418][T15122] kernel 290816 [ 851.639418][T15122] kernel_stack 65536 [ 851.639418][T15122] pagetables 81920 [ 851.639418][T15122] sec_pagetables 0 [ 851.639418][T15122] percpu 0 [ 851.639418][T15122] sock 0 [ 851.639418][T15122] vmalloc 0 [ 851.639418][T15122] shmem 8343552 [ 851.639418][T15122] zswap 0 [ 851.639418][T15122] zswapped 0 [ 851.639418][T15122] file_mapped 147456 [ 851.639418][T15122] file_dirty 0 [ 851.639418][T15122] file_writeback 0 [ 851.639418][T15122] swapcached 0 [ 851.639418][T15122] anon_thp 0 [ 851.639418][T15122] file_thp 0 [ 851.639418][T15122] shmem_thp 0 [ 851.639418][T15122] inactive_anon 8343552 [ 851.639418][T15122] active_anon 131072 [ 851.639418][T15122] inactive_file 0 [ 851.639418][T15122] active_file 0 [ 851.639418][T15122] unevictable 0 [ 851.639418][T15122] slab_reclaimable 39336 [ 851.639418][T15122] slab_unreclaimable 71952 [ 851.639418][T15122] slab 111288 [ 851.771116][T15021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.902619][T15122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14672,uid=0 [ 852.042983][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.049303][T15122] Memory cgroup out of memory: Killed process 14672 (syz-executor.1) total-vm:50576kB, anon-rss:472kB, file-rss:9116kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 852.060030][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.112814][T15012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.812429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.834822][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.865305][T15021] device veth0_vlan entered promiscuous mode [ 852.873231][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.891895][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.905876][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.923815][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.954957][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.963311][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.975002][T15021] device veth1_vlan entered promiscuous mode [ 853.003697][T15012] device veth0_vlan entered promiscuous mode [ 853.022428][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 853.031564][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.040936][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.065825][T15012] device veth1_vlan entered promiscuous mode [ 853.076239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 853.085607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.096913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.105719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 853.131894][T15021] device veth0_macvtap entered promiscuous mode [ 853.144648][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 853.153843][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.163982][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.181278][T15021] device veth1_macvtap entered promiscuous mode [ 853.194090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.203734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.212633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.222371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.232172][T15012] device veth0_macvtap entered promiscuous mode [ 853.253190][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.264112][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.274873][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.286934][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.298187][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.309289][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.320072][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.330996][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.343034][T15021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.356330][T15012] device veth1_macvtap entered promiscuous mode [ 853.366989][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.375754][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.384607][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.393775][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.406448][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.419130][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.430004][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.440885][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.451033][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.461975][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.475308][T15021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.486062][T15021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.498878][T15021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.517118][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.532825][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.549976][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.568198][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.578348][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.598281][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.614561][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.634359][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.645810][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.662249][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.676136][T15012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.686737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.702046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.716855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.727151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.742547][T15021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.756178][T15021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.765343][T15021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.774757][T15021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.799980][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.818122][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.830844][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.841524][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.851691][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.862573][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.872774][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.883500][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.893589][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.904644][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.917162][T15012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.925186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.934001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.962802][T15012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.979100][T15012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.988385][T15012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.997710][T15012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.110491][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.119295][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.138593][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.138606][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.156034][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.180739][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.212219][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.234400][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.245186][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.245394][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.264808][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.278138][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.295745][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.304554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.409924][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.565785][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.089905][T15153] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 855.144860][T15153] CPU: 1 PID: 15153 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 855.153356][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 855.163539][T15153] Call Trace: [ 855.166935][T15153] [ 855.169902][T15153] dump_stack_lvl+0x1e3/0x2cb [ 855.174643][T15153] ? nf_tcp_handle_invalid+0x642/0x642 [ 855.180161][T15153] ? panic+0x75d/0x75d [ 855.184276][T15153] ? ___ratelimit+0x4c0/0x670 [ 855.189015][T15153] ? local_lock_release+0x170/0x170 [ 855.194285][T15153] dump_header+0xdf/0x9c0 [ 855.198663][T15153] oom_kill_process+0xf8/0x520 [ 855.203491][T15153] out_of_memory+0xf30/0x12f0 [ 855.208216][T15153] ? mutex_lock_io_nested+0x60/0x60 [ 855.213583][T15153] ? mark_lock+0x9a/0x340 [ 855.217952][T15153] ? unregister_oom_notifier+0x20/0x20 [ 855.223578][T15153] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 855.229628][T15153] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 855.235229][T15153] ? mem_cgroup_oom_trylock+0x210/0x210 [ 855.240883][T15153] ? cgroup_file_notify+0x123/0x190 [ 855.246146][T15153] memory_max_write+0x34d/0x470 [ 855.251072][T15153] ? memory_max_show+0xa0/0xa0 [ 855.256035][T15153] ? memory_max_show+0xa0/0xa0 [ 855.260861][T15153] cgroup_file_write+0x2c6/0x690 [ 855.265855][T15153] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 855.272073][T15153] ? cgroup_seqfile_stop+0xd0/0xd0 [ 855.277308][T15153] ? lock_is_held_type+0x137/0x180 [ 855.282545][T15153] ? cgroup_seqfile_stop+0xd0/0xd0 [ 855.287741][T15153] kernfs_fop_write_iter+0x3a2/0x4f0 [ 855.293084][T15153] vfs_write+0x7ae/0xba0 [ 855.297363][T15153] ? file_end_write+0x250/0x250 [ 855.302269][T15153] ? mutex_lock_nested+0x17/0x20 [ 855.307227][T15153] ? __fdget_pos+0x250/0x2f0 [ 855.311915][T15153] ? ksys_write+0x77/0x2c0 [ 855.316357][T15153] ksys_write+0x19c/0x2c0 [ 855.320713][T15153] ? lockdep_hardirqs_on+0x94/0x130 [ 855.325937][T15153] ? __ia32_sys_read+0x80/0x80 [ 855.330739][T15153] do_syscall_64+0x3d/0xb0 [ 855.335181][T15153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 855.341105][T15153] RIP: 0033:0x7f2a8ae8c169 [ 855.345545][T15153] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.365184][T15153] RSP: 002b:00007f2a8bc5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.373623][T15153] RAX: ffffffffffffffda RBX: 00007f2a8afabf80 RCX: 00007f2a8ae8c169 [ 855.381609][T15153] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 855.389622][T15153] RBP: 00007f2a8aee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 855.397611][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.405627][T15153] R13: 00007ffc651e770f R14: 00007f2a8bc5a300 R15: 0000000000022000 [ 855.413627][T15153] [ 855.439209][T15153] memory: usage 4696kB, limit 0kB, failcnt 100 [ 855.446445][T15153] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 855.482056][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.484263][T15153] Memory cgroup stats for /syz4: [ 855.494063][T15153] anon 114688 [ 855.494063][T15153] file 4407296 [ 855.494063][T15153] kernel 241664 [ 855.494063][T15153] kernel_stack 32768 [ 855.494063][T15153] pagetables 81920 [ 855.494063][T15153] sec_pagetables 0 [ 855.494063][T15153] percpu 0 [ 855.494063][T15153] sock 0 [ 855.494063][T15153] vmalloc 0 [ 855.494063][T15153] shmem 4407296 [ 855.494063][T15153] zswap 0 [ 855.494063][T15153] zswapped 0 [ 855.494063][T15153] file_mapped 81920 [ 855.494063][T15153] file_dirty 0 [ 855.494063][T15153] file_writeback 0 [ 855.494063][T15153] swapcached 0 [ 855.494063][T15153] anon_thp 0 [ 855.494063][T15153] file_thp 0 [ 855.494063][T15153] shmem_thp 0 [ 855.494063][T15153] inactive_anon 4407296 [ 855.494063][T15153] active_anon 114688 [ 855.494063][T15153] inactive_file 0 [ 855.494063][T15153] active_file 0 [ 855.494063][T15153] unevictable 0 [ 855.494063][T15153] slab_reclaimable 25808 [ 855.494063][T15153] slab_unreclaimable 71952 [ 855.494063][T15153] slab 97760 [ 855.686655][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.733602][T15153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15012,uid=0 [ 855.751102][T15153] Memory cgroup out of memory: Killed process 15012 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 855.818874][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.886492][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:17:27 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:27 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:17:27 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:27 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x23) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:17:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 856.538713][T15021] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 856.568960][T15021] CPU: 1 PID: 15021 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 856.577456][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 856.587551][T15021] Call Trace: [ 856.590864][T15021] [ 856.593830][T15021] dump_stack_lvl+0x1e3/0x2cb [ 856.598565][T15021] ? nf_tcp_handle_invalid+0x642/0x642 [ 856.604070][T15021] ? panic+0x75d/0x75d [ 856.608182][T15021] ? ___ratelimit+0x4c0/0x670 [ 856.612930][T15021] ? local_lock_release+0x170/0x170 [ 856.618178][T15021] dump_header+0xdf/0x9c0 [ 856.622557][T15021] oom_kill_process+0xf8/0x520 [ 856.627368][T15021] out_of_memory+0xf30/0x12f0 [ 856.632093][T15021] ? mutex_lock_io_nested+0x60/0x60 [ 856.637346][T15021] ? unregister_oom_notifier+0x20/0x20 [ 856.642851][T15021] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 856.648439][T15021] ? __lock_acquire+0x1f80/0x1f80 [ 856.653507][T15021] ? mem_cgroup_oom_trylock+0x210/0x210 [ 856.659102][T15021] ? do_raw_spin_unlock+0x137/0x8a0 [ 856.664349][T15021] ? mem_cgroup_iter+0x349/0x470 [ 856.669341][T15021] try_charge_memcg+0xcaa/0x16b0 [ 856.674372][T15021] ? percpu_ref_put+0x150/0x150 [ 856.679444][T15021] ? rcu_lock_acquire+0x30/0x30 [ 856.684345][T15021] ? __lock_acquire+0x1f80/0x1f80 [ 856.689430][T15021] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 856.695484][T15021] obj_cgroup_charge+0x2ae/0x410 [ 856.700473][T15021] ? __lock_acquire+0x1f80/0x1f80 [ 856.705561][T15021] ? local_lock_release+0x120/0x120 [ 856.710823][T15021] slab_pre_alloc_hook+0x27e/0x2a0 [ 856.715991][T15021] kmem_cache_alloc_node+0x52/0x310 [ 856.721239][T15021] ? dup_task_struct+0x57/0x6d0 [ 856.726155][T15021] dup_task_struct+0x57/0x6d0 [ 856.730874][T15021] ? _raw_spin_unlock_irq+0x1f/0x40 [ 856.736121][T15021] ? lockdep_hardirqs_on+0x94/0x130 [ 856.741372][T15021] copy_process+0x637/0x4020 [ 856.746020][T15021] ? _raw_spin_unlock+0x24/0x40 [ 856.750930][T15021] ? do_wp_page+0x83d/0x1ab0 [ 856.755570][T15021] ? idle_dummy+0x10/0x10 [ 856.759937][T15021] ? handle_mm_fault+0x3606/0x5140 [ 856.765099][T15021] kernel_clone+0x222/0x920 [ 856.769652][T15021] ? create_io_thread+0x180/0x180 [ 856.774746][T15021] __x64_sys_clone+0x231/0x280 [ 856.779557][T15021] ? __do_sys_vfork+0x110/0x110 [ 856.784449][T15021] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 856.790494][T15021] ? syscall_enter_from_user_mode+0x2e/0x220 [ 856.796783][T15021] ? lockdep_hardirqs_on+0x94/0x130 [ 856.802031][T15021] ? syscall_enter_from_user_mode+0x2e/0x220 [ 856.808065][T15021] do_syscall_64+0x3d/0xb0 [ 856.812532][T15021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 856.818463][T15021] RIP: 0033:0x7f07a9489e9b [ 856.822928][T15021] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 856.844848][T15021] RSP: 002b:00007ffcaf0f8b30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 856.853410][T15021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07a9489e9b [ 856.861447][T15021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 856.869464][T15021] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556d21400 [ 856.877475][T15021] R10: 0000555556d216d0 R11: 0000000000000246 R12: 0000000000000001 [ 856.885504][T15021] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcaf0f8c10 [ 856.893706][T15021] [ 856.959152][T15021] memory: usage 10320kB, limit 0kB, failcnt 113 [ 856.972410][T15021] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 857.011735][T15021] Memory cgroup stats for /syz5: [ 857.011960][T15021] anon 40960 [ 857.011960][T15021] file 10440704 [ 857.011960][T15021] kernel 86016 [ 857.011960][T15021] kernel_stack 0 [ 857.011960][T15021] pagetables 8192 [ 857.011960][T15021] sec_pagetables 0 [ 857.011960][T15021] percpu 0 [ 857.011960][T15021] sock 0 [ 857.011960][T15021] vmalloc 0 [ 857.011960][T15021] shmem 10440704 [ 857.011960][T15021] zswap 0 [ 857.011960][T15021] zswapped 0 [ 857.011960][T15021] file_mapped 61440 [ 857.011960][T15021] file_dirty 0 [ 857.011960][T15021] file_writeback 0 [ 857.011960][T15021] swapcached 0 [ 857.011960][T15021] anon_thp 0 [ 857.011960][T15021] file_thp 0 [ 857.011960][T15021] shmem_thp 0 [ 857.011960][T15021] inactive_anon 0 [ 857.011960][T15021] active_anon 10481664 [ 857.011960][T15021] inactive_file 0 [ 857.011960][T15021] active_file 0 [ 857.011960][T15021] unevictable 0 [ 857.011960][T15021] slab_reclaimable 33456 [ 857.011960][T15021] slab_unreclaimable 32296 [ 857.011960][T15021] slab 65752 12:17:28 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 857.247660][T15021] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15021,uid=0 [ 857.268558][T15021] Memory cgroup out of memory: Killed process 15021 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 12:17:28 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:29 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:29 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x23) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:29 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 858.753781][T13757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.763598][T13757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.773502][T13757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.784885][T13757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.794189][T13757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 858.804824][T13757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.949837][T13757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.963131][T13757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.971304][T13757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.986840][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.994653][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 859.003685][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.070587][ T3665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.108446][ T3665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.119965][ T3665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.127854][ T3665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.137943][ T3665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 859.154735][ T3665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.176418][ T11] device hsr_slave_0 left promiscuous mode [ 859.189986][ T11] device hsr_slave_1 left promiscuous mode [ 859.199690][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.207141][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.234664][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.248786][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.261753][ T11] device bridge_slave_1 left promiscuous mode [ 859.268026][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.285915][ T11] device bridge_slave_0 left promiscuous mode [ 859.295388][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.316445][ T11] device hsr_slave_0 left promiscuous mode [ 859.328127][ T11] device hsr_slave_1 left promiscuous mode [ 859.337554][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.354190][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.365855][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.383236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.402258][ T11] device bridge_slave_1 left promiscuous mode [ 859.408569][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.425237][ T11] device bridge_slave_0 left promiscuous mode [ 859.443091][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.477589][ T11] device veth1_macvtap left promiscuous mode [ 859.483913][ T11] device veth0_macvtap left promiscuous mode [ 859.497334][ T11] device veth1_vlan left promiscuous mode [ 859.505074][ T11] device veth0_vlan left promiscuous mode [ 859.520827][ T11] device veth1_macvtap left promiscuous mode [ 859.526928][ T11] device veth0_macvtap left promiscuous mode [ 859.540679][ T11] device veth1_vlan left promiscuous mode [ 859.548284][ T11] device veth0_vlan left promiscuous mode [ 859.815862][T13761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.829485][T13761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.846672][T13761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.856692][T13761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.870431][T13761] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 859.877760][T13761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 860.107618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 860.124404][ T11] team0 (unregistering): Port device team_slave_0 removed [ 860.136714][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.152342][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.222428][ T11] bond0 (unregistering): Released all slaves [ 860.354748][ T11] team0 (unregistering): Port device team_slave_1 removed [ 860.368635][ T11] team0 (unregistering): Port device team_slave_0 removed [ 860.383298][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.398790][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.472035][ T11] bond0 (unregistering): Released all slaves [ 860.844341][T15222] chnl_net:caif_netlink_parms(): no params data found [ 860.899721][T13761] Bluetooth: hci0: command 0x0409 tx timeout [ 860.935916][T15217] chnl_net:caif_netlink_parms(): no params data found [ 861.059323][T13761] Bluetooth: hci1: command 0x0409 tx timeout [ 861.201963][T15242] chnl_net:caif_netlink_parms(): no params data found [ 861.220982][T13761] Bluetooth: hci3: command 0x0409 tx timeout [ 861.229613][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.236835][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.259874][T15222] device bridge_slave_0 entered promiscuous mode [ 861.270138][T15224] chnl_net:caif_netlink_parms(): no params data found [ 861.287500][T15217] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.297453][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.324298][T15217] device bridge_slave_0 entered promiscuous mode [ 861.344459][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.352946][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.381073][T15222] device bridge_slave_1 entered promiscuous mode [ 861.408464][T15217] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.425509][T15217] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.436545][T15217] device bridge_slave_1 entered promiscuous mode [ 861.541291][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.612795][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.675955][T15217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.764883][T15217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.881633][T15222] team0: Port device team_slave_0 added [ 861.920870][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.928010][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.939225][T13761] Bluetooth: hci4: command 0x0409 tx timeout [ 861.973527][T15224] device bridge_slave_0 entered promiscuous mode [ 862.020620][T15242] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.027861][T15242] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.050241][T15242] device bridge_slave_0 entered promiscuous mode [ 862.059579][T15222] team0: Port device team_slave_1 added [ 862.065773][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.077815][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.104067][T15224] device bridge_slave_1 entered promiscuous mode [ 862.114826][T15217] team0: Port device team_slave_0 added [ 862.129682][T15242] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.137168][T15242] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.160338][T15242] device bridge_slave_1 entered promiscuous mode [ 862.284533][T15217] team0: Port device team_slave_1 added [ 862.312178][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.321699][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.379112][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.403534][T15224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.457308][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.469139][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.512220][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.537786][T15224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.571008][T15242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.602088][T15217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.629289][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.684488][T15217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.734255][T15242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.760082][T15217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.767291][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.808779][T15217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.868783][T15224] team0: Port device team_slave_0 added [ 862.905676][T15242] team0: Port device team_slave_0 added [ 862.915059][T15222] device hsr_slave_0 entered promiscuous mode [ 862.937428][T15222] device hsr_slave_1 entered promiscuous mode [ 862.954150][T15224] team0: Port device team_slave_1 added [ 862.979173][T13761] Bluetooth: hci0: command 0x041b tx timeout [ 863.017166][T15242] team0: Port device team_slave_1 added [ 863.093831][T15224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.109029][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.139286][T13761] Bluetooth: hci1: command 0x041b tx timeout [ 863.147531][T15224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.192316][T15217] device hsr_slave_0 entered promiscuous mode [ 863.229106][T15217] device hsr_slave_1 entered promiscuous mode [ 863.249749][T15217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.257369][T15217] Cannot create hsr debugfs directory [ 863.299284][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 863.311336][T15224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.318336][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.350799][T15224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.428542][T15242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.446370][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.483576][T15242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.521519][T15242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.528584][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.556408][T15242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.658164][T15224] device hsr_slave_0 entered promiscuous mode [ 863.665353][T15224] device hsr_slave_1 entered promiscuous mode [ 863.672678][T15224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.680710][T15224] Cannot create hsr debugfs directory [ 863.741243][T15242] device hsr_slave_0 entered promiscuous mode [ 863.748983][T15242] device hsr_slave_1 entered promiscuous mode [ 863.756458][T15242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.764540][T15242] Cannot create hsr debugfs directory [ 863.847156][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.029596][T13761] Bluetooth: hci4: command 0x041b tx timeout [ 864.158665][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.315251][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.397834][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.610796][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.683437][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.743614][T15222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 864.811038][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.841258][T15222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 864.861980][T15222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 864.921764][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.969439][T15222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.059185][T13761] Bluetooth: hci0: command 0x040f tx timeout [ 865.108259][T15222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.124422][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 865.133967][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 865.164365][T15222] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.200616][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 865.219494][T13761] Bluetooth: hci1: command 0x040f tx timeout [ 865.220609][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 865.242814][T11183] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.250005][T11183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.316776][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.326700][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 865.344932][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 865.357678][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.364898][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.379282][T13761] Bluetooth: hci3: command 0x040f tx timeout [ 865.386851][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 865.405565][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 865.475902][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.490722][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 865.509926][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.529926][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.549813][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.567338][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.577771][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.598164][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.607335][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.621227][T15222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 866.099431][T13761] Bluetooth: hci4: command 0x040f tx timeout [ 866.265963][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 866.277710][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 866.293444][T15222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.342728][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.370078][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.455974][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.475416][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.488841][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.503240][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.542474][T15224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 866.716810][T15222] device veth0_vlan entered promiscuous mode [ 866.728191][T15224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 866.770533][T15224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 866.867042][T15222] device veth1_vlan entered promiscuous mode [ 866.880799][T15224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 867.139143][T13761] Bluetooth: hci0: command 0x0419 tx timeout [ 867.169276][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 867.177660][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 867.268420][T15222] device veth0_macvtap entered promiscuous mode [ 867.299217][T13761] Bluetooth: hci1: command 0x0419 tx timeout [ 867.429532][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 867.438342][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 867.459274][T13761] Bluetooth: hci3: command 0x0419 tx timeout [ 867.504454][T15222] device veth1_macvtap entered promiscuous mode [ 867.541270][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 867.564225][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 867.678820][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.699449][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.720434][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.740821][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.759249][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.777879][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.792069][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.813210][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.825373][T15222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.872559][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 867.898230][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.912269][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.928480][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.987891][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.017831][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.039144][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.059055][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.068913][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.099268][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.120662][T15222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.179082][T13761] Bluetooth: hci4: command 0x0419 tx timeout [ 868.252999][T15224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.266474][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 868.278609][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 868.290661][T15222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.309071][T15222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.317915][T15222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.349056][T15222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.613511][T15224] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.793127][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 868.815785][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 868.919558][ T11] device hsr_slave_0 left promiscuous mode [ 868.939081][ T11] device hsr_slave_1 left promiscuous mode [ 868.959110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.966586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.001284][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.008756][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.049590][ T11] device bridge_slave_1 left promiscuous mode [ 869.055858][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.100388][ T11] device bridge_slave_0 left promiscuous mode [ 869.106691][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.162117][ T11] device hsr_slave_0 left promiscuous mode [ 869.189132][ T11] device hsr_slave_1 left promiscuous mode [ 869.219273][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.226778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.247522][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.259164][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.281114][ T11] device bridge_slave_1 left promiscuous mode [ 869.287373][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.311813][ T11] device bridge_slave_0 left promiscuous mode [ 869.318019][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.348796][ T11] device veth1_macvtap left promiscuous mode [ 869.366074][ T11] device veth0_macvtap left promiscuous mode [ 869.375665][ T11] device veth1_vlan left promiscuous mode [ 869.389835][ T11] device veth0_vlan left promiscuous mode [ 869.397532][ T11] device veth1_macvtap left promiscuous mode [ 869.412775][ T11] device veth0_macvtap left promiscuous mode [ 869.425371][ T11] device veth1_vlan left promiscuous mode [ 869.435388][ T11] device veth0_vlan left promiscuous mode [ 869.780895][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.787255][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.996951][ T11] team0 (unregistering): Port device team_slave_1 removed [ 870.014236][ T11] team0 (unregistering): Port device team_slave_0 removed [ 870.028541][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.046594][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.134248][ T11] bond0 (unregistering): Released all slaves [ 870.384321][ T11] team0 (unregistering): Port device team_slave_1 removed [ 870.401760][ T11] team0 (unregistering): Port device team_slave_0 removed [ 870.416544][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.433559][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.523144][ T11] bond0 (unregistering): Released all slaves [ 870.610143][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.618219][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.633510][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 870.644903][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 870.670550][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.677690][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.698195][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 870.708085][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 870.717227][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.724469][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.733160][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 870.742085][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 870.751756][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 870.826629][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 870.845590][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 870.857367][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 870.875761][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.888398][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.923721][T15224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 870.946400][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.959166][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.982373][T15224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.994982][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 871.003794][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 871.012163][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 871.023834][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 871.033157][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 871.042158][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.088089][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.201917][T15242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 871.225006][T15242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 871.278128][T15392] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 871.312265][T15392] CPU: 1 PID: 15392 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 871.320751][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 871.330847][T15392] Call Trace: [ 871.334159][T15392] [ 871.337123][T15392] dump_stack_lvl+0x1e3/0x2cb [ 871.341855][T15392] ? nf_tcp_handle_invalid+0x642/0x642 [ 871.347367][T15392] ? panic+0x75d/0x75d [ 871.351476][T15392] ? ___ratelimit+0x4c0/0x670 [ 871.356225][T15392] ? local_lock_release+0x170/0x170 [ 871.361562][T15392] dump_header+0xdf/0x9c0 [ 871.365933][T15392] oom_kill_process+0xf8/0x520 [ 871.370770][T15392] out_of_memory+0xf30/0x12f0 [ 871.375496][T15392] ? mutex_lock_io_nested+0x60/0x60 [ 871.380763][T15392] ? preempt_schedule+0xd9/0xe0 [ 871.385669][T15392] ? unregister_oom_notifier+0x20/0x20 [ 871.391171][T15392] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 871.397213][T15392] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 871.402810][T15392] ? preempt_schedule_thunk+0x16/0x18 [ 871.408242][T15392] ? mem_cgroup_oom_trylock+0x210/0x210 [ 871.413938][T15392] ? cgroup_file_notify+0x123/0x190 [ 871.419273][T15392] memory_max_write+0x34d/0x470 [ 871.424199][T15392] ? memory_max_show+0xa0/0xa0 [ 871.429024][T15392] ? read_lock_is_recursive+0x10/0x10 [ 871.434456][T15392] ? memory_max_show+0xa0/0xa0 [ 871.439268][T15392] cgroup_file_write+0x2c6/0x690 [ 871.444260][T15392] ? mutex_lock_io_nested+0x60/0x60 [ 871.449516][T15392] ? cgroup_seqfile_stop+0xd0/0xd0 [ 871.454691][T15392] ? __virt_addr_valid+0x22b/0x2e0 [ 871.459869][T15392] ? cgroup_seqfile_stop+0xd0/0xd0 [ 871.465117][T15392] kernfs_fop_write_iter+0x3a2/0x4f0 [ 871.470465][T15392] vfs_write+0x7ae/0xba0 [ 871.474780][T15392] ? file_end_write+0x250/0x250 [ 871.479699][T15392] ? mutex_lock_nested+0x17/0x20 [ 871.484693][T15392] ? __fdget_pos+0x250/0x2f0 [ 871.489329][T15392] ? ksys_write+0x77/0x2c0 [ 871.493806][T15392] ksys_write+0x19c/0x2c0 [ 871.498275][T15392] ? print_irqtrace_events+0x210/0x210 [ 871.503804][T15392] ? __ia32_sys_read+0x80/0x80 [ 871.508719][T15392] ? syscall_enter_from_user_mode+0x2e/0x220 [ 871.514771][T15392] ? lockdep_hardirqs_on+0x94/0x130 [ 871.520023][T15392] ? syscall_enter_from_user_mode+0x2e/0x220 [ 871.526069][T15392] do_syscall_64+0x3d/0xb0 [ 871.530539][T15392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 871.536474][T15392] RIP: 0033:0x7fd22048c169 [ 871.540930][T15392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 871.560581][T15392] RSP: 002b:00007fd221228168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.569041][T15392] RAX: ffffffffffffffda RBX: 00007fd2205abf80 RCX: 00007fd22048c169 [ 871.577050][T15392] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 871.585039][T15392] RBP: 00007fd2204e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 871.593038][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.601040][T15392] R13: 00007ffd6cefa73f R14: 00007fd221228300 R15: 0000000000022000 [ 871.609062][T15392] [ 871.619403][T15242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 871.681077][T15242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 871.715718][T15217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.763916][T15217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.809480][T15392] memory: usage 10608kB, limit 0kB, failcnt 256 [ 871.815937][T15392] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 871.832897][T15392] Memory cgroup stats for /syz0: [ 871.833081][T15392] anon 114688 [ 871.833081][T15392] file 10440704 [ 871.833081][T15392] kernel 290816 [ 871.833081][T15392] kernel_stack 65536 [ 871.833081][T15392] pagetables 81920 [ 871.833081][T15392] sec_pagetables 0 [ 871.833081][T15392] percpu 0 [ 871.833081][T15392] sock 0 [ 871.833081][T15392] vmalloc 0 [ 871.833081][T15392] shmem 10436608 [ 871.833081][T15392] zswap 0 [ 871.833081][T15392] zswapped 0 [ 871.833081][T15392] file_mapped 81920 [ 871.833081][T15392] file_dirty 0 [ 871.833081][T15392] file_writeback 0 [ 871.833081][T15392] swapcached 0 [ 871.833081][T15392] anon_thp 0 [ 871.833081][T15392] file_thp 0 [ 871.833081][T15392] shmem_thp 0 [ 871.833081][T15392] inactive_anon 0 [ 871.833081][T15392] active_anon 10551296 [ 871.833081][T15392] inactive_file 4096 [ 871.833081][T15392] active_file 0 [ 871.833081][T15392] unevictable 0 [ 871.833081][T15392] slab_reclaimable 44976 [ 871.833081][T15392] slab_unreclaimable 71952 [ 871.833081][T15392] slab 116928 [ 871.836761][T15217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.838157][T15392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15222,uid=0 [ 871.947935][T15217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.968614][T15392] Memory cgroup out of memory: Killed process 15222 (syz-executor.0) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 871.997064][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 872.015128][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.066123][T15224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.303065][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.337990][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.365983][T15242] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.374329][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 872.383095][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 872.407749][T15217] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.427033][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 872.447684][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:17:43 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:17:43 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x23) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:43 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 872.456310][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 872.479933][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 872.488534][ T3733] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.495719][ T3733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.567971][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 872.598482][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 872.619838][ T3733] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.626995][ T3733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.736830][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 872.759768][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.807080][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.828751][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.846844][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 872.859211][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 872.897308][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 872.927288][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.934511][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.012996][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 873.031370][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 873.048741][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.089463][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.116269][T11183] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.123516][T11183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.178705][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 873.195230][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 873.229176][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 873.238704][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.302778][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 873.319949][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.328521][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 873.381070][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.403458][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 873.425029][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.434413][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 873.443925][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.459969][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 873.468556][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.492492][T15242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.518477][T15217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.539987][T15217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.560305][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 873.568410][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 873.585958][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.629530][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 873.649756][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 873.730622][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 873.750124][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 873.769596][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 873.778604][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.798919][T15224] device veth0_vlan entered promiscuous mode [ 873.830690][T15224] device veth1_vlan entered promiscuous mode [ 873.922230][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 873.943930][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 873.975486][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 873.995207][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 874.008346][T15224] device veth0_macvtap entered promiscuous mode [ 874.035235][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 874.055086][T15224] device veth1_macvtap entered promiscuous mode [ 874.101431][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.131076][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.149459][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.167712][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.178520][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.209358][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.243175][T15224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.268765][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 874.285716][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 874.323710][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.343650][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.389103][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.409229][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.426423][T15224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.437198][T15224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.462962][T15224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.489296][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 874.498219][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 874.527412][T15224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.544175][T15224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.575874][T15224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.597747][T15224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.615907][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.626106][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.647207][T15217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.672253][T15242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.705105][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.713967][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.808226][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 874.817795][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 874.876077][T15217] device veth0_vlan entered promiscuous mode [ 874.895063][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 874.926176][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 874.945361][T15217] device veth1_vlan entered promiscuous mode [ 875.032815][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.051090][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 875.082116][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 875.118132][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 875.197901][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.209360][T15217] device veth0_macvtap entered promiscuous mode [ 875.221306][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.254420][T15217] device veth1_macvtap entered promiscuous mode [ 875.310893][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 875.329992][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 875.338777][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 875.347163][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 875.361971][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 875.389805][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.430937][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.434777][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.499019][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.508882][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.567502][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.599078][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.626669][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.659040][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.682710][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.710857][T15217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.720297][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 875.741547][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 875.770021][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 875.794524][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.812749][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.823788][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.848528][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.861091][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.882452][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.896343][T15217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.910834][T15217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.944203][T15217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.965679][T15217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.978747][T15217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.987998][T15217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.997155][T15217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.095654][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 876.123088][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 876.180718][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 876.251991][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.427858][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.442614][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.454528][T15473] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 876.471607][T15242] device veth0_vlan entered promiscuous mode [ 876.485444][T15473] CPU: 1 PID: 15473 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 876.493967][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 876.504050][T15473] Call Trace: [ 876.507344][T15473] [ 876.510287][T15473] dump_stack_lvl+0x1e3/0x2cb [ 876.514989][T15473] ? nf_tcp_handle_invalid+0x642/0x642 [ 876.520482][T15473] ? panic+0x75d/0x75d [ 876.524574][T15473] ? ___ratelimit+0x4c0/0x670 [ 876.529277][T15473] ? local_lock_release+0x170/0x170 [ 876.534516][T15473] dump_header+0xdf/0x9c0 [ 876.538864][T15473] oom_kill_process+0xf8/0x520 [ 876.543644][T15473] out_of_memory+0xf30/0x12f0 [ 876.548338][T15473] ? mutex_lock_io_nested+0x60/0x60 [ 876.553555][T15473] ? lockdep_hardirqs_on+0x94/0x130 [ 876.558780][T15473] ? unregister_oom_notifier+0x20/0x20 [ 876.564262][T15473] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 876.569827][T15473] ? mark_lock+0x9a/0x340 [ 876.574167][T15473] ? mem_cgroup_oom_trylock+0x210/0x210 [ 876.579726][T15473] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 876.585650][T15473] ? cgroup_file_notify+0x123/0x190 [ 876.590873][T15473] memory_max_write+0x34d/0x470 [ 876.595755][T15473] ? memory_max_show+0xa0/0xa0 [ 876.600537][T15473] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 876.606542][T15473] ? print_irqtrace_events+0x210/0x210 [ 876.612025][T15473] ? memory_max_show+0xa0/0xa0 [ 876.616814][T15473] cgroup_file_write+0x2c6/0x690 [ 876.621771][T15473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.627954][T15473] ? cgroup_seqfile_stop+0xd0/0xd0 [ 876.633091][T15473] ? kernfs_fop_write_iter+0x306/0x4f0 [ 876.638580][T15473] ? cgroup_seqfile_stop+0xd0/0xd0 [ 876.643710][T15473] kernfs_fop_write_iter+0x3a2/0x4f0 [ 876.649022][T15473] vfs_write+0x7ae/0xba0 [ 876.653296][T15473] ? file_end_write+0x250/0x250 [ 876.658179][T15473] ? mutex_lock_nested+0x17/0x20 [ 876.663130][T15473] ? __fdget_pos+0x250/0x2f0 [ 876.667746][T15473] ? ksys_write+0x77/0x2c0 [ 876.672183][T15473] ksys_write+0x19c/0x2c0 [ 876.676533][T15473] ? print_irqtrace_events+0x210/0x210 [ 876.682020][T15473] ? __ia32_sys_read+0x80/0x80 [ 876.686801][T15473] ? syscall_enter_from_user_mode+0x2e/0x220 [ 876.692800][T15473] ? lockdep_hardirqs_on+0x94/0x130 [ 876.698015][T15473] ? syscall_enter_from_user_mode+0x2e/0x220 [ 876.704014][T15473] do_syscall_64+0x3d/0xb0 [ 876.708452][T15473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 876.714368][T15473] RIP: 0033:0x7f6ed248c169 [ 876.718795][T15473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 876.738424][T15473] RSP: 002b:00007f6ed32c8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 876.746852][T15473] RAX: ffffffffffffffda RBX: 00007f6ed25abf80 RCX: 00007f6ed248c169 [ 876.754834][T15473] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 876.762815][T15473] RBP: 00007f6ed24e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 876.770797][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.778775][T15473] R13: 00007fffd9bb0e9f R14: 00007f6ed32c8300 R15: 0000000000022000 [ 876.786776][T15473] [ 876.799948][T15473] memory: usage 4696kB, limit 0kB, failcnt 100 [ 876.807163][T15473] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 876.819252][T15473] Memory cgroup stats for /syz4: [ 876.821985][T15473] anon 114688 [ 876.821985][T15473] file 4407296 [ 876.821985][T15473] kernel 274432 [ 876.821985][T15473] kernel_stack 65536 [ 876.821985][T15473] pagetables 81920 [ 876.821985][T15473] sec_pagetables 0 [ 876.821985][T15473] percpu 0 [ 876.821985][T15473] sock 0 [ 876.821985][T15473] vmalloc 0 [ 876.821985][T15473] shmem 4407296 [ 876.821985][T15473] zswap 0 [ 876.821985][T15473] zswapped 0 [ 876.821985][T15473] file_mapped 81920 [ 876.821985][T15473] file_dirty 0 [ 876.821985][T15473] file_writeback 0 [ 876.821985][T15473] swapcached 0 [ 876.821985][T15473] anon_thp 0 [ 876.821985][T15473] file_thp 0 [ 876.821985][T15473] shmem_thp 0 [ 876.821985][T15473] inactive_anon 4407296 [ 876.821985][T15473] active_anon 114688 [ 876.821985][T15473] inactive_file 0 [ 876.821985][T15473] active_file 0 [ 876.821985][T15473] unevictable 0 [ 876.821985][T15473] slab_reclaimable 29152 [ 876.821985][T15473] slab_unreclaimable 74008 [ 876.821985][T15473] slab 103160 [ 876.924258][T15473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15224,uid=0 [ 876.941613][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.954765][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.968914][T15242] device veth1_vlan entered promiscuous mode [ 876.974802][T15473] Memory cgroup out of memory: Killed process 15224 (syz-executor.4) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 877.049719][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.080490][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.103350][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.122534][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.137544][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.146548][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.155824][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.175259][T15242] device veth0_macvtap entered promiscuous mode [ 877.240637][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.348875][T15242] device veth1_macvtap entered promiscuous mode [ 877.397928][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.450174][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.458727][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.479093][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.506268][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.529227][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.559511][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.574118][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.585332][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.595461][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.608632][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.618793][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.629989][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.644744][T15242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.656074][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.676229][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 877.684329][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.698679][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.733864][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.786217][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.810789][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.830099][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.841625][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.851764][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.863651][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.876214][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.887085][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.897221][T15242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.908124][T15242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.937752][T15242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.960446][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.985173][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 878.020557][T15494] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 878.036800][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.059092][T15494] CPU: 1 PID: 15494 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 878.067567][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 878.077680][T15494] Call Trace: [ 878.080995][T15494] [ 878.083959][T15494] dump_stack_lvl+0x1e3/0x2cb [ 878.088716][T15494] ? nf_tcp_handle_invalid+0x642/0x642 [ 878.094228][T15494] ? panic+0x75d/0x75d [ 878.098347][T15494] ? ___ratelimit+0x4c0/0x670 [ 878.103092][T15494] ? local_lock_release+0x170/0x170 [ 878.108354][T15494] dump_header+0xdf/0x9c0 [ 878.112743][T15494] oom_kill_process+0xf8/0x520 [ 878.117556][T15494] out_of_memory+0xf30/0x12f0 [ 878.122277][T15494] ? mutex_lock_io_nested+0x60/0x60 [ 878.127515][T15494] ? mark_lock+0x9a/0x340 [ 878.131860][T15494] ? unregister_oom_notifier+0x20/0x20 [ 878.137343][T15494] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 878.143362][T15494] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 878.148940][T15494] ? mem_cgroup_oom_trylock+0x210/0x210 [ 878.154516][T15494] ? cgroup_file_notify+0x123/0x190 [ 878.159742][T15494] memory_max_write+0x34d/0x470 [ 878.164628][T15494] ? memory_max_show+0xa0/0xa0 [ 878.169414][T15494] ? read_lock_is_recursive+0x10/0x10 [ 878.174903][T15494] ? memory_max_show+0xa0/0xa0 [ 878.179799][T15494] cgroup_file_write+0x2c6/0x690 [ 878.184759][T15494] ? mutex_lock_io_nested+0x60/0x60 [ 878.189977][T15494] ? cgroup_seqfile_stop+0xd0/0xd0 [ 878.195108][T15494] ? __virt_addr_valid+0x22b/0x2e0 [ 878.200246][T15494] ? cgroup_seqfile_stop+0xd0/0xd0 [ 878.205519][T15494] kernfs_fop_write_iter+0x3a2/0x4f0 [ 878.210852][T15494] vfs_write+0x7ae/0xba0 [ 878.215142][T15494] ? file_end_write+0x250/0x250 [ 878.220025][T15494] ? mutex_lock_nested+0x17/0x20 [ 878.225258][T15494] ? __fdget_pos+0x250/0x2f0 [ 878.229990][T15494] ? ksys_write+0x77/0x2c0 [ 878.234448][T15494] ksys_write+0x19c/0x2c0 [ 878.238835][T15494] ? print_irqtrace_events+0x210/0x210 [ 878.244339][T15494] ? __ia32_sys_read+0x80/0x80 [ 878.249131][T15494] ? syscall_enter_from_user_mode+0x2e/0x220 [ 878.255133][T15494] ? lockdep_hardirqs_on+0x94/0x130 [ 878.260387][T15494] ? syscall_enter_from_user_mode+0x2e/0x220 [ 878.266478][T15494] do_syscall_64+0x3d/0xb0 [ 878.270912][T15494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 878.276825][T15494] RIP: 0033:0x7fe350e8c169 [ 878.281609][T15494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 878.301247][T15494] RSP: 002b:00007fe34f9fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 878.309683][T15494] RAX: ffffffffffffffda RBX: 00007fe350fabf80 RCX: 00007fe350e8c169 [ 878.317663][T15494] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 878.325641][T15494] RBP: 00007fe350ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 878.333623][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.341601][T15494] R13: 00007fff2f55046f R14: 00007fe34f9fe300 R15: 0000000000022000 [ 878.349604][T15494] [ 878.372422][T15242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.395081][T15242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.409098][T15494] memory: usage 8540kB, limit 0kB, failcnt 104 [ 878.415478][T15494] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 878.429013][T15242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.437887][T15242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.459110][T15494] Memory cgroup stats for /syz1: [ 878.459336][T15494] anon 114688 [ 878.459336][T15494] file 8343552 [ 878.459336][T15494] kernel 286720 [ 878.459336][T15494] kernel_stack 65536 [ 878.459336][T15494] pagetables 81920 [ 878.459336][T15494] sec_pagetables 0 [ 878.459336][T15494] percpu 0 [ 878.459336][T15494] sock 0 [ 878.459336][T15494] vmalloc 0 [ 878.459336][T15494] shmem 8343552 [ 878.459336][T15494] zswap 0 [ 878.459336][T15494] zswapped 0 [ 878.459336][T15494] file_mapped 147456 [ 878.459336][T15494] file_dirty 0 [ 878.459336][T15494] file_writeback 0 [ 878.459336][T15494] swapcached 0 [ 878.459336][T15494] anon_thp 0 [ 878.459336][T15494] file_thp 0 [ 878.459336][T15494] shmem_thp 0 [ 878.459336][T15494] inactive_anon 8343552 [ 878.459336][T15494] active_anon 114688 [ 878.459336][T15494] inactive_file 0 [ 878.459336][T15494] active_file 0 [ 878.459336][T15494] unevictable 0 [ 878.459336][T15494] slab_reclaimable 39336 [ 878.459336][T15494] slab_unreclaimable 71952 [ 878.459336][T15494] slab 111288 [ 878.649364][T15494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15217,uid=0 [ 878.720013][T15494] Memory cgroup out of memory: Killed process 15217 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 878.980023][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.988151][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.050932][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.053863][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.069005][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.084431][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.555147][T15506] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 879.575502][T15506] CPU: 1 PID: 15506 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 879.584074][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 879.594174][T15506] Call Trace: [ 879.597484][T15506] [ 879.600446][T15506] dump_stack_lvl+0x1e3/0x2cb [ 879.605166][T15506] ? nf_tcp_handle_invalid+0x642/0x642 [ 879.610661][T15506] ? panic+0x75d/0x75d [ 879.614776][T15506] ? ___ratelimit+0x4c0/0x670 [ 879.619503][T15506] ? local_lock_release+0x170/0x170 [ 879.624746][T15506] dump_header+0xdf/0x9c0 [ 879.629145][T15506] oom_kill_process+0xf8/0x520 [ 879.633950][T15506] out_of_memory+0xf30/0x12f0 [ 879.638652][T15506] ? mutex_lock_io_nested+0x60/0x60 [ 879.644054][T15506] ? preempt_schedule+0xd9/0xe0 [ 879.648918][T15506] ? unregister_oom_notifier+0x20/0x20 [ 879.654385][T15506] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 879.660560][T15506] ? lockdep_hardirqs_on+0x94/0x130 [ 879.665787][T15506] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 879.672131][T15506] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 879.677700][T15506] ? preempt_schedule_thunk+0x16/0x18 [ 879.683103][T15506] ? mem_cgroup_oom_trylock+0x210/0x210 [ 879.688692][T15506] ? cgroup_file_notify+0x123/0x190 [ 879.693913][T15506] memory_max_write+0x34d/0x470 [ 879.698795][T15506] ? memory_max_show+0xa0/0xa0 [ 879.703583][T15506] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 879.709694][T15506] ? print_irqtrace_events+0x210/0x210 [ 879.715184][T15506] ? memory_max_show+0xa0/0xa0 [ 879.719980][T15506] cgroup_file_write+0x2c6/0x690 [ 879.724947][T15506] ? cgroup_seqfile_stop+0xd0/0xd0 [ 879.730083][T15506] ? cgroup_seqfile_stop+0xd0/0xd0 [ 879.735228][T15506] ? cgroup_seqfile_stop+0xd0/0xd0 [ 879.740388][T15506] kernfs_fop_write_iter+0x3a2/0x4f0 [ 879.745797][T15506] vfs_write+0x7ae/0xba0 [ 879.750114][T15506] ? file_end_write+0x250/0x250 [ 879.755011][T15506] ? mutex_lock_nested+0x17/0x20 [ 879.759964][T15506] ? __fdget_pos+0x250/0x2f0 [ 879.764563][T15506] ? ksys_write+0x77/0x2c0 [ 879.769017][T15506] ksys_write+0x19c/0x2c0 [ 879.773369][T15506] ? print_irqtrace_events+0x210/0x210 [ 879.778850][T15506] ? __ia32_sys_read+0x80/0x80 [ 879.783635][T15506] ? syscall_enter_from_user_mode+0x2e/0x220 [ 879.789641][T15506] ? lockdep_hardirqs_on+0x94/0x130 [ 879.794863][T15506] ? syscall_enter_from_user_mode+0x2e/0x220 [ 879.800960][T15506] do_syscall_64+0x3d/0xb0 [ 879.805480][T15506] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 879.811385][T15506] RIP: 0033:0x7f9337e8c169 [ 879.815810][T15506] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 879.835432][T15506] RSP: 002b:00007f93369fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.843950][T15506] RAX: ffffffffffffffda RBX: 00007f9337fabf80 RCX: 00007f9337e8c169 12:17:51 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:17:51 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:51 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x27) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:17:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 879.851940][T15506] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 879.859919][T15506] RBP: 00007f9337ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 879.867894][T15506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.875871][T15506] R13: 00007ffc0045c39f R14: 00007f93369fe300 R15: 0000000000022000 [ 879.883868][T15506] [ 879.959364][T15506] memory: usage 10592kB, limit 0kB, failcnt 130 [ 879.966878][T15506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 880.013385][T15506] Memory cgroup stats for /syz5: [ 880.055773][T15506] anon 114688 [ 880.055773][T15506] file 10440704 [ 880.055773][T15506] kernel 290816 [ 880.055773][T15506] kernel_stack 65536 [ 880.055773][T15506] pagetables 81920 [ 880.055773][T15506] sec_pagetables 0 [ 880.055773][T15506] percpu 0 [ 880.055773][T15506] sock 0 [ 880.055773][T15506] vmalloc 0 [ 880.055773][T15506] shmem 10440704 [ 880.055773][T15506] zswap 0 [ 880.055773][T15506] zswapped 0 [ 880.055773][T15506] file_mapped 86016 [ 880.055773][T15506] file_dirty 0 [ 880.055773][T15506] file_writeback 0 [ 880.055773][T15506] swapcached 0 [ 880.055773][T15506] anon_thp 0 [ 880.055773][T15506] file_thp 0 [ 880.055773][T15506] shmem_thp 0 [ 880.055773][T15506] inactive_anon 0 [ 880.055773][T15506] active_anon 10555392 [ 880.055773][T15506] inactive_file 0 [ 880.055773][T15506] active_file 0 [ 880.055773][T15506] unevictable 0 [ 880.055773][T15506] slab_reclaimable 42896 [ 880.055773][T15506] slab_unreclaimable 71952 [ 880.055773][T15506] slab 114848 12:17:51 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 880.308790][T15506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15242,uid=0 [ 880.369177][T15506] Memory cgroup out of memory: Killed process 15242 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 12:17:52 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:17:52 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x27) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:17:52 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 881.181311][ T11] device hsr_slave_0 left promiscuous mode [ 881.205670][ T11] device hsr_slave_1 left promiscuous mode [ 881.236604][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.279655][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.341415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.348888][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.478690][ T11] device bridge_slave_1 left promiscuous mode [ 881.495793][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.579506][ T11] device bridge_slave_0 left promiscuous mode [ 881.611926][ T11] bridge0: port 1(bridge_slave_0) entered disabled state 12:17:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 881.721672][ T11] device veth1_macvtap left promiscuous mode [ 881.743624][ T11] device veth0_macvtap left promiscuous mode [ 881.772720][ T11] device veth1_vlan left promiscuous mode [ 881.798874][ T11] device veth0_vlan left promiscuous mode [ 882.114207][ T3665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.123117][ T3665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.131571][ T3665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.145560][T13757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.155234][T13757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 882.162993][T13757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.208628][T13757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.217521][T13757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.227118][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.234605][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 882.244723][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 882.253365][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 882.262811][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.269336][ T3662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 882.280497][ T3662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 882.307958][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 882.318389][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.531142][ T11] team0 (unregistering): Port device team_slave_1 removed [ 882.555986][ T11] team0 (unregistering): Port device team_slave_0 removed [ 882.587566][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.616122][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.765965][ T11] bond0 (unregistering): Released all slaves 12:17:54 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:17:54 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x27) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 883.605136][T13761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.617331][ T3665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.627247][T13761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.635689][T13761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.643745][T13761] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 883.651221][T13761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 12:17:55 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 884.050628][T15562] chnl_net:caif_netlink_parms(): no params data found [ 884.122528][T15564] chnl_net:caif_netlink_parms(): no params data found [ 884.201851][T15566] chnl_net:caif_netlink_parms(): no params data found [ 884.268437][T13761] Bluetooth: hci0: command 0x0409 tx timeout 12:17:55 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 884.339769][T13761] Bluetooth: hci3: command 0x0409 tx timeout [ 884.339856][ T3662] Bluetooth: hci1: command 0x0409 tx timeout [ 884.982663][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.993045][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.026505][T15562] device bridge_slave_0 entered promiscuous mode [ 885.108852][T15562] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.125810][T15562] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.134351][T15562] device bridge_slave_1 entered promiscuous mode [ 885.191105][T15564] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.198251][T15564] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.220668][T15564] device bridge_slave_0 entered promiscuous mode [ 885.269157][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.276309][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.314688][T15566] device bridge_slave_0 entered promiscuous mode [ 885.350175][T15564] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.361894][T15564] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.387654][T15564] device bridge_slave_1 entered promiscuous mode [ 885.455858][T15562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.479248][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.486401][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.500978][T15566] device bridge_slave_1 entered promiscuous mode [ 885.542855][T15562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.591602][T15598] chnl_net:caif_netlink_parms(): no params data found [ 885.657827][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.691818][T15564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.701349][ T3662] Bluetooth: hci4: command 0x0409 tx timeout [ 885.715280][T15562] team0: Port device team_slave_0 added [ 885.756658][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.788016][T15564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.836767][T15562] team0: Port device team_slave_1 added [ 885.936295][T15566] team0: Port device team_slave_0 added [ 885.993769][T15562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.029062][T15562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.073862][T15562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.086565][T15566] team0: Port device team_slave_1 added [ 886.120475][T15564] team0: Port device team_slave_0 added [ 886.141631][T15562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.148625][T15562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.191310][T15562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.216051][T15564] team0: Port device team_slave_1 added [ 886.292170][T15564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.299674][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.327565][T15564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.339191][ T3662] Bluetooth: hci0: command 0x041b tx timeout [ 886.375065][T15598] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.392946][T15598] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.407453][T15598] device bridge_slave_0 entered promiscuous mode [ 886.423537][ T3662] Bluetooth: hci3: command 0x041b tx timeout [ 886.423548][T13761] Bluetooth: hci1: command 0x041b tx timeout [ 886.438548][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.447060][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.487505][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.510628][T15564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.517618][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.545734][T15564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.561196][T15562] device hsr_slave_0 entered promiscuous mode [ 886.570780][T15562] device hsr_slave_1 entered promiscuous mode [ 886.579830][T15598] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.586954][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.607571][T15598] device bridge_slave_1 entered promiscuous mode [ 886.629758][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.636777][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.667207][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.776374][T15598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.801243][T15598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.839944][T15564] device hsr_slave_0 entered promiscuous mode [ 886.848542][T15564] device hsr_slave_1 entered promiscuous mode [ 886.855794][T15564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.864399][T15564] Cannot create hsr debugfs directory [ 887.052770][T15566] device hsr_slave_0 entered promiscuous mode [ 887.080943][T15566] device hsr_slave_1 entered promiscuous mode [ 887.087823][T15566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.111177][T15566] Cannot create hsr debugfs directory [ 887.171505][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.196786][T15598] team0: Port device team_slave_0 added [ 887.287504][T15598] team0: Port device team_slave_1 added [ 887.387176][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.471008][T15598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.478007][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.551770][T15598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.602730][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.630980][T15598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.638357][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.668010][T15598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.724376][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.781076][ T3662] Bluetooth: hci4: command 0x041b tx timeout [ 887.935824][T15598] device hsr_slave_0 entered promiscuous mode [ 887.979485][T15598] device hsr_slave_1 entered promiscuous mode [ 888.009867][T15598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.018397][T15598] Cannot create hsr debugfs directory [ 888.429205][ T3662] Bluetooth: hci0: command 0x040f tx timeout [ 888.499290][ T3662] Bluetooth: hci3: command 0x040f tx timeout [ 888.499297][ T3665] Bluetooth: hci1: command 0x040f tx timeout [ 888.656072][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.810594][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.940969][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.007291][T15562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 889.038688][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.065121][T15562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 889.110552][T15564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.145365][T15562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 889.187197][T15564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.202837][T15562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 889.270890][T15564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.442112][T15564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.580299][T15562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.757471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 889.778586][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.803378][T15562] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.869229][ T3662] Bluetooth: hci4: command 0x040f tx timeout [ 889.881892][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 889.891748][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 889.901470][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.908588][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.989887][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.998054][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 890.020327][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.028890][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.036061][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.069545][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 890.078635][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 890.097934][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 890.108340][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.233984][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 890.252879][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 890.289989][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 890.307379][T15562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 890.331713][T15562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 890.392363][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 890.409898][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.429988][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 890.449684][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 890.499403][ T3662] Bluetooth: hci0: command 0x0419 tx timeout [ 890.550188][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.579651][T13761] Bluetooth: hci1: command 0x0419 tx timeout [ 890.579744][ T3662] Bluetooth: hci3: command 0x0419 tx timeout [ 891.158928][T15562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.173106][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.181550][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 891.244490][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 891.254699][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 891.336133][T15562] device veth0_vlan entered promiscuous mode [ 891.435070][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 891.447044][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 891.476016][T15562] device veth1_vlan entered promiscuous mode [ 891.512117][T15564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 891.524018][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 891.536708][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 891.546494][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 891.599198][T15564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 891.627060][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 891.665439][T15562] device veth0_macvtap entered promiscuous mode [ 891.686097][T15564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 891.709981][T15564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 891.732041][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 891.741299][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 891.756335][T15562] device veth1_macvtap entered promiscuous mode [ 891.800967][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 891.819658][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 891.880494][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.900761][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.922021][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.944768][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.954804][T13761] Bluetooth: hci4: command 0x0419 tx timeout [ 891.972594][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.989656][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.009417][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.028243][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.038496][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.049245][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.061064][T15562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.070815][T15566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.109219][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 892.118059][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 892.141513][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.161501][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.171731][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.184012][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.195884][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.207066][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.218145][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.229080][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.238919][T15562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.249967][T15562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.262603][T15562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.276905][T15566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.287753][T15566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 892.342585][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 892.352726][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.364981][T15562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.375168][T15562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.386188][T15562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.395553][T15562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.429088][T15566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 892.544408][T15598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 892.565019][T15598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 892.578453][T15598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 892.615388][ T11] device hsr_slave_0 left promiscuous mode [ 892.624128][ T11] device hsr_slave_1 left promiscuous mode [ 892.631497][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.638932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.650828][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.658255][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.666910][ T11] device bridge_slave_1 left promiscuous mode [ 892.673244][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.682278][ T11] device bridge_slave_0 left promiscuous mode [ 892.688482][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.702234][ T11] device hsr_slave_0 left promiscuous mode [ 892.708627][ T11] device hsr_slave_1 left promiscuous mode [ 892.715293][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.722971][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.731929][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.740767][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.752946][ T11] device bridge_slave_1 left promiscuous mode [ 892.759272][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.767563][ T11] device bridge_slave_0 left promiscuous mode [ 892.774280][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.786950][ T11] device hsr_slave_0 left promiscuous mode [ 892.793592][ T11] device hsr_slave_1 left promiscuous mode [ 892.800197][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.807623][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.816974][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.827425][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.836450][ T11] device bridge_slave_1 left promiscuous mode [ 892.842945][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.853133][ T11] device bridge_slave_0 left promiscuous mode [ 892.862632][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.880023][ T11] device veth1_macvtap left promiscuous mode [ 892.886111][ T11] device veth0_macvtap left promiscuous mode [ 892.892378][ T11] device veth1_vlan left promiscuous mode [ 892.898186][ T11] device veth0_vlan left promiscuous mode [ 892.905361][ T11] device veth1_macvtap left promiscuous mode [ 892.911508][ T11] device veth0_macvtap left promiscuous mode [ 892.917636][ T11] device veth1_vlan left promiscuous mode [ 892.923667][ T11] device veth0_vlan left promiscuous mode [ 892.931147][ T11] device veth1_macvtap left promiscuous mode [ 892.937174][ T11] device veth0_macvtap left promiscuous mode [ 892.943424][ T11] device veth1_vlan left promiscuous mode [ 892.949680][ T11] device veth0_vlan left promiscuous mode [ 893.362684][ T11] team0 (unregistering): Port device team_slave_1 removed [ 893.376569][ T11] team0 (unregistering): Port device team_slave_0 removed [ 893.393355][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.414967][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.483574][ T11] bond0 (unregistering): Released all slaves [ 893.637570][ T11] team0 (unregistering): Port device team_slave_1 removed [ 893.653245][ T11] team0 (unregistering): Port device team_slave_0 removed [ 893.666155][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.680296][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.747823][ T11] bond0 (unregistering): Released all slaves [ 893.878327][ T11] team0 (unregistering): Port device team_slave_1 removed [ 893.895276][ T11] team0 (unregistering): Port device team_slave_0 removed [ 893.910862][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.925875][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.000739][ T11] bond0 (unregistering): Released all slaves [ 894.069668][T15598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 894.163714][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.176339][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.178474][T15564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.203097][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 894.226994][T15564] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.264367][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 894.272801][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 894.304816][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 894.316254][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 894.325520][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.332783][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.345268][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 894.361205][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.369849][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.385733][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 894.396283][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 894.405618][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.412826][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.421313][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 894.487711][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 894.528472][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 894.533619][T15730] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 894.547176][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 894.547610][T15730] CPU: 0 PID: 15730 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 894.558123][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 894.563497][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 894.563514][T15730] Call Trace: [ 894.563522][T15730] [ 894.563533][T15730] dump_stack_lvl+0x1e3/0x2cb [ 894.563572][T15730] ? nf_tcp_handle_invalid+0x642/0x642 [ 894.573200][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 894.581414][T15730] ? panic+0x75d/0x75d [ 894.581451][T15730] ? ___ratelimit+0x4c0/0x670 [ 894.586174][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 894.587780][T15730] ? local_lock_release+0x170/0x170 [ 894.616421][T15564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 894.622471][T15730] dump_header+0xdf/0x9c0 [ 894.622512][T15730] oom_kill_process+0xf8/0x520 [ 894.647275][T15730] out_of_memory+0xf30/0x12f0 [ 894.649681][T15564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 894.651997][T15730] ? mutex_lock_io_nested+0x60/0x60 [ 894.667546][T15730] ? preempt_schedule+0xd9/0xe0 [ 894.672441][T15730] ? unregister_oom_notifier+0x20/0x20 [ 894.678026][T15730] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 894.684224][T15730] ? lockdep_hardirqs_on+0x94/0x130 [ 894.689560][T15730] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 894.695769][T15730] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 894.701373][T15730] ? preempt_schedule_thunk+0x16/0x18 [ 894.706818][T15730] ? mem_cgroup_oom_trylock+0x210/0x210 [ 894.712436][T15730] ? cgroup_file_notify+0x123/0x190 [ 894.717867][T15730] memory_max_write+0x34d/0x470 [ 894.722784][T15730] ? memory_max_show+0xa0/0xa0 [ 894.727699][T15730] ? read_lock_is_recursive+0x10/0x10 [ 894.733122][T15730] ? memory_max_show+0xa0/0xa0 [ 894.737946][T15730] cgroup_file_write+0x2c6/0x690 [ 894.742966][T15730] ? mutex_lock_io_nested+0x60/0x60 [ 894.748223][T15730] ? cgroup_seqfile_stop+0xd0/0xd0 [ 894.753608][T15730] ? __virt_addr_valid+0x22b/0x2e0 [ 894.758789][T15730] ? cgroup_seqfile_stop+0xd0/0xd0 [ 894.763996][T15730] kernfs_fop_write_iter+0x3a2/0x4f0 [ 894.769519][T15730] vfs_write+0x7ae/0xba0 [ 894.773842][T15730] ? file_end_write+0x250/0x250 [ 894.778767][T15730] ? mutex_lock_nested+0x17/0x20 [ 894.783802][T15730] ? __fdget_pos+0x250/0x2f0 [ 894.788559][T15730] ? ksys_write+0x77/0x2c0 [ 894.793031][T15730] ksys_write+0x19c/0x2c0 [ 894.797449][T15730] ? print_irqtrace_events+0x210/0x210 [ 894.807321][T15730] ? __ia32_sys_read+0x80/0x80 [ 894.812277][T15730] ? syscall_enter_from_user_mode+0x2e/0x220 [ 894.818324][T15730] ? lockdep_hardirqs_on+0x94/0x130 [ 894.823586][T15730] ? syscall_enter_from_user_mode+0x2e/0x220 [ 894.829626][T15730] do_syscall_64+0x3d/0xb0 [ 894.834090][T15730] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 894.840021][T15730] RIP: 0033:0x7fb3c148c169 [ 894.844474][T15730] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 894.864124][T15730] RSP: 002b:00007fb3c2166168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 894.872588][T15730] RAX: ffffffffffffffda RBX: 00007fb3c15abf80 RCX: 00007fb3c148c169 [ 894.880864][T15730] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 894.888876][T15730] RBP: 00007fb3c14e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 894.896894][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.905170][T15730] R13: 00007ffd0d78f8af R14: 00007fb3c2166300 R15: 0000000000022000 [ 894.913302][T15730] [ 894.926962][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.973699][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 894.999993][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 895.009692][T15730] memory: usage 10608kB, limit 0kB, failcnt 256 [ 895.019619][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 895.027771][T15730] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 895.053444][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 895.066333][T15730] Memory cgroup stats for /syz0: [ 895.066526][T15730] anon 114688 [ 895.066526][T15730] file 10440704 [ 895.066526][T15730] kernel 282624 [ 895.066526][T15730] kernel_stack 65536 [ 895.066526][T15730] pagetables 77824 [ 895.066526][T15730] sec_pagetables 0 [ 895.066526][T15730] percpu 0 [ 895.066526][T15730] sock 0 [ 895.066526][T15730] vmalloc 0 [ 895.066526][T15730] shmem 10436608 [ 895.066526][T15730] zswap 0 [ 895.066526][T15730] zswapped 0 [ 895.066526][T15730] file_mapped 81920 [ 895.066526][T15730] file_dirty 0 [ 895.066526][T15730] file_writeback 0 [ 895.066526][T15730] swapcached 0 [ 895.066526][T15730] anon_thp 0 [ 895.066526][T15730] file_thp 0 [ 895.066526][T15730] shmem_thp 0 [ 895.066526][T15730] inactive_anon 0 [ 895.066526][T15730] active_anon 10551296 [ 895.066526][T15730] inactive_file 4096 [ 895.066526][T15730] active_file 0 [ 895.066526][T15730] unevictable 0 [ 895.066526][T15730] slab_reclaimable 42400 [ 895.066526][T15730] slab_unreclaimable 75192 [ 895.066526][T15730] slab 117592 [ 895.165583][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 895.188492][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.213485][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 895.222142][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 895.231627][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 895.254031][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.264360][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.273649][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.280935][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.290125][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.299570][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.308273][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.315475][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.327181][T15598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.341866][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 895.350296][T15730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15562,uid=0 [ 895.367041][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 895.394823][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 895.405094][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 895.415144][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 895.423443][T15730] Memory cgroup out of memory: Killed process 15562 (syz-executor.0) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 895.442711][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 895.459805][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 895.470565][T15598] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.528806][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 895.538494][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 895.550148][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 895.569729][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 895.578356][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 895.601539][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 895.615102][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 895.632131][T15566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 895.692669][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.703113][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.712164][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.719339][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.728285][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.737265][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.746268][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.753459][ T8854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.762198][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 895.771498][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 895.781199][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 895.791084][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 895.849716][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 895.857951][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 895.874534][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 895.884047][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 895.927957][T15564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.955274][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 895.965501][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 895.983997][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 895.997981][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.011140][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 12:18:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 896.031967][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.052788][T15598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.599653][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.609253][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.617497][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.682336][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 896.699840][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 896.752078][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 896.770036][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 896.807754][T15598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.838126][T15566] device veth0_vlan entered promiscuous mode [ 896.857375][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 896.876810][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 896.908031][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.946098][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.975148][T15566] device veth1_vlan entered promiscuous mode [ 897.054536][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 897.079770][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 897.088087][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 897.129991][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 897.141115][T15566] device veth0_macvtap entered promiscuous mode [ 897.166894][T15566] device veth1_macvtap entered promiscuous mode [ 897.208901][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 897.228699][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 897.253687][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 897.280017][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 897.310378][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.339139][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.388532][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.409102][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.438446][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.469282][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.490769][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.498201][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 897.521211][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 897.536908][T15564] device veth0_vlan entered promiscuous mode [ 897.562074][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.577938][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.588803][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.599923][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.610177][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.621187][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.632922][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.649993][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 897.658588][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 897.680110][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 897.699470][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 897.726758][T15564] device veth1_vlan entered promiscuous mode [ 897.742039][T15566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.759548][T15566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.768298][T15566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.799016][T15566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.821058][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 897.834993][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 897.849832][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 897.924315][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 897.937198][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 897.977007][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.008442][T15564] device veth0_macvtap entered promiscuous mode [ 898.054835][T15564] device veth1_macvtap entered promiscuous mode [ 898.133374][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.159112][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.180019][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.199070][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.208962][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.234484][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.248276][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.267291][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.287848][T15564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.300383][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.308437][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.326875][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 898.339719][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 898.347856][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 898.361462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 898.371391][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 898.387986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 898.397320][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 898.418319][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.433173][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.449305][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.467348][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.477588][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.494890][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.516914][T15564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.527612][T15564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.546599][T15564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.564378][T15564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.573741][T15564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.583296][T15564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.592305][T15564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.605715][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 898.616046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 898.685555][T15598] device veth0_vlan entered promiscuous mode [ 898.689556][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.706630][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 898.706681][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.723264][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 898.733037][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 898.741734][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 898.750052][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 898.762099][T15598] device veth1_vlan entered promiscuous mode [ 898.897637][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 898.912780][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 898.925299][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 898.936857][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.961714][T15598] device veth0_macvtap entered promiscuous mode [ 899.026610][T15598] device veth1_macvtap entered promiscuous mode [ 899.036068][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.052624][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.108123][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 899.133980][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 899.147091][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 899.154309][T15796] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 899.154903][T15796] CPU: 0 PID: 15796 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 899.173097][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 899.183170][T15796] Call Trace: [ 899.186454][T15796] [ 899.189414][T15796] dump_stack_lvl+0x1e3/0x2cb [ 899.194116][T15796] ? nf_tcp_handle_invalid+0x642/0x642 [ 899.199592][T15796] ? panic+0x75d/0x75d [ 899.203679][T15796] ? ___ratelimit+0x4c0/0x670 [ 899.208375][T15796] ? local_lock_release+0x170/0x170 [ 899.213592][T15796] dump_header+0xdf/0x9c0 [ 899.217941][T15796] oom_kill_process+0xf8/0x520 [ 899.222717][T15796] out_of_memory+0xf30/0x12f0 [ 899.227416][T15796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.233584][T15796] ? lockdep_hardirqs_on+0x94/0x130 [ 899.238820][T15796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.244988][T15796] ? unregister_oom_notifier+0x20/0x20 [ 899.250563][T15796] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 899.256123][T15796] ? preempt_schedule_thunk+0x16/0x18 [ 899.261516][T15796] ? mem_cgroup_oom_trylock+0x210/0x210 [ 899.267088][T15796] ? cgroup_file_notify+0x123/0x190 [ 899.272306][T15796] memory_max_write+0x34d/0x470 [ 899.277179][T15796] ? memory_max_show+0xa0/0xa0 [ 899.281972][T15796] ? cgroup_file_write+0x1a1/0x690 [ 899.287142][T15796] ? cgroup_file_write+0x2b2/0x690 [ 899.292302][T15796] ? memory_max_show+0xa0/0xa0 [ 899.297093][T15796] cgroup_file_write+0x2c6/0x690 [ 899.302054][T15796] ? mutex_lock_io_nested+0x60/0x60 [ 899.307281][T15796] ? cgroup_seqfile_stop+0xd0/0xd0 [ 899.312428][T15796] ? cgroup_seqfile_stop+0xd0/0xd0 [ 899.317556][T15796] kernfs_fop_write_iter+0x3a2/0x4f0 [ 899.322881][T15796] vfs_write+0x7ae/0xba0 [ 899.327155][T15796] ? file_end_write+0x250/0x250 [ 899.332045][T15796] ? mutex_lock_nested+0x17/0x20 [ 899.337013][T15796] ? __fdget_pos+0x250/0x2f0 [ 899.341622][T15796] ? ksys_write+0x77/0x2c0 [ 899.346060][T15796] ksys_write+0x19c/0x2c0 [ 899.350403][T15796] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.356573][T15796] ? __ia32_sys_read+0x80/0x80 [ 899.361355][T15796] ? syscall_enter_from_user_mode+0x37/0x220 [ 899.367356][T15796] ? syscall_enter_from_user_mode+0x2e/0x220 [ 899.373367][T15796] do_syscall_64+0x3d/0xb0 [ 899.377815][T15796] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 899.383717][T15796] RIP: 0033:0x7fc599a8c169 [ 899.388144][T15796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 899.407760][T15796] RSP: 002b:00007fc59a832168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 899.416191][T15796] RAX: ffffffffffffffda RBX: 00007fc599babf80 RCX: 00007fc599a8c169 [ 899.424261][T15796] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 899.432242][T15796] RBP: 00007fc599ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 899.440308][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.448288][T15796] R13: 00007ffd52f1d96f R14: 00007fc59a832300 R15: 0000000000022000 [ 899.456293][T15796] [ 899.509847][T15796] memory: usage 8548kB, limit 0kB, failcnt 104 [ 899.513137][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.516476][T15796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 899.540323][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.550610][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.561383][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.571549][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.583425][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.593703][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.604463][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.615024][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.627056][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.640413][T15598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.667988][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.672126][T15796] Memory cgroup stats for /syz1: [ 899.676228][T15796] anon 114688 [ 899.676228][T15796] file 8343552 [ 899.676228][T15796] kernel 253952 [ 899.676228][T15796] kernel_stack 32768 [ 899.676228][T15796] pagetables 81920 [ 899.676228][T15796] sec_pagetables 0 [ 899.676228][T15796] percpu 0 [ 899.676228][T15796] sock 0 [ 899.676228][T15796] vmalloc 0 [ 899.676228][T15796] shmem 8343552 [ 899.676228][T15796] zswap 0 [ 899.676228][T15796] zswapped 0 [ 899.676228][T15796] file_mapped 147456 [ 899.676228][T15796] file_dirty 0 [ 899.676228][T15796] file_writeback 0 [ 899.676228][T15796] swapcached 0 [ 899.676228][T15796] anon_thp 0 [ 899.676228][T15796] file_thp 0 [ 899.676228][T15796] shmem_thp 0 [ 899.676228][T15796] inactive_anon 8343552 [ 899.676228][T15796] active_anon 114688 [ 899.676228][T15796] inactive_file 0 [ 899.676228][T15796] active_file 0 [ 899.676228][T15796] unevictable 0 [ 899.676228][T15796] slab_reclaimable 42296 [ 899.676228][T15796] slab_unreclaimable 72600 [ 899.676228][T15796] slab 114896 [ 899.680035][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.685248][T15796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 899.799950][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.805746][T15796] ,cpuset= [ 899.806833][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.806851][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.806868][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.819225][T15796] syz1 [ 899.836746][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.864845][T15796] ,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15566,uid=0 [ 899.865054][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.885094][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.897629][T15796] Memory cgroup out of memory: Killed process 15566 (syz-executor.1) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 899.915336][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.926486][T15598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.937280][T15598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.956468][T15598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.972092][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.989830][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 900.013448][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.045743][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.054383][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.096517][T15598] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.120367][T15598] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.138643][T15598] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.148326][T15598] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.243658][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 900.337591][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.460151][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.692929][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.774711][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.805874][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.905051][T15810] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 900.905349][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 900.935043][T15810] CPU: 0 PID: 15810 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 900.943534][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 900.953641][T15810] Call Trace: [ 900.956967][T15810] [ 900.959935][T15810] dump_stack_lvl+0x1e3/0x2cb [ 900.964666][T15810] ? nf_tcp_handle_invalid+0x642/0x642 [ 900.970195][T15810] ? panic+0x75d/0x75d [ 900.974316][T15810] ? ___ratelimit+0x4c0/0x670 [ 900.979057][T15810] ? local_lock_release+0x170/0x170 [ 900.984320][T15810] dump_header+0xdf/0x9c0 [ 900.988704][T15810] oom_kill_process+0xf8/0x520 [ 900.993516][T15810] out_of_memory+0xf30/0x12f0 [ 900.998242][T15810] ? mutex_lock_io_nested+0x60/0x60 [ 901.001305][ T5280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.003480][T15810] ? preempt_schedule+0xd9/0xe0 [ 901.016365][T15810] ? unregister_oom_notifier+0x20/0x20 [ 901.021950][T15810] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 901.028154][T15810] ? lockdep_hardirqs_on+0x94/0x130 [ 901.033408][T15810] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 901.039665][T15810] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 901.045264][T15810] ? preempt_schedule_thunk+0x16/0x18 [ 901.050702][T15810] ? mem_cgroup_oom_trylock+0x210/0x210 [ 901.055211][ T5280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.063578][T15810] ? cgroup_file_notify+0x123/0x190 [ 901.063622][T15810] memory_max_write+0x34d/0x470 [ 901.073734][T15810] ? memory_max_show+0xa0/0xa0 [ 901.078561][T15810] ? read_lock_is_recursive+0x10/0x10 [ 901.083997][T15810] ? memory_max_show+0xa0/0xa0 [ 901.088810][T15810] cgroup_file_write+0x2c6/0x690 [ 901.093391][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 901.093768][T15810] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 901.107156][T15810] ? cgroup_seqfile_stop+0xd0/0xd0 [ 901.112321][T15810] ? kernfs_get_active+0x12/0x170 [ 901.117402][T15810] ? cgroup_seqfile_stop+0xd0/0xd0 [ 901.122581][T15810] kernfs_fop_write_iter+0x3a2/0x4f0 [ 901.127933][T15810] vfs_write+0x7ae/0xba0 [ 901.132250][T15810] ? file_end_write+0x250/0x250 [ 901.137189][T15810] ? mutex_lock_nested+0x17/0x20 [ 901.142187][T15810] ? __fdget_pos+0x250/0x2f0 [ 901.146837][T15810] ? ksys_write+0x77/0x2c0 [ 901.151313][T15810] ksys_write+0x19c/0x2c0 [ 901.155722][T15810] ? print_irqtrace_events+0x210/0x210 [ 901.161245][T15810] ? __ia32_sys_read+0x80/0x80 [ 901.166077][T15810] ? syscall_enter_from_user_mode+0x2e/0x220 [ 901.172111][T15810] ? lockdep_hardirqs_on+0x94/0x130 [ 901.177368][T15810] ? syscall_enter_from_user_mode+0x2e/0x220 [ 901.183406][T15810] do_syscall_64+0x3d/0xb0 [ 901.187884][T15810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 901.193819][T15810] RIP: 0033:0x7f742348c169 [ 901.198276][T15810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 901.217926][T15810] RSP: 002b:00007f7424212168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 901.226393][T15810] RAX: ffffffffffffffda RBX: 00007f74235abf80 RCX: 00007f742348c169 [ 901.234404][T15810] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 901.242391][T15810] RBP: 00007f74234e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 901.250372][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.258349][T15810] R13: 00007fff111fddaf R14: 00007f7424212300 R15: 0000000000022000 [ 901.268012][T15810] [ 901.295760][T15810] memory: usage 4700kB, limit 0kB, failcnt 100 [ 901.306757][T15810] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 901.314929][T15810] Memory cgroup stats for /syz4: [ 901.318672][T15810] anon 114688 [ 901.318672][T15810] file 4407296 [ 901.318672][T15810] kernel 282624 [ 901.318672][T15810] kernel_stack 65536 [ 901.318672][T15810] pagetables 86016 [ 901.318672][T15810] sec_pagetables 0 [ 901.318672][T15810] percpu 0 [ 901.318672][T15810] sock 0 [ 901.318672][T15810] vmalloc 0 [ 901.318672][T15810] shmem 4407296 [ 901.318672][T15810] zswap 0 [ 901.318672][T15810] zswapped 0 [ 901.318672][T15810] file_mapped 81920 [ 901.318672][T15810] file_dirty 0 [ 901.318672][T15810] file_writeback 0 [ 901.318672][T15810] swapcached 0 [ 901.318672][T15810] anon_thp 0 [ 901.318672][T15810] file_thp 0 [ 901.318672][T15810] shmem_thp 0 [ 901.318672][T15810] inactive_anon 4407296 [ 901.318672][T15810] active_anon 114688 [ 901.318672][T15810] inactive_file 0 [ 901.318672][T15810] active_file 0 [ 901.318672][T15810] unevictable 0 [ 901.318672][T15810] slab_reclaimable 29536 [ 901.318672][T15810] slab_unreclaimable 72600 [ 901.318672][T15810] slab 102136 [ 901.659984][T15810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15564,uid=0 [ 901.719264][T15810] Memory cgroup out of memory: Killed process 15564 (syz-executor.4) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 901.856291][T15818] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 901.877208][T15818] CPU: 0 PID: 15818 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 901.885778][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 901.895842][T15818] Call Trace: [ 901.899129][T15818] [ 901.902067][T15818] dump_stack_lvl+0x1e3/0x2cb [ 901.906764][T15818] ? nf_tcp_handle_invalid+0x642/0x642 [ 901.912240][T15818] ? panic+0x75d/0x75d [ 901.916336][T15818] ? ___ratelimit+0x4c0/0x670 [ 901.921058][T15818] ? local_lock_release+0x170/0x170 [ 901.926286][T15818] dump_header+0xdf/0x9c0 [ 901.930631][T15818] oom_kill_process+0xf8/0x520 [ 901.935418][T15818] out_of_memory+0xf30/0x12f0 [ 901.940153][T15818] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 901.946323][T15818] ? lockdep_hardirqs_on+0x94/0x130 [ 901.951539][T15818] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 901.957825][T15818] ? unregister_oom_notifier+0x20/0x20 [ 901.963311][T15818] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 901.968888][T15818] ? preempt_schedule_thunk+0x16/0x18 [ 901.974280][T15818] ? mem_cgroup_oom_trylock+0x210/0x210 [ 901.979860][T15818] ? cgroup_file_notify+0x123/0x190 [ 901.985115][T15818] memory_max_write+0x34d/0x470 [ 901.990002][T15818] ? memory_max_show+0xa0/0xa0 [ 901.994800][T15818] ? read_lock_is_recursive+0x10/0x10 [ 902.000208][T15818] ? memory_max_show+0xa0/0xa0 [ 902.005006][T15818] cgroup_file_write+0x2c6/0x690 [ 902.009968][T15818] ? mutex_lock_io_nested+0x60/0x60 [ 902.015181][T15818] ? cgroup_seqfile_stop+0xd0/0xd0 [ 902.020315][T15818] ? __virt_addr_valid+0x22b/0x2e0 [ 902.025464][T15818] ? cgroup_seqfile_stop+0xd0/0xd0 [ 902.030599][T15818] kernfs_fop_write_iter+0x3a2/0x4f0 [ 902.035913][T15818] vfs_write+0x7ae/0xba0 [ 902.040178][T15818] ? file_end_write+0x250/0x250 [ 902.045064][T15818] ? mutex_lock_nested+0x17/0x20 [ 902.050011][T15818] ? __fdget_pos+0x250/0x2f0 [ 902.054796][T15818] ? ksys_write+0x77/0x2c0 [ 902.059261][T15818] ksys_write+0x19c/0x2c0 [ 902.063612][T15818] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 902.069787][T15818] ? __ia32_sys_read+0x80/0x80 [ 902.074575][T15818] ? __x64_sys_write+0x34/0x80 [ 902.079376][T15818] do_syscall_64+0x3d/0xb0 [ 902.083820][T15818] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 902.089725][T15818] RIP: 0033:0x7f8617c8c169 [ 902.094151][T15818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 902.113883][T15818] RSP: 002b:00007f8618954168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 902.122319][T15818] RAX: ffffffffffffffda RBX: 00007f8617dabf80 RCX: 00007f8617c8c169 [ 902.130303][T15818] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 902.138280][T15818] RBP: 00007f8617ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 902.146256][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.154232][T15818] R13: 00007ffd51b9705f R14: 00007f8618954300 R15: 0000000000022000 [ 902.162229][T15818] [ 902.189444][T15818] memory: usage 10632kB, limit 0kB, failcnt 130 [ 902.197694][T15818] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.205962][T15818] Memory cgroup stats for /syz5: [ 902.208482][T15818] anon 118784 [ 902.208482][T15818] file 10440704 [ 902.208482][T15818] kernel 327680 [ 902.208482][T15818] kernel_stack 98304 [ 902.208482][T15818] pagetables 77824 [ 902.208482][T15818] sec_pagetables 0 [ 902.208482][T15818] percpu 0 [ 902.208482][T15818] sock 0 [ 902.208482][T15818] vmalloc 0 [ 902.208482][T15818] shmem 10440704 [ 902.208482][T15818] zswap 0 [ 902.208482][T15818] zswapped 0 [ 902.208482][T15818] file_mapped 86016 [ 902.208482][T15818] file_dirty 0 [ 902.208482][T15818] file_writeback 0 [ 902.208482][T15818] swapcached 0 [ 902.208482][T15818] anon_thp 0 [ 902.208482][T15818] file_thp 0 [ 902.208482][T15818] shmem_thp 0 [ 902.208482][T15818] inactive_anon 0 [ 902.208482][T15818] active_anon 10559488 [ 902.208482][T15818] inactive_file 0 [ 902.208482][T15818] active_file 0 [ 902.208482][T15818] unevictable 0 [ 902.208482][T15818] slab_reclaimable 42896 [ 902.208482][T15818] slab_unreclaimable 80624 [ 902.208482][T15818] slab 123520 12:18:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:13 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:13 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:18:13 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:18:13 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 902.316553][T15818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15598,uid=0 [ 902.334541][T15818] Memory cgroup out of memory: Killed process 15598 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 12:18:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:14 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:14 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:18:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:15 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 903.954176][ T11] device hsr_slave_0 left promiscuous mode [ 903.966520][ T11] device hsr_slave_1 left promiscuous mode [ 904.011222][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.018687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.055132][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.082908][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.132443][ T11] device bridge_slave_1 left promiscuous mode [ 904.138771][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.200276][ T11] device bridge_slave_0 left promiscuous mode [ 904.206589][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.266855][ T11] device veth1_macvtap left promiscuous mode [ 904.282130][ T11] device veth0_macvtap left promiscuous mode [ 904.321759][ T11] device veth1_vlan left promiscuous mode [ 904.327694][ T11] device veth0_vlan left promiscuous mode [ 904.470402][T13761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 904.480567][T13761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 904.488587][T13761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 904.510686][T13761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 904.520959][ T3665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 904.533724][ T3665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.542702][ T3665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.552008][ T3665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.560939][ T3665] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 904.572935][ T3665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.573001][T13757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 904.767324][T13757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.776731][T13757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.798097][T13757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.808695][T13757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.817040][T13757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 904.825449][T13757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.020437][T13757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.032900][T13757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.041032][T13757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.050445][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.058700][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 905.066909][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.140578][ T11] team0 (unregistering): Port device team_slave_1 removed [ 905.156931][ T11] team0 (unregistering): Port device team_slave_0 removed [ 905.171647][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.188137][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.262775][ T11] bond0 (unregistering): Released all slaves 12:18:16 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:16 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:18:17 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 906.261534][T15885] chnl_net:caif_netlink_parms(): no params data found [ 906.328034][T15878] chnl_net:caif_netlink_parms(): no params data found [ 906.659376][ T3662] Bluetooth: hci1: command 0x0409 tx timeout [ 906.665891][ T3662] Bluetooth: hci0: command 0x0409 tx timeout [ 906.752902][T15882] chnl_net:caif_netlink_parms(): no params data found [ 906.790786][T15878] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.802525][T15878] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.837761][T15878] device bridge_slave_0 entered promiscuous mode [ 906.880952][T15885] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.888088][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.899688][ T3662] Bluetooth: hci3: command 0x0409 tx timeout [ 906.916558][T15885] device bridge_slave_0 entered promiscuous mode [ 906.935134][T15876] chnl_net:caif_netlink_parms(): no params data found [ 906.953433][T15878] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.980388][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.009522][T15878] device bridge_slave_1 entered promiscuous mode [ 907.026165][T15885] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.033889][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.060413][T15885] device bridge_slave_1 entered promiscuous mode [ 907.139382][ T3662] Bluetooth: hci4: command 0x0409 tx timeout [ 907.267920][T15885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.291514][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.341840][T15885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.362927][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.509564][T15882] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.516763][T15882] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.541467][T15882] device bridge_slave_0 entered promiscuous mode [ 907.604855][T15878] team0: Port device team_slave_0 added [ 907.620607][T15882] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.627751][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.636764][T15882] device bridge_slave_1 entered promiscuous mode [ 907.673856][T15885] team0: Port device team_slave_0 added [ 907.690782][T15878] team0: Port device team_slave_1 added [ 907.768846][T15885] team0: Port device team_slave_1 added [ 907.802142][T15882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.814126][T15882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.833678][T15876] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.841249][T15876] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.850028][T15876] device bridge_slave_0 entered promiscuous mode [ 907.902141][T15876] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.909435][T15876] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.917411][T15876] device bridge_slave_1 entered promiscuous mode [ 907.934918][T15885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.942477][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.968483][T15885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.984293][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.991725][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.018148][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.033807][T15882] team0: Port device team_slave_0 added [ 908.054347][T15885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.061365][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.088817][T15885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.106862][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.118239][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.144364][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.157755][T15882] team0: Port device team_slave_1 added [ 908.217629][T15876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.277534][T15876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.345812][T15885] device hsr_slave_0 entered promiscuous mode [ 908.364438][T15885] device hsr_slave_1 entered promiscuous mode [ 908.376886][T15882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.384553][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.412126][T15882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.468292][T15878] device hsr_slave_0 entered promiscuous mode [ 908.476581][T15878] device hsr_slave_1 entered promiscuous mode [ 908.484462][T15878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.493064][T15878] Cannot create hsr debugfs directory [ 908.500014][T15882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.507002][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.533829][T15882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.553309][T15876] team0: Port device team_slave_0 added [ 908.611912][T15876] team0: Port device team_slave_1 added [ 908.724312][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.739300][ T3662] Bluetooth: hci0: command 0x041b tx timeout [ 908.745423][ T3662] Bluetooth: hci1: command 0x041b tx timeout [ 908.850579][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.882220][T15882] device hsr_slave_0 entered promiscuous mode [ 908.919859][T15882] device hsr_slave_1 entered promiscuous mode [ 908.926738][T15882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.947155][T15882] Cannot create hsr debugfs directory [ 908.957086][T15876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.975930][T15876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.009230][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 909.019364][T15876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.056144][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.112251][T15876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.139324][T15876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.183241][T15876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.219444][T13761] Bluetooth: hci4: command 0x041b tx timeout [ 909.289965][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.514070][T15876] device hsr_slave_0 entered promiscuous mode [ 909.522803][T15876] device hsr_slave_1 entered promiscuous mode [ 909.531589][T15876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.539453][T15876] Cannot create hsr debugfs directory [ 909.789872][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.875229][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.961225][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.042081][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.265054][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.342192][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.420140][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.524815][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.822538][T13761] Bluetooth: hci0: command 0x040f tx timeout [ 910.829315][ T3662] Bluetooth: hci1: command 0x040f tx timeout [ 911.059348][T13761] Bluetooth: hci3: command 0x040f tx timeout [ 911.299096][T13761] Bluetooth: hci4: command 0x040f tx timeout [ 911.810311][T15878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 911.832285][T15878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 911.900215][T15878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 911.920208][T15878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 912.112161][T15885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 912.155723][T15885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 912.194679][T15885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 912.252969][T15885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 912.267356][T15882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 912.334658][T15882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.372792][T15882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.421921][T15882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.521406][T15878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.655617][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.673473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.687030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.773695][T15876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.784851][T15876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.796594][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.807765][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.817164][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.824347][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.832786][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.841919][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.850899][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.858058][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.866487][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.899437][T13761] Bluetooth: hci0: command 0x0419 tx timeout [ 912.905520][T13761] Bluetooth: hci1: command 0x0419 tx timeout [ 912.921835][T15876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.937094][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.953404][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.963193][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.972950][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.982382][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.991655][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.009935][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.022341][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.030826][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.045460][T15878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.057426][T15878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.073453][T15876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.100708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.119630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.136886][T15885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.139330][T13761] Bluetooth: hci3: command 0x0419 tx timeout [ 913.216810][T15885] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.244563][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.262020][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.274830][T15882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.331853][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.341106][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.349438][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.358786][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.367975][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.375139][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.379217][T13761] Bluetooth: hci4: command 0x0419 tx timeout [ 913.388290][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.409787][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.418387][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.425579][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.450297][T15882] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.483939][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.492712][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.504619][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.540407][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.550686][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.559452][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.566560][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.575935][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.585044][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.594089][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.601255][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.608903][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.618747][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.627481][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.636629][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.645814][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.654196][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.677597][ T11] device hsr_slave_0 left promiscuous mode [ 913.686407][ T11] device hsr_slave_1 left promiscuous mode [ 913.694845][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.702593][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.711790][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.719748][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.729854][ T11] device bridge_slave_1 left promiscuous mode [ 913.736097][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.744717][ T11] device bridge_slave_0 left promiscuous mode [ 913.757591][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.770824][ T11] device hsr_slave_0 left promiscuous mode [ 913.777351][ T11] device hsr_slave_1 left promiscuous mode [ 913.785617][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.793677][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.802624][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.810134][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.819234][ T11] device bridge_slave_1 left promiscuous mode [ 913.825456][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.834526][ T11] device bridge_slave_0 left promiscuous mode [ 913.841215][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.855011][ T11] device hsr_slave_0 left promiscuous mode [ 913.862376][ T11] device hsr_slave_1 left promiscuous mode [ 913.868743][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.876404][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.886537][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.895174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.904220][ T11] device bridge_slave_1 left promiscuous mode [ 913.910743][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.920745][ T11] device bridge_slave_0 left promiscuous mode [ 913.926938][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.946053][ T11] device veth1_macvtap left promiscuous mode [ 913.952671][ T11] device veth0_macvtap left promiscuous mode [ 913.958799][ T11] device veth1_vlan left promiscuous mode [ 913.965197][ T11] device veth0_vlan left promiscuous mode [ 913.973051][ T11] device veth1_macvtap left promiscuous mode [ 913.979234][ T11] device veth0_macvtap left promiscuous mode [ 913.985330][ T11] device veth1_vlan left promiscuous mode [ 913.991340][ T11] device veth0_vlan left promiscuous mode [ 913.998546][ T11] device veth1_macvtap left promiscuous mode [ 914.004852][ T11] device veth0_macvtap left promiscuous mode [ 914.013129][ T11] device veth1_vlan left promiscuous mode [ 914.019955][ T11] device veth0_vlan left promiscuous mode [ 914.445422][ T11] team0 (unregistering): Port device team_slave_1 removed [ 914.462237][ T11] team0 (unregistering): Port device team_slave_0 removed [ 914.475879][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.490571][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.562195][ T11] bond0 (unregistering): Released all slaves [ 914.686667][ T11] team0 (unregistering): Port device team_slave_1 removed [ 914.699418][ T11] team0 (unregistering): Port device team_slave_0 removed [ 914.712341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.731993][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.804840][ T11] bond0 (unregistering): Released all slaves [ 914.935049][ T11] team0 (unregistering): Port device team_slave_1 removed [ 914.948246][ T11] team0 (unregistering): Port device team_slave_0 removed [ 914.963064][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.979499][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.049711][ T11] bond0 (unregistering): Released all slaves [ 915.118004][T15885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 915.129179][T15885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.148066][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.159629][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.167140][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.175049][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 915.183678][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 915.192787][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.201597][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.234753][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.243965][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 915.252796][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.262962][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 915.285529][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 915.305950][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 915.341359][T15876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.370494][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 915.390688][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 915.402903][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 915.411910][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 915.420691][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.429587][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.438149][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.451357][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.476859][T15882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 915.532839][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.550314][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.569799][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.587526][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.601611][T15876] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.620287][T15878] device veth0_vlan entered promiscuous mode [ 915.627965][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.646769][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.676724][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 915.685840][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 915.706068][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.713303][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.735799][T15878] device veth1_vlan entered promiscuous mode [ 915.769540][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 915.777935][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 915.799121][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.807769][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 915.816653][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.823852][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.831739][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.868818][T15885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.900365][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 915.908689][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.929233][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.940145][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.982912][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 916.009995][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 916.018768][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 916.042184][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 916.060148][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 916.080764][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 916.099389][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 916.108187][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 916.120780][T15878] device veth0_macvtap entered promiscuous mode [ 916.133899][T15876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 916.147305][T15876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 916.157927][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 916.177308][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 916.195969][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 916.208036][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 916.221553][T15878] device veth1_macvtap entered promiscuous mode [ 916.251360][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 916.260979][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 916.277280][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.301333][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.339085][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.364141][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.380691][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.393230][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.426282][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 916.449662][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 916.460901][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.473764][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.485582][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.496453][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.509879][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.524950][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 916.539953][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.566839][T15878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.590976][T15878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.604637][T15878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.629456][T15878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.831185][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.859611][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.873607][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.903341][T15925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.934540][T15925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.944268][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 916.954175][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.003771][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 917.016577][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 917.024962][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 917.069322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 917.077790][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.109209][T16037] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 917.122466][T15876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.136153][T16037] CPU: 0 PID: 16037 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 917.144642][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 917.154748][T16037] Call Trace: [ 917.158043][T16037] [ 917.160991][T16037] dump_stack_lvl+0x1e3/0x2cb [ 917.165699][T16037] ? nf_tcp_handle_invalid+0x642/0x642 [ 917.171181][T16037] ? panic+0x75d/0x75d [ 917.175390][T16037] ? ___ratelimit+0x4c0/0x670 [ 917.180118][T16037] ? local_lock_release+0x170/0x170 [ 917.185404][T16037] dump_header+0xdf/0x9c0 [ 917.189783][T16037] oom_kill_process+0xf8/0x520 [ 917.194600][T16037] out_of_memory+0xf30/0x12f0 [ 917.199307][T16037] ? mutex_lock_io_nested+0x60/0x60 [ 917.204797][T16037] ? preempt_schedule+0xd9/0xe0 [ 917.209689][T16037] ? unregister_oom_notifier+0x20/0x20 [ 917.215163][T16037] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 917.221176][T16037] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 917.226777][T16037] ? preempt_schedule_thunk+0x16/0x18 [ 917.232185][T16037] ? mem_cgroup_oom_trylock+0x210/0x210 [ 917.237765][T16037] ? cgroup_file_notify+0x123/0x190 [ 917.242991][T16037] memory_max_write+0x34d/0x470 [ 917.247877][T16037] ? memory_max_show+0xa0/0xa0 [ 917.252667][T16037] ? read_lock_is_recursive+0x10/0x10 [ 917.258074][T16037] ? memory_max_show+0xa0/0xa0 [ 917.262880][T16037] cgroup_file_write+0x2c6/0x690 [ 917.267864][T16037] ? mutex_lock_io_nested+0x60/0x60 [ 917.273101][T16037] ? cgroup_seqfile_stop+0xd0/0xd0 [ 917.278277][T16037] ? __virt_addr_valid+0x22b/0x2e0 [ 917.283430][T16037] ? cgroup_seqfile_stop+0xd0/0xd0 [ 917.288570][T16037] kernfs_fop_write_iter+0x3a2/0x4f0 [ 917.293899][T16037] vfs_write+0x7ae/0xba0 [ 917.298174][T16037] ? file_end_write+0x250/0x250 [ 917.303059][T16037] ? mutex_lock_nested+0x17/0x20 [ 917.308011][T16037] ? __fdget_pos+0x250/0x2f0 [ 917.312608][T16037] ? ksys_write+0x77/0x2c0 [ 917.317048][T16037] ksys_write+0x19c/0x2c0 [ 917.321413][T16037] ? print_irqtrace_events+0x210/0x210 [ 917.326892][T16037] ? __ia32_sys_read+0x80/0x80 [ 917.331672][T16037] ? syscall_enter_from_user_mode+0x2e/0x220 [ 917.337697][T16037] ? lockdep_hardirqs_on+0x94/0x130 [ 917.342919][T16037] ? syscall_enter_from_user_mode+0x2e/0x220 [ 917.348926][T16037] do_syscall_64+0x3d/0xb0 [ 917.353374][T16037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 917.359278][T16037] RIP: 0033:0x7fbe66c8c169 [ 917.363721][T16037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 917.383341][T16037] RSP: 002b:00007fbe67a7a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.391816][T16037] RAX: ffffffffffffffda RBX: 00007fbe66dabf80 RCX: 00007fbe66c8c169 [ 917.399815][T16037] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 917.407907][T16037] RBP: 00007fbe66ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 917.415909][T16037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.423894][T16037] R13: 00007ffc089611af R14: 00007fbe67a7a300 R15: 0000000000022000 [ 917.431895][T16037] [ 917.442989][T16037] memory: usage 10608kB, limit 0kB, failcnt 256 [ 917.449391][T16037] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.459580][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.467537][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.469154][T16037] Memory cgroup stats for /syz0: [ 917.475291][T16037] anon 114688 [ 917.475291][T16037] file 10440704 [ 917.475291][T16037] kernel 294912 [ 917.475291][T16037] kernel_stack 65536 [ 917.475291][T16037] pagetables 81920 [ 917.475291][T16037] sec_pagetables 0 [ 917.475291][T16037] percpu 0 [ 917.475291][T16037] sock 0 [ 917.475291][T16037] vmalloc 0 [ 917.475291][T16037] shmem 10436608 [ 917.475291][T16037] zswap 0 [ 917.475291][T16037] zswapped 0 [ 917.475291][T16037] file_mapped 81920 [ 917.475291][T16037] file_dirty 0 [ 917.475291][T16037] file_writeback 0 [ 917.475291][T16037] swapcached 0 [ 917.475291][T16037] anon_thp 0 [ 917.475291][T16037] file_thp 0 [ 917.475291][T16037] shmem_thp 0 [ 917.475291][T16037] inactive_anon 0 [ 917.475291][T16037] active_anon 10551296 [ 917.475291][T16037] inactive_file 4096 [ 917.475291][T16037] active_file 0 [ 917.475291][T16037] unevictable 0 [ 917.475291][T16037] slab_reclaimable 44976 [ 917.475291][T16037] slab_unreclaimable 71304 [ 917.475291][T16037] slab 116280 [ 917.572952][T15885] device veth0_vlan entered promiscuous mode [ 917.575867][T16037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15878,uid=0 [ 917.596754][T16037] Memory cgroup out of memory: Killed process 15878 (syz-executor.0) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 917.609534][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 917.650075][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.673886][T15885] device veth1_vlan entered promiscuous mode [ 917.799409][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 917.807929][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.840548][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.848559][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.859163][T15876] device veth0_vlan entered promiscuous mode [ 917.889318][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 917.898547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.924036][T15885] device veth0_macvtap entered promiscuous mode [ 917.934345][T15876] device veth1_vlan entered promiscuous mode [ 917.953010][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 917.969077][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.977925][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.995514][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 918.028166][T15885] device veth1_macvtap entered promiscuous mode [ 918.063508][T15876] device veth0_macvtap entered promiscuous mode [ 918.076486][T15882] device veth0_vlan entered promiscuous mode [ 918.085855][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 918.096239][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 918.105128][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 918.114196][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 918.124400][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 918.133423][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 918.151378][T15876] device veth1_macvtap entered promiscuous mode [ 918.164550][T15882] device veth1_vlan entered promiscuous mode [ 918.174799][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 918.183584][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 918.192391][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 918.200868][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 918.208761][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 918.219434][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.232830][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.243473][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.254261][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.265306][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.276127][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.290072][T15885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.306889][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.319487][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.330267][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.341546][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.352145][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.363200][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.373549][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.384581][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.398329][T15876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.409227][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 918.417859][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 918.428387][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 918.437916][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 918.447222][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 918.460734][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.473903][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.484674][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.495485][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.508818][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.520114][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.532674][T15885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.544272][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.555937][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.574066][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.586975][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.601763][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 12:18:30 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 918.617825][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.631668][T15876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.643001][T15876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.658163][T15876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.687671][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 918.700729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 918.716265][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 918.726648][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 918.744110][T15885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.756119][T15885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.775295][T15885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.786033][T15885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.805750][T15876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.816571][T15876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.826302][T15876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.844998][T15876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.858319][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 918.890053][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 918.909424][T15882] device veth0_macvtap entered promiscuous mode [ 918.971479][T15882] device veth1_macvtap entered promiscuous mode [ 919.042869][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.057532][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.070023][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.082126][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.092279][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.103072][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.113704][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.124644][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.135116][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.147076][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.159453][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.187666][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 919.197564][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 919.206287][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 919.215832][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 919.228205][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.244358][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.256384][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.267390][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.277718][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.288669][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.299197][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.310731][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.320890][T15882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.331672][T15882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.343638][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.354910][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.362958][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.363020][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.389859][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 919.394510][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.398785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 919.440119][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 919.448654][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 919.476725][T15882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.485669][T15882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.494724][T15882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.503683][T15882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.535557][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.563143][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.612871][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 919.640852][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.673799][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.687872][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.698149][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.722106][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 919.749873][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 919.806386][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.817723][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.834155][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 920.109754][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.626862][T16045] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 920.640748][T16045] CPU: 1 PID: 16045 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 920.649228][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 920.650928][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.659299][T16045] Call Trace: [ 920.659311][T16045] [ 920.659321][T16045] dump_stack_lvl+0x1e3/0x2cb [ 920.659360][T16045] ? nf_tcp_handle_invalid+0x642/0x642 [ 920.659390][T16045] ? panic+0x75d/0x75d [ 920.659432][T16045] ? ___ratelimit+0x4c0/0x670 [ 920.659468][T16045] ? local_lock_release+0x170/0x170 [ 920.659503][T16045] dump_header+0xdf/0x9c0 [ 920.659531][T16045] oom_kill_process+0xf8/0x520 [ 920.709265][T16045] out_of_memory+0xf30/0x12f0 [ 920.713993][T16045] ? mutex_lock_io_nested+0x60/0x60 [ 920.719252][T16045] ? preempt_schedule+0xd9/0xe0 [ 920.724143][T16045] ? unregister_oom_notifier+0x20/0x20 [ 920.729640][T16045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.735848][T16045] ? lockdep_hardirqs_on+0x94/0x130 [ 920.741086][T16045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.747282][T16045] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 920.752848][T16045] ? preempt_schedule_thunk+0x16/0x18 [ 920.758238][T16045] ? mem_cgroup_oom_trylock+0x210/0x210 [ 920.763805][T16045] ? cgroup_file_notify+0x123/0x190 [ 920.769023][T16045] memory_max_write+0x34d/0x470 [ 920.773903][T16045] ? memory_max_show+0xa0/0xa0 [ 920.778705][T16045] ? memory_max_show+0xa0/0xa0 [ 920.783486][T16045] cgroup_file_write+0x2c6/0x690 [ 920.788447][T16045] ? cgroup_seqfile_stop+0xd0/0xd0 [ 920.793576][T16045] ? cgroup_seqfile_stop+0xd0/0xd0 [ 920.798713][T16045] ? cgroup_seqfile_stop+0xd0/0xd0 [ 920.803842][T16045] kernfs_fop_write_iter+0x3a2/0x4f0 [ 920.809160][T16045] vfs_write+0x7ae/0xba0 [ 920.813432][T16045] ? file_end_write+0x250/0x250 [ 920.818304][T16045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.824565][T16045] ? ksys_write+0xfd/0x2c0 [ 920.828999][T16045] ? ksys_write+0x118/0x2c0 [ 920.833534][T16045] ksys_write+0x19c/0x2c0 [ 920.837883][T16045] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 920.844058][T16045] ? __ia32_sys_read+0x80/0x80 [ 920.848845][T16045] ? syscall_enter_from_user_mode+0x37/0x220 [ 920.854842][T16045] ? syscall_enter_from_user_mode+0x2e/0x220 [ 920.860843][T16045] do_syscall_64+0x3d/0xb0 [ 920.865277][T16045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 920.871181][T16045] RIP: 0033:0x7ffbcc68c169 [ 920.875609][T16045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 920.895226][T16045] RSP: 002b:00007ffbcd399168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 920.903655][T16045] RAX: ffffffffffffffda RBX: 00007ffbcc7abf80 RCX: 00007ffbcc68c169 [ 920.911638][T16045] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 920.919640][T16045] RBP: 00007ffbcc6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 920.927626][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.935604][T16045] R13: 00007ffdf264074f R14: 00007ffbcd399300 R15: 0000000000022000 [ 920.943607][T16045] [ 921.024888][T16045] memory: usage 8536kB, limit 0kB, failcnt 104 [ 921.035282][T16045] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.050157][T16045] Memory cgroup stats for /syz1: [ 921.050364][T16045] anon 114688 [ 921.050364][T16045] file 8343552 [ 921.050364][T16045] kernel 282624 [ 921.050364][T16045] kernel_stack 65536 [ 921.050364][T16045] pagetables 77824 [ 921.050364][T16045] sec_pagetables 0 [ 921.050364][T16045] percpu 0 [ 921.050364][T16045] sock 0 [ 921.050364][T16045] vmalloc 0 [ 921.050364][T16045] shmem 8343552 [ 921.050364][T16045] zswap 0 [ 921.050364][T16045] zswapped 0 [ 921.050364][T16045] file_mapped 147456 [ 921.050364][T16045] file_dirty 0 [ 921.050364][T16045] file_writeback 0 [ 921.050364][T16045] swapcached 0 [ 921.050364][T16045] anon_thp 0 [ 921.050364][T16045] file_thp 0 [ 921.050364][T16045] shmem_thp 0 [ 921.050364][T16045] inactive_anon 8343552 [ 921.050364][T16045] active_anon 114688 [ 921.050364][T16045] inactive_file 0 [ 921.050364][T16045] active_file 0 [ 921.050364][T16045] unevictable 0 [ 921.050364][T16045] slab_reclaimable 39336 [ 921.050364][T16045] slab_unreclaimable 71952 [ 921.050364][T16045] slab 111288 [ 921.168199][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.213633][T16045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15876,uid=0 [ 921.241788][T16045] Memory cgroup out of memory: Killed process 15876 (syz-executor.1) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 921.303265][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:18:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:18:33 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:18:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:18:33 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:33 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:33 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 921.722151][T15885] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 921.774591][T15885] CPU: 1 PID: 15885 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 921.783083][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 921.793185][T15885] Call Trace: [ 921.796501][T15885] [ 921.799465][T15885] dump_stack_lvl+0x1e3/0x2cb [ 921.804195][T15885] ? nf_tcp_handle_invalid+0x642/0x642 [ 921.809702][T15885] ? panic+0x75d/0x75d [ 921.813816][T15885] ? ___ratelimit+0x4c0/0x670 [ 921.818545][T15885] ? local_lock_release+0x170/0x170 [ 921.823795][T15885] dump_header+0xdf/0x9c0 [ 921.828181][T15885] oom_kill_process+0xf8/0x520 [ 921.832998][T15885] out_of_memory+0xf30/0x12f0 [ 921.837712][T15885] ? mutex_lock_io_nested+0x60/0x60 [ 921.842951][T15885] ? unregister_oom_notifier+0x20/0x20 [ 921.848440][T15885] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 921.854005][T15885] ? __lock_acquire+0x1f80/0x1f80 [ 921.859047][T15885] ? mem_cgroup_oom_trylock+0x210/0x210 [ 921.864627][T15885] ? do_raw_spin_unlock+0x137/0x8a0 [ 921.869842][T15885] ? mem_cgroup_iter+0x349/0x470 [ 921.874797][T15885] try_charge_memcg+0xcaa/0x16b0 [ 921.879773][T15885] ? percpu_ref_put+0x150/0x150 [ 921.884647][T15885] ? rcu_lock_acquire+0x30/0x30 [ 921.889516][T15885] ? __lock_acquire+0x1f80/0x1f80 [ 921.894575][T15885] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 921.900590][T15885] obj_cgroup_charge+0x2ae/0x410 [ 921.905574][T15885] ? __lock_acquire+0x1f80/0x1f80 [ 921.910609][T15885] ? local_lock_release+0x120/0x120 [ 921.915840][T15885] slab_pre_alloc_hook+0x27e/0x2a0 [ 921.920977][T15885] kmem_cache_alloc_node+0x52/0x310 [ 921.926186][T15885] ? dup_task_struct+0x57/0x6d0 [ 921.931060][T15885] dup_task_struct+0x57/0x6d0 [ 921.935748][T15885] ? _raw_spin_unlock_irq+0x1f/0x40 [ 921.940990][T15885] ? lockdep_hardirqs_on+0x94/0x130 [ 921.946209][T15885] copy_process+0x637/0x4020 [ 921.950820][T15885] ? _raw_spin_unlock+0x24/0x40 [ 921.955695][T15885] ? do_wp_page+0x83d/0x1ab0 [ 921.960302][T15885] ? idle_dummy+0x10/0x10 [ 921.964641][T15885] ? handle_mm_fault+0x3606/0x5140 [ 921.969769][T15885] kernel_clone+0x222/0x920 [ 921.974303][T15885] ? create_io_thread+0x180/0x180 [ 921.979354][T15885] __x64_sys_clone+0x231/0x280 [ 921.984129][T15885] ? __do_sys_vfork+0x110/0x110 [ 921.988993][T15885] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 921.995005][T15885] ? syscall_enter_from_user_mode+0x2e/0x220 [ 922.001023][T15885] ? lockdep_hardirqs_on+0x94/0x130 [ 922.006251][T15885] ? syscall_enter_from_user_mode+0x2e/0x220 [ 922.012262][T15885] do_syscall_64+0x3d/0xb0 [ 922.016696][T15885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 922.022603][T15885] RIP: 0033:0x7fa85d689e9b [ 922.027027][T15885] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 922.046640][T15885] RSP: 002b:00007ffec13be510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 922.055136][T15885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa85d689e9b [ 922.063136][T15885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 922.071323][T15885] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556d57400 [ 922.079837][T15885] R10: 0000555556d576d0 R11: 0000000000000246 R12: 0000000000000001 [ 922.087831][T15885] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffec13be5f0 [ 922.095837][T15885] [ 922.150075][T15885] memory: usage 10324kB, limit 0kB, failcnt 149 [ 922.156550][T15885] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.179483][T15885] Memory cgroup stats for /syz5: [ 922.179718][T15885] anon 45056 [ 922.179718][T15885] file 10440704 [ 922.179718][T15885] kernel 86016 [ 922.179718][T15885] kernel_stack 0 [ 922.179718][T15885] pagetables 8192 [ 922.179718][T15885] sec_pagetables 0 [ 922.179718][T15885] percpu 0 [ 922.179718][T15885] sock 0 [ 922.179718][T15885] vmalloc 0 [ 922.179718][T15885] shmem 10440704 [ 922.179718][T15885] zswap 0 [ 922.179718][T15885] zswapped 0 [ 922.179718][T15885] file_mapped 61440 [ 922.179718][T15885] file_dirty 0 [ 922.179718][T15885] file_writeback 0 [ 922.179718][T15885] swapcached 0 [ 922.179718][T15885] anon_thp 0 [ 922.179718][T15885] file_thp 0 [ 922.179718][T15885] shmem_thp 0 [ 922.179718][T15885] inactive_anon 0 [ 922.179718][T15885] active_anon 10485760 [ 922.179718][T15885] inactive_file 0 [ 922.179718][T15885] active_file 0 [ 922.179718][T15885] unevictable 0 [ 922.179718][T15885] slab_reclaimable 33456 [ 922.179718][T15885] slab_unreclaimable 32296 [ 922.179718][T15885] slab 65752 [ 922.306496][T15885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15885,uid=0 [ 922.324196][T15885] Memory cgroup out of memory: Killed process 15885 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 922.345566][T15882] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 922.371371][T15882] CPU: 0 PID: 15882 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 922.379882][T15882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 922.389978][T15882] Call Trace: [ 922.393285][T15882] [ 922.396241][T15882] dump_stack_lvl+0x1e3/0x2cb [ 922.400964][T15882] ? nf_tcp_handle_invalid+0x642/0x642 [ 922.406488][T15882] ? panic+0x75d/0x75d [ 922.410598][T15882] ? ___ratelimit+0x4c0/0x670 [ 922.415325][T15882] ? local_lock_release+0x170/0x170 [ 922.420569][T15882] dump_header+0xdf/0x9c0 [ 922.424936][T15882] oom_kill_process+0xf8/0x520 [ 922.429825][T15882] out_of_memory+0xf30/0x12f0 [ 922.434633][T15882] ? mutex_lock_io_nested+0x60/0x60 [ 922.439860][T15882] ? unregister_oom_notifier+0x20/0x20 [ 922.445338][T15882] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 922.450901][T15882] ? __lock_acquire+0x1f80/0x1f80 [ 922.455939][T15882] ? mem_cgroup_oom_trylock+0x210/0x210 [ 922.461511][T15882] ? do_raw_spin_unlock+0x137/0x8a0 [ 922.466727][T15882] ? mem_cgroup_iter+0x349/0x470 [ 922.471685][T15882] try_charge_memcg+0xcaa/0x16b0 [ 922.476665][T15882] ? percpu_ref_put+0x150/0x150 [ 922.481534][T15882] ? rcu_lock_acquire+0x30/0x30 [ 922.486403][T15882] ? __lock_acquire+0x1f80/0x1f80 [ 922.491439][T15882] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 922.497462][T15882] obj_cgroup_charge+0x2ae/0x410 [ 922.502420][T15882] ? __lock_acquire+0x1f80/0x1f80 [ 922.507457][T15882] ? local_lock_release+0x120/0x120 [ 922.512696][T15882] slab_pre_alloc_hook+0x27e/0x2a0 [ 922.517837][T15882] kmem_cache_alloc_node+0x52/0x310 [ 922.523065][T15882] ? dup_task_struct+0x57/0x6d0 [ 922.527936][T15882] dup_task_struct+0x57/0x6d0 [ 922.532629][T15882] ? _raw_spin_unlock_irq+0x1f/0x40 [ 922.537865][T15882] ? lockdep_hardirqs_on+0x94/0x130 [ 922.543084][T15882] copy_process+0x637/0x4020 [ 922.547694][T15882] ? _raw_spin_unlock+0x24/0x40 [ 922.552569][T15882] ? do_wp_page+0x83d/0x1ab0 [ 922.557174][T15882] ? idle_dummy+0x10/0x10 [ 922.561536][T15882] ? handle_mm_fault+0x3606/0x5140 [ 922.566668][T15882] kernel_clone+0x222/0x920 [ 922.571189][T15882] ? create_io_thread+0x180/0x180 [ 922.576242][T15882] __x64_sys_clone+0x231/0x280 [ 922.581041][T15882] ? __do_sys_vfork+0x110/0x110 [ 922.585916][T15882] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 922.592013][T15882] ? syscall_enter_from_user_mode+0x2e/0x220 [ 922.598014][T15882] ? lockdep_hardirqs_on+0x94/0x130 [ 922.603233][T15882] ? syscall_enter_from_user_mode+0x2e/0x220 [ 922.609231][T15882] do_syscall_64+0x3d/0xb0 [ 922.613666][T15882] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 922.619665][T15882] RIP: 0033:0x7f1582289e9b [ 922.624090][T15882] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 922.643710][T15882] RSP: 002b:00007ffeb2604ac0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 922.652142][T15882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1582289e9b [ 922.660127][T15882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 12:18:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 922.668109][T15882] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555561dd400 [ 922.676092][T15882] R10: 00005555561dd6d0 R11: 0000000000000246 R12: 0000000000000001 [ 922.684073][T15882] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb2604ba0 [ 922.692068][T15882] 12:18:34 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 922.880652][T15882] memory: usage 4408kB, limit 0kB, failcnt 119 [ 922.886938][T15882] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.931113][T15882] Memory cgroup stats for /syz4: [ 922.931328][T15882] anon 40960 [ 922.931328][T15882] file 4407296 [ 922.931328][T15882] kernel 65536 [ 922.931328][T15882] kernel_stack 0 [ 922.931328][T15882] pagetables 8192 [ 922.931328][T15882] sec_pagetables 0 [ 922.931328][T15882] percpu 0 [ 922.931328][T15882] sock 0 [ 922.931328][T15882] vmalloc 0 [ 922.931328][T15882] shmem 4407296 [ 922.931328][T15882] zswap 0 [ 922.931328][T15882] zswapped 0 [ 922.931328][T15882] file_mapped 61440 [ 922.931328][T15882] file_dirty 0 12:18:34 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 922.931328][T15882] file_writeback 0 [ 922.931328][T15882] swapcached 0 [ 922.931328][T15882] anon_thp 0 [ 922.931328][T15882] file_thp 0 [ 922.931328][T15882] shmem_thp 0 [ 922.931328][T15882] inactive_anon 4407296 [ 922.931328][T15882] active_anon 40960 [ 922.931328][T15882] inactive_file 0 [ 922.931328][T15882] active_file 0 [ 922.931328][T15882] unevictable 0 [ 922.931328][T15882] slab_reclaimable 16752 [ 922.931328][T15882] slab_unreclaimable 32296 [ 922.931328][T15882] slab 49048 12:18:34 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:18:34 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 923.351293][T15882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15882,uid=0 12:18:34 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 923.435565][T15882] Memory cgroup out of memory: Killed process 15882 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 12:18:35 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:35 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 923.828233][ T11] device hsr_slave_0 left promiscuous mode [ 923.882133][ T11] device hsr_slave_1 left promiscuous mode [ 923.933053][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.957759][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.009260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.019519][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.063710][ T11] device bridge_slave_1 left promiscuous mode [ 924.094654][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.122849][ T3662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.132381][ T3662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.143325][ T3662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.152483][ T3662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.162041][ T11] device bridge_slave_0 left promiscuous mode [ 924.162048][ T3662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 924.176057][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.184746][ T3662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 924.236345][ T11] device veth1_macvtap left promiscuous mode [ 924.256794][ T11] device veth0_macvtap left promiscuous mode [ 924.288381][ T11] device veth1_vlan left promiscuous mode [ 924.304973][ T11] device veth0_vlan left promiscuous mode [ 924.590547][T13761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.600291][T13761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.615570][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.624747][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 924.632587][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 924.802644][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 924.814272][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 924.837001][T13761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 924.848417][T13761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 924.859773][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 924.867047][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 924.930021][ T11] team0 (unregistering): Port device team_slave_1 removed [ 924.946939][ T11] team0 (unregistering): Port device team_slave_0 removed [ 924.961993][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.980251][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.065481][ T11] bond0 (unregistering): Released all slaves [ 925.613887][T16106] chnl_net:caif_netlink_parms(): no params data found [ 925.772539][T16108] chnl_net:caif_netlink_parms(): no params data found [ 925.919762][T16099] chnl_net:caif_netlink_parms(): no params data found [ 925.959780][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.966948][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.012590][T16106] device bridge_slave_0 entered promiscuous mode [ 926.079307][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.086453][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.130458][T16106] device bridge_slave_1 entered promiscuous mode [ 926.259125][T13761] Bluetooth: hci0: command 0x0409 tx timeout [ 926.286799][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.335112][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.378245][T16108] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.408249][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.428659][T16108] device bridge_slave_0 entered promiscuous mode [ 926.476615][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.489806][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.498068][T16108] device bridge_slave_1 entered promiscuous mode [ 926.559791][T16106] team0: Port device team_slave_0 added [ 926.577001][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.599440][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.629215][T16099] device bridge_slave_0 entered promiscuous mode [ 926.659120][T13761] Bluetooth: hci1: command 0x0409 tx timeout [ 926.661435][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.699177][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.707443][T16099] device bridge_slave_1 entered promiscuous mode [ 926.732367][T16106] team0: Port device team_slave_1 added [ 926.771852][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.793798][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.877668][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.891543][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.919148][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 926.939929][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.993372][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.013934][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.022498][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.069038][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.093549][T16108] team0: Port device team_slave_0 added [ 927.130020][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.154638][T16108] team0: Port device team_slave_1 added [ 927.234290][T16099] team0: Port device team_slave_0 added [ 927.280243][T16099] team0: Port device team_slave_1 added [ 927.286741][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.294465][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.321143][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.348569][T16106] device hsr_slave_0 entered promiscuous mode [ 927.355868][T16106] device hsr_slave_1 entered promiscuous mode [ 927.363054][T16106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.370937][T16106] Cannot create hsr debugfs directory [ 927.418347][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.425576][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.452782][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.487258][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.496022][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.531911][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.586165][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.593813][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.619929][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.702353][T16108] device hsr_slave_0 entered promiscuous mode [ 927.709607][T16108] device hsr_slave_1 entered promiscuous mode [ 927.716327][T16108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.724327][T16108] Cannot create hsr debugfs directory [ 927.777376][T16099] device hsr_slave_0 entered promiscuous mode [ 927.788144][T16099] device hsr_slave_1 entered promiscuous mode [ 927.795120][T16099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.803094][T16099] Cannot create hsr debugfs directory [ 927.824126][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.982252][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.125526][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.217922][T16106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.320199][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.349285][T13761] Bluetooth: hci0: command 0x041b tx timeout [ 928.461211][T16106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.680135][T16106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.739049][T13761] Bluetooth: hci1: command 0x041b tx timeout [ 928.783296][T16106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.912081][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.979151][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 929.048919][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.104196][T16106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 929.200006][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.229543][T16106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 929.241196][T16106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 929.272071][T16106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.331003][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.489770][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.533227][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 929.544041][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.571040][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.628731][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.645010][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.664396][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.671605][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.684419][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.694766][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.703963][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.711143][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.719755][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 929.755515][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.764228][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 929.795199][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 929.804522][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 929.813868][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 929.823084][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 929.832794][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 929.841831][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 929.850814][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 929.955124][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 929.968373][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 930.032854][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.419235][T13761] Bluetooth: hci0: command 0x040f tx timeout [ 930.520352][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.529444][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 930.537012][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 930.708245][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 930.718624][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 930.783495][T16106] device veth0_vlan entered promiscuous mode [ 930.829220][T13761] Bluetooth: hci1: command 0x040f tx timeout [ 930.909617][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 930.928037][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 930.992245][T16106] device veth1_vlan entered promiscuous mode [ 931.020146][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 931.028190][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 931.047153][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 931.069098][T13761] Bluetooth: hci3: command 0x040f tx timeout [ 931.225335][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.231713][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.315266][T16106] device veth0_macvtap entered promiscuous mode [ 931.496780][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 931.519829][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 931.528620][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 931.574273][T16106] device veth1_macvtap entered promiscuous mode [ 931.590256][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 931.600119][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 931.681679][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.694574][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.712980][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.733088][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.769089][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.798975][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.808840][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.828226][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.839295][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.861396][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.880853][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.932014][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 931.944748][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 932.000414][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.012301][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.023755][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.035286][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.045959][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.056905][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.067117][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.077955][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.088181][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.106823][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.121367][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.136331][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 932.147344][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 932.173798][T16099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 932.214899][T16106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.233279][T16106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.253153][T16106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.262430][T16106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.355893][T16099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 932.427811][T16099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 932.482451][T16099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 932.510971][T13761] Bluetooth: hci0: command 0x0419 tx timeout [ 932.558122][T16108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 932.615449][T16108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 932.645370][ T11] device hsr_slave_0 left promiscuous mode [ 932.653676][ T11] device hsr_slave_1 left promiscuous mode [ 932.662715][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.670565][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.680316][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.687795][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.699794][ T11] device bridge_slave_1 left promiscuous mode [ 932.706055][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.716574][ T11] device bridge_slave_0 left promiscuous mode [ 932.723192][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.736692][ T11] device hsr_slave_0 left promiscuous mode [ 932.743924][ T11] device hsr_slave_1 left promiscuous mode [ 932.751044][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.758494][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.778844][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.789068][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.798351][ T11] device bridge_slave_1 left promiscuous mode [ 932.814619][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.838264][ T11] device bridge_slave_0 left promiscuous mode [ 932.845722][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.868360][ T11] device hsr_slave_0 left promiscuous mode [ 932.875032][ T11] device hsr_slave_1 left promiscuous mode [ 932.882153][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.890002][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.899805][T13757] Bluetooth: hci1: command 0x0419 tx timeout [ 932.906478][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.914421][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.924031][ T11] device bridge_slave_1 left promiscuous mode [ 932.931500][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.941559][ T11] device bridge_slave_0 left promiscuous mode [ 932.947804][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.968540][ T11] device veth1_macvtap left promiscuous mode [ 932.974715][ T11] device veth0_macvtap left promiscuous mode [ 932.982306][ T11] device veth1_vlan left promiscuous mode [ 932.988211][ T11] device veth0_vlan left promiscuous mode [ 932.996221][ T11] device veth1_macvtap left promiscuous mode [ 933.002688][ T11] device veth0_macvtap left promiscuous mode [ 933.008851][ T11] device veth1_vlan left promiscuous mode [ 933.015305][ T11] device veth0_vlan left promiscuous mode [ 933.023406][ T11] device veth1_macvtap left promiscuous mode [ 933.030080][ T11] device veth0_macvtap left promiscuous mode [ 933.036234][ T11] device veth1_vlan left promiscuous mode [ 933.043218][ T11] device veth0_vlan left promiscuous mode [ 933.150599][T13757] Bluetooth: hci3: command 0x0419 tx timeout [ 933.460917][ T11] team0 (unregistering): Port device team_slave_1 removed [ 933.482113][ T11] team0 (unregistering): Port device team_slave_0 removed [ 933.497531][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.513109][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.582828][ T11] bond0 (unregistering): Released all slaves [ 933.723547][ T11] team0 (unregistering): Port device team_slave_1 removed [ 933.738390][ T11] team0 (unregistering): Port device team_slave_0 removed [ 933.757205][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.772376][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.842829][ T11] bond0 (unregistering): Released all slaves [ 933.972740][ T11] team0 (unregistering): Port device team_slave_1 removed [ 933.989783][ T11] team0 (unregistering): Port device team_slave_0 removed [ 934.003054][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.016946][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.087941][ T11] bond0 (unregistering): Released all slaves [ 934.155155][T16108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 934.162480][ T5280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.170780][ T5280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.206683][T16108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 934.227982][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 934.271895][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.290899][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.345946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 934.404085][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.525088][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.550888][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.562899][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.631797][T16108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.650110][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 934.662359][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 934.681433][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.688615][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.716947][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 934.735486][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 934.754452][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.761667][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.771294][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.790552][T16220] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 934.807231][T16220] CPU: 0 PID: 16220 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 934.815798][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 934.825896][T16220] Call Trace: [ 934.829211][T16220] [ 934.832174][T16220] dump_stack_lvl+0x1e3/0x2cb [ 934.836899][T16220] ? nf_tcp_handle_invalid+0x642/0x642 [ 934.838667][T16099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 934.842384][T16220] ? panic+0x75d/0x75d [ 934.842419][T16220] ? ___ratelimit+0x4c0/0x670 [ 934.861524][T16220] ? local_lock_release+0x170/0x170 [ 934.866749][T16220] dump_header+0xdf/0x9c0 [ 934.871112][T16220] oom_kill_process+0xf8/0x520 [ 934.875900][T16220] out_of_memory+0xf30/0x12f0 [ 934.880597][T16220] ? mutex_lock_io_nested+0x60/0x60 [ 934.885816][T16220] ? unregister_oom_notifier+0x20/0x20 [ 934.891284][T16220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 934.897471][T16220] ? lockdep_hardirqs_on+0x94/0x130 [ 934.902691][T16220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 934.908862][T16220] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 934.914434][T16220] ? mark_lock+0x9a/0x340 [ 934.918779][T16220] ? mem_cgroup_oom_trylock+0x210/0x210 [ 934.924355][T16220] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 934.930308][T16220] ? cgroup_file_notify+0x123/0x190 [ 934.935544][T16220] memory_max_write+0x34d/0x470 [ 934.940428][T16220] ? memory_max_show+0xa0/0xa0 [ 934.945221][T16220] ? read_lock_is_recursive+0x10/0x10 [ 934.950637][T16220] ? memory_max_show+0xa0/0xa0 [ 934.955423][T16220] cgroup_file_write+0x2c6/0x690 [ 934.960388][T16220] ? mutex_lock_io_nested+0x60/0x60 [ 934.965605][T16220] ? cgroup_seqfile_stop+0xd0/0xd0 [ 934.970739][T16220] ? __virt_addr_valid+0x22b/0x2e0 [ 934.975893][T16220] ? cgroup_seqfile_stop+0xd0/0xd0 [ 934.981024][T16220] kernfs_fop_write_iter+0x3a2/0x4f0 [ 934.986337][T16220] vfs_write+0x7ae/0xba0 [ 934.990603][T16220] ? file_end_write+0x250/0x250 [ 934.995491][T16220] ? mutex_lock_nested+0x17/0x20 [ 935.000444][T16220] ? __fdget_pos+0x250/0x2f0 [ 935.005398][T16220] ? ksys_write+0x77/0x2c0 [ 935.009839][T16220] ksys_write+0x19c/0x2c0 [ 935.014208][T16220] ? print_irqtrace_events+0x210/0x210 [ 935.019689][T16220] ? __ia32_sys_read+0x80/0x80 [ 935.024475][T16220] ? syscall_enter_from_user_mode+0x2e/0x220 [ 935.030495][T16220] ? lockdep_hardirqs_on+0x94/0x130 [ 935.035713][T16220] ? syscall_enter_from_user_mode+0x2e/0x220 [ 935.041717][T16220] do_syscall_64+0x3d/0xb0 [ 935.046148][T16220] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 935.052056][T16220] RIP: 0033:0x7f625048c169 [ 935.056482][T16220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 935.076279][T16220] RSP: 002b:00007f6251246168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 935.084797][T16220] RAX: ffffffffffffffda RBX: 00007f62505abf80 RCX: 00007f625048c169 [ 935.092782][T16220] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 935.100764][T16220] RBP: 00007f62504e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 935.108749][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.116751][T16220] R13: 00007ffc8d4cec7f R14: 00007f6251246300 R15: 0000000000022000 [ 935.124796][T16220] [ 935.178611][T16099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.203984][T16220] memory: usage 8580kB, limit 0kB, failcnt 104 [ 935.216370][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 935.224446][T16220] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.242548][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.262914][T16220] Memory cgroup stats for /syz1: [ 935.266038][T16220] anon 110592 [ 935.266038][T16220] file 8343552 [ 935.266038][T16220] kernel 319488 [ 935.266038][T16220] kernel_stack 65536 [ 935.266038][T16220] pagetables 81920 [ 935.266038][T16220] sec_pagetables 0 [ 935.266038][T16220] percpu 0 [ 935.266038][T16220] sock 0 [ 935.266038][T16220] vmalloc 0 [ 935.266038][T16220] shmem 8343552 [ 935.266038][T16220] zswap 0 [ 935.266038][T16220] zswapped 0 [ 935.266038][T16220] file_mapped 147456 [ 935.266038][T16220] file_dirty 0 [ 935.266038][T16220] file_writeback 0 [ 935.266038][T16220] swapcached 0 [ 935.266038][T16220] anon_thp 0 [ 935.266038][T16220] file_thp 0 [ 935.266038][T16220] shmem_thp 0 [ 935.266038][T16220] inactive_anon 8343552 [ 935.266038][T16220] active_anon 110592 [ 935.266038][T16220] inactive_file 0 [ 935.266038][T16220] active_file 0 [ 935.266038][T16220] unevictable 0 [ 935.266038][T16220] slab_reclaimable 42680 [ 935.266038][T16220] slab_unreclaimable 99960 [ 935.266038][T16220] slab 142640 [ 935.391040][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.402218][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.429986][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.438845][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.448044][T16220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16106,uid=0 [ 935.471398][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.471973][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 935.472756][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 935.473311][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 935.474789][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 935.475576][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 935.536917][T16220] Memory cgroup out of memory: Killed process 16106 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 935.568988][T16108] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.576014][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 935.589946][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 935.630763][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 935.640114][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 935.648658][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.655818][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.735035][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 935.763255][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 935.776829][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.784113][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.824307][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 935.858604][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 935.867704][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.885303][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.897307][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.915524][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.924931][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.934116][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.943459][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 935.957015][T16108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.986185][T16108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 936.035806][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 936.045066][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 936.054659][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 936.063816][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 936.072569][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 936.125501][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.201771][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 936.218575][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 936.242790][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 936.252163][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 936.264104][T16099] device veth0_vlan entered promiscuous mode [ 936.291481][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 936.334755][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 936.372669][T16099] device veth1_vlan entered promiscuous mode [ 936.499622][T16099] device veth0_macvtap entered promiscuous mode [ 936.507502][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 936.523412][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 936.540292][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 936.559678][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 936.585260][T16099] device veth1_macvtap entered promiscuous mode [ 936.605328][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 936.623478][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 936.647213][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.691874][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.721260][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.749516][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.765380][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.789555][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.804383][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.813857][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 936.824755][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 936.856732][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.870077][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.880420][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.891176][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.901334][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.919028][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.940421][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.954764][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.980521][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 936.988060][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.013371][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 937.029765][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 937.041228][T16099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.059074][T16099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.089039][T16099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.097832][T16099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.254647][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.269039][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.315299][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 937.336580][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.359649][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.379301][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 937.570588][T16265] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 937.603815][T16265] CPU: 0 PID: 16265 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 937.612317][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 937.622415][T16265] Call Trace: [ 937.625729][T16265] [ 937.628690][T16265] dump_stack_lvl+0x1e3/0x2cb [ 937.633460][T16265] ? nf_tcp_handle_invalid+0x642/0x642 [ 937.638954][T16265] ? panic+0x75d/0x75d [ 937.643078][T16265] ? ___ratelimit+0x4c0/0x670 [ 937.647818][T16265] ? local_lock_release+0x170/0x170 [ 937.653076][T16265] dump_header+0xdf/0x9c0 [ 937.657450][T16265] oom_kill_process+0xf8/0x520 [ 937.662291][T16265] out_of_memory+0xf30/0x12f0 [ 937.667009][T16265] ? mutex_lock_io_nested+0x60/0x60 [ 937.672244][T16265] ? preempt_schedule+0xd9/0xe0 [ 937.677130][T16265] ? unregister_oom_notifier+0x20/0x20 [ 937.682628][T16265] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 937.688672][T16265] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 937.694259][T16265] ? preempt_schedule_thunk+0x16/0x18 [ 937.699677][T16265] ? mem_cgroup_oom_trylock+0x210/0x210 [ 937.705369][T16265] ? cgroup_file_notify+0x123/0x190 [ 937.710629][T16265] memory_max_write+0x34d/0x470 [ 937.715543][T16265] ? memory_max_show+0xa0/0xa0 [ 937.720357][T16265] ? read_lock_is_recursive+0x10/0x10 [ 937.725779][T16265] ? memory_max_show+0xa0/0xa0 [ 937.730602][T16265] cgroup_file_write+0x2c6/0x690 [ 937.735597][T16265] ? mutex_lock_io_nested+0x60/0x60 [ 937.740846][T16265] ? cgroup_seqfile_stop+0xd0/0xd0 [ 937.746019][T16265] ? __virt_addr_valid+0x22b/0x2e0 [ 937.751205][T16265] ? cgroup_seqfile_stop+0xd0/0xd0 [ 937.756361][T16265] kernfs_fop_write_iter+0x3a2/0x4f0 [ 937.761696][T16265] vfs_write+0x7ae/0xba0 [ 937.766004][T16265] ? file_end_write+0x250/0x250 [ 937.770924][T16265] ? mutex_lock_nested+0x17/0x20 [ 937.775903][T16265] ? __fdget_pos+0x250/0x2f0 [ 937.780523][T16265] ? ksys_write+0x77/0x2c0 [ 937.784995][T16265] ksys_write+0x19c/0x2c0 [ 937.789443][T16265] ? print_irqtrace_events+0x210/0x210 [ 937.794960][T16265] ? __ia32_sys_read+0x80/0x80 [ 937.799766][T16265] ? syscall_enter_from_user_mode+0x2e/0x220 [ 937.805888][T16265] ? lockdep_hardirqs_on+0x94/0x130 [ 937.811150][T16265] ? syscall_enter_from_user_mode+0x2e/0x220 [ 937.817184][T16265] do_syscall_64+0x3d/0xb0 [ 937.821666][T16265] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 937.827605][T16265] RIP: 0033:0x7fafb688c169 [ 937.832060][T16265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 937.851703][T16265] RSP: 002b:00007fafb7518168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.860170][T16265] RAX: ffffffffffffffda RBX: 00007fafb69abf80 RCX: 00007fafb688c169 [ 937.868182][T16265] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 937.876185][T16265] RBP: 00007fafb68e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 937.884191][T16265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.892193][T16265] R13: 00007ffd65a4894f R14: 00007fafb7518300 R15: 0000000000022000 [ 937.900220][T16265] [ 937.994453][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 938.010997][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 938.047857][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 938.058016][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 938.074212][T16108] device veth0_vlan entered promiscuous mode [ 938.088720][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 938.102971][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 938.117968][T16108] device veth1_vlan entered promiscuous mode [ 938.132345][T16265] memory: usage 10600kB, limit 0kB, failcnt 256 [ 938.138697][T16265] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.155226][T16265] Memory cgroup stats for /syz0: [ 938.155449][T16265] anon 114688 [ 938.155449][T16265] file 10440704 [ 938.155449][T16265] kernel 286720 [ 938.155449][T16265] kernel_stack 65536 [ 938.155449][T16265] pagetables 77824 [ 938.155449][T16265] sec_pagetables 0 [ 938.155449][T16265] percpu 0 [ 938.155449][T16265] sock 0 [ 938.155449][T16265] vmalloc 0 [ 938.155449][T16265] shmem 10436608 [ 938.155449][T16265] zswap 0 [ 938.155449][T16265] zswapped 0 [ 938.155449][T16265] file_mapped 81920 [ 938.155449][T16265] file_dirty 4096 [ 938.155449][T16265] file_writeback 0 [ 938.155449][T16265] swapcached 0 [ 938.155449][T16265] anon_thp 0 [ 938.155449][T16265] file_thp 0 [ 938.155449][T16265] shmem_thp 0 [ 938.155449][T16265] inactive_anon 73728 [ 938.155449][T16265] active_anon 10477568 [ 938.155449][T16265] inactive_file 0 [ 938.155449][T16265] active_file 4096 [ 938.155449][T16265] unevictable 0 [ 938.155449][T16265] slab_reclaimable 44976 [ 938.155449][T16265] slab_unreclaimable 71304 [ 938.155449][T16265] slab 116280 [ 938.195542][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 938.278774][T16265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16099,uid=0 [ 938.302086][T16265] Memory cgroup out of memory: Killed process 16099 (syz-executor.0) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 938.380320][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 938.399712][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 938.420761][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 938.441370][T16108] device veth0_macvtap entered promiscuous mode [ 938.520819][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 938.552010][T16108] device veth1_macvtap entered promiscuous mode [ 938.599467][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.611645][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.622062][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.633170][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.643332][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.654197][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.665129][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.677072][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.690177][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.700458][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 938.714910][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 938.729069][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.745428][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.756583][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.773464][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.785135][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.803351][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.815875][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.835342][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.847353][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.863406][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 938.880090][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 938.908466][T16108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.932100][T16108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.949028][T16108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.957786][T16108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.068587][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.099217][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.111771][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.112990][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 939.141281][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.166675][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:18:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:18:50 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:50 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:50 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:18:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 939.774813][T16287] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 939.819968][T16287] CPU: 0 PID: 16287 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 939.828464][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 939.838560][T16287] Call Trace: [ 939.841879][T16287] [ 939.844851][T16287] dump_stack_lvl+0x1e3/0x2cb [ 939.849668][T16287] ? nf_tcp_handle_invalid+0x642/0x642 [ 939.855182][T16287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.861413][T16287] dump_header+0xdf/0x9c0 [ 939.865795][T16287] oom_kill_process+0xf8/0x520 [ 939.870606][T16287] out_of_memory+0xf30/0x12f0 [ 939.875328][T16287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.881522][T16287] ? lockdep_hardirqs_on+0x94/0x130 [ 939.886925][T16287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.893096][T16287] ? unregister_oom_notifier+0x20/0x20 [ 939.898578][T16287] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 939.904145][T16287] ? preempt_schedule_thunk+0x16/0x18 [ 939.909540][T16287] ? mem_cgroup_oom_trylock+0x210/0x210 [ 939.915130][T16287] ? cgroup_file_notify+0x123/0x190 [ 939.920355][T16287] memory_max_write+0x34d/0x470 [ 939.925243][T16287] ? memory_max_show+0xa0/0xa0 [ 939.930035][T16287] ? cgroup_file_write+0x1a1/0x690 [ 939.935168][T16287] ? cgroup_file_write+0x2b2/0x690 [ 939.940314][T16287] ? memory_max_show+0xa0/0xa0 [ 939.945102][T16287] cgroup_file_write+0x2c6/0x690 [ 939.950069][T16287] ? mutex_lock_io_nested+0x60/0x60 [ 939.955289][T16287] ? cgroup_seqfile_stop+0xd0/0xd0 [ 939.960427][T16287] ? __virt_addr_valid+0x22b/0x2e0 [ 939.965566][T16287] ? cgroup_seqfile_stop+0xd0/0xd0 [ 939.970698][T16287] kernfs_fop_write_iter+0x3a2/0x4f0 [ 939.976033][T16287] vfs_write+0x7ae/0xba0 [ 939.980308][T16287] ? file_end_write+0x250/0x250 [ 939.985196][T16287] ? mutex_lock_nested+0x17/0x20 [ 939.990153][T16287] ? __fdget_pos+0x250/0x2f0 [ 939.994756][T16287] ? ksys_write+0x77/0x2c0 [ 939.999194][T16287] ksys_write+0x19c/0x2c0 [ 940.003551][T16287] ? print_irqtrace_events+0x210/0x210 [ 940.009033][T16287] ? __ia32_sys_read+0x80/0x80 [ 940.013821][T16287] ? syscall_enter_from_user_mode+0x2e/0x220 [ 940.019861][T16287] ? lockdep_hardirqs_on+0x94/0x130 [ 940.025082][T16287] ? syscall_enter_from_user_mode+0x2e/0x220 [ 940.031085][T16287] do_syscall_64+0x3d/0xb0 [ 940.035519][T16287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 940.041436][T16287] RIP: 0033:0x7fde15c8c169 [ 940.045882][T16287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 940.065610][T16287] RSP: 002b:00007fde16946168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.074045][T16287] RAX: ffffffffffffffda RBX: 00007fde15dabf80 RCX: 00007fde15c8c169 [ 940.082040][T16287] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 940.090114][T16287] RBP: 00007fde15ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 940.098093][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.106099][T16287] R13: 00007ffe9eecfebf R14: 00007fde16946300 R15: 0000000000022000 [ 940.114234][T16287] 12:18:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 940.332604][T16287] memory: usage 10612kB, limit 0kB, failcnt 166 [ 940.396603][T16287] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.424290][T16287] Memory cgroup stats for /syz5: [ 940.427743][T16287] anon 114688 [ 940.427743][T16287] file 10440704 [ 940.427743][T16287] kernel 286720 [ 940.427743][T16287] kernel_stack 65536 [ 940.427743][T16287] pagetables 77824 [ 940.427743][T16287] sec_pagetables 0 [ 940.427743][T16287] percpu 0 [ 940.427743][T16287] sock 0 [ 940.427743][T16287] vmalloc 0 [ 940.427743][T16287] shmem 10440704 [ 940.427743][T16287] zswap 0 [ 940.427743][T16287] zswapped 0 [ 940.427743][T16287] file_mapped 86016 [ 940.427743][T16287] file_dirty 0 [ 940.427743][T16287] file_writeback 0 [ 940.427743][T16287] swapcached 0 [ 940.427743][T16287] anon_thp 0 [ 940.427743][T16287] file_thp 0 [ 940.427743][T16287] shmem_thp 0 [ 940.427743][T16287] inactive_anon 0 [ 940.427743][T16287] active_anon 10555392 [ 940.427743][T16287] inactive_file 0 [ 940.427743][T16287] active_file 0 [ 940.427743][T16287] unevictable 0 [ 940.427743][T16287] slab_reclaimable 43280 [ 940.427743][T16287] slab_unreclaimable 72600 [ 940.427743][T16287] slab 115880 [ 940.540806][T16287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16108,uid=0 [ 940.575353][T16287] Memory cgroup out of memory: Killed process 16108 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 12:18:52 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:52 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 941.077983][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.202829][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.365340][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.490417][T13761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 941.500208][T13761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 941.508325][T13761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 941.520418][T13761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 941.528163][T13761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 941.536031][T13761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.536925][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.669381][T13757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 941.678830][T13757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 941.686663][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 941.694489][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 941.701810][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 12:18:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:18:53 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:53 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 942.320863][T13757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 942.330178][T13757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 942.338166][T13757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 942.348363][T13757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 942.356325][T13757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 942.364113][T13757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.374832][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:18:53 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:18:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 942.596846][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.765634][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.071250][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.226757][T16325] chnl_net:caif_netlink_parms(): no params data found [ 943.432466][T16327] chnl_net:caif_netlink_parms(): no params data found [ 943.592404][T16325] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.600261][T16325] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.608442][T16325] device bridge_slave_0 entered promiscuous mode [ 943.629356][T13761] Bluetooth: hci0: command 0x0409 tx timeout [ 943.643405][T16325] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.654831][T16325] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.690395][T16325] device bridge_slave_1 entered promiscuous mode [ 943.779721][T13761] Bluetooth: hci1: command 0x0409 tx timeout [ 943.809705][T16344] chnl_net:caif_netlink_parms(): no params data found [ 943.891613][T16327] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.909020][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.917321][T16327] device bridge_slave_0 entered promiscuous mode [ 943.930392][T16327] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.937542][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.971072][T16327] device bridge_slave_1 entered promiscuous mode [ 943.989762][T16325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.000492][T13757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 944.009625][T13757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 944.017475][T13757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 944.028490][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 944.039404][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 944.046679][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.098699][T16325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.220546][T16327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.255224][T16325] team0: Port device team_slave_0 added [ 944.271613][T16327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.337281][T16325] team0: Port device team_slave_1 added [ 944.370978][T16327] team0: Port device team_slave_0 added [ 944.387198][T16327] team0: Port device team_slave_1 added [ 944.429040][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 944.510905][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.518088][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.537046][T16344] device bridge_slave_0 entered promiscuous mode [ 944.580230][T16325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.587242][T16325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.615203][T16325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.627115][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.637252][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.649258][T16344] device bridge_slave_1 entered promiscuous mode [ 944.669677][T16327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.676668][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.704711][T16327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.716999][T16325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.730157][T16325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.758270][T16325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.831676][T16327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.838719][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.877029][T16327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.004982][T16344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.082477][T16344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.106215][T16325] device hsr_slave_0 entered promiscuous mode [ 945.117726][T16325] device hsr_slave_1 entered promiscuous mode [ 945.136221][T16327] device hsr_slave_0 entered promiscuous mode [ 945.143700][T16327] device hsr_slave_1 entered promiscuous mode [ 945.151828][T16327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.160847][T16327] Cannot create hsr debugfs directory [ 945.236906][T16344] team0: Port device team_slave_0 added [ 945.248075][T16378] chnl_net:caif_netlink_parms(): no params data found [ 945.280714][T16344] team0: Port device team_slave_1 added [ 945.381787][T16344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.388816][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.416885][T16344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.432853][T16344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.440229][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.468349][T16344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.603822][T16344] device hsr_slave_0 entered promiscuous mode [ 945.612855][T16344] device hsr_slave_1 entered promiscuous mode [ 945.620134][T16344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.627699][T16344] Cannot create hsr debugfs directory [ 945.653070][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.660500][T16378] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.670654][T16378] device bridge_slave_0 entered promiscuous mode [ 945.699598][T13757] Bluetooth: hci0: command 0x041b tx timeout [ 945.720480][T16378] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.727594][T16378] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.736462][T16378] device bridge_slave_1 entered promiscuous mode [ 945.819119][ T11] device hsr_slave_0 left promiscuous mode [ 945.825681][ T11] device hsr_slave_1 left promiscuous mode [ 945.847500][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.857792][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.865047][T13757] Bluetooth: hci1: command 0x041b tx timeout [ 945.876656][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.884503][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.894144][ T11] device bridge_slave_1 left promiscuous mode [ 945.900743][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.910591][ T11] device bridge_slave_0 left promiscuous mode [ 945.916842][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.931468][ T11] device hsr_slave_0 left promiscuous mode [ 945.937914][ T11] device hsr_slave_1 left promiscuous mode [ 945.946617][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.954516][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.964784][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.973521][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.983224][ T11] device bridge_slave_1 left promiscuous mode [ 945.989810][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.998633][ T11] device bridge_slave_0 left promiscuous mode [ 946.005743][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.023090][ T11] device veth1_macvtap left promiscuous mode [ 946.029370][ T11] device veth0_macvtap left promiscuous mode [ 946.035510][ T11] device veth1_vlan left promiscuous mode [ 946.042272][ T11] device veth0_vlan left promiscuous mode [ 946.060566][ T11] device veth1_macvtap left promiscuous mode [ 946.066644][ T11] device veth0_macvtap left promiscuous mode [ 946.084548][ T11] device veth1_vlan left promiscuous mode [ 946.095511][ T11] device veth0_vlan left promiscuous mode [ 946.102084][T13761] Bluetooth: hci4: command 0x0409 tx timeout [ 946.499344][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 946.603418][ T11] team0 (unregistering): Port device team_slave_1 removed [ 946.625840][ T11] team0 (unregistering): Port device team_slave_0 removed [ 946.642381][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.658482][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.742419][ T11] bond0 (unregistering): Released all slaves [ 946.998902][ T11] team0 (unregistering): Port device team_slave_1 removed [ 947.014967][ T11] team0 (unregistering): Port device team_slave_0 removed [ 947.031169][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.047122][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.137209][ T11] bond0 (unregistering): Released all slaves [ 947.257302][T16378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.330389][T16378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.451448][T16378] team0: Port device team_slave_0 added [ 947.462310][T16378] team0: Port device team_slave_1 added [ 947.547795][T16378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.568083][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.596639][T16378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.610027][T16378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.617008][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.644675][T16378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.724030][T16378] device hsr_slave_0 entered promiscuous mode [ 947.736130][T16378] device hsr_slave_1 entered promiscuous mode [ 947.759223][T16378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.767631][T16378] Cannot create hsr debugfs directory [ 947.779102][T13761] Bluetooth: hci0: command 0x040f tx timeout [ 947.863627][T16325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 947.876957][T16325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 947.887011][T16325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 947.918622][T16325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 947.939403][T13761] Bluetooth: hci1: command 0x040f tx timeout [ 948.134673][T16325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.154403][T16325] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.165690][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 948.179200][T13761] Bluetooth: hci4: command 0x041b tx timeout [ 948.179806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 948.239963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.248796][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.279589][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.286722][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.309461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.318356][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.349565][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.356715][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.379453][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.431002][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.459763][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.489274][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.509104][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.530955][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.550022][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.571825][T16325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 948.592531][T13757] Bluetooth: hci3: command 0x040f tx timeout [ 948.628234][T16325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.651018][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.659980][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.668601][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.677391][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.685947][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.697763][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.869739][T16327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.901277][T16327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.942205][T16327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.031698][T16327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.259761][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.267333][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.338753][T16325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.438151][T16327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.588323][T16378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.631532][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 949.658826][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 949.692561][T16327] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.759933][T16378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.803020][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 949.830794][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 949.851972][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.859151][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.866752][T13757] Bluetooth: hci0: command 0x0419 tx timeout [ 949.900001][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 949.929634][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 949.988170][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.995359][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.019255][T13757] Bluetooth: hci1: command 0x0419 tx timeout [ 950.041512][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 950.135317][T16378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.219756][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.228000][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 950.259304][T13757] Bluetooth: hci4: command 0x040f tx timeout [ 950.266761][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 950.298302][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 950.309952][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 950.348109][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 950.387149][T16327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 950.419401][T16327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.474478][T16378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.529742][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 950.555846][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 950.578402][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 950.596518][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 950.616859][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 950.652237][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 950.659234][T13757] Bluetooth: hci3: command 0x0419 tx timeout [ 950.812626][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.822223][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.943407][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 950.960192][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 950.984335][T16325] device veth0_vlan entered promiscuous mode [ 951.006306][T16325] device veth1_vlan entered promiscuous mode [ 951.054901][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.070957][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.091112][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.136222][T16325] device veth0_macvtap entered promiscuous mode [ 951.177424][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 951.186004][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 951.210834][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 951.240548][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 951.279592][T16378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 951.301343][T16325] device veth1_macvtap entered promiscuous mode [ 951.352767][T16378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 951.391950][T16378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 951.425730][T16378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 951.611852][T16344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.623455][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 951.636327][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.646624][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.656514][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.676257][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.687877][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.700461][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.714526][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.733115][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.748517][T16325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.768313][T16327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.788415][T16344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.805123][T16344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.819371][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 951.828490][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 951.853373][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.875508][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.888856][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.907414][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.918825][T16325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.937842][T16325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.978192][T16325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.006954][T16344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 952.018480][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 952.038274][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 952.064207][T16325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.074846][T16325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.084067][T16325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.103826][T16325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.175077][T16378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.203507][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 952.216783][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 952.293964][T16327] device veth0_vlan entered promiscuous mode [ 952.315528][T16378] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.331381][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.339669][T13757] Bluetooth: hci4: command 0x0419 tx timeout [ 952.346876][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.355920][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.364214][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.392801][T16327] device veth1_vlan entered promiscuous mode [ 952.432803][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.444725][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.453946][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 952.463372][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.472847][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.481836][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.489008][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.497288][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.506696][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.515971][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.523162][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.532772][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.542052][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.642384][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 952.653299][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.667823][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.686090][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.695757][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.713402][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.723497][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.733662][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.742689][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.752170][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.761368][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.775936][T16378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.833863][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.851706][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.882210][T16344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.905410][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.928668][T16327] device veth0_macvtap entered promiscuous mode [ 952.935297][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.970453][T16327] device veth1_macvtap entered promiscuous mode [ 952.997274][T16344] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.030305][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 953.038744][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 953.061140][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 953.079281][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.094397][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.128452][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.143318][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.155072][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.173589][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.186833][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.202393][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.223728][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.238800][T16327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.253820][T15925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.269093][T15925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.280057][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.289487][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.298036][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.305206][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.315951][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.325048][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.334539][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 953.350698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.360314][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.367431][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.380255][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.409043][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.418916][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.448971][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.458846][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.471348][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.481558][T16327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.492726][T16327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.506610][T16327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.536256][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.548332][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 953.557405][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 953.566806][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 953.576459][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 953.587648][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.599858][T16327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.608606][T16327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.623325][T16327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.633702][T16327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.649396][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.670568][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 953.731947][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.816645][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 953.896127][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.948631][T16344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 954.002568][T16344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.046032][T16378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.098466][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.133640][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.156942][T16490] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 954.191491][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.200232][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.208734][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 954.216216][T16490] CPU: 0 PID: 16490 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 954.224681][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 954.234786][T16490] Call Trace: [ 954.238110][T16490] [ 954.241079][T16490] dump_stack_lvl+0x1e3/0x2cb [ 954.245812][T16490] ? nf_tcp_handle_invalid+0x642/0x642 [ 954.251330][T16490] ? panic+0x75d/0x75d [ 954.255451][T16490] ? ___ratelimit+0x4c0/0x670 [ 954.260196][T16490] ? local_lock_release+0x170/0x170 [ 954.265465][T16490] dump_header+0xdf/0x9c0 [ 954.269848][T16490] oom_kill_process+0xf8/0x520 [ 954.274665][T16490] out_of_memory+0xf30/0x12f0 [ 954.279393][T16490] ? mutex_lock_io_nested+0x60/0x60 [ 954.284655][T16490] ? unregister_oom_notifier+0x20/0x20 [ 954.290159][T16490] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 954.296371][T16490] ? lockdep_hardirqs_on+0x94/0x130 [ 954.301634][T16490] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 954.307938][T16490] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 954.313542][T16490] ? mark_lock+0x9a/0x340 [ 954.317942][T16490] ? mem_cgroup_oom_trylock+0x210/0x210 [ 954.323549][T16490] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 954.329482][T16490] ? cgroup_file_notify+0x123/0x190 [ 954.334733][T16490] memory_max_write+0x34d/0x470 [ 954.339620][T16490] ? memory_max_show+0xa0/0xa0 [ 954.344405][T16490] ? cgroup_file_write+0x1a1/0x690 [ 954.349558][T16490] ? cgroup_file_write+0x2b2/0x690 [ 954.354709][T16490] ? memory_max_show+0xa0/0xa0 [ 954.359498][T16490] cgroup_file_write+0x2c6/0x690 [ 954.364461][T16490] ? mutex_lock_io_nested+0x60/0x60 [ 954.369698][T16490] ? cgroup_seqfile_stop+0xd0/0xd0 [ 954.374853][T16490] ? __check_object_size+0x479/0x9a0 [ 954.380166][T16490] ? cgroup_seqfile_stop+0xd0/0xd0 [ 954.385320][T16490] kernfs_fop_write_iter+0x3a2/0x4f0 [ 954.390644][T16490] vfs_write+0x7ae/0xba0 [ 954.394937][T16490] ? file_end_write+0x250/0x250 [ 954.399842][T16490] ? mutex_lock_nested+0x17/0x20 [ 954.404798][T16490] ? __fdget_pos+0x250/0x2f0 [ 954.409398][T16490] ? ksys_write+0x77/0x2c0 [ 954.413841][T16490] ksys_write+0x19c/0x2c0 [ 954.418195][T16490] ? lockdep_hardirqs_on+0x94/0x130 [ 954.423435][T16490] ? __ia32_sys_read+0x80/0x80 [ 954.428230][T16490] do_syscall_64+0x3d/0xb0 [ 954.432668][T16490] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 954.438590][T16490] RIP: 0033:0x7fe70548c169 [ 954.443017][T16490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 954.462633][T16490] RSP: 002b:00007fe7062c7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.471059][T16490] RAX: ffffffffffffffda RBX: 00007fe7055abf80 RCX: 00007fe70548c169 [ 954.479043][T16490] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 954.487026][T16490] RBP: 00007fe7054e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 954.495095][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.503075][T16490] R13: 00007ffd5a792d6f R14: 00007fe7062c7300 R15: 0000000000022000 [ 954.511160][T16490] [ 954.593288][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 954.614454][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.630707][T16490] memory: usage 4692kB, limit 0kB, failcnt 136 [ 954.638761][T16490] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 954.691996][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.741019][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.761276][T16490] Memory cgroup stats for /syz4: [ 954.764720][T16490] anon 114688 [ 954.764720][T16490] file 4407296 [ 954.764720][T16490] kernel 274432 [ 954.764720][T16490] kernel_stack 65536 [ 954.764720][T16490] pagetables 81920 [ 954.764720][T16490] sec_pagetables 0 [ 954.764720][T16490] percpu 0 [ 954.764720][T16490] sock 0 [ 954.764720][T16490] vmalloc 0 [ 954.764720][T16490] shmem 4407296 [ 954.764720][T16490] zswap 0 [ 954.764720][T16490] zswapped 0 [ 954.764720][T16490] file_mapped 81920 [ 954.764720][T16490] file_dirty 0 [ 954.764720][T16490] file_writeback 0 [ 954.764720][T16490] swapcached 0 [ 954.764720][T16490] anon_thp 0 [ 954.764720][T16490] file_thp 0 [ 954.764720][T16490] shmem_thp 0 [ 954.764720][T16490] inactive_anon 4407296 [ 954.764720][T16490] active_anon 114688 [ 954.764720][T16490] inactive_file 0 [ 954.764720][T16490] active_file 0 [ 954.764720][T16490] unevictable 0 [ 954.764720][T16490] slab_reclaimable 26576 [ 954.764720][T16490] slab_unreclaimable 72600 [ 954.764720][T16490] slab 99176 [ 954.817000][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 955.012039][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.028621][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.043494][ T11] device hsr_slave_0 left promiscuous mode [ 955.078388][T16490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16325,uid=0 [ 955.111827][ T11] device hsr_slave_1 left promiscuous mode [ 955.129623][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.130899][T16490] Memory cgroup out of memory: Killed process 16325 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 955.169064][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.204825][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.226383][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.252070][ T11] device bridge_slave_1 left promiscuous mode [ 955.258363][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.276152][ T11] device bridge_slave_0 left promiscuous mode [ 955.284849][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.309850][ T11] device veth1_macvtap left promiscuous mode [ 955.315958][ T11] device veth0_macvtap left promiscuous mode [ 955.333956][ T11] device veth1_vlan left promiscuous mode [ 955.345910][ T11] device veth0_vlan left promiscuous mode [ 955.671251][ T11] team0 (unregistering): Port device team_slave_1 removed [ 955.689759][ T11] team0 (unregistering): Port device team_slave_0 removed [ 955.705974][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.723174][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.795766][ T11] bond0 (unregistering): Released all slaves [ 955.846742][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 955.938655][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 955.948247][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 955.996315][T16344] 8021q: adding VLAN 0 to HW filter on device batadv0 12:19:07 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:07 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:07 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 956.142378][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 956.167554][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 956.260767][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 956.299795][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 956.334515][T16344] device veth0_vlan entered promiscuous mode [ 956.404143][T16522] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 956.436006][T16522] CPU: 1 PID: 16522 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 956.444495][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 956.454586][T16522] Call Trace: [ 956.457889][T16522] [ 956.460829][T16522] dump_stack_lvl+0x1e3/0x2cb [ 956.465527][T16522] ? nf_tcp_handle_invalid+0x642/0x642 [ 956.471003][T16522] ? panic+0x75d/0x75d [ 956.475099][T16522] ? ___ratelimit+0x4c0/0x670 [ 956.479799][T16522] ? local_lock_release+0x170/0x170 [ 956.485019][T16522] dump_header+0xdf/0x9c0 [ 956.489365][T16522] oom_kill_process+0xf8/0x520 [ 956.494147][T16522] out_of_memory+0xf30/0x12f0 [ 956.498837][T16522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 956.505010][T16522] ? lockdep_hardirqs_on+0x94/0x130 [ 956.510327][T16522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 956.516513][T16522] ? unregister_oom_notifier+0x20/0x20 [ 956.521992][T16522] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 956.527553][T16522] ? preempt_schedule_thunk+0x16/0x18 [ 956.532942][T16522] ? mem_cgroup_oom_trylock+0x210/0x210 [ 956.538512][T16522] ? cgroup_file_notify+0x123/0x190 [ 956.543733][T16522] memory_max_write+0x34d/0x470 [ 956.548611][T16522] ? memory_max_show+0xa0/0xa0 [ 956.553400][T16522] ? memory_max_show+0xa0/0xa0 [ 956.558186][T16522] cgroup_file_write+0x2c6/0x690 [ 956.563156][T16522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 956.569333][T16522] ? cgroup_seqfile_stop+0xd0/0xd0 [ 956.574469][T16522] ? kernfs_fop_write_iter+0x306/0x4f0 [ 956.579969][T16522] ? cgroup_seqfile_stop+0xd0/0xd0 [ 956.585098][T16522] kernfs_fop_write_iter+0x3a2/0x4f0 [ 956.590426][T16522] vfs_write+0x7ae/0xba0 [ 956.594693][T16522] ? file_end_write+0x250/0x250 [ 956.599578][T16522] ? mutex_lock_nested+0x17/0x20 [ 956.604525][T16522] ? __fdget_pos+0x250/0x2f0 [ 956.609125][T16522] ? ksys_write+0x77/0x2c0 [ 956.613562][T16522] ksys_write+0x19c/0x2c0 [ 956.617906][T16522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 956.624079][T16522] ? __ia32_sys_read+0x80/0x80 [ 956.629037][T16522] ? syscall_enter_from_user_mode+0x37/0x220 [ 956.635047][T16522] ? syscall_enter_from_user_mode+0x2e/0x220 [ 956.641057][T16522] do_syscall_64+0x3d/0xb0 [ 956.645486][T16522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 956.651388][T16522] RIP: 0033:0x7f418448c169 [ 956.655825][T16522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 956.675440][T16522] RSP: 002b:00007f4185149168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 956.683872][T16522] RAX: ffffffffffffffda RBX: 00007f41845abf80 RCX: 00007f418448c169 [ 956.691869][T16522] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 956.700282][T16522] RBP: 00007f41844e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 956.708257][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.716322][T16522] R13: 00007ffdb222a0ff R14: 00007f4185149300 R15: 0000000000022000 [ 956.724327][T16522] [ 956.771496][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 956.793722][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 956.826832][T16378] device veth0_vlan entered promiscuous mode [ 956.851987][T16522] memory: usage 8540kB, limit 0kB, failcnt 104 [ 956.866023][T16522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 956.881393][T16522] Memory cgroup stats for /syz1: [ 956.888467][T16344] device veth1_vlan entered promiscuous mode [ 956.903889][T16522] anon 114688 [ 956.903889][T16522] file 8343552 [ 956.903889][T16522] kernel 286720 [ 956.903889][T16522] kernel_stack 65536 [ 956.903889][T16522] pagetables 77824 [ 956.903889][T16522] sec_pagetables 0 [ 956.903889][T16522] percpu 0 [ 956.903889][T16522] sock 0 [ 956.903889][T16522] vmalloc 0 [ 956.903889][T16522] shmem 8343552 [ 956.903889][T16522] zswap 0 [ 956.903889][T16522] zswapped 0 [ 956.903889][T16522] file_mapped 147456 [ 956.903889][T16522] file_dirty 0 [ 956.903889][T16522] file_writeback 0 [ 956.903889][T16522] swapcached 0 [ 956.903889][T16522] anon_thp 0 [ 956.903889][T16522] file_thp 0 [ 956.903889][T16522] shmem_thp 0 [ 956.903889][T16522] inactive_anon 8343552 [ 956.903889][T16522] active_anon 114688 [ 956.903889][T16522] inactive_file 0 [ 956.903889][T16522] active_file 0 [ 956.903889][T16522] unevictable 0 [ 956.903889][T16522] slab_reclaimable 39720 [ 956.903889][T16522] slab_unreclaimable 72600 [ 956.903889][T16522] slab 112320 [ 957.022049][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 957.032240][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 957.045102][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 957.076349][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 957.097096][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 957.147389][T16378] device veth1_vlan entered promiscuous mode [ 957.167981][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 957.176930][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 957.207202][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 957.227378][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 957.245695][T16522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16327,uid=0 [ 957.272931][T16344] device veth0_macvtap entered promiscuous mode [ 957.300843][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 957.310677][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 957.320401][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 957.340267][T16344] device veth1_macvtap entered promiscuous mode [ 957.361022][T16378] device veth0_macvtap entered promiscuous mode [ 957.432636][T16378] device veth1_macvtap entered promiscuous mode [ 957.454107][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.492581][T16522] Memory cgroup out of memory: Killed process 16327 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 957.517452][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.541179][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.569239][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.595477][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.620211][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.639013][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.670146][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.708143][T16344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.749083][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 957.766641][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 957.784249][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 957.799925][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 957.808719][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 957.921074][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.940110][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.959019][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.976270][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.986360][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.996920][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.019334][T16344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.039004][T16344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.060980][T16344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.070574][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.096440][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.135849][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.168998][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.178877][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.219052][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.239039][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.260330][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.280105][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.290833][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.302686][T16378] batman_adv: batadv0: Interface activated: batadv_slave_0 12:19:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 958.317677][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 958.344005][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 958.380461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 958.416552][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 958.428574][T16344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.459184][T16344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.468557][T16344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.485262][T16344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.501079][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.513030][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.523830][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.534701][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.544868][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.555683][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.568915][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.608983][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.618858][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.648974][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.698083][T16378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.713053][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 958.749368][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 958.784185][T16378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.796835][T16378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.806062][T16378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.815154][T16378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.953014][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.971196][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.986360][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.016645][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.031448][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.047839][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 959.049238][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.057395][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 959.075905][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.106331][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 959.113807][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.136885][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 959.323677][T16564] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 959.376088][T16564] CPU: 1 PID: 16564 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 959.384584][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 959.394670][T16564] Call Trace: [ 959.397982][T16564] [ 959.400949][T16564] dump_stack_lvl+0x1e3/0x2cb [ 959.405678][T16564] ? nf_tcp_handle_invalid+0x642/0x642 [ 959.411277][T16564] ? panic+0x75d/0x75d [ 959.415385][T16564] ? ___ratelimit+0x4c0/0x670 [ 959.420117][T16564] ? local_lock_release+0x170/0x170 [ 959.425368][T16564] dump_header+0xdf/0x9c0 [ 959.429745][T16564] oom_kill_process+0xf8/0x520 [ 959.434550][T16564] out_of_memory+0xf30/0x12f0 [ 959.439281][T16564] ? mutex_lock_io_nested+0x60/0x60 [ 959.444531][T16564] ? preempt_schedule+0xd9/0xe0 [ 959.449423][T16564] ? unregister_oom_notifier+0x20/0x20 [ 959.454918][T16564] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 959.460956][T16564] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 959.466544][T16564] ? preempt_schedule_thunk+0x16/0x18 [ 959.472046][T16564] ? mem_cgroup_oom_trylock+0x210/0x210 [ 959.477651][T16564] ? cgroup_file_notify+0x123/0x190 [ 959.482899][T16564] memory_max_write+0x34d/0x470 [ 959.487809][T16564] ? memory_max_show+0xa0/0xa0 [ 959.492637][T16564] ? read_lock_is_recursive+0x10/0x10 [ 959.498053][T16564] ? memory_max_show+0xa0/0xa0 [ 959.502870][T16564] cgroup_file_write+0x2c6/0x690 [ 959.507863][T16564] ? mutex_lock_io_nested+0x60/0x60 [ 959.513159][T16564] ? cgroup_seqfile_stop+0xd0/0xd0 [ 959.518319][T16564] ? __virt_addr_valid+0x22b/0x2e0 [ 959.523486][T16564] ? cgroup_seqfile_stop+0xd0/0xd0 [ 959.528672][T16564] kernfs_fop_write_iter+0x3a2/0x4f0 [ 959.534017][T16564] vfs_write+0x7ae/0xba0 [ 959.538325][T16564] ? file_end_write+0x250/0x250 [ 959.543245][T16564] ? mutex_lock_nested+0x17/0x20 [ 959.548227][T16564] ? __fdget_pos+0x250/0x2f0 [ 959.552896][T16564] ? ksys_write+0x77/0x2c0 [ 959.557360][T16564] ksys_write+0x19c/0x2c0 [ 959.561733][T16564] ? print_irqtrace_events+0x210/0x210 [ 959.567336][T16564] ? __ia32_sys_read+0x80/0x80 [ 959.572148][T16564] ? syscall_enter_from_user_mode+0x2e/0x220 [ 959.578172][T16564] ? lockdep_hardirqs_on+0x94/0x130 [ 959.583421][T16564] ? syscall_enter_from_user_mode+0x2e/0x220 [ 959.589716][T16564] do_syscall_64+0x3d/0xb0 [ 959.594175][T16564] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 959.600105][T16564] RIP: 0033:0x7f09ff48c169 [ 959.604550][T16564] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 959.624194][T16564] RSP: 002b:00007f0a00227168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 959.632769][T16564] RAX: ffffffffffffffda RBX: 00007f09ff5abf80 RCX: 00007f09ff48c169 [ 959.640775][T16564] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 959.648788][T16564] RBP: 00007f09ff4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 959.656799][T16564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.664821][T16564] R13: 00007fffb8c4a62f R14: 00007f0a00227300 R15: 0000000000022000 [ 959.672861][T16564] [ 959.711231][T16564] memory: usage 10612kB, limit 0kB, failcnt 256 [ 959.724200][T16564] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 959.734727][T16564] Memory cgroup stats for /syz0: [ 959.734947][T16564] anon 114688 [ 959.734947][T16564] file 10440704 [ 959.734947][T16564] kernel 299008 [ 959.734947][T16564] kernel_stack 65536 [ 959.734947][T16564] pagetables 86016 [ 959.734947][T16564] sec_pagetables 0 [ 959.734947][T16564] percpu 0 [ 959.734947][T16564] sock 0 [ 959.734947][T16564] vmalloc 0 [ 959.734947][T16564] shmem 10436608 [ 959.734947][T16564] zswap 0 [ 959.734947][T16564] zswapped 0 [ 959.734947][T16564] file_mapped 81920 [ 959.734947][T16564] file_dirty 4096 [ 959.734947][T16564] file_writeback 0 [ 959.734947][T16564] swapcached 0 [ 959.734947][T16564] anon_thp 0 [ 959.734947][T16564] file_thp 0 [ 959.734947][T16564] shmem_thp 0 [ 959.734947][T16564] inactive_anon 12288 [ 959.734947][T16564] active_anon 10539008 [ 959.734947][T16564] inactive_file 0 [ 959.734947][T16564] active_file 4096 [ 959.734947][T16564] unevictable 0 [ 959.734947][T16564] slab_reclaimable 44976 [ 959.734947][T16564] slab_unreclaimable 71952 [ 959.734947][T16564] slab 116928 [ 959.847762][T16564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16344,uid=0 [ 959.865189][T16564] Memory cgroup out of memory: Killed process 16344 (syz-executor.0) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 959.938407][T16566] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 959.959886][T16566] CPU: 1 PID: 16566 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 959.968380][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 959.978479][T16566] Call Trace: [ 959.981799][T16566] [ 959.984739][T16566] dump_stack_lvl+0x1e3/0x2cb [ 959.989444][T16566] ? nf_tcp_handle_invalid+0x642/0x642 [ 959.994917][T16566] ? panic+0x75d/0x75d [ 959.999009][T16566] ? lockdep_hardirqs_on+0x94/0x130 [ 960.004255][T16566] dump_header+0xdf/0x9c0 [ 960.008605][T16566] oom_kill_process+0xf8/0x520 [ 960.013384][T16566] out_of_memory+0xf30/0x12f0 [ 960.018076][T16566] ? mutex_lock_io_nested+0x60/0x60 [ 960.023293][T16566] ? preempt_schedule+0xd9/0xe0 [ 960.028159][T16566] ? unregister_oom_notifier+0x20/0x20 [ 960.033628][T16566] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 960.039799][T16566] ? lockdep_hardirqs_on+0x94/0x130 [ 960.045016][T16566] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 960.051187][T16566] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 960.056750][T16566] ? preempt_schedule_thunk+0x16/0x18 [ 960.062146][T16566] ? mem_cgroup_oom_trylock+0x210/0x210 [ 960.067716][T16566] ? cgroup_file_notify+0x123/0x190 [ 960.072935][T16566] memory_max_write+0x34d/0x470 [ 960.077831][T16566] ? memory_max_show+0xa0/0xa0 [ 960.082648][T16566] ? memory_max_show+0xa0/0xa0 [ 960.087452][T16566] cgroup_file_write+0x2c6/0x690 [ 960.092425][T16566] ? mutex_lock_io_nested+0x60/0x60 [ 960.097646][T16566] ? cgroup_seqfile_stop+0xd0/0xd0 [ 960.102841][T16566] ? 0xffffffff81000000 [ 960.107033][T16566] ? cgroup_seqfile_stop+0xd0/0xd0 [ 960.112234][T16566] kernfs_fop_write_iter+0x3a2/0x4f0 [ 960.117572][T16566] vfs_write+0x7ae/0xba0 [ 960.121866][T16566] ? file_end_write+0x250/0x250 [ 960.126765][T16566] ksys_write+0x19c/0x2c0 [ 960.131142][T16566] ? print_irqtrace_events+0x210/0x210 [ 960.136635][T16566] ? __ia32_sys_read+0x80/0x80 [ 960.141427][T16566] ? syscall_enter_from_user_mode+0x2e/0x220 [ 960.147431][T16566] ? lockdep_hardirqs_on+0x94/0x130 [ 960.152649][T16566] ? syscall_enter_from_user_mode+0x2e/0x220 [ 960.158655][T16566] do_syscall_64+0x3d/0xb0 [ 960.163088][T16566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 960.169079][T16566] RIP: 0033:0x7fb0a528c169 [ 960.173519][T16566] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 960.193144][T16566] RSP: 002b:00007fb0a5f97168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.201580][T16566] RAX: ffffffffffffffda RBX: 00007fb0a53abf80 RCX: 00007fb0a528c169 [ 960.209567][T16566] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 960.217544][T16566] RBP: 00007fb0a52e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 960.225522][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.233500][T16566] R13: 00007fffeef10c2f R14: 00007fb0a5f97300 R15: 0000000000022000 [ 960.241499][T16566] [ 960.268154][T16566] memory: usage 10584kB, limit 0kB, failcnt 166 [ 960.278544][T16566] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 960.291137][T16566] Memory cgroup stats for /syz5: [ 960.295036][T16566] anon 110592 [ 960.295036][T16566] file 10440704 [ 960.295036][T16566] kernel 286720 [ 960.295036][T16566] kernel_stack 65536 [ 960.295036][T16566] pagetables 77824 [ 960.295036][T16566] sec_pagetables 0 [ 960.295036][T16566] percpu 0 [ 960.295036][T16566] sock 0 [ 960.295036][T16566] vmalloc 0 [ 960.295036][T16566] shmem 10440704 [ 960.295036][T16566] zswap 0 [ 960.295036][T16566] zswapped 0 [ 960.295036][T16566] file_mapped 86016 [ 960.295036][T16566] file_dirty 0 [ 960.295036][T16566] file_writeback 0 [ 960.295036][T16566] swapcached 0 [ 960.295036][T16566] anon_thp 0 [ 960.295036][T16566] file_thp 0 [ 960.295036][T16566] shmem_thp 0 [ 960.295036][T16566] inactive_anon 0 [ 960.295036][T16566] active_anon 10551296 [ 960.295036][T16566] inactive_file 0 [ 960.295036][T16566] active_file 0 [ 960.295036][T16566] unevictable 0 [ 960.295036][T16566] slab_reclaimable 43280 [ 960.295036][T16566] slab_unreclaimable 75192 [ 960.295036][T16566] slab 118472 [ 960.414268][T16566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16378,uid=0 [ 960.437294][T16566] Memory cgroup out of memory: Killed process 16378 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 960.461508][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:12 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:19:12 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:12 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 960.605350][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:12 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:19:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:12 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 961.066056][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:12 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 961.246672][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:12 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:19:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:13 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 961.633063][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.765527][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.907376][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:13 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, 0x0}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 962.033832][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:13 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 962.891042][T13761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 962.902045][T13761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 962.911829][T13761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 962.920612][ T3662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 962.928000][ T3662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.000380][T13757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.010746][T13757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.019715][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.028518][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 963.036172][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.157015][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 963.166381][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 963.177131][ T3662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 963.185608][ T3662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 963.194598][ T3662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 963.202309][ T3662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 963.359787][T13757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 963.373018][T13757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 963.382596][T13757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 963.394027][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 963.402873][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 963.410811][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 963.935300][T16621] chnl_net:caif_netlink_parms(): no params data found [ 964.071599][T16630] chnl_net:caif_netlink_parms(): no params data found [ 964.214085][T16623] chnl_net:caif_netlink_parms(): no params data found [ 964.227485][T16633] chnl_net:caif_netlink_parms(): no params data found [ 964.335443][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.349982][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.357924][T16630] device bridge_slave_0 entered promiscuous mode [ 964.384323][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.391791][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.400088][T16621] device bridge_slave_0 entered promiscuous mode [ 964.409218][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.416470][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.427022][T16621] device bridge_slave_1 entered promiscuous mode [ 964.435060][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.443256][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.451423][T16630] device bridge_slave_1 entered promiscuous mode [ 964.577953][T16621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.592239][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.642254][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.653605][T16621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.668617][T16623] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.675954][T16623] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.685230][T16623] device bridge_slave_0 entered promiscuous mode [ 964.693283][T16633] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.700752][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.711787][T16633] device bridge_slave_0 entered promiscuous mode [ 964.758302][T16623] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.765638][T16623] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.774657][T16623] device bridge_slave_1 entered promiscuous mode [ 964.784630][T16633] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.793143][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.801673][T16633] device bridge_slave_1 entered promiscuous mode [ 964.845172][T16621] team0: Port device team_slave_0 added [ 964.914238][T16630] team0: Port device team_slave_0 added [ 964.932468][T16621] team0: Port device team_slave_1 added [ 964.977396][T16633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.987013][T13757] Bluetooth: hci0: command 0x0409 tx timeout [ 965.001161][T16630] team0: Port device team_slave_1 added [ 965.022021][T16623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.050241][T16633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.059544][T13757] Bluetooth: hci1: command 0x0409 tx timeout [ 965.133411][T16623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.163126][T16633] team0: Port device team_slave_0 added [ 965.194140][ T11] device hsr_slave_0 left promiscuous mode [ 965.203026][ T11] device hsr_slave_1 left promiscuous mode [ 965.210354][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.217814][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.230352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.237809][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.247402][ T11] device bridge_slave_1 left promiscuous mode [ 965.253814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.263982][ T11] device bridge_slave_0 left promiscuous mode [ 965.270767][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.285444][ T11] device hsr_slave_0 left promiscuous mode [ 965.292240][ T11] device hsr_slave_1 left promiscuous mode [ 965.299200][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 965.311356][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.318836][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.336098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.344866][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.354160][ T11] device bridge_slave_1 left promiscuous mode [ 965.360463][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.376823][ T11] device bridge_slave_0 left promiscuous mode [ 965.388411][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.430793][ T11] device veth1_macvtap left promiscuous mode [ 965.437133][ T11] device veth0_macvtap left promiscuous mode [ 965.456544][ T11] device veth1_vlan left promiscuous mode [ 965.469195][T13757] Bluetooth: hci4: command 0x0409 tx timeout [ 965.476684][ T11] device veth0_vlan left promiscuous mode [ 965.491010][ T11] device veth1_macvtap left promiscuous mode [ 965.497101][ T11] device veth0_macvtap left promiscuous mode [ 965.514596][ T11] device veth1_vlan left promiscuous mode [ 965.526667][ T11] device veth0_vlan left promiscuous mode [ 966.016277][ T11] team0 (unregistering): Port device team_slave_1 removed [ 966.031456][ T11] team0 (unregistering): Port device team_slave_0 removed [ 966.048047][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.064368][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.134088][ T11] bond0 (unregistering): Released all slaves [ 966.276453][ T11] team0 (unregistering): Port device team_slave_1 removed [ 966.291293][ T11] team0 (unregistering): Port device team_slave_0 removed [ 966.305019][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.323956][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.401725][ T11] bond0 (unregistering): Released all slaves [ 966.476274][T16621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.483373][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.510076][T16621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.541423][T16633] team0: Port device team_slave_1 added [ 966.548674][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.557620][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.584172][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.615050][T16621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.622583][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.650705][T16621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.686554][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.693770][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.720477][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.745133][T16623] team0: Port device team_slave_0 added [ 966.790297][T16633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.797409][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.824210][T16633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.837658][T16633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.845278][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.873098][T16633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.895746][T16623] team0: Port device team_slave_1 added [ 966.941205][T16621] device hsr_slave_0 entered promiscuous mode [ 966.948154][T16621] device hsr_slave_1 entered promiscuous mode [ 967.004286][T16623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.011436][T16623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.037719][T16623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.060362][T13757] Bluetooth: hci0: command 0x041b tx timeout [ 967.071393][T16630] device hsr_slave_0 entered promiscuous mode [ 967.078407][T16630] device hsr_slave_1 entered promiscuous mode [ 967.085090][T16630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.098785][T16630] Cannot create hsr debugfs directory [ 967.105203][T16623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.112511][T16623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.138761][T16623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.149846][T13757] Bluetooth: hci1: command 0x041b tx timeout [ 967.168444][T16633] device hsr_slave_0 entered promiscuous mode [ 967.175687][T16633] device hsr_slave_1 entered promiscuous mode [ 967.182822][T16633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.190710][T16633] Cannot create hsr debugfs directory [ 967.316342][T16623] device hsr_slave_0 entered promiscuous mode [ 967.323409][T16623] device hsr_slave_1 entered promiscuous mode [ 967.334877][T16623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.343556][T16623] Cannot create hsr debugfs directory [ 967.383699][T13757] Bluetooth: hci3: command 0x041b tx timeout [ 967.539157][T13757] Bluetooth: hci4: command 0x041b tx timeout [ 967.701285][T16633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.861059][T16633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.019446][T16633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.149894][T16633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.413071][T16630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.510505][T16630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.596959][T16630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.760053][T16630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.037808][T16630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 969.061556][T16630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 969.115899][T16630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 969.133633][T16630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 969.139213][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 969.229100][T13757] Bluetooth: hci1: command 0x040f tx timeout [ 969.426361][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.455956][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 969.463334][T13757] Bluetooth: hci3: command 0x040f tx timeout [ 969.485901][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.503809][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.562152][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 969.581447][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 969.598839][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.606066][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.619333][ T3662] Bluetooth: hci4: command 0x040f tx timeout [ 969.679284][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.687474][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 969.739822][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.759633][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.766776][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.789419][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 969.837760][T16630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 969.876954][T16630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 969.901247][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 969.920266][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 969.942498][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 969.958004][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 969.976874][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 969.988648][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 970.006941][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 970.017321][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.035531][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 970.060281][T16621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 970.116884][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 970.148620][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 970.178839][T16621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 970.218329][T16621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 970.362746][T16621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 970.953727][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.980446][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 970.988097][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 971.003506][T16621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.128879][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 971.137012][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.161646][T16621] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.219138][ T3662] Bluetooth: hci0: command 0x0419 tx timeout [ 971.282475][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.299437][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 971.309461][ T3662] Bluetooth: hci1: command 0x0419 tx timeout [ 971.347774][T16630] device veth0_vlan entered promiscuous mode [ 971.395271][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 971.404895][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 971.414052][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.421410][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.429661][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.438212][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 971.447357][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 971.455628][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 971.464064][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 971.517960][T16630] device veth1_vlan entered promiscuous mode [ 971.527848][T16623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 971.538536][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 971.546972][ T3662] Bluetooth: hci3: command 0x0419 tx timeout [ 971.571030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 971.579925][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 971.588484][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.595680][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.603729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 971.659318][T16623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 971.699293][ T3662] Bluetooth: hci4: command 0x0419 tx timeout [ 971.750388][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 971.758714][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 971.768337][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 971.778794][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.788765][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 971.798447][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.816273][T16621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 971.878195][T16621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.920604][T16623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 971.947002][T16623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 972.060529][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 972.068712][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 972.077711][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 972.087254][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 972.096555][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 972.145159][T16630] device veth0_macvtap entered promiscuous mode [ 972.205779][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 972.214246][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 972.240014][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 972.263127][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 972.305609][T16630] device veth1_macvtap entered promiscuous mode [ 972.354148][T16633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.388231][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.402178][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.413532][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.424847][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.434883][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.445526][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.455434][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.465992][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.478369][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.489830][T16633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.505031][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 972.514987][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 972.533370][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 972.582019][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.608970][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.618847][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.650223][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.663309][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.689688][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.701358][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.712088][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.723888][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.733539][T16633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.772709][T16621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.780136][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 972.791556][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 972.802206][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.818024][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 972.855020][T16630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.864423][T16630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.876896][T16630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.896681][T16630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.916160][T16633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 973.173663][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.221283][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.268390][T16623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.287832][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 973.380283][T16623] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.398251][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 973.409885][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 973.481827][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.490624][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.529947][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 973.550674][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 973.560862][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 973.574042][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.581404][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.599400][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 973.608339][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 973.628401][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.635624][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.659440][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 973.680401][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 973.692399][T16633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.722148][ T11] device hsr_slave_0 left promiscuous mode [ 973.728766][ T11] device hsr_slave_1 left promiscuous mode [ 973.737033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.744856][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.754658][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.763641][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.778448][ T11] device bridge_slave_1 left promiscuous mode [ 973.787596][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.805134][ T11] device bridge_slave_0 left promiscuous mode [ 973.812869][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.836504][ T11] device hsr_slave_0 left promiscuous mode [ 973.847848][ T11] device hsr_slave_1 left promiscuous mode [ 973.866738][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.886582][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.905326][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.916430][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.936739][ T11] device bridge_slave_1 left promiscuous mode [ 973.947267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.968202][ T11] device bridge_slave_0 left promiscuous mode [ 973.975733][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.992757][ T11] device veth1_macvtap left promiscuous mode [ 973.998863][ T11] device veth0_macvtap left promiscuous mode [ 974.006217][ T11] device veth1_vlan left promiscuous mode [ 974.013989][ T11] device veth0_vlan left promiscuous mode [ 974.022505][ T11] device veth1_macvtap left promiscuous mode [ 974.028756][ T11] device veth0_macvtap left promiscuous mode [ 974.040129][ T11] device veth1_vlan left promiscuous mode [ 974.046042][ T11] device veth0_vlan left promiscuous mode [ 974.659805][ T11] team0 (unregistering): Port device team_slave_1 removed [ 974.675964][ T11] team0 (unregistering): Port device team_slave_0 removed [ 974.700824][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.729577][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.819786][ T11] bond0 (unregistering): Released all slaves [ 975.098181][ T11] team0 (unregistering): Port device team_slave_1 removed [ 975.122591][ T11] team0 (unregistering): Port device team_slave_0 removed [ 975.137186][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.155959][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.227437][ T11] bond0 (unregistering): Released all slaves [ 975.317664][T16633] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.350037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 975.363334][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 975.372812][T16808] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 975.378460][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 975.384193][T16808] CPU: 0 PID: 16808 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 975.399345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 975.399591][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 975.407519][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 975.416874][T16808] Call Trace: [ 975.416886][T16808] [ 975.416897][T16808] dump_stack_lvl+0x1e3/0x2cb [ 975.416935][T16808] ? nf_tcp_handle_invalid+0x642/0x642 [ 975.425382][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.427425][T16808] ? panic+0x75d/0x75d [ 975.431309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 975.435039][T16808] ? ___ratelimit+0x4c0/0x670 [ 975.465838][T16808] ? local_lock_release+0x170/0x170 [ 975.471081][T16808] dump_header+0xdf/0x9c0 [ 975.475432][T16808] oom_kill_process+0xf8/0x520 [ 975.480254][T16808] out_of_memory+0xf30/0x12f0 [ 975.484962][T16808] ? mutex_lock_io_nested+0x60/0x60 [ 975.490184][T16808] ? preempt_schedule+0xd9/0xe0 [ 975.495051][T16808] ? unregister_oom_notifier+0x20/0x20 [ 975.500533][T16808] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 975.506546][T16808] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 975.512141][T16808] ? preempt_schedule_thunk+0x16/0x18 [ 975.517548][T16808] ? mem_cgroup_oom_trylock+0x210/0x210 [ 975.523125][T16808] ? cgroup_file_notify+0x123/0x190 [ 975.528360][T16808] memory_max_write+0x34d/0x470 [ 975.533245][T16808] ? memory_max_show+0xa0/0xa0 [ 975.538040][T16808] ? read_lock_is_recursive+0x10/0x10 [ 975.543450][T16808] ? memory_max_show+0xa0/0xa0 [ 975.548349][T16808] cgroup_file_write+0x2c6/0x690 [ 975.553314][T16808] ? mutex_lock_io_nested+0x60/0x60 [ 975.558542][T16808] ? cgroup_seqfile_stop+0xd0/0xd0 [ 975.563684][T16808] ? __virt_addr_valid+0x22b/0x2e0 [ 975.568947][T16808] ? cgroup_seqfile_stop+0xd0/0xd0 [ 975.574105][T16808] kernfs_fop_write_iter+0x3a2/0x4f0 [ 975.579422][T16808] vfs_write+0x7ae/0xba0 [ 975.583698][T16808] ? file_end_write+0x250/0x250 [ 975.588678][T16808] ? mutex_lock_nested+0x17/0x20 [ 975.593646][T16808] ? __fdget_pos+0x250/0x2f0 [ 975.598254][T16808] ? ksys_write+0x77/0x2c0 [ 975.602789][T16808] ksys_write+0x19c/0x2c0 [ 975.607145][T16808] ? print_irqtrace_events+0x210/0x210 [ 975.612634][T16808] ? __ia32_sys_read+0x80/0x80 [ 975.617422][T16808] ? syscall_enter_from_user_mode+0x2e/0x220 [ 975.623475][T16808] ? lockdep_hardirqs_on+0x94/0x130 [ 975.628697][T16808] ? syscall_enter_from_user_mode+0x2e/0x220 [ 975.634709][T16808] do_syscall_64+0x3d/0xb0 [ 975.639156][T16808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 975.645066][T16808] RIP: 0033:0x7f1e5ba8c169 [ 975.649509][T16808] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 975.669221][T16808] RSP: 002b:00007f1e5c7ca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 975.677654][T16808] RAX: ffffffffffffffda RBX: 00007f1e5bbabf80 RCX: 00007f1e5ba8c169 [ 975.685641][T16808] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 975.693631][T16808] RBP: 00007f1e5bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 975.701615][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.709609][T16808] R13: 00007ffe9ae4603f R14: 00007f1e5c7ca300 R15: 0000000000022000 [ 975.717610][T16808] [ 975.729994][T16808] memory: usage 10832kB, limit 0kB, failcnt 256 [ 975.736423][T16808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 975.742676][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 975.749384][T16808] Memory cgroup stats for /syz0: [ 975.750864][T16808] anon 114688 [ 975.750864][T16808] file 10440704 [ 975.750864][T16808] kernel 319488 [ 975.750864][T16808] kernel_stack 65536 [ 975.750864][T16808] pagetables 77824 [ 975.750864][T16808] sec_pagetables 0 [ 975.750864][T16808] percpu 0 [ 975.750864][T16808] sock 0 [ 975.750864][T16808] vmalloc 0 [ 975.750864][T16808] shmem 10436608 [ 975.750864][T16808] zswap 0 [ 975.750864][T16808] zswapped 0 [ 975.750864][T16808] file_mapped 81920 [ 975.750864][T16808] file_dirty 4096 [ 975.750864][T16808] file_writeback 0 [ 975.750864][T16808] swapcached 0 [ 975.750864][T16808] anon_thp 0 [ 975.750864][T16808] file_thp 0 [ 975.750864][T16808] shmem_thp 0 [ 975.750864][T16808] inactive_anon 0 [ 975.750864][T16808] active_anon 10534912 [ 975.750864][T16808] inactive_file 0 [ 975.750864][T16808] active_file 4096 [ 975.750864][T16808] unevictable 0 [ 975.750864][T16808] slab_reclaimable 44976 [ 975.750864][T16808] slab_unreclaimable 98664 [ 975.750864][T16808] slab 143640 [ 975.884831][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 975.900733][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 975.910165][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 975.919910][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 975.928553][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 975.937957][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 975.953438][T16808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16630,uid=0 [ 975.980259][T16808] Memory cgroup out of memory: Killed process 16630 (syz-executor.0) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 976.020438][T16623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 976.021010][T16808] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 976.038100][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.047306][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.065558][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.072756][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.079066][T16808] CPU: 1 PID: 16808 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 976.088500][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 976.091387][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 976.098569][T16808] Call Trace: [ 976.098581][T16808] [ 976.113556][T16808] dump_stack_lvl+0x1e3/0x2cb [ 976.118291][T16808] ? nf_tcp_handle_invalid+0x642/0x642 [ 976.118328][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 976.123785][T16808] ? panic+0x75d/0x75d [ 976.123815][T16808] ? ___ratelimit+0x4c0/0x670 [ 976.123852][T16808] ? local_lock_release+0x170/0x170 [ 976.123889][T16808] dump_header+0xdf/0x9c0 [ 976.123920][T16808] oom_kill_process+0xf8/0x520 [ 976.142857][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.145989][T16808] out_of_memory+0xf30/0x12f0 [ 976.150444][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.155080][T16808] ? mutex_lock_io_nested+0x60/0x60 [ 976.179294][T16808] ? mark_lock+0x9a/0x340 [ 976.183873][T16808] ? unregister_oom_notifier+0x20/0x20 [ 976.189382][T16808] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 976.195425][T16808] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 976.201027][T16808] ? mem_cgroup_oom_trylock+0x210/0x210 [ 976.206636][T16808] ? cgroup_file_notify+0x106/0x190 [ 976.211893][T16808] memory_max_write+0x34d/0x470 [ 976.216815][T16808] ? memory_max_show+0xa0/0xa0 [ 976.222095][T16808] ? read_lock_is_recursive+0x10/0x10 [ 976.227533][T16808] ? memory_max_show+0xa0/0xa0 [ 976.232364][T16808] cgroup_file_write+0x2c6/0x690 [ 976.237043][T16633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 976.237351][T16808] ? mutex_lock_io_nested+0x60/0x60 [ 976.253044][T16808] ? cgroup_seqfile_stop+0xd0/0xd0 [ 976.256857][T16633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.258276][T16808] ? __virt_addr_valid+0x22b/0x2e0 [ 976.273763][T16808] ? cgroup_seqfile_stop+0xd0/0xd0 [ 976.278926][T16808] kernfs_fop_write_iter+0x3a2/0x4f0 [ 976.284293][T16808] vfs_write+0x7ae/0xba0 [ 976.288637][T16808] ? file_end_write+0x250/0x250 [ 976.293747][T16808] ? mutex_lock_nested+0x17/0x20 [ 976.298740][T16808] ? __fdget_pos+0x250/0x2f0 [ 976.303378][T16808] ? ksys_write+0x77/0x2c0 [ 976.307868][T16808] ksys_write+0x19c/0x2c0 [ 976.312253][T16808] ? print_irqtrace_events+0x210/0x210 [ 976.317860][T16808] ? __ia32_sys_read+0x80/0x80 [ 976.322690][T16808] ? syscall_enter_from_user_mode+0x2e/0x220 [ 976.328832][T16808] ? lockdep_hardirqs_on+0x94/0x130 [ 976.334275][T16808] ? syscall_enter_from_user_mode+0x2e/0x220 [ 976.340326][T16808] do_syscall_64+0x3d/0xb0 [ 976.344900][T16808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 976.350843][T16808] RIP: 0033:0x7f1e5ba8c169 [ 976.355302][T16808] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 976.375220][T16808] RSP: 002b:00007f1e5c7ca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.383722][T16808] RAX: ffffffffffffffda RBX: 00007f1e5bbabf80 RCX: 00007f1e5ba8c169 [ 976.391811][T16808] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 976.399937][T16808] RBP: 00007f1e5bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 976.407955][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.415966][T16808] R13: 00007ffe9ae4603f R14: 00007f1e5c7ca300 R15: 0000000000022000 [ 976.424104][T16808] [ 976.435093][T16621] device veth0_vlan entered promiscuous mode [ 976.465479][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 976.480196][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 976.510362][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 976.540051][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 976.560409][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 976.619864][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 976.628768][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 976.658124][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.667295][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.686107][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 976.692343][T16808] memory: usage 10600kB, limit 0kB, failcnt 256 [ 976.700365][T16808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 976.709065][T16808] Memory cgroup stats for /syz0: [ 976.709258][T16808] anon 94208 [ 976.709258][T16808] file 10440704 [ 976.709258][T16808] kernel 274432 [ 976.709258][T16808] kernel_stack 32768 [ 976.709258][T16808] pagetables 69632 [ 976.709258][T16808] sec_pagetables 0 [ 976.709258][T16808] percpu 0 [ 976.709258][T16808] sock 0 [ 976.709258][T16808] vmalloc 0 [ 976.709258][T16808] shmem 10436608 [ 976.709258][T16808] zswap 0 [ 976.709258][T16808] zswapped 0 [ 976.709258][T16808] file_mapped 81920 [ 976.709258][T16808] file_dirty 4096 [ 976.709258][T16808] file_writeback 0 [ 976.709258][T16808] swapcached 0 [ 976.709258][T16808] anon_thp 0 [ 976.709258][T16808] file_thp 0 [ 976.709258][T16808] shmem_thp 0 [ 976.709258][T16808] inactive_anon 0 [ 976.709258][T16808] active_anon 10530816 [ 976.709258][T16808] inactive_file 0 [ 976.709258][T16808] active_file 4096 [ 976.709258][T16808] unevictable 0 [ 976.709258][T16808] slab_reclaimable 44976 [ 976.709258][T16808] slab_unreclaimable 98664 [ 976.709258][T16808] slab 143640 [ 976.711611][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 976.714268][T16808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 976.811259][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 976.831551][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 976.867842][T16621] device veth1_vlan entered promiscuous mode [ 976.892714][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 976.920041][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 976.939803][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 976.947805][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 977.009277][T16808] syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16807,uid=0 [ 977.038620][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 977.064381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 977.073132][T16808] Memory cgroup out of memory: Killed process 16808 (syz-executor.0) total-vm:54548kB, anon-rss:504kB, file-rss:8988kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 977.108850][T16621] device veth0_macvtap entered promiscuous mode [ 977.146763][T16621] device veth1_macvtap entered promiscuous mode [ 977.185428][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.209111][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.229006][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.242017][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.258294][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.277990][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.301418][T16621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.334773][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 977.343609][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 977.352453][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 977.362495][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.373037][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 977.381215][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 977.451441][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.464401][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.475190][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.487848][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.498128][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.516268][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.546697][T16621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.558210][T16623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.570967][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 977.595458][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.628836][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 977.646161][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 977.657393][T16621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.686892][T16621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.708997][T16621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.717982][T16621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.744910][T16633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.796920][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 977.817499][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 977.930792][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 977.939481][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.947563][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.967720][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 977.988896][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 977.997240][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 978.012219][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 978.046500][T16623] device veth0_vlan entered promiscuous mode [ 978.054545][T15925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.091509][T15925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.125944][T16623] device veth1_vlan entered promiscuous mode [ 978.158266][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 978.176426][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 978.326078][T16623] device veth0_macvtap entered promiscuous mode [ 978.351450][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 978.363240][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 978.427532][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 978.493708][T16623] device veth1_macvtap entered promiscuous mode [ 978.565798][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 978.577840][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 978.608834][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.655447][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.686939][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.722168][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.766372][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.772951][T16848] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 978.805999][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.809025][T16848] CPU: 1 PID: 16848 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 978.824390][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 978.835190][T16848] Call Trace: [ 978.837736][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.838572][T16848] [ 978.852175][T16848] dump_stack_lvl+0x1e3/0x2cb [ 978.856912][T16848] ? nf_tcp_handle_invalid+0x642/0x642 [ 978.862471][T16848] ? panic+0x75d/0x75d [ 978.866608][T16848] ? ___ratelimit+0x4c0/0x670 [ 978.871360][T16848] ? local_lock_release+0x170/0x170 [ 978.876622][T16848] dump_header+0xdf/0x9c0 [ 978.880797][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.880980][T16848] oom_kill_process+0xf8/0x520 [ 978.895587][T16848] out_of_memory+0xf30/0x12f0 [ 978.900318][T16848] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 978.906536][T16848] ? lockdep_hardirqs_on+0x94/0x130 [ 978.911791][T16848] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 978.918003][T16848] ? unregister_oom_notifier+0x20/0x20 [ 978.923524][T16848] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 978.927480][T16623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.929092][T16848] ? preempt_schedule_thunk+0x16/0x18 [ 978.929136][T16848] ? mem_cgroup_oom_trylock+0x210/0x210 [ 978.929180][T16848] ? cgroup_file_notify+0x123/0x190 [ 978.929216][T16848] memory_max_write+0x34d/0x470 [ 978.929262][T16848] ? memory_max_show+0xa0/0xa0 [ 978.929298][T16848] ? kernfs_fop_write_iter+0x306/0x4f0 [ 978.929332][T16848] ? cgroup_file_write+0x8b/0x690 [ 978.929370][T16848] ? memory_max_show+0xa0/0xa0 [ 978.929407][T16848] cgroup_file_write+0x2c6/0x690 [ 978.949214][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 978.953217][T16848] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 978.969815][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 978.973325][T16848] ? cgroup_seqfile_stop+0xd0/0xd0 [ 978.973384][T16848] ? cgroup_seqfile_stop+0xd0/0xd0 [ 979.015703][T16848] kernfs_fop_write_iter+0x3a2/0x4f0 [ 979.021053][T16848] vfs_write+0x7ae/0xba0 [ 979.025367][T16848] ? file_end_write+0x250/0x250 [ 979.030305][T16848] ? mutex_lock_nested+0x17/0x20 [ 979.035311][T16848] ? __fdget_pos+0x250/0x2f0 [ 979.039951][T16848] ? ksys_write+0x77/0x2c0 [ 979.044430][T16848] ksys_write+0x19c/0x2c0 [ 979.048915][T16848] ? lockdep_hardirqs_on+0x94/0x130 [ 979.054172][T16848] ? __ia32_sys_read+0x80/0x80 [ 979.059001][T16848] do_syscall_64+0x3d/0xb0 [ 979.063482][T16848] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 979.069422][T16848] RIP: 0033:0x7f375ca8c169 [ 979.073882][T16848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 979.093538][T16848] RSP: 002b:00007f375d7c5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.102001][T16848] RAX: ffffffffffffffda RBX: 00007f375cbabf80 RCX: 00007f375ca8c169 [ 979.110040][T16848] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 979.118059][T16848] RBP: 00007f375cae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 979.126080][T16848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.134308][T16848] R13: 00007ffc1aa811ff R14: 00007f375d7c5300 R15: 0000000000022000 [ 979.142344][T16848] [ 979.180582][T16848] memory: usage 4692kB, limit 0kB, failcnt 136 [ 979.187189][T16848] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 979.196624][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.197234][T16848] Memory cgroup stats for /syz4: [ 979.208274][T16848] anon 114688 [ 979.208274][T16848] file 4407296 [ 979.208274][T16848] kernel 237568 [ 979.208274][T16848] kernel_stack 32768 [ 979.208274][T16848] pagetables 77824 [ 979.208274][T16848] sec_pagetables 0 [ 979.208274][T16848] percpu 0 [ 979.208274][T16848] sock 0 [ 979.208274][T16848] vmalloc 0 [ 979.208274][T16848] shmem 4407296 [ 979.208274][T16848] zswap 0 [ 979.208274][T16848] zswapped 0 [ 979.208274][T16848] file_mapped 81920 [ 979.208274][T16848] file_dirty 0 [ 979.208274][T16848] file_writeback 0 [ 979.208274][T16848] swapcached 0 [ 979.208274][T16848] anon_thp 0 [ 979.208274][T16848] file_thp 0 [ 979.208274][T16848] shmem_thp 0 [ 979.208274][T16848] inactive_anon 4407296 [ 979.208274][T16848] active_anon 114688 [ 979.208274][T16848] inactive_file 0 [ 979.208274][T16848] active_file 0 [ 979.208274][T16848] unevictable 0 [ 979.208274][T16848] slab_reclaimable 29152 [ 979.208274][T16848] slab_unreclaimable 72600 [ 979.208274][T16848] slab 101752 [ 979.238990][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.319743][T16848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16621,uid=0 [ 979.336027][T16848] Memory cgroup out of memory: Killed process 16621 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 979.366878][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.377742][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.387972][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.398981][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.408888][T16623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.422319][T16623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.471981][T16623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.486619][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 979.509869][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 979.518828][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 979.557416][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 979.651178][T16623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.668012][T16623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.690748][T16623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.719303][T16623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.748604][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 12:19:31 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:31 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, 0x0}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:31 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 979.770005][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 979.792327][T16633] device veth0_vlan entered promiscuous mode [ 979.815838][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 979.837622][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 979.912498][T16633] device veth1_vlan entered promiscuous mode [ 980.080928][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.109804][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 980.359282][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.372761][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.388026][T16633] device veth0_macvtap entered promiscuous mode [ 980.408708][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 980.422652][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 980.441961][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 980.459750][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 980.486573][T16633] device veth1_macvtap entered promiscuous mode [ 980.539296][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.547472][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.547675][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.604059][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.622190][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.636974][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.654636][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.677286][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.704656][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.720984][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.738364][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.757690][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.776819][T16633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.786007][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 980.804353][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 980.815136][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 980.831791][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 980.860017][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.871962][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.893355][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.916228][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.938085][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.961304][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.992005][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.026997][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.057051][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.089011][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.126489][T16633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.143194][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.185206][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.222731][T16633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.272242][T16633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.281191][T16633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.292220][T16633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.496945][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.521763][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.565788][T16888] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 981.585065][T16888] CPU: 1 PID: 16888 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 981.593542][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 981.603682][T16888] Call Trace: [ 981.607000][T16888] [ 981.609803][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.609950][T16888] dump_stack_lvl+0x1e3/0x2cb [ 981.622635][T16888] ? nf_tcp_handle_invalid+0x642/0x642 [ 981.628147][T16888] ? panic+0x75d/0x75d [ 981.629900][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.632246][T16888] ? ___ratelimit+0x4c0/0x670 [ 981.632293][T16888] ? local_lock_release+0x170/0x170 [ 981.649603][T16888] dump_header+0xdf/0x9c0 [ 981.653986][T16888] oom_kill_process+0xf8/0x520 [ 981.658809][T16888] out_of_memory+0xf30/0x12f0 [ 981.663540][T16888] ? mutex_lock_io_nested+0x60/0x60 [ 981.668808][T16888] ? preempt_schedule+0xd9/0xe0 [ 981.673709][T16888] ? unregister_oom_notifier+0x20/0x20 [ 981.679191][T16888] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 981.685360][T16888] ? lockdep_hardirqs_on+0x94/0x130 [ 981.690583][T16888] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 981.696758][T16888] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 981.702323][T16888] ? preempt_schedule_thunk+0x16/0x18 [ 981.707724][T16888] ? mem_cgroup_oom_trylock+0x210/0x210 [ 981.713303][T16888] ? cgroup_file_notify+0x123/0x190 [ 981.718531][T16888] memory_max_write+0x34d/0x470 [ 981.723416][T16888] ? memory_max_show+0xa0/0xa0 [ 981.728205][T16888] ? read_lock_is_recursive+0x10/0x10 [ 981.733602][T16888] ? memory_max_show+0xa0/0xa0 [ 981.738386][T16888] cgroup_file_write+0x2c6/0x690 [ 981.743348][T16888] ? mutex_lock_io_nested+0x60/0x60 [ 981.748566][T16888] ? cgroup_seqfile_stop+0xd0/0xd0 [ 981.753694][T16888] ? __virt_addr_valid+0x22b/0x2e0 [ 981.758849][T16888] ? cgroup_seqfile_stop+0xd0/0xd0 [ 981.763979][T16888] kernfs_fop_write_iter+0x3a2/0x4f0 [ 981.769315][T16888] vfs_write+0x7ae/0xba0 [ 981.773593][T16888] ? file_end_write+0x250/0x250 [ 981.778476][T16888] ? mutex_lock_nested+0x17/0x20 [ 981.783441][T16888] ? __fdget_pos+0x250/0x2f0 [ 981.788044][T16888] ? ksys_write+0x77/0x2c0 [ 981.792481][T16888] ksys_write+0x19c/0x2c0 [ 981.796831][T16888] ? print_irqtrace_events+0x210/0x210 [ 981.802339][T16888] ? __ia32_sys_read+0x80/0x80 [ 981.807157][T16888] ? syscall_enter_from_user_mode+0x2e/0x220 [ 981.813174][T16888] ? lockdep_hardirqs_on+0x94/0x130 [ 981.818417][T16888] ? syscall_enter_from_user_mode+0x2e/0x220 [ 981.824421][T16888] do_syscall_64+0x3d/0xb0 [ 981.828853][T16888] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 981.834760][T16888] RIP: 0033:0x7f94f1e8c169 [ 981.839184][T16888] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 981.858916][T16888] RSP: 002b:00007f94f2c5c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.867354][T16888] RAX: ffffffffffffffda RBX: 00007f94f1fabf80 RCX: 00007f94f1e8c169 [ 981.875342][T16888] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 981.883326][T16888] RBP: 00007f94f1ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 981.891306][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.899380][T16888] R13: 00007ffe0e8b5eaf R14: 00007f94f2c5c300 R15: 0000000000022000 [ 981.907376][T16888] [ 981.979579][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 981.987613][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 981.995511][T16888] memory: usage 8544kB, limit 0kB, failcnt 104 [ 982.007875][T16888] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 982.040624][T16888] Memory cgroup stats for /syz1: [ 982.040833][T16888] anon 114688 [ 982.040833][T16888] file 8343552 [ 982.040833][T16888] kernel 253952 [ 982.040833][T16888] kernel_stack 32768 [ 982.040833][T16888] pagetables 81920 [ 982.040833][T16888] sec_pagetables 0 [ 982.040833][T16888] percpu 0 [ 982.040833][T16888] sock 0 [ 982.040833][T16888] vmalloc 0 [ 982.040833][T16888] shmem 8343552 [ 982.040833][T16888] zswap 0 [ 982.040833][T16888] zswapped 0 [ 982.040833][T16888] file_mapped 147456 [ 982.040833][T16888] file_dirty 0 [ 982.040833][T16888] file_writeback 0 [ 982.040833][T16888] swapcached 0 [ 982.040833][T16888] anon_thp 0 [ 982.040833][T16888] file_thp 0 [ 982.040833][T16888] shmem_thp 0 [ 982.040833][T16888] inactive_anon 8343552 [ 982.040833][T16888] active_anon 114688 [ 982.040833][T16888] inactive_file 0 [ 982.040833][T16888] active_file 0 [ 982.040833][T16888] unevictable 0 [ 982.040833][T16888] slab_reclaimable 43984 [ 982.040833][T16888] slab_unreclaimable 71952 [ 982.040833][T16888] slab 115936 [ 982.240558][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.289318][T16888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16623,uid=0 [ 982.376998][T16888] Memory cgroup out of memory: Killed process 16623 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 982.514020][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.622207][T16896] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 982.661021][T16896] CPU: 0 PID: 16896 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 982.669502][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 982.679607][T16896] Call Trace: [ 982.682927][T16896] [ 982.685987][T16896] dump_stack_lvl+0x1e3/0x2cb [ 982.690742][T16896] ? nf_tcp_handle_invalid+0x642/0x642 [ 982.696260][T16896] ? panic+0x75d/0x75d [ 982.700385][T16896] ? ___ratelimit+0x4c0/0x670 [ 982.705123][T16896] ? local_lock_release+0x170/0x170 [ 982.710381][T16896] dump_header+0xdf/0x9c0 [ 982.714746][T16896] oom_kill_process+0xf8/0x520 [ 982.719550][T16896] out_of_memory+0xf30/0x12f0 [ 982.724247][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 982.730415][T16896] ? lockdep_hardirqs_on+0x94/0x130 [ 982.735641][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 982.741845][T16896] ? unregister_oom_notifier+0x20/0x20 [ 982.747343][T16896] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 982.752917][T16896] ? preempt_schedule_thunk+0x16/0x18 [ 982.758311][T16896] ? mem_cgroup_oom_trylock+0x210/0x210 [ 982.763909][T16896] ? cgroup_file_notify+0x123/0x190 [ 982.769130][T16896] memory_max_write+0x34d/0x470 [ 982.774014][T16896] ? memory_max_show+0xa0/0xa0 [ 982.778798][T16896] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 982.784805][T16896] ? print_irqtrace_events+0x210/0x210 [ 982.790286][T16896] ? memory_max_show+0xa0/0xa0 [ 982.795073][T16896] cgroup_file_write+0x2c6/0x690 [ 982.800035][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 982.806217][T16896] ? cgroup_seqfile_stop+0xd0/0xd0 [ 982.811441][T16896] ? kernfs_fop_write_iter+0x306/0x4f0 [ 982.816986][T16896] ? cgroup_seqfile_stop+0xd0/0xd0 [ 982.822121][T16896] kernfs_fop_write_iter+0x3a2/0x4f0 [ 982.827438][T16896] vfs_write+0x7ae/0xba0 [ 982.831714][T16896] ? file_end_write+0x250/0x250 [ 982.836600][T16896] ? mutex_lock_nested+0x17/0x20 [ 982.841555][T16896] ? __fdget_pos+0x250/0x2f0 [ 982.846155][T16896] ? ksys_write+0x77/0x2c0 [ 982.850599][T16896] ksys_write+0x19c/0x2c0 [ 982.855064][T16896] ? print_irqtrace_events+0x210/0x210 [ 982.860545][T16896] ? __ia32_sys_read+0x80/0x80 [ 982.865351][T16896] ? syscall_enter_from_user_mode+0x2e/0x220 [ 982.871355][T16896] ? lockdep_hardirqs_on+0x94/0x130 [ 982.876663][T16896] ? syscall_enter_from_user_mode+0x2e/0x220 [ 982.882669][T16896] do_syscall_64+0x3d/0xb0 [ 982.887114][T16896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 982.893020][T16896] RIP: 0033:0x7f5d7008c169 [ 982.897447][T16896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 982.917415][T16896] RSP: 002b:00007f5d70e40168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.925846][T16896] RAX: ffffffffffffffda RBX: 00007f5d701abf80 RCX: 00007f5d7008c169 [ 982.933828][T16896] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 982.941915][T16896] RBP: 00007f5d700e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 982.949984][T16896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.957961][T16896] R13: 00007ffc3f40495f R14: 00007f5d70e40300 R15: 0000000000022000 [ 982.965960][T16896] [ 983.057377][T16896] memory: usage 10604kB, limit 0kB, failcnt 166 [ 983.058173][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.100664][T16896] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 983.109020][T16896] Memory cgroup stats for /syz5: [ 983.113390][T16896] anon 114688 [ 983.113390][T16896] file 10440704 [ 983.113390][T16896] kernel 294912 [ 983.113390][T16896] kernel_stack 65536 [ 983.113390][T16896] pagetables 81920 [ 983.113390][T16896] sec_pagetables 0 [ 983.113390][T16896] percpu 0 [ 983.113390][T16896] sock 0 [ 983.113390][T16896] vmalloc 0 [ 983.113390][T16896] shmem 10440704 [ 983.113390][T16896] zswap 0 [ 983.113390][T16896] zswapped 0 [ 983.113390][T16896] file_mapped 86016 [ 983.113390][T16896] file_dirty 0 [ 983.113390][T16896] file_writeback 0 [ 983.113390][T16896] swapcached 0 [ 983.113390][T16896] anon_thp 0 [ 983.113390][T16896] file_thp 0 [ 983.113390][T16896] shmem_thp 0 [ 983.113390][T16896] inactive_anon 0 [ 983.113390][T16896] active_anon 10555392 [ 983.113390][T16896] inactive_file 0 [ 983.113390][T16896] active_file 0 [ 983.113390][T16896] unevictable 0 [ 983.113390][T16896] slab_reclaimable 46240 [ 983.113390][T16896] slab_unreclaimable 73248 [ 983.113390][T16896] slab 119488 [ 983.251113][T16896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16633,uid=0 [ 983.286500][T16896] Memory cgroup out of memory: Killed process 16633 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 983.394137][T16896] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 983.405769][T16896] CPU: 0 PID: 16896 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 983.414239][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 983.424328][T16896] Call Trace: [ 983.427632][T16896] [ 983.430594][T16896] dump_stack_lvl+0x1e3/0x2cb [ 983.435328][T16896] ? nf_tcp_handle_invalid+0x642/0x642 [ 983.440830][T16896] ? panic+0x75d/0x75d [ 983.444936][T16896] ? ___ratelimit+0x4c0/0x670 [ 983.449780][T16896] ? local_lock_release+0x170/0x170 [ 983.455027][T16896] dump_header+0xdf/0x9c0 [ 983.459402][T16896] oom_kill_process+0xf8/0x520 [ 983.464216][T16896] out_of_memory+0xf30/0x12f0 [ 983.468932][T16896] ? mutex_lock_io_nested+0x60/0x60 [ 983.474215][T16896] ? unregister_oom_notifier+0x20/0x20 [ 983.479796][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 983.485981][T16896] ? lockdep_hardirqs_on+0x94/0x130 [ 983.491213][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 983.497413][T16896] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 983.502977][T16896] ? mark_lock+0x9a/0x340 [ 983.507314][T16896] ? mem_cgroup_oom_trylock+0x210/0x210 [ 983.512883][T16896] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 983.518811][T16896] ? cgroup_file_notify+0x106/0x190 [ 983.524049][T16896] memory_max_write+0x34d/0x470 [ 983.528946][T16896] ? memory_max_show+0xa0/0xa0 [ 983.533728][T16896] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 983.539737][T16896] ? print_irqtrace_events+0x210/0x210 [ 983.545268][T16896] ? memory_max_show+0xa0/0xa0 [ 983.550056][T16896] cgroup_file_write+0x2c6/0x690 [ 983.555020][T16896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 983.561215][T16896] ? cgroup_seqfile_stop+0xd0/0xd0 [ 983.566351][T16896] ? kernfs_fop_write_iter+0x306/0x4f0 [ 983.571840][T16896] ? cgroup_seqfile_stop+0xd0/0xd0 [ 983.576974][T16896] kernfs_fop_write_iter+0x3a2/0x4f0 [ 983.582288][T16896] vfs_write+0x7ae/0xba0 [ 983.586556][T16896] ? file_end_write+0x250/0x250 [ 983.591444][T16896] ? mutex_lock_nested+0x17/0x20 [ 983.596391][T16896] ? __fdget_pos+0x250/0x2f0 [ 983.601008][T16896] ? ksys_write+0x77/0x2c0 [ 983.605467][T16896] ksys_write+0x19c/0x2c0 [ 983.609811][T16896] ? print_irqtrace_events+0x210/0x210 [ 983.615289][T16896] ? __ia32_sys_read+0x80/0x80 [ 983.620079][T16896] ? syscall_enter_from_user_mode+0x2e/0x220 [ 983.626080][T16896] ? lockdep_hardirqs_on+0x94/0x130 [ 983.631293][T16896] ? syscall_enter_from_user_mode+0x2e/0x220 [ 983.637294][T16896] do_syscall_64+0x3d/0xb0 [ 983.641725][T16896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 983.647629][T16896] RIP: 0033:0x7f5d7008c169 [ 983.652074][T16896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 983.671696][T16896] RSP: 002b:00007f5d70e40168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 983.680325][T16896] RAX: ffffffffffffffda RBX: 00007f5d701abf80 RCX: 00007f5d7008c169 [ 983.688307][T16896] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 983.696290][T16896] RBP: 00007f5d700e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 983.704273][T16896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.712261][T16896] R13: 00007ffc3f40495f R14: 00007f5d70e40300 R15: 0000000000022000 [ 983.720259][T16896] [ 983.851577][T16896] memory: usage 10572kB, limit 0kB, failcnt 166 [ 983.889989][T16896] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 983.897497][T16896] Memory cgroup stats for /syz5: [ 983.902222][T16896] anon 94208 [ 983.902222][T16896] file 10440704 [ 983.902222][T16896] kernel 282624 [ 983.902222][T16896] kernel_stack 65536 [ 983.902222][T16896] pagetables 73728 [ 983.902222][T16896] sec_pagetables 0 [ 983.902222][T16896] percpu 0 [ 983.902222][T16896] sock 0 [ 983.902222][T16896] vmalloc 0 [ 983.902222][T16896] shmem 10440704 [ 983.902222][T16896] zswap 0 [ 983.902222][T16896] zswapped 0 [ 983.902222][T16896] file_mapped 81920 [ 983.902222][T16896] file_dirty 0 [ 983.902222][T16896] file_writeback 0 [ 983.902222][T16896] swapcached 0 [ 983.902222][T16896] anon_thp 0 [ 983.902222][T16896] file_thp 0 [ 983.902222][T16896] shmem_thp 0 [ 983.902222][T16896] inactive_anon 0 [ 983.902222][T16896] active_anon 10534912 [ 983.902222][T16896] inactive_file 0 [ 983.902222][T16896] active_file 0 [ 983.902222][T16896] unevictable 0 [ 983.902222][T16896] slab_reclaimable 46240 [ 983.902222][T16896] slab_unreclaimable 73248 [ 983.902222][T16896] slab 119488 12:19:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:19:35 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 984.065269][T16896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16895,uid=0 [ 984.083056][T16896] Memory cgroup out of memory: Killed process 16895 (syz-executor.5) total-vm:54548kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 12:19:35 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, 0x0}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:35 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 984.117280][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:35 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:19:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:19:36 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:36 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:36 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 985.176472][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 985.328764][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.631218][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:37 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 985.809935][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:19:37 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 986.339597][T13757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.348703][T13757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.357526][T13757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.365199][T13757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 986.372926][T13757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.410767][T13757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.421006][T13757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.430531][T13757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.440868][T13757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.448566][T13757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 986.461787][T13757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.833473][T13761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 986.842110][T13761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 986.862023][T13761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 986.876600][T13761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 986.884820][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 986.892264][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 987.264951][T13757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.274024][T13757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.284060][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.293964][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 987.312234][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.312447][T16946] chnl_net:caif_netlink_parms(): no params data found [ 987.367073][T16948] chnl_net:caif_netlink_parms(): no params data found [ 987.608855][T16946] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.616394][T16946] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.625364][T16946] device bridge_slave_0 entered promiscuous mode [ 987.665567][T16946] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.673271][T16946] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.681458][T16946] device bridge_slave_1 entered promiscuous mode [ 987.827845][T16948] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.845623][T16948] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.855299][T16948] device bridge_slave_0 entered promiscuous mode [ 987.881325][T16946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.904217][T16948] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.911808][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.920447][T16948] device bridge_slave_1 entered promiscuous mode [ 987.976733][T16946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.040811][T16948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.141011][T16948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.153785][T16946] team0: Port device team_slave_0 added [ 988.193592][T16946] team0: Port device team_slave_1 added [ 988.211569][T16958] chnl_net:caif_netlink_parms(): no params data found [ 988.266164][T16948] team0: Port device team_slave_0 added [ 988.275754][T16948] team0: Port device team_slave_1 added [ 988.384092][T16946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.391857][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.419260][ T3662] Bluetooth: hci0: command 0x0409 tx timeout [ 988.441684][T16946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.494104][T16970] chnl_net:caif_netlink_parms(): no params data found [ 988.501413][ T3662] Bluetooth: hci1: command 0x0409 tx timeout [ 988.524260][T16946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.539131][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.576731][T16946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.625348][T16948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.645244][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.678242][T16948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.735678][T16948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.743841][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.771732][T16948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.887398][T16946] device hsr_slave_0 entered promiscuous mode [ 988.908409][T16946] device hsr_slave_1 entered promiscuous mode [ 988.915855][T16946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.923889][T16946] Cannot create hsr debugfs directory [ 988.989173][ T3662] Bluetooth: hci3: command 0x0409 tx timeout [ 989.027855][T16948] device hsr_slave_0 entered promiscuous mode [ 989.040760][T16948] device hsr_slave_1 entered promiscuous mode [ 989.058498][T16948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.078351][T16948] Cannot create hsr debugfs directory [ 989.085598][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.105785][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.124948][T16958] device bridge_slave_0 entered promiscuous mode [ 989.225402][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.233207][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.245660][T16958] device bridge_slave_1 entered promiscuous mode [ 989.330145][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.337296][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.350364][T16970] device bridge_slave_0 entered promiscuous mode [ 989.379198][ T3662] Bluetooth: hci4: command 0x0409 tx timeout [ 989.405831][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.419270][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.439301][T16970] device bridge_slave_1 entered promiscuous mode [ 989.451905][ T11] device hsr_slave_0 left promiscuous mode [ 989.458565][ T11] device hsr_slave_1 left promiscuous mode [ 989.477485][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.491739][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.501375][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.508854][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.518428][ T11] device bridge_slave_1 left promiscuous mode [ 989.524780][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.534414][ T11] device bridge_slave_0 left promiscuous mode [ 989.543203][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.562199][ T11] device hsr_slave_0 left promiscuous mode [ 989.571295][ T11] device hsr_slave_1 left promiscuous mode [ 989.577953][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.592317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.607446][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.615639][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.629221][ T11] device bridge_slave_1 left promiscuous mode [ 989.647436][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.668122][ T11] device bridge_slave_0 left promiscuous mode [ 989.689163][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.730446][ T11] device veth1_macvtap left promiscuous mode [ 989.736565][ T11] device veth0_macvtap left promiscuous mode [ 989.754051][ T11] device veth1_vlan left promiscuous mode [ 989.765820][ T11] device veth0_vlan left promiscuous mode [ 989.780074][ T11] device veth1_macvtap left promiscuous mode [ 989.786173][ T11] device veth0_macvtap left promiscuous mode [ 989.809514][ T11] device veth1_vlan left promiscuous mode [ 989.815417][ T11] device veth0_vlan left promiscuous mode [ 990.126005][ T11] team0 (unregistering): Port device team_slave_1 removed [ 990.138888][ T11] team0 (unregistering): Port device team_slave_0 removed [ 990.153808][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.169440][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.247794][ T11] bond0 (unregistering): Released all slaves [ 990.394226][ T11] team0 (unregistering): Port device team_slave_1 removed [ 990.414641][ T11] team0 (unregistering): Port device team_slave_0 removed [ 990.430849][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.446917][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.499285][ T3662] Bluetooth: hci0: command 0x041b tx timeout [ 990.528225][ T11] bond0 (unregistering): Released all slaves [ 990.579285][T13761] Bluetooth: hci1: command 0x041b tx timeout [ 990.606551][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.654898][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.785242][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.811312][T16958] team0: Port device team_slave_0 added [ 990.857616][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.870714][T16958] team0: Port device team_slave_1 added [ 990.977866][T16970] team0: Port device team_slave_0 added [ 990.998600][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.006585][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.034170][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.054804][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.059291][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 991.067199][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.098036][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.167954][T16970] team0: Port device team_slave_1 added [ 991.285267][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.314260][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.352311][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.378741][T16958] device hsr_slave_0 entered promiscuous mode [ 991.397634][T16958] device hsr_slave_1 entered promiscuous mode [ 991.459072][ T3662] Bluetooth: hci4: command 0x041b tx timeout [ 991.481530][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.488523][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.534191][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.803264][T16970] device hsr_slave_0 entered promiscuous mode [ 991.830466][T16970] device hsr_slave_1 entered promiscuous mode [ 991.849184][T16970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.856890][T16970] Cannot create hsr debugfs directory [ 992.388168][T16948] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 992.404943][T16948] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 992.431005][T16948] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 992.453927][T16958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.473479][T16948] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 992.533816][T16958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.579210][ T3662] Bluetooth: hci0: command 0x040f tx timeout [ 992.660792][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.660941][ T3662] Bluetooth: hci1: command 0x040f tx timeout [ 992.667481][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.723867][T16958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.789245][T16948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.899574][T16958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.930639][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.957702][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.972214][T16948] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.999913][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 993.008811][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 993.039528][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.046763][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.083105][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.091799][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 993.101278][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.110073][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.117207][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.133793][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 993.139083][ T3662] Bluetooth: hci3: command 0x040f tx timeout [ 993.148326][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 993.172940][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 993.187102][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 993.202302][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.218451][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.230809][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.247425][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.263215][T16948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.285046][T16948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 993.324443][T16970] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.342471][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 993.357104][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 993.375337][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.409975][T16970] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.504950][T16970] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.539170][ T3662] Bluetooth: hci4: command 0x040f tx timeout [ 993.621469][T16970] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.889775][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.897730][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.911300][T16970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 993.922813][T16948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.041169][T16970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 994.071136][T16970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 994.162048][T16970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 994.347283][T16946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 994.399679][T16946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 994.411118][T16946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.420851][T16946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.504160][T16958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.521373][T16958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 994.532054][T16958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 994.561006][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.572127][T16958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 994.618799][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.626595][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 994.637660][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 994.659146][ T3662] Bluetooth: hci0: command 0x0419 tx timeout [ 994.692817][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.701686][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.710975][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 994.721175][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 994.729839][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.736913][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.744500][ T3662] Bluetooth: hci1: command 0x0419 tx timeout [ 994.752277][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 994.761388][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 994.770100][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.777201][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.787070][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 994.829732][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 994.838668][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.848788][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.858374][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 994.889045][T16948] device veth0_vlan entered promiscuous mode [ 994.915556][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.924524][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.932679][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 994.943628][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 994.952978][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 994.967362][T16948] device veth1_vlan entered promiscuous mode [ 995.001277][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 995.011344][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 995.021423][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 995.030538][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.077984][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 995.087725][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.102478][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 995.118900][T16946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.180737][T16948] device veth0_macvtap entered promiscuous mode [ 995.188432][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.210263][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.219683][ T3662] Bluetooth: hci3: command 0x0419 tx timeout [ 995.239286][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 995.247313][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.272073][T16946] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.290583][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.304178][T16948] device veth1_macvtap entered promiscuous mode [ 995.356851][T16958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.368227][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.386844][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 995.396734][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.407860][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.415053][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.466466][ T11] device hsr_slave_0 left promiscuous mode [ 995.473954][ T11] device hsr_slave_1 left promiscuous mode [ 995.482283][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.490134][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.498620][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.506634][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.516073][ T11] device bridge_slave_1 left promiscuous mode [ 995.522600][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.531693][ T11] device bridge_slave_0 left promiscuous mode [ 995.538146][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.552571][ T11] device hsr_slave_0 left promiscuous mode [ 995.559523][ T11] device hsr_slave_1 left promiscuous mode [ 995.565952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.577502][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.587067][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.595846][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.605203][ T11] device bridge_slave_1 left promiscuous mode [ 995.612169][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.620283][ T3662] Bluetooth: hci4: command 0x0419 tx timeout [ 995.627661][ T11] device bridge_slave_0 left promiscuous mode [ 995.634835][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.650509][ T11] device veth1_macvtap left promiscuous mode [ 995.656562][ T11] device veth0_macvtap left promiscuous mode [ 995.663711][ T11] device veth1_vlan left promiscuous mode [ 995.672505][ T11] device veth0_vlan left promiscuous mode [ 995.683579][ T11] device veth1_macvtap left promiscuous mode [ 995.690074][ T11] device veth0_macvtap left promiscuous mode [ 995.696196][ T11] device veth1_vlan left promiscuous mode [ 995.702842][ T11] device veth0_vlan left promiscuous mode [ 996.004896][ T11] team0 (unregistering): Port device team_slave_1 removed [ 996.018135][ T11] team0 (unregistering): Port device team_slave_0 removed [ 996.036489][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.052660][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.126622][ T11] bond0 (unregistering): Released all slaves [ 996.253501][ T11] team0 (unregistering): Port device team_slave_1 removed [ 996.266524][ T11] team0 (unregistering): Port device team_slave_0 removed [ 996.282082][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.302845][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.376497][ T11] bond0 (unregistering): Released all slaves [ 996.453847][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.465242][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.476425][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.487201][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.498621][T16948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.518818][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 996.526908][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 996.536117][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 996.545108][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.552450][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.560597][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 996.569573][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 996.577277][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 996.585457][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 996.594329][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 996.603442][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 996.611284][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.632827][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.643932][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.655060][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.666916][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.683963][T16948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.699169][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.708105][T16958] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.719474][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.728854][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.738180][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 996.764334][T16948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.773969][T16948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.784107][T16948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.802313][T16948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.852543][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 996.873394][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 996.882515][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 996.891512][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 996.900191][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.907261][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.915694][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 996.924530][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 996.933458][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.940882][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.948705][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 996.957655][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 996.966862][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 996.975474][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 996.984120][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 996.992594][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 997.001544][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 997.009699][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.028847][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 997.064123][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 997.099926][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 997.115008][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 997.124395][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 997.142580][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 997.157642][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 997.166854][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 997.176696][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 997.190071][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 997.203545][T16958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 997.241690][T16958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 997.264602][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 997.277321][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 997.423785][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.446076][T15925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.467022][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.484183][T15925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.502629][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 997.544178][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.694584][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.716561][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.767465][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.797779][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.843146][T16970] device veth0_vlan entered promiscuous mode [ 997.867451][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.903511][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.952182][T16970] device veth1_vlan entered promiscuous mode [ 998.025142][T17077] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 998.063476][T17077] CPU: 1 PID: 17077 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 998.071963][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 998.082061][T17077] Call Trace: [ 998.085380][T17077] [ 998.088353][T17077] dump_stack_lvl+0x1e3/0x2cb [ 998.093106][T17077] ? nf_tcp_handle_invalid+0x642/0x642 [ 998.098612][T17077] ? panic+0x75d/0x75d [ 998.102741][T17077] ? ___ratelimit+0x4c0/0x670 [ 998.107473][T17077] ? local_lock_release+0x170/0x170 [ 998.112724][T17077] dump_header+0xdf/0x9c0 [ 998.117098][T17077] oom_kill_process+0xf8/0x520 [ 998.118910][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 998.121885][T17077] out_of_memory+0xf30/0x12f0 [ 998.121920][T17077] ? mutex_lock_io_nested+0x60/0x60 [ 998.121960][T17077] ? unregister_oom_notifier+0x20/0x20 [ 998.121980][T17077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.122007][T17077] ? lockdep_hardirqs_on+0x94/0x130 [ 998.122042][T17077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 998.122076][T17077] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 998.122108][T17077] ? mark_lock+0x9a/0x340 [ 998.122132][T17077] ? mem_cgroup_oom_trylock+0x210/0x210 [ 998.122160][T17077] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 998.122208][T17077] ? cgroup_file_notify+0x123/0x190 [ 998.122245][T17077] memory_max_write+0x34d/0x470 [ 998.122291][T17077] ? memory_max_show+0xa0/0xa0 [ 998.122332][T17077] ? memory_max_show+0xa0/0xa0 [ 998.147869][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 998.151301][T17077] cgroup_file_write+0x2c6/0x690 [ 998.151353][T17077] ? cgroup_seqfile_stop+0xd0/0xd0 [ 998.151400][T17077] ? cgroup_seqfile_stop+0xd0/0xd0 [ 998.151433][T17077] kernfs_fop_write_iter+0x3a2/0x4f0 [ 998.231828][T17077] vfs_write+0x7ae/0xba0 [ 998.236159][T17077] ? file_end_write+0x250/0x250 [ 998.241153][T17077] ? mutex_lock_nested+0x17/0x20 [ 998.246117][T17077] ? __fdget_pos+0x250/0x2f0 [ 998.250723][T17077] ? ksys_write+0x77/0x2c0 [ 998.255178][T17077] ksys_write+0x19c/0x2c0 [ 998.259534][T17077] ? __ia32_sys_read+0x80/0x80 [ 998.264418][T17077] ? __x64_sys_write+0x6/0x80 [ 998.269112][T17077] do_syscall_64+0x3d/0xb0 [ 998.273554][T17077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 998.279461][T17077] RIP: 0033:0x7f987d08c169 [ 998.283919][T17077] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 998.303637][T17077] RSP: 002b:00007f987de87168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 998.312077][T17077] RAX: ffffffffffffffda RBX: 00007f987d1abf80 RCX: 00007f987d08c169 [ 998.320071][T17077] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 998.328047][T17077] RBP: 00007f987d0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 998.336026][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.344098][T17077] R13: 00007fffd50ff75f R14: 00007f987de87300 R15: 0000000000022000 [ 998.352097][T17077] [ 998.389852][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 998.408159][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 998.442772][T16970] device veth0_macvtap entered promiscuous mode [ 998.517276][T16970] device veth1_macvtap entered promiscuous mode [ 998.539245][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 998.547564][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 998.556432][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 998.564319][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 998.565371][T17077] memory: usage 4696kB, limit 0kB, failcnt 136 [ 998.578522][T16946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.603900][T16958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.627196][T17077] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 998.651339][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.686862][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.719589][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.737383][T17077] Memory cgroup stats for /syz4: [ 998.746712][T17077] anon 114688 [ 998.746712][T17077] file 4407296 [ 998.746712][T17077] kernel 274432 [ 998.746712][T17077] kernel_stack 65536 [ 998.746712][T17077] pagetables 81920 [ 998.746712][T17077] sec_pagetables 0 [ 998.746712][T17077] percpu 0 [ 998.746712][T17077] sock 0 [ 998.746712][T17077] vmalloc 0 [ 998.746712][T17077] shmem 4407296 [ 998.746712][T17077] zswap 0 [ 998.746712][T17077] zswapped 0 [ 998.746712][T17077] file_mapped 81920 [ 998.746712][T17077] file_dirty 0 [ 998.746712][T17077] file_writeback 0 [ 998.746712][T17077] swapcached 0 [ 998.746712][T17077] anon_thp 0 [ 998.746712][T17077] file_thp 0 [ 998.746712][T17077] shmem_thp 0 [ 998.746712][T17077] inactive_anon 4407296 [ 998.746712][T17077] active_anon 114688 [ 998.746712][T17077] inactive_file 0 [ 998.746712][T17077] active_file 0 [ 998.746712][T17077] unevictable 0 [ 998.746712][T17077] slab_reclaimable 26192 [ 998.746712][T17077] slab_unreclaimable 73248 [ 998.746712][T17077] slab 99440 [ 998.879028][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.888916][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.919010][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.925804][T17077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16948,uid=0 [ 998.940750][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.969318][T17077] Memory cgroup out of memory: Killed process 16948 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 998.987595][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 999.005953][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 999.014909][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 999.036631][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 999.067918][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.092912][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.110639][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.122191][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.132474][T16970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.143382][T16970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.155153][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.189088][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 999.206903][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 999.216098][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 999.225968][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 999.236424][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 999.245699][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 999.263235][T16970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.274925][T16970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.288832][T16970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.301549][T16970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.328180][T16958] device veth0_vlan entered promiscuous mode [ 999.347471][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 999.356558][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 999.376268][T16958] device veth1_vlan entered promiscuous mode [ 999.392699][T16946] device veth0_vlan entered promiscuous mode [ 999.408433][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 999.418483][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 999.429153][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 999.437431][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 999.446456][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 999.524095][T16946] device veth1_vlan entered promiscuous mode [ 999.550562][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 999.558840][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 999.568252][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 999.577795][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 999.615652][T16958] device veth0_macvtap entered promiscuous mode [ 999.640781][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 999.650018][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 999.674144][T16958] device veth1_macvtap entered promiscuous mode [ 999.700980][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 999.711889][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 999.722409][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.757794][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.771097][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.777361][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.795659][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.808048][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.824295][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.838893][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.858868][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.880673][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.897956][T16958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.920160][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 999.928236][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 999.939868][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 999.948658][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 999.958834][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 999.971033][T16946] device veth0_macvtap entered promiscuous mode [ 999.986288][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.004797][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.015034][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.025917][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.036074][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.047172][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.058882][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.076673][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.095290][T16958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.119912][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1000.128186][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1000.138230][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1000.149776][T16946] device veth1_macvtap entered promiscuous mode [ 1000.162203][T16958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.176909][T16958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.186336][T16958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.195401][T16958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.212293][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.223322][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.234832][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.235017][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.254460][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.266379][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.276872][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.291184][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.303236][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.321172][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.331929][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.350126][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.362146][T16946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.384235][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1000.392839][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1000.401528][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1000.410755][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1000.422529][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.433670][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.444001][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.455016][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.465218][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.476472][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.486439][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.497122][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.507753][T16946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.518293][T16946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.537254][T16946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.562254][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1000.571359][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1000.606864][T16946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.617384][T16946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.627369][T16946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.636547][T16946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.787747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.835070][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.882729][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1000.920393][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.946147][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.975241][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.010753][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.021040][T17082] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1001.036926][T17082] CPU: 0 PID: 17082 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 1001.045396][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1001.055473][T17082] Call Trace: [ 1001.058779][T17082] [ 1001.061750][T17082] dump_stack_lvl+0x1e3/0x2cb [ 1001.066468][T17082] ? nf_tcp_handle_invalid+0x642/0x642 [ 1001.071947][T17082] ? panic+0x75d/0x75d [ 1001.076046][T17082] ? ___ratelimit+0x4c0/0x670 [ 1001.080763][T17082] ? local_lock_release+0x170/0x170 [ 1001.085990][T17082] dump_header+0xdf/0x9c0 [ 1001.090345][T17082] oom_kill_process+0xf8/0x520 [ 1001.095149][T17082] out_of_memory+0xf30/0x12f0 [ 1001.099868][T17082] ? mutex_lock_io_nested+0x60/0x60 [ 1001.105103][T17082] ? preempt_schedule+0xd9/0xe0 [ 1001.109971][T17082] ? unregister_oom_notifier+0x20/0x20 [ 1001.115439][T17082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1001.121629][T17082] ? lockdep_hardirqs_on+0x94/0x130 [ 1001.126938][T17082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1001.133107][T17082] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1001.138672][T17082] ? preempt_schedule_thunk+0x16/0x18 [ 1001.144075][T17082] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1001.149650][T17082] ? cgroup_file_notify+0x123/0x190 [ 1001.154868][T17082] memory_max_write+0x34d/0x470 [ 1001.159758][T17082] ? memory_max_show+0xa0/0xa0 [ 1001.164544][T17082] ? read_lock_is_recursive+0x10/0x10 [ 1001.169937][T17082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1001.176106][T17082] ? memory_max_show+0xa0/0xa0 [ 1001.180892][T17082] cgroup_file_write+0x2c6/0x690 [ 1001.185855][T17082] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1001.190999][T17082] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1001.196135][T17082] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1001.201445][T17082] vfs_write+0x7ae/0xba0 [ 1001.205718][T17082] ? file_end_write+0x250/0x250 [ 1001.210600][T17082] ? mutex_lock_nested+0x17/0x20 [ 1001.215551][T17082] ? __fdget_pos+0x250/0x2f0 [ 1001.220151][T17082] ? ksys_write+0x77/0x2c0 [ 1001.224624][T17082] ksys_write+0x19c/0x2c0 [ 1001.229022][T17082] ? print_irqtrace_events+0x210/0x210 [ 1001.234543][T17082] ? __ia32_sys_read+0x80/0x80 [ 1001.239340][T17082] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1001.245368][T17082] ? lockdep_hardirqs_on+0x94/0x130 [ 1001.250691][T17082] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1001.256696][T17082] do_syscall_64+0x3d/0xb0 [ 1001.261129][T17082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1001.267041][T17082] RIP: 0033:0x7efed748c169 [ 1001.271472][T17082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1001.291106][T17082] RSP: 002b:00007efed822f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1001.299547][T17082] RAX: ffffffffffffffda RBX: 00007efed75abf80 RCX: 00007efed748c169 [ 1001.307532][T17082] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 1001.315518][T17082] RBP: 00007efed74e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1001.323501][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.331481][T17082] R13: 00007ffe5a050abf R14: 00007efed822f300 R15: 0000000000022000 [ 1001.339477][T17082] [ 1001.409055][T17082] memory: usage 10608kB, limit 0kB, failcnt 166 [ 1001.420472][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.429147][T17082] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1001.438820][T17082] Memory cgroup stats for /syz5: [ 1001.444281][T17082] anon 110592 [ 1001.444281][T17082] file 10440704 [ 1001.444281][T17082] kernel 299008 [ 1001.444281][T17082] kernel_stack 65536 [ 1001.444281][T17082] pagetables 81920 [ 1001.444281][T17082] sec_pagetables 0 [ 1001.444281][T17082] percpu 0 [ 1001.444281][T17082] sock 0 [ 1001.444281][T17082] vmalloc 0 [ 1001.444281][T17082] shmem 10440704 [ 1001.444281][T17082] zswap 0 [ 1001.444281][T17082] zswapped 0 [ 1001.444281][T17082] file_mapped 86016 [ 1001.444281][T17082] file_dirty 0 [ 1001.444281][T17082] file_writeback 0 [ 1001.444281][T17082] swapcached 0 [ 1001.444281][T17082] anon_thp 0 [ 1001.444281][T17082] file_thp 0 [ 1001.444281][T17082] shmem_thp 0 [ 1001.444281][T17082] inactive_anon 0 [ 1001.444281][T17082] active_anon 10551296 [ 1001.444281][T17082] inactive_file 0 [ 1001.444281][T17082] active_file 0 [ 1001.444281][T17082] unevictable 0 [ 1001.444281][T17082] slab_reclaimable 43280 [ 1001.444281][T17082] slab_unreclaimable 74544 [ 1001.444281][T17082] slab 117824 [ 1001.594473][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1001.609491][T17082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1001.609805][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1001.646104][T17082] ,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16970,uid=0 [ 1001.655223][T17082] Memory cgroup out of memory: Killed process 16970 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1001.698791][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.751282][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.787835][T17084] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1001.790251][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.822163][T17084] CPU: 0 PID: 17084 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 1001.830649][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1001.840740][T17084] Call Trace: [ 1001.844055][T17084] [ 1001.847012][T17084] dump_stack_lvl+0x1e3/0x2cb [ 1001.851743][T17084] ? nf_tcp_handle_invalid+0x642/0x642 [ 1001.857262][T17084] ? panic+0x75d/0x75d [ 1001.861376][T17084] ? ___ratelimit+0x4c0/0x670 [ 1001.866107][T17084] ? local_lock_release+0x170/0x170 [ 1001.871351][T17084] dump_header+0xdf/0x9c0 [ 1001.875723][T17084] oom_kill_process+0xf8/0x520 [ 1001.880533][T17084] out_of_memory+0xf30/0x12f0 [ 1001.885240][T17084] ? mutex_lock_io_nested+0x60/0x60 [ 1001.890459][T17084] ? mark_lock+0x9a/0x340 [ 1001.894801][T17084] ? unregister_oom_notifier+0x20/0x20 [ 1001.900273][T17084] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1001.906281][T17084] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1001.911849][T17084] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1001.917436][T17084] ? cgroup_file_notify+0x123/0x190 [ 1001.922658][T17084] memory_max_write+0x34d/0x470 [ 1001.927560][T17084] ? memory_max_show+0xa0/0xa0 [ 1001.932347][T17084] ? read_lock_is_recursive+0x10/0x10 [ 1001.937739][T17084] ? memory_max_show+0xa0/0xa0 [ 1001.942521][T17084] cgroup_file_write+0x2c6/0x690 [ 1001.947481][T17084] ? mutex_lock_io_nested+0x60/0x60 [ 1001.952704][T17084] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1001.957849][T17084] ? __virt_addr_valid+0x22b/0x2e0 [ 1001.963022][T17084] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1001.968163][T17084] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1001.973574][T17084] vfs_write+0x7ae/0xba0 [ 1001.978281][T17084] ? file_end_write+0x250/0x250 [ 1001.983166][T17084] ? mutex_lock_nested+0x17/0x20 [ 1001.988117][T17084] ? __fdget_pos+0x250/0x2f0 [ 1001.992711][T17084] ? ksys_write+0x77/0x2c0 [ 1001.997147][T17084] ksys_write+0x19c/0x2c0 [ 1002.001495][T17084] ? print_irqtrace_events+0x210/0x210 [ 1002.006979][T17084] ? __ia32_sys_read+0x80/0x80 [ 1002.013859][T17084] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1002.019872][T17084] ? lockdep_hardirqs_on+0x94/0x130 [ 1002.025108][T17084] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1002.031108][T17084] do_syscall_64+0x3d/0xb0 [ 1002.035540][T17084] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1002.041456][T17084] RIP: 0033:0x7f9912c8c169 [ 1002.045888][T17084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1002.065530][T17084] RSP: 002b:00007f991391e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.073961][T17084] RAX: ffffffffffffffda RBX: 00007f9912dabf80 RCX: 00007f9912c8c169 [ 1002.081946][T17084] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1002.089926][T17084] RBP: 00007f9912ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1002.097910][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.105901][T17084] R13: 00007ffc46584b9f R14: 00007f991391e300 R15: 0000000000022000 [ 1002.113899][T17084] [ 1002.124696][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.156076][T17084] memory: usage 8540kB, limit 0kB, failcnt 104 [ 1002.162782][T17084] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1002.177250][T17084] Memory cgroup stats for /syz1: [ 1002.177420][T17084] anon 110592 [ 1002.177420][T17084] file 8343552 [ 1002.177420][T17084] kernel 278528 [ 1002.177420][T17084] kernel_stack 65536 [ 1002.177420][T17084] pagetables 77824 [ 1002.177420][T17084] sec_pagetables 0 [ 1002.177420][T17084] percpu 0 [ 1002.177420][T17084] sock 0 [ 1002.177420][T17084] vmalloc 0 [ 1002.177420][T17084] shmem 8343552 [ 1002.177420][T17084] zswap 0 [ 1002.177420][T17084] zswapped 0 [ 1002.177420][T17084] file_mapped 147456 [ 1002.177420][T17084] file_dirty 0 [ 1002.177420][T17084] file_writeback 0 [ 1002.177420][T17084] swapcached 0 [ 1002.177420][T17084] anon_thp 0 [ 1002.177420][T17084] file_thp 0 [ 1002.177420][T17084] shmem_thp 0 [ 1002.177420][T17084] inactive_anon 8343552 [ 1002.177420][T17084] active_anon 106496 [ 1002.177420][T17084] inactive_file 0 [ 1002.177420][T17084] active_file 0 [ 1002.177420][T17084] unevictable 0 [ 1002.177420][T17084] slab_reclaimable 41912 [ 1002.177420][T17084] slab_unreclaimable 71952 [ 1002.177420][T17084] slab 113864 [ 1002.288018][T17084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16958,uid=0 [ 1002.309884][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1002.323824][T17084] Memory cgroup out of memory: Killed process 16958 (syz-executor.1) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1002.392700][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.430013][T17086] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1002.449346][T17086] CPU: 0 PID: 17086 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 1002.457819][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1002.467890][T17086] Call Trace: [ 1002.471178][T17086] [ 1002.474117][T17086] dump_stack_lvl+0x1e3/0x2cb [ 1002.478922][T17086] ? nf_tcp_handle_invalid+0x642/0x642 [ 1002.484401][T17086] ? panic+0x75d/0x75d [ 1002.488495][T17086] ? ___ratelimit+0x4c0/0x670 [ 1002.493194][T17086] ? local_lock_release+0x170/0x170 [ 1002.498419][T17086] dump_header+0xdf/0x9c0 [ 1002.502784][T17086] oom_kill_process+0xf8/0x520 [ 1002.507582][T17086] out_of_memory+0xf30/0x12f0 [ 1002.512298][T17086] ? mutex_lock_io_nested+0x60/0x60 [ 1002.517523][T17086] ? preempt_schedule+0xd9/0xe0 [ 1002.522390][T17086] ? unregister_oom_notifier+0x20/0x20 [ 1002.527951][T17086] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1002.533961][T17086] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1002.539621][T17086] ? preempt_schedule_thunk+0x16/0x18 [ 1002.545016][T17086] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1002.550593][T17086] ? cgroup_file_notify+0x123/0x190 [ 1002.555813][T17086] memory_max_write+0x34d/0x470 [ 1002.560716][T17086] ? memory_max_show+0xa0/0xa0 [ 1002.565502][T17086] ? read_lock_is_recursive+0x10/0x10 [ 1002.570897][T17086] ? memory_max_show+0xa0/0xa0 [ 1002.575709][T17086] cgroup_file_write+0x2c6/0x690 [ 1002.580671][T17086] ? mutex_lock_io_nested+0x60/0x60 [ 1002.585977][T17086] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1002.591114][T17086] ? __virt_addr_valid+0x22b/0x2e0 [ 1002.596276][T17086] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1002.601412][T17086] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1002.606728][T17086] vfs_write+0x7ae/0xba0 [ 1002.611017][T17086] ? file_end_write+0x250/0x250 [ 1002.615924][T17086] ? mutex_lock_nested+0x17/0x20 [ 1002.620878][T17086] ? __fdget_pos+0x250/0x2f0 [ 1002.625481][T17086] ? ksys_write+0x77/0x2c0 [ 1002.629924][T17086] ksys_write+0x19c/0x2c0 [ 1002.634321][T17086] ? print_irqtrace_events+0x210/0x210 [ 1002.639807][T17086] ? __ia32_sys_read+0x80/0x80 [ 1002.644596][T17086] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1002.650599][T17086] ? lockdep_hardirqs_on+0x94/0x130 [ 1002.655821][T17086] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1002.661823][T17086] do_syscall_64+0x3d/0xb0 [ 1002.666252][T17086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1002.672156][T17086] RIP: 0033:0x7feacc28c169 [ 1002.676599][T17086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1002.696216][T17086] RSP: 002b:00007feaccfaa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.704645][T17086] RAX: ffffffffffffffda RBX: 00007feacc3abf80 RCX: 00007feacc28c169 [ 1002.712631][T17086] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1002.720677][T17086] RBP: 00007feacc2e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1002.728741][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.736743][T17086] R13: 00007ffc5c5bed8f R14: 00007feaccfaa300 R15: 0000000000022000 [ 1002.744762][T17086] [ 1002.896573][T17086] memory: usage 10612kB, limit 0kB, failcnt 256 [ 1002.905734][T17086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1002.917675][T17086] Memory cgroup stats for /syz0: [ 1002.917876][T17086] anon 114688 [ 1002.917876][T17086] file 10440704 [ 1002.917876][T17086] kernel 286720 [ 1002.917876][T17086] kernel_stack 65536 [ 1002.917876][T17086] pagetables 77824 [ 1002.917876][T17086] sec_pagetables 0 [ 1002.917876][T17086] percpu 0 [ 1002.917876][T17086] sock 0 [ 1002.917876][T17086] vmalloc 0 [ 1002.917876][T17086] shmem 10436608 [ 1002.917876][T17086] zswap 0 [ 1002.917876][T17086] zswapped 0 [ 1002.917876][T17086] file_mapped 81920 [ 1002.917876][T17086] file_dirty 0 [ 1002.917876][T17086] file_writeback 0 [ 1002.917876][T17086] swapcached 0 [ 1002.917876][T17086] anon_thp 0 [ 1002.917876][T17086] file_thp 0 [ 1002.917876][T17086] shmem_thp 0 [ 1002.917876][T17086] inactive_anon 0 [ 1002.917876][T17086] active_anon 10551296 [ 1002.917876][T17086] inactive_file 4096 [ 1002.917876][T17086] active_file 0 [ 1002.917876][T17086] unevictable 0 [ 1002.917876][T17086] slab_reclaimable 44976 [ 1002.917876][T17086] slab_unreclaimable 71304 [ 1002.917876][T17086] slab 116280 [ 1003.026404][T17086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16946,uid=0 [ 1003.055480][T17086] Memory cgroup out of memory: Killed process 16946 (syz-executor.0) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 12:19:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:19:55 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{0x0}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:55 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:19:55 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:19:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:19:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:19:55 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{0x0}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:55 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 1004.553131][ T11] device hsr_slave_0 left promiscuous mode [ 1004.578000][ T11] device hsr_slave_1 left promiscuous mode [ 1004.682510][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.696517][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.721485][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.731796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.782096][ T11] device bridge_slave_1 left promiscuous mode [ 1004.794160][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.821007][ T11] device bridge_slave_0 left promiscuous mode [ 1004.830054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state 12:19:56 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{0x0}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1004.856961][ T11] device veth1_macvtap left promiscuous mode [ 1004.868167][ T11] device veth0_macvtap left promiscuous mode [ 1004.881347][ T11] device veth1_vlan left promiscuous mode [ 1004.894511][ T11] device veth0_vlan left promiscuous mode [ 1005.617557][T13761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1005.634257][T13761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1005.646916][T13761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1005.655145][T13761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1005.662962][T13761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1005.723762][ T3662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1005.739248][ T3665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1005.748480][ T3665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1005.756860][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1005.763279][ T3665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1005.773294][ T3662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1005.781876][ T3662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1005.791544][ T3662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1005.795036][ T3665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1005.806103][ T3665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1005.827056][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1005.839308][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1005.846687][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.876535][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.889531][T13761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1005.897572][T13761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1005.906996][T13761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1005.916107][T13761] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1005.923976][T13761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1005.931915][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.024893][ T11] bond0 (unregistering): Released all slaves 12:19:57 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:19:57 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:58 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:19:58 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 1007.038807][T17142] chnl_net:caif_netlink_parms(): no params data found 12:19:58 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)}], 0x1}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1007.415197][T17145] chnl_net:caif_netlink_parms(): no params data found [ 1007.480925][T17141] chnl_net:caif_netlink_parms(): no params data found [ 1007.662559][T17139] chnl_net:caif_netlink_parms(): no params data found [ 1007.699400][T13757] Bluetooth: hci0: command 0x0409 tx timeout [ 1007.859521][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 1007.866001][T13757] Bluetooth: hci1: command 0x0409 tx timeout [ 1007.936045][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.943660][T13757] Bluetooth: hci4: command 0x0409 tx timeout [ 1007.953585][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.961901][T17142] device bridge_slave_0 entered promiscuous mode [ 1008.005837][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.020489][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.029526][T17142] device bridge_slave_1 entered promiscuous mode [ 1008.055535][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.069244][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.088281][T17145] device bridge_slave_0 entered promiscuous mode [ 1008.192109][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.209144][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.217398][T17145] device bridge_slave_1 entered promiscuous mode [ 1008.251582][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.345095][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.375451][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.399211][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.407634][T17141] device bridge_slave_0 entered promiscuous mode [ 1008.471942][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.511546][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.518686][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.559303][T17141] device bridge_slave_1 entered promiscuous mode [ 1008.581398][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.607651][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.621229][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.652078][T17139] device bridge_slave_0 entered promiscuous mode [ 1008.745138][T17142] team0: Port device team_slave_0 added [ 1008.763275][T17142] team0: Port device team_slave_1 added [ 1008.779921][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.787062][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.804756][T17139] device bridge_slave_1 entered promiscuous mode [ 1008.820110][T17141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.931738][T17141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.944887][T17145] team0: Port device team_slave_0 added [ 1009.000097][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.032842][T17145] team0: Port device team_slave_1 added [ 1009.040187][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.047173][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.104885][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.129440][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.181033][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.188027][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.235429][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.252921][T17141] team0: Port device team_slave_0 added [ 1009.290268][T17141] team0: Port device team_slave_1 added [ 1009.331747][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.338755][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.366509][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.393934][T17139] team0: Port device team_slave_0 added [ 1009.413276][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.421274][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.449207][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.478457][T17139] team0: Port device team_slave_1 added [ 1009.502459][T17142] device hsr_slave_0 entered promiscuous mode [ 1009.520806][T17142] device hsr_slave_1 entered promiscuous mode [ 1009.527683][T17142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.549307][T17142] Cannot create hsr debugfs directory [ 1009.578987][T17141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.585979][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.612374][T17141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.661266][T17141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.670330][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.700055][T17141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.729088][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.736117][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.763415][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.779893][T13757] Bluetooth: hci0: command 0x041b tx timeout [ 1009.858733][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.866255][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.905636][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.927001][T17145] device hsr_slave_0 entered promiscuous mode [ 1009.936265][T17145] device hsr_slave_1 entered promiscuous mode [ 1009.945773][T17145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.949996][T13757] Bluetooth: hci1: command 0x041b tx timeout [ 1009.954919][T13761] Bluetooth: hci3: command 0x041b tx timeout [ 1009.959917][T17145] Cannot create hsr debugfs directory [ 1009.994850][T17141] device hsr_slave_0 entered promiscuous mode [ 1010.003507][T17141] device hsr_slave_1 entered promiscuous mode [ 1010.011176][T17141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.018782][T17141] Cannot create hsr debugfs directory [ 1010.029126][ T3662] Bluetooth: hci4: command 0x041b tx timeout [ 1010.130113][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.282133][T17139] device hsr_slave_0 entered promiscuous mode [ 1010.299300][T17139] device hsr_slave_1 entered promiscuous mode [ 1010.309264][T17139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.316874][T17139] Cannot create hsr debugfs directory [ 1010.372756][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.529818][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.744817][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.862575][T17142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.051246][T17142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.150180][T17142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.293329][T17142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.352055][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.456256][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.610243][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.642099][T17142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1011.660611][T17142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1011.783968][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.809806][T17142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1011.869383][T17142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1011.876429][ T3662] Bluetooth: hci0: command 0x040f tx timeout [ 1012.019237][ T3662] Bluetooth: hci3: command 0x040f tx timeout [ 1012.029132][ T3662] Bluetooth: hci1: command 0x040f tx timeout [ 1012.099015][ T3662] Bluetooth: hci4: command 0x040f tx timeout [ 1012.223847][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.309157][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1012.317103][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.331754][T17142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.361194][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1012.371123][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1012.383839][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.391049][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.399805][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1012.408786][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1012.417616][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.424815][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.469257][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1012.477817][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1012.487362][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1012.498867][T17145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1012.604809][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1012.614672][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1012.630513][T17145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1012.658860][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1012.680348][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1012.699506][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1012.708285][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1012.729360][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.788469][T17145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1012.826281][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1012.860065][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.871104][T17142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1012.979387][T17145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1013.653071][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.661480][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1013.681226][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.737885][T17145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.883768][T17141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1013.905090][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1013.923848][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1013.939047][ T3662] Bluetooth: hci0: command 0x0419 tx timeout [ 1013.944504][T17145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.017300][T17141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1014.099340][ T3662] Bluetooth: hci1: command 0x0419 tx timeout [ 1014.105553][T13761] Bluetooth: hci3: command 0x0419 tx timeout [ 1014.179400][ T3662] Bluetooth: hci4: command 0x0419 tx timeout [ 1014.220701][T17141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1014.319572][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1014.339725][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.350082][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.357335][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.378069][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1014.391009][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.409522][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.416675][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.444724][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1014.464547][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1014.563515][T17141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1014.689228][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1014.706367][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1014.730886][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1014.740294][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1014.759348][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1014.768153][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1014.799825][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.946198][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1014.954607][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1014.963931][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.980651][T17145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.093043][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1015.109755][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1015.176432][T17142] device veth0_vlan entered promiscuous mode [ 1015.215477][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1015.225578][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1015.288468][T17142] device veth1_vlan entered promiscuous mode [ 1015.324401][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1015.335568][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1015.355105][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1015.548567][T17141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.570619][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.590146][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.629962][T17142] device veth0_macvtap entered promiscuous mode [ 1015.642453][T17139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1015.688864][T17141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.708933][T17142] device veth1_macvtap entered promiscuous mode [ 1015.744358][T17139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1015.754713][T17139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1015.777778][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.786477][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1015.794949][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1015.817154][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1015.838250][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.862933][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.873742][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.884541][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.894599][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.906264][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.917625][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.928706][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.938688][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.949437][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.969390][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.980650][T17139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1016.000617][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1016.009860][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1016.018975][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.026109][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.034336][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1016.043903][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1016.052511][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.059675][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.067309][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1016.076254][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1016.085110][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1016.095055][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1016.117220][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.127834][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.140556][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.151148][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.161131][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.171719][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.182236][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.193019][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.209007][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.220753][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.240754][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.272342][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.286845][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1016.308692][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1016.316685][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1016.335080][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1016.348306][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1016.365079][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1016.397075][T17142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.439049][T17142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.447823][T17142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.467156][T17142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.498022][T17145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.522517][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1016.547668][ T11] device hsr_slave_0 left promiscuous mode [ 1016.558501][ T11] device hsr_slave_1 left promiscuous mode [ 1016.565764][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.575716][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.586530][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.594687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.604872][ T11] device bridge_slave_1 left promiscuous mode [ 1016.611442][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.620608][ T11] device bridge_slave_0 left promiscuous mode [ 1016.626868][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.645448][ T11] device hsr_slave_0 left promiscuous mode [ 1016.653658][ T11] device hsr_slave_1 left promiscuous mode [ 1016.669369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.676849][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.698437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.708488][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.725908][ T11] device bridge_slave_1 left promiscuous mode [ 1016.737768][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.760165][ T11] device bridge_slave_0 left promiscuous mode [ 1016.766418][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.797115][ T11] device hsr_slave_0 left promiscuous mode [ 1016.809875][ T11] device hsr_slave_1 left promiscuous mode [ 1016.816463][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.837373][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.857772][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.867905][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.887686][ T11] device bridge_slave_1 left promiscuous mode [ 1016.897953][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.918102][ T11] device bridge_slave_0 left promiscuous mode [ 1016.932963][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.973178][ T11] device veth1_macvtap left promiscuous mode [ 1016.989315][ T11] device veth0_macvtap left promiscuous mode [ 1016.995490][ T11] device veth1_vlan left promiscuous mode [ 1017.012089][ T11] device veth0_vlan left promiscuous mode [ 1017.028863][ T11] device veth1_macvtap left promiscuous mode [ 1017.046570][ T11] device veth0_macvtap left promiscuous mode [ 1017.056653][ T11] device veth1_vlan left promiscuous mode [ 1017.069279][ T11] device veth0_vlan left promiscuous mode [ 1017.078702][ T11] device veth1_macvtap left promiscuous mode [ 1017.085609][ T11] device veth0_macvtap left promiscuous mode [ 1017.092059][ T11] device veth1_vlan left promiscuous mode [ 1017.097920][ T11] device veth0_vlan left promiscuous mode [ 1018.041539][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1018.055196][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1018.070089][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.086223][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.158378][ T11] bond0 (unregistering): Released all slaves [ 1018.290972][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1018.304550][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1018.318751][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.335147][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.407132][ T11] bond0 (unregistering): Released all slaves [ 1018.548130][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1018.563214][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1018.577978][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.594740][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.667339][ T11] bond0 (unregistering): Released all slaves [ 1018.750158][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1018.759975][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1018.768422][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1018.778362][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1018.827330][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1018.843030][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1018.869599][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1018.889677][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1018.908145][T17141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1018.973864][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1018.985729][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1018.995719][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1019.004927][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1019.025360][T17145] device veth0_vlan entered promiscuous mode [ 1019.079738][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.088496][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.113104][T17145] device veth1_vlan entered promiscuous mode [ 1019.166717][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1019.187982][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1019.216268][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.248017][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.282067][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1019.288650][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.302672][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1019.316642][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1019.326368][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.341835][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.375951][T17145] device veth0_macvtap entered promiscuous mode [ 1019.428585][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1019.450004][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1019.508458][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1019.560990][T17145] device veth1_macvtap entered promiscuous mode [ 1019.581009][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1019.599773][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1019.618688][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1019.679720][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.686904][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.708422][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1019.726410][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1019.745291][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.752491][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.798512][T17357] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1019.819273][T17357] CPU: 1 PID: 17357 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 1019.827759][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1019.837854][T17357] Call Trace: [ 1019.841164][T17357] [ 1019.844123][T17357] dump_stack_lvl+0x1e3/0x2cb [ 1019.848857][T17357] ? nf_tcp_handle_invalid+0x642/0x642 [ 1019.854365][T17357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.860565][T17357] ? dump_stack+0x5/0x17 [ 1019.864870][T17357] dump_header+0xdf/0x9c0 [ 1019.869259][T17357] oom_kill_process+0xf8/0x520 [ 1019.874070][T17357] out_of_memory+0xf30/0x12f0 [ 1019.878848][T17357] ? mutex_lock_io_nested+0x60/0x60 [ 1019.884101][T17357] ? unregister_oom_notifier+0x20/0x20 [ 1019.889571][T17357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.895740][T17357] ? lockdep_hardirqs_on+0x94/0x130 [ 1019.900956][T17357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.907126][T17357] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1019.912707][T17357] ? mark_lock+0x9a/0x340 [ 1019.917049][T17357] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1019.922615][T17357] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1019.928536][T17357] ? cgroup_file_notify+0x123/0x190 [ 1019.933757][T17357] memory_max_write+0x34d/0x470 [ 1019.938666][T17357] ? memory_max_show+0xa0/0xa0 [ 1019.943448][T17357] ? cgroup_file_write+0x1a1/0x690 [ 1019.948575][T17357] ? cgroup_file_write+0x2b2/0x690 [ 1019.953709][T17357] ? memory_max_show+0xa0/0xa0 [ 1019.958498][T17357] cgroup_file_write+0x2c6/0x690 [ 1019.963467][T17357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.969712][T17357] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1019.974840][T17357] ? kernfs_get_active+0x12/0x170 [ 1019.979890][T17357] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1019.985016][T17357] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1019.990327][T17357] vfs_write+0x7ae/0xba0 [ 1019.994601][T17357] ? file_end_write+0x250/0x250 [ 1019.999586][T17357] ? mutex_lock_nested+0x17/0x20 [ 1020.004535][T17357] ? __fdget_pos+0x250/0x2f0 [ 1020.009132][T17357] ? ksys_write+0x77/0x2c0 [ 1020.013570][T17357] ksys_write+0x19c/0x2c0 [ 1020.017922][T17357] ? lockdep_hardirqs_on+0x94/0x130 [ 1020.023229][T17357] ? __ia32_sys_read+0x80/0x80 [ 1020.028027][T17357] do_syscall_64+0x3d/0xb0 [ 1020.032453][T17357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1020.038358][T17357] RIP: 0033:0x7f66d3e8c169 [ 1020.042809][T17357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1020.062456][T17357] RSP: 002b:00007f66d4b04168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.070890][T17357] RAX: ffffffffffffffda RBX: 00007f66d3fabf80 RCX: 00007f66d3e8c169 [ 1020.078872][T17357] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 1020.086849][T17357] RBP: 00007f66d3ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1020.094845][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.102861][T17357] R13: 00007ffefc0c8e5f R14: 00007f66d4b04300 R15: 0000000000022000 [ 1020.110886][T17357] [ 1020.139375][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.178112][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.208998][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.218872][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.238436][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.250686][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.261941][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.278258][T17357] memory: usage 10628kB, limit 0kB, failcnt 166 [ 1020.280692][T17145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.305754][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.314700][T17357] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1020.319927][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.336530][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.345031][T17357] Memory cgroup stats for /syz5: [ 1020.346041][T17357] anon 114688 [ 1020.346041][T17357] file 10440704 [ 1020.346041][T17357] kernel 282624 [ 1020.346041][T17357] kernel_stack 32768 [ 1020.346041][T17357] pagetables 77824 [ 1020.346041][T17357] sec_pagetables 0 [ 1020.346041][T17357] percpu 0 [ 1020.346041][T17357] sock 0 [ 1020.346041][T17357] vmalloc 0 [ 1020.346041][T17357] shmem 10440704 [ 1020.346041][T17357] zswap 0 [ 1020.346041][T17357] zswapped 0 [ 1020.346041][T17357] file_mapped 86016 [ 1020.346041][T17357] file_dirty 0 [ 1020.346041][T17357] file_writeback 0 [ 1020.346041][T17357] swapcached 0 [ 1020.346041][T17357] anon_thp 0 [ 1020.346041][T17357] file_thp 0 [ 1020.346041][T17357] shmem_thp 0 [ 1020.346041][T17357] inactive_anon 0 [ 1020.346041][T17357] active_anon 10555392 [ 1020.346041][T17357] inactive_file 0 [ 1020.346041][T17357] active_file 0 [ 1020.346041][T17357] unevictable 0 [ 1020.346041][T17357] slab_reclaimable 46240 [ 1020.346041][T17357] slab_unreclaimable 100608 [ 1020.346041][T17357] slab 146848 [ 1020.360714][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.462941][T17357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17142,uid=0 [ 1020.488244][T17357] Memory cgroup out of memory: Killed process 17142 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1020.501159][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1020.514642][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1020.536557][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.563738][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.584382][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.603799][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.617426][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.639091][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.650888][T17145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.681143][T17141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.688322][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.705394][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.716021][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.725033][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.734162][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.743014][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1020.752281][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1020.761628][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.770419][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.779299][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1020.786859][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.797547][T17139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.844025][T17145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.853472][T17145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.877257][T17145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.886501][T17145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.012927][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1021.022567][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1021.085968][T17141] device veth0_vlan entered promiscuous mode [ 1021.120558][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1021.130460][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1021.163584][T17141] device veth1_vlan entered promiscuous mode [ 1021.187099][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.203802][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.212613][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1021.241160][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.296819][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.325151][T17141] device veth0_macvtap entered promiscuous mode [ 1021.343598][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1021.352451][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1021.369832][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1021.378655][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1021.414793][T17141] device veth1_macvtap entered promiscuous mode [ 1021.434440][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1021.436516][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.478856][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.489505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.507831][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.518194][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.537585][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.551760][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.563118][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.573256][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.584313][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.596930][T17141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.606240][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1021.629825][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1021.638753][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1021.677418][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.695475][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.723200][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.737191][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.756763][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.767739][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.778098][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.789180][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.808196][T17141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.819189][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1021.828056][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1021.854935][T17141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.884257][T17141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.902512][T17141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.917118][T17141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.933890][T17388] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1021.958470][T17388] CPU: 0 PID: 17388 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 1021.966950][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1021.977051][T17388] Call Trace: [ 1021.980375][T17388] [ 1021.983343][T17388] dump_stack_lvl+0x1e3/0x2cb [ 1021.988086][T17388] ? nf_tcp_handle_invalid+0x642/0x642 [ 1021.993591][T17388] ? panic+0x75d/0x75d [ 1021.997715][T17388] ? ___ratelimit+0x4c0/0x670 [ 1022.002447][T17388] ? local_lock_release+0x170/0x170 [ 1022.007700][T17388] dump_header+0xdf/0x9c0 [ 1022.012082][T17388] oom_kill_process+0xf8/0x520 [ 1022.016888][T17388] out_of_memory+0xf30/0x12f0 [ 1022.021610][T17388] ? mutex_lock_io_nested+0x60/0x60 [ 1022.026880][T17388] ? preempt_schedule+0xd9/0xe0 [ 1022.031787][T17388] ? unregister_oom_notifier+0x20/0x20 [ 1022.037290][T17388] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1022.043336][T17388] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1022.049272][T17388] ? preempt_schedule_thunk+0x16/0x18 [ 1022.054708][T17388] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1022.060310][T17388] ? cgroup_file_notify+0x123/0x190 [ 1022.065561][T17388] memory_max_write+0x34d/0x470 [ 1022.070483][T17388] ? memory_max_show+0xa0/0xa0 [ 1022.075307][T17388] ? read_lock_is_recursive+0x10/0x10 [ 1022.080735][T17388] ? memory_max_show+0xa0/0xa0 [ 1022.085560][T17388] cgroup_file_write+0x2c6/0x690 [ 1022.090559][T17388] ? mutex_lock_io_nested+0x60/0x60 [ 1022.095808][T17388] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1022.100972][T17388] ? __virt_addr_valid+0x22b/0x2e0 [ 1022.106140][T17388] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1022.111295][T17388] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1022.116651][T17388] vfs_write+0x7ae/0xba0 [ 1022.120955][T17388] ? file_end_write+0x250/0x250 [ 1022.125878][T17388] ? mutex_lock_nested+0x17/0x20 [ 1022.130866][T17388] ? __fdget_pos+0x250/0x2f0 [ 1022.135504][T17388] ? ksys_write+0x77/0x2c0 [ 1022.139972][T17388] ksys_write+0x19c/0x2c0 [ 1022.144351][T17388] ? print_irqtrace_events+0x210/0x210 [ 1022.149961][T17388] ? __ia32_sys_read+0x80/0x80 [ 1022.154779][T17388] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1022.160812][T17388] ? lockdep_hardirqs_on+0x94/0x130 [ 1022.166061][T17388] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1022.172097][T17388] do_syscall_64+0x3d/0xb0 [ 1022.176578][T17388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1022.182523][T17388] RIP: 0033:0x7f3a90c8c169 [ 1022.186981][T17388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1022.206724][T17388] RSP: 002b:00007f3a919c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1022.215194][T17388] RAX: ffffffffffffffda RBX: 00007f3a90dabf80 RCX: 00007f3a90c8c169 [ 1022.223216][T17388] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1022.231234][T17388] RBP: 00007f3a90ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1022.239253][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.247274][T17388] R13: 00007ffd5afe54df R14: 00007f3a919c9300 R15: 0000000000022000 [ 1022.255315][T17388] [ 1022.266141][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1022.278717][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1022.288881][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.329051][T17388] memory: usage 10644kB, limit 0kB, failcnt 256 [ 1022.342403][T17388] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1022.372884][T17388] Memory cgroup stats for /syz0: [ 1022.373086][T17388] anon 114688 [ 1022.373086][T17388] file 10440704 [ 1022.373086][T17388] kernel 319488 [ 1022.373086][T17388] kernel_stack 65536 [ 1022.373086][T17388] pagetables 77824 [ 1022.373086][T17388] sec_pagetables 0 [ 1022.373086][T17388] percpu 0 [ 1022.373086][T17388] sock 0 [ 1022.373086][T17388] vmalloc 0 [ 1022.373086][T17388] shmem 10436608 [ 1022.373086][T17388] zswap 0 [ 1022.373086][T17388] zswapped 0 [ 1022.373086][T17388] file_mapped 81920 [ 1022.373086][T17388] file_dirty 4096 [ 1022.373086][T17388] file_writeback 0 [ 1022.373086][T17388] swapcached 0 [ 1022.373086][T17388] anon_thp 0 [ 1022.373086][T17388] file_thp 0 [ 1022.373086][T17388] shmem_thp 0 [ 1022.373086][T17388] inactive_anon 94208 [ 1022.373086][T17388] active_anon 10457088 [ 1022.373086][T17388] inactive_file 0 [ 1022.373086][T17388] active_file 4096 [ 1022.373086][T17388] unevictable 0 [ 1022.373086][T17388] slab_reclaimable 44976 [ 1022.373086][T17388] slab_unreclaimable 98664 [ 1022.373086][T17388] slab 143640 [ 1022.483877][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.514981][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.530627][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1022.584615][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.602116][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.617671][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1022.779079][T17388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17145,uid=0 [ 1022.820102][T17388] Memory cgroup out of memory: Killed process 17145 (syz-executor.0) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1022.912724][T17401] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1022.949204][T17401] CPU: 0 PID: 17401 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 1022.957697][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1022.967795][T17401] Call Trace: [ 1022.971111][T17401] [ 1022.974084][T17401] dump_stack_lvl+0x1e3/0x2cb [ 1022.978817][T17401] ? nf_tcp_handle_invalid+0x642/0x642 [ 1022.984332][T17401] ? panic+0x75d/0x75d [ 1022.988452][T17401] ? ___ratelimit+0x4c0/0x670 [ 1022.993184][T17401] ? local_lock_release+0x170/0x170 [ 1022.998438][T17401] dump_header+0xdf/0x9c0 [ 1023.002855][T17401] oom_kill_process+0xf8/0x520 [ 1023.007672][T17401] out_of_memory+0xf30/0x12f0 [ 1023.012398][T17401] ? mutex_lock_io_nested+0x60/0x60 [ 1023.017653][T17401] ? mark_lock+0x9a/0x340 [ 1023.022029][T17401] ? unregister_oom_notifier+0x20/0x20 [ 1023.027534][T17401] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1023.033574][T17401] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1023.039174][T17401] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1023.044780][T17401] ? cgroup_file_notify+0x123/0x190 [ 1023.050048][T17401] memory_max_write+0x34d/0x470 [ 1023.054957][T17401] ? memory_max_show+0xa0/0xa0 [ 1023.059785][T17401] ? read_lock_is_recursive+0x10/0x10 [ 1023.065202][T17401] ? memory_max_show+0xa0/0xa0 [ 1023.070026][T17401] cgroup_file_write+0x2c6/0x690 [ 1023.075020][T17401] ? mutex_lock_io_nested+0x60/0x60 [ 1023.080279][T17401] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1023.085449][T17401] ? __virt_addr_valid+0x22b/0x2e0 [ 1023.090643][T17401] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1023.095801][T17401] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1023.101151][T17401] vfs_write+0x7ae/0xba0 [ 1023.105462][T17401] ? file_end_write+0x250/0x250 [ 1023.110387][T17401] ? mutex_lock_nested+0x17/0x20 [ 1023.115373][T17401] ? __fdget_pos+0x250/0x2f0 [ 1023.120002][T17401] ? ksys_write+0x77/0x2c0 [ 1023.124489][T17401] ksys_write+0x19c/0x2c0 [ 1023.128956][T17401] ? print_irqtrace_events+0x210/0x210 [ 1023.134473][T17401] ? __ia32_sys_read+0x80/0x80 [ 1023.139295][T17401] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1023.145350][T17401] ? lockdep_hardirqs_on+0x94/0x130 [ 1023.150689][T17401] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1023.156809][T17401] do_syscall_64+0x3d/0xb0 [ 1023.161269][T17401] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1023.167203][T17401] RIP: 0033:0x7f198d08c169 [ 1023.171652][T17401] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1023.191305][T17401] RSP: 002b:00007f198ddea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.199774][T17401] RAX: ffffffffffffffda RBX: 00007f198d1abf80 RCX: 00007f198d08c169 [ 1023.207786][T17401] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1023.215801][T17401] RBP: 00007f198d0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1023.223817][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.231828][T17401] R13: 00007ffc2cc7231f R14: 00007f198ddea300 R15: 0000000000022000 [ 1023.239867][T17401] [ 1023.388197][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1023.412322][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.482400][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1023.501196][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.518183][T17139] device veth0_vlan entered promiscuous mode [ 1023.555618][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1023.564401][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1023.624416][T17401] memory: usage 8580kB, limit 0kB, failcnt 104 [ 1023.640824][T17401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1023.647731][T17401] Memory cgroup stats for /syz1: [ 1023.647924][T17401] anon 114688 [ 1023.647924][T17401] file 8343552 [ 1023.647924][T17401] kernel 311296 [ 1023.647924][T17401] kernel_stack 65536 [ 1023.647924][T17401] pagetables 77824 [ 1023.647924][T17401] sec_pagetables 0 [ 1023.647924][T17401] percpu 0 [ 1023.647924][T17401] sock 0 [ 1023.647924][T17401] vmalloc 0 [ 1023.647924][T17401] shmem 8343552 [ 1023.647924][T17401] zswap 0 [ 1023.647924][T17401] zswapped 0 [ 1023.647924][T17401] file_mapped 147456 [ 1023.647924][T17401] file_dirty 0 [ 1023.647924][T17401] file_writeback 0 [ 1023.647924][T17401] swapcached 0 [ 1023.647924][T17401] anon_thp 0 [ 1023.647924][T17401] file_thp 0 [ 1023.647924][T17401] shmem_thp 0 [ 1023.647924][T17401] inactive_anon 8343552 [ 1023.647924][T17401] active_anon 114688 [ 1023.647924][T17401] inactive_file 0 [ 1023.647924][T17401] active_file 0 [ 1023.647924][T17401] unevictable 0 [ 1023.647924][T17401] slab_reclaimable 38952 [ 1023.647924][T17401] slab_unreclaimable 99312 [ 1023.647924][T17401] slab 138264 [ 1023.764062][T17139] device veth1_vlan entered promiscuous mode [ 1023.779134][T17401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17141,uid=0 [ 1023.836857][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1023.839171][T17401] Memory cgroup out of memory: Killed process 17141 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1023.853858][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.929658][T17139] device veth0_macvtap entered promiscuous mode [ 1023.955694][T17139] device veth1_macvtap entered promiscuous mode [ 1024.130104][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.159151][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.177711][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.191064][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.209075][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.225598][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.235779][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.253320][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.269605][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.288381][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.301168][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.317660][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1024.327802][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1024.349891][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1024.366671][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1024.377735][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.397398][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.420388][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.439097][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.455874][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.466448][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.483568][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.495927][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.514948][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.534826][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.548786][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.565125][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1024.577049][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1024.616979][T17139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.631437][T17139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.659892][T17139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.668643][T17139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.807580][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.838278][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.854943][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.874499][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1024.891080][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.912712][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1025.211419][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.351290][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.431544][T17435] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1025.445518][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.480612][T17435] CPU: 0 PID: 17435 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 1025.489110][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1025.499235][T17435] Call Trace: [ 1025.502564][T17435] [ 1025.505531][T17435] dump_stack_lvl+0x1e3/0x2cb [ 1025.510338][T17435] ? nf_tcp_handle_invalid+0x642/0x642 [ 1025.515837][T17435] ? panic+0x75d/0x75d [ 1025.519955][T17435] ? lockdep_hardirqs_on+0x94/0x130 [ 1025.525205][T17435] dump_header+0xdf/0x9c0 [ 1025.529576][T17435] oom_kill_process+0xf8/0x520 [ 1025.534379][T17435] out_of_memory+0xf30/0x12f0 [ 1025.539101][T17435] ? mutex_lock_io_nested+0x60/0x60 [ 1025.544432][T17435] ? unregister_oom_notifier+0x20/0x20 [ 1025.550007][T17435] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1025.556208][T17435] ? lockdep_hardirqs_on+0x94/0x130 [ 1025.561446][T17435] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1025.567654][T17435] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1025.573265][T17435] ? mark_lock+0x9a/0x340 [ 1025.577623][T17435] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1025.583208][T17435] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1025.589170][T17435] ? cgroup_file_notify+0x123/0x190 [ 1025.594419][T17435] memory_max_write+0x34d/0x470 [ 1025.599327][T17435] ? memory_max_show+0xa0/0xa0 [ 1025.604130][T17435] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1025.610157][T17435] ? print_irqtrace_events+0x210/0x210 [ 1025.615665][T17435] ? memory_max_show+0xa0/0xa0 [ 1025.620480][T17435] cgroup_file_write+0x2c6/0x690 [ 1025.625467][T17435] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1025.630646][T17435] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1025.635801][T17435] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1025.641183][T17435] vfs_write+0x7ae/0xba0 [ 1025.645502][T17435] ? file_end_write+0x250/0x250 [ 1025.650498][T17435] ? mutex_lock_nested+0x17/0x20 [ 1025.655469][T17435] ? __fdget_pos+0x250/0x2f0 [ 1025.660083][T17435] ? ksys_write+0x77/0x2c0 [ 1025.664546][T17435] ksys_write+0x19c/0x2c0 [ 1025.668910][T17435] ? print_irqtrace_events+0x210/0x210 [ 1025.674426][T17435] ? __ia32_sys_read+0x80/0x80 [ 1025.679238][T17435] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1025.685261][T17435] ? lockdep_hardirqs_on+0x94/0x130 [ 1025.690499][T17435] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1025.696520][T17435] do_syscall_64+0x3d/0xb0 [ 1025.700986][T17435] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1025.706910][T17435] RIP: 0033:0x7f581388c169 [ 1025.711349][T17435] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1025.730985][T17435] RSP: 002b:00007f58145d7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1025.739437][T17435] RAX: ffffffffffffffda RBX: 00007f58139abf80 RCX: 00007f581388c169 [ 1025.747449][T17435] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 1025.755448][T17435] RBP: 00007f58138e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1025.763448][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.771448][T17435] R13: 00007fff1fe9ddff R14: 00007f58145d7300 R15: 0000000000022000 [ 1025.779465][T17435] [ 1025.838549][T17435] memory: usage 4692kB, limit 0kB, failcnt 136 [ 1025.846957][T17435] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1025.854030][T17435] Memory cgroup stats for /syz4: [ 1025.854246][T17435] anon 114688 [ 1025.854246][T17435] file 4407296 [ 1025.854246][T17435] kernel 241664 [ 1025.854246][T17435] kernel_stack 32768 [ 1025.854246][T17435] pagetables 77824 [ 1025.854246][T17435] sec_pagetables 0 [ 1025.854246][T17435] percpu 0 [ 1025.854246][T17435] sock 0 [ 1025.854246][T17435] vmalloc 0 [ 1025.854246][T17435] shmem 4407296 [ 1025.854246][T17435] zswap 0 [ 1025.854246][T17435] zswapped 0 [ 1025.854246][T17435] file_mapped 81920 [ 1025.854246][T17435] file_dirty 0 [ 1025.854246][T17435] file_writeback 0 [ 1025.854246][T17435] swapcached 0 [ 1025.854246][T17435] anon_thp 0 [ 1025.854246][T17435] file_thp 0 [ 1025.854246][T17435] shmem_thp 0 [ 1025.854246][T17435] inactive_anon 4407296 [ 1025.854246][T17435] active_anon 114688 [ 1025.854246][T17435] inactive_file 0 [ 1025.854246][T17435] active_file 0 [ 1025.854246][T17435] unevictable 0 [ 1025.854246][T17435] slab_reclaimable 29152 [ 1025.854246][T17435] slab_unreclaimable 71952 [ 1025.854246][T17435] slab 101104 [ 1025.982933][T17435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17139,uid=0 [ 1026.006125][T17435] Memory cgroup out of memory: Killed process 17139 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1026.026735][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:17 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:17 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:20:17 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:20:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 1026.313986][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.692056][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:18 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:18 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:18 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 1026.919696][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.222551][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:18 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1027.701553][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:19 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:19 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 1027.973783][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.560087][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.703099][ T3662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1028.712555][ T3662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1028.725734][ T3665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1028.735409][ T3665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1028.743476][ T3665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1028.751636][ T3665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1028.772001][ T3665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1028.780538][T13761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.789894][T13761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.798538][ T3665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.799057][T13761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1028.816028][ T3665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.824362][ T3665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1028.833676][ T3667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1028.833740][ T3665] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 12:20:20 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1028.846020][ T3667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1028.855539][ T3667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1028.864113][ T3665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1028.865129][ T3667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1028.879518][ T3667] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1028.887020][ T3667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.895705][ T3667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1028.920344][ T3667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1028.950674][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:20 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) [ 1030.265488][T17498] chnl_net:caif_netlink_parms(): no params data found [ 1030.285407][T17499] chnl_net:caif_netlink_parms(): no params data found [ 1030.382050][T17504] chnl_net:caif_netlink_parms(): no params data found [ 1030.424828][T17497] chnl_net:caif_netlink_parms(): no params data found [ 1030.555573][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.563629][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.573550][T17499] device bridge_slave_0 entered promiscuous mode [ 1030.620503][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.627638][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.636334][T17499] device bridge_slave_1 entered promiscuous mode [ 1030.661422][T17498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.668525][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.678133][T17498] device bridge_slave_0 entered promiscuous mode [ 1030.737190][T17498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.745311][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.754880][T17498] device bridge_slave_1 entered promiscuous mode [ 1030.774851][T17497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.784167][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.792827][T17497] device bridge_slave_0 entered promiscuous mode [ 1030.809593][T17504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.816690][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.823934][ T3667] Bluetooth: hci0: command 0x0409 tx timeout [ 1030.826732][T17504] device bridge_slave_0 entered promiscuous mode [ 1030.867945][T17497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.875540][T17497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.883999][T17497] device bridge_slave_1 entered promiscuous mode [ 1030.893487][T17499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.906419][T17499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.913967][ T3667] Bluetooth: hci1: command 0x0409 tx timeout [ 1030.916154][T17504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.929402][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.937327][T17504] device bridge_slave_1 entered promiscuous mode [ 1030.946824][T17498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.959324][T17498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.979299][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 1030.979328][ T3667] Bluetooth: hci4: command 0x0409 tx timeout [ 1031.110093][T17497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.123306][T17499] team0: Port device team_slave_0 added [ 1031.133775][T17504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.146763][T17498] team0: Port device team_slave_0 added [ 1031.155886][T17498] team0: Port device team_slave_1 added [ 1031.164244][T17497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.191577][T17499] team0: Port device team_slave_1 added [ 1031.199386][T17504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.313540][T17504] team0: Port device team_slave_0 added [ 1031.320425][T17498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.327408][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.353640][T17498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.375055][T17497] team0: Port device team_slave_0 added [ 1031.391442][T17499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.398572][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.424988][T17499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.438188][T17504] team0: Port device team_slave_1 added [ 1031.445682][T17498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.452760][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.480897][T17498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.495022][T17497] team0: Port device team_slave_1 added [ 1031.512962][T17499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.520187][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.546692][T17499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.705387][T17497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.727794][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.768084][T17497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.803447][T17504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.811342][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.839339][T17504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.876022][T17497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.899754][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.938138][T17497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.966740][T17499] device hsr_slave_0 entered promiscuous mode [ 1031.987660][T17499] device hsr_slave_1 entered promiscuous mode [ 1032.004113][T17504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.011899][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.040067][T17504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.055992][T17498] device hsr_slave_0 entered promiscuous mode [ 1032.065585][T17498] device hsr_slave_1 entered promiscuous mode [ 1032.084286][T17498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.092909][T17498] Cannot create hsr debugfs directory [ 1032.316976][T17504] device hsr_slave_0 entered promiscuous mode [ 1032.341328][T17504] device hsr_slave_1 entered promiscuous mode [ 1032.348187][T17504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.356489][T17504] Cannot create hsr debugfs directory [ 1032.388141][T17497] device hsr_slave_0 entered promiscuous mode [ 1032.407730][T17497] device hsr_slave_1 entered promiscuous mode [ 1032.415185][T17497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.439093][T17497] Cannot create hsr debugfs directory [ 1032.703855][ T11] device hsr_slave_0 left promiscuous mode [ 1032.710662][ T11] device hsr_slave_1 left promiscuous mode [ 1032.717316][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.739486][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.761169][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.768731][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.778770][ T11] device bridge_slave_1 left promiscuous mode [ 1032.785373][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.797904][ T11] device bridge_slave_0 left promiscuous mode [ 1032.804757][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.818306][ T11] device hsr_slave_0 left promiscuous mode [ 1032.825192][ T11] device hsr_slave_1 left promiscuous mode [ 1032.839721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.847165][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.856830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.865658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.874572][ T11] device bridge_slave_1 left promiscuous mode [ 1032.881009][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.890109][ T11] device bridge_slave_0 left promiscuous mode [ 1032.896779][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.904190][ T3667] Bluetooth: hci0: command 0x041b tx timeout [ 1032.918216][ T11] device hsr_slave_0 left promiscuous mode [ 1032.924830][ T11] device hsr_slave_1 left promiscuous mode [ 1032.933402][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.941327][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.950591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.958029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.966958][ T11] device bridge_slave_1 left promiscuous mode [ 1032.973537][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.984966][ T11] device bridge_slave_0 left promiscuous mode [ 1032.989935][ T3667] Bluetooth: hci1: command 0x041b tx timeout [ 1032.991568][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.016674][ T11] device veth1_macvtap left promiscuous mode [ 1033.023109][ T11] device veth0_macvtap left promiscuous mode [ 1033.030360][ T11] device veth1_vlan left promiscuous mode [ 1033.036183][ T11] device veth0_vlan left promiscuous mode [ 1033.044176][ T11] device veth1_macvtap left promiscuous mode [ 1033.050393][ T11] device veth0_macvtap left promiscuous mode [ 1033.056456][ T11] device veth1_vlan left promiscuous mode [ 1033.062583][T13757] Bluetooth: hci3: command 0x041b tx timeout [ 1033.065370][ T11] device veth0_vlan left promiscuous mode [ 1033.074457][ T3667] Bluetooth: hci4: command 0x041b tx timeout [ 1033.082857][ T11] device veth1_macvtap left promiscuous mode [ 1033.093393][ T11] device veth0_macvtap left promiscuous mode [ 1033.099571][ T11] device veth1_vlan left promiscuous mode [ 1033.105380][ T11] device veth0_vlan left promiscuous mode [ 1033.524082][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1033.542763][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1033.556319][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.577757][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.651888][ T11] bond0 (unregistering): Released all slaves [ 1033.796921][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1033.812490][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1033.826655][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.846762][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.916420][ T11] bond0 (unregistering): Released all slaves [ 1034.056842][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1034.070630][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1034.084803][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.102832][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.173902][ T11] bond0 (unregistering): Released all slaves [ 1034.979003][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1035.059129][T13757] Bluetooth: hci1: command 0x040f tx timeout [ 1035.139025][T13757] Bluetooth: hci4: command 0x040f tx timeout [ 1035.145739][ T3667] Bluetooth: hci3: command 0x040f tx timeout [ 1035.645377][T17504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.721983][T17504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.890544][T17504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.042315][T17504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.289957][T17504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1036.309535][T17504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1036.366073][T17504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1036.399574][T17504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1036.432966][T17499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1036.452582][T17499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1036.504102][T17499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1036.556145][T17499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1036.648213][T17497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1036.679906][T17497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1036.694127][T17497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1036.725603][T17497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1036.857344][T17504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.929001][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.936938][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.970340][T17504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.001529][T17498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1037.020834][T17498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1037.057383][T17498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1037.064331][T13757] Bluetooth: hci0: command 0x0419 tx timeout [ 1037.097647][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1037.116462][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1037.137482][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.139018][T13757] Bluetooth: hci1: command 0x0419 tx timeout [ 1037.144656][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.189464][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.219040][T13757] Bluetooth: hci3: command 0x0419 tx timeout [ 1037.219243][ T3667] Bluetooth: hci4: command 0x0419 tx timeout [ 1037.232990][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.242004][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.249156][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.259636][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.297906][T17498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1037.335689][T17499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.360656][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.370391][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.388074][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.397763][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.416041][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1037.427319][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1037.443957][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1037.456046][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.523021][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1037.543410][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.560118][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.579708][T17504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.594818][T17499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.636381][T17497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.646078][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.654492][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.709486][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1037.721294][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1037.745881][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.753082][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.761405][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.770325][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.778892][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.786100][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.794268][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.802555][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.815500][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.841990][T17497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.872039][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.890188][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.964363][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.980339][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.999173][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.008081][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.017142][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.024336][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.045415][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.057834][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.070866][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.077993][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.094407][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.105857][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.120735][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.145858][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.161059][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.176444][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.187218][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.203221][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.215952][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.224766][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.259479][T17498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.272251][T17499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1038.302082][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.313326][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.323512][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.333334][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.344077][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.353608][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.400410][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.411777][T17497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1038.453165][T17497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1038.470862][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.489268][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.497879][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.520689][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.528659][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.581919][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.599836][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.608362][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.615546][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.667849][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.681274][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.699162][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.706312][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.778248][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.800711][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.828274][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.907005][T17504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.935625][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.950765][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.997387][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.020069][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.091971][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1039.110213][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1039.134818][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1039.168352][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1039.177621][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1039.195068][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1039.206669][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1039.224192][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.232247][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.258326][T17498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1039.284675][T17499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.301077][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.308783][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.366117][T17497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.401482][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.411280][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.504440][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.529928][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.571194][T17499] device veth0_vlan entered promiscuous mode [ 1039.587336][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.600049][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.625184][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.644475][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.679917][T17499] device veth1_vlan entered promiscuous mode [ 1039.739404][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.755668][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1039.778735][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.809858][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.831859][T17497] device veth0_vlan entered promiscuous mode [ 1039.872971][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.889783][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.916677][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.962590][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.995429][T17499] device veth0_macvtap entered promiscuous mode [ 1040.048462][T17497] device veth1_vlan entered promiscuous mode [ 1040.058644][T17499] device veth1_macvtap entered promiscuous mode [ 1040.079425][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1040.087773][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.101977][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1040.143193][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1040.154825][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1040.187832][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.206316][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.216893][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.228222][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.242276][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.253267][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.266547][T17499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.299648][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1040.308626][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1040.318327][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.327576][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.343772][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.369366][T17497] device veth0_macvtap entered promiscuous mode [ 1040.390399][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1040.400307][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1040.409595][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1040.418139][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.428193][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.439419][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.450134][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.464116][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.474311][T17499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.485869][T17499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.497737][T17499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.520706][T17504] device veth0_vlan entered promiscuous mode [ 1040.530050][T17497] device veth1_macvtap entered promiscuous mode [ 1040.545190][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.555001][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1040.564291][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.572973][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1040.582095][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.592466][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.610673][ T11] device hsr_slave_0 left promiscuous mode [ 1040.617098][ T11] device hsr_slave_1 left promiscuous mode [ 1040.624823][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.639440][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.681108][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.688586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.721461][ T11] device bridge_slave_1 left promiscuous mode [ 1040.727761][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.756575][ T11] device bridge_slave_0 left promiscuous mode [ 1040.770826][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.785160][ T11] device veth1_macvtap left promiscuous mode [ 1040.792758][ T11] device veth0_macvtap left promiscuous mode [ 1040.799814][ T11] device veth1_vlan left promiscuous mode [ 1040.805687][ T11] device veth0_vlan left promiscuous mode [ 1041.085543][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1041.106423][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1041.124428][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.138727][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.208156][ T11] bond0 (unregistering): Released all slaves [ 1041.285563][T17499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.294908][T17499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.304853][T17499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.313866][T17499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.351868][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.367657][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.377750][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.389234][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.399927][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.410681][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.422388][T17497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.471656][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1041.480700][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1041.501867][T17504] device veth1_vlan entered promiscuous mode [ 1041.542654][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.554632][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.566607][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.577443][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.587722][T17497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.598510][T17497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.610391][T17497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.638088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1041.656859][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.701246][T17497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.718393][T17497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.727862][T17497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.749835][T17497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.847606][T17504] device veth0_macvtap entered promiscuous mode [ 1041.878026][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1041.887380][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1041.905531][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1041.937898][T17504] device veth1_macvtap entered promiscuous mode [ 1042.004970][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1042.016724][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.038088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.056120][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.080914][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.096979][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.115575][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.126317][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.143946][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.155283][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.173008][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.188686][T17504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.219942][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.228511][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.229375][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1042.253520][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1042.289197][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1042.298104][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.315201][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.339596][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.352263][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.375006][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.385803][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.395938][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.408121][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.428565][T17504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.475038][T17498] device veth0_vlan entered promiscuous mode [ 1042.484132][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.517338][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.526168][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1042.540111][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1042.559668][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.568174][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1042.588342][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.606742][T17504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.617188][T17504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.628006][T17504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.640907][T17504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.665395][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1042.679957][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.688035][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.695511][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1042.715502][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1042.789204][T17498] device veth1_vlan entered promiscuous mode [ 1042.831127][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.860384][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.894199][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1042.903517][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1042.919775][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.952070][T17498] device veth0_macvtap entered promiscuous mode [ 1042.957462][T17697] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1042.987609][T17498] device veth1_macvtap entered promiscuous mode [ 1043.014530][T17697] CPU: 1 PID: 17697 Comm: syz-executor.0 Not tainted 6.1.24-syzkaller #0 [ 1043.023016][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1043.033108][T17697] Call Trace: [ 1043.036414][T17697] [ 1043.039372][T17697] dump_stack_lvl+0x1e3/0x2cb [ 1043.044104][T17697] ? nf_tcp_handle_invalid+0x642/0x642 [ 1043.049606][T17697] ? panic+0x75d/0x75d [ 1043.053717][T17697] ? ___ratelimit+0x4c0/0x670 [ 1043.058443][T17697] ? local_lock_release+0x170/0x170 [ 1043.061462][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.063753][T17697] dump_header+0xdf/0x9c0 [ 1043.063788][T17697] oom_kill_process+0xf8/0x520 [ 1043.083322][T17697] out_of_memory+0xf30/0x12f0 [ 1043.088044][T17697] ? mutex_lock_io_nested+0x60/0x60 [ 1043.093278][T17697] ? preempt_schedule+0xd9/0xe0 [ 1043.097628][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.098180][T17697] ? unregister_oom_notifier+0x20/0x20 [ 1043.113464][T17697] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1043.119626][T17697] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1043.125206][T17697] ? preempt_schedule_thunk+0x16/0x18 [ 1043.130621][T17697] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1043.134038][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.136237][T17697] ? cgroup_file_notify+0x123/0x190 [ 1043.151894][T17697] memory_max_write+0x34d/0x470 [ 1043.156802][T17697] ? memory_max_show+0xa0/0xa0 [ 1043.161487][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.161591][T17697] ? read_lock_is_recursive+0x10/0x10 [ 1043.176776][T17697] ? memory_max_show+0xa0/0xa0 [ 1043.181622][T17697] cgroup_file_write+0x2c6/0x690 [ 1043.186610][T17697] ? mutex_lock_io_nested+0x60/0x60 [ 1043.191867][T17697] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1043.195126][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.197000][T17697] ? __virt_addr_valid+0x22b/0x2e0 [ 1043.212574][T17697] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1043.217738][T17697] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1043.223073][T17697] vfs_write+0x7ae/0xba0 [ 1043.227373][T17697] ? file_end_write+0x250/0x250 [ 1043.228436][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.232265][T17697] ? mutex_lock_nested+0x17/0x20 [ 1043.232296][T17697] ? __fdget_pos+0x250/0x2f0 [ 1043.251752][T17697] ? ksys_write+0x77/0x2c0 [ 1043.256220][T17697] ksys_write+0x19c/0x2c0 [ 1043.260594][T17697] ? print_irqtrace_events+0x210/0x210 [ 1043.266105][T17697] ? __ia32_sys_read+0x80/0x80 [ 1043.266413][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.270921][T17697] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1043.270958][T17697] ? lockdep_hardirqs_on+0x94/0x130 [ 1043.270991][T17697] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1043.271027][T17697] do_syscall_64+0x3d/0xb0 [ 1043.271055][T17697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1043.271080][T17697] RIP: 0033:0x7ff660a8c169 [ 1043.271101][T17697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1043.271121][T17697] RSP: 002b:00007ff661797168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.271147][T17697] RAX: ffffffffffffffda RBX: 00007ff660babf80 RCX: 00007ff660a8c169 [ 1043.271182][T17697] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1043.271198][T17697] RBP: 00007ff660ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1043.271214][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.271229][T17697] R13: 00007ffc8557972f R14: 00007ff661797300 R15: 0000000000022000 [ 1043.271267][T17697] [ 1043.402117][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.416583][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.434208][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.447119][T17498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.457761][T17697] memory: usage 10588kB, limit 0kB, failcnt 256 [ 1043.466161][T17697] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1043.473239][T17697] Memory cgroup stats for /syz0: [ 1043.473432][T17697] anon 114688 [ 1043.473432][T17697] file 10440704 [ 1043.473432][T17697] kernel 286720 [ 1043.473432][T17697] kernel_stack 65536 [ 1043.473432][T17697] pagetables 77824 [ 1043.473432][T17697] sec_pagetables 0 [ 1043.473432][T17697] percpu 0 [ 1043.473432][T17697] sock 0 [ 1043.473432][T17697] vmalloc 0 [ 1043.473432][T17697] shmem 10436608 [ 1043.473432][T17697] zswap 0 [ 1043.473432][T17697] zswapped 0 [ 1043.473432][T17697] file_mapped 81920 [ 1043.473432][T17697] file_dirty 0 [ 1043.473432][T17697] file_writeback 0 [ 1043.473432][T17697] swapcached 0 [ 1043.473432][T17697] anon_thp 0 [ 1043.473432][T17697] file_thp 0 [ 1043.473432][T17697] shmem_thp 0 [ 1043.473432][T17697] inactive_anon 0 [ 1043.473432][T17697] active_anon 10551296 [ 1043.473432][T17697] inactive_file 4096 [ 1043.473432][T17697] active_file 0 [ 1043.473432][T17697] unevictable 0 [ 1043.473432][T17697] slab_reclaimable 44976 [ 1043.473432][T17697] slab_unreclaimable 71304 [ 1043.473432][T17697] slab 116280 [ 1043.499518][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.586086][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.593840][T17697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17499,uid=0 [ 1043.594026][T17697] Memory cgroup out of memory: Killed process 17499 (syz-executor.0) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1043.601482][T17702] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1043.660667][T17702] CPU: 0 PID: 17702 Comm: syz-executor.1 Not tainted 6.1.24-syzkaller #0 [ 1043.669149][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1043.679233][T17702] Call Trace: [ 1043.682531][T17702] [ 1043.685484][T17702] dump_stack_lvl+0x1e3/0x2cb [ 1043.690203][T17702] ? nf_tcp_handle_invalid+0x642/0x642 [ 1043.695698][T17702] ? panic+0x75d/0x75d [ 1043.699807][T17702] ? ___ratelimit+0x4c0/0x670 [ 1043.704539][T17702] ? local_lock_release+0x170/0x170 [ 1043.709791][T17702] dump_header+0xdf/0x9c0 [ 1043.714167][T17702] oom_kill_process+0xf8/0x520 [ 1043.718966][T17702] out_of_memory+0xf30/0x12f0 [ 1043.723779][T17702] ? mutex_lock_io_nested+0x60/0x60 [ 1043.729016][T17702] ? preempt_schedule+0xd9/0xe0 [ 1043.733903][T17702] ? unregister_oom_notifier+0x20/0x20 [ 1043.739392][T17702] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1043.745418][T17702] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1043.751084][T17702] ? preempt_schedule_thunk+0x16/0x18 [ 1043.756528][T17702] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1043.762122][T17702] ? cgroup_file_notify+0x123/0x190 [ 1043.767359][T17702] memory_max_write+0x34d/0x470 [ 1043.772259][T17702] ? memory_max_show+0xa0/0xa0 [ 1043.777063][T17702] ? read_lock_is_recursive+0x10/0x10 [ 1043.782570][T17702] ? memory_max_show+0xa0/0xa0 [ 1043.787379][T17702] cgroup_file_write+0x2c6/0x690 [ 1043.792353][T17702] ? mutex_lock_io_nested+0x60/0x60 [ 1043.797589][T17702] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1043.802742][T17702] ? __virt_addr_valid+0x22b/0x2e0 [ 1043.807902][T17702] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1043.813051][T17702] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1043.818384][T17702] vfs_write+0x7ae/0xba0 [ 1043.822676][T17702] ? file_end_write+0x250/0x250 [ 1043.827590][T17702] ? mutex_lock_nested+0x17/0x20 [ 1043.832564][T17702] ? __fdget_pos+0x250/0x2f0 [ 1043.837183][T17702] ? ksys_write+0x77/0x2c0 [ 1043.841648][T17702] ksys_write+0x19c/0x2c0 [ 1043.846016][T17702] ? print_irqtrace_events+0x210/0x210 [ 1043.851608][T17702] ? __ia32_sys_read+0x80/0x80 [ 1043.856415][T17702] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1043.862437][T17702] ? lockdep_hardirqs_on+0x94/0x130 [ 1043.867681][T17702] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1043.873711][T17702] do_syscall_64+0x3d/0xb0 [ 1043.878173][T17702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1043.884182][T17702] RIP: 0033:0x7f0d48e8c169 [ 1043.888624][T17702] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1043.908266][T17702] RSP: 002b:00007f0d49c1c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.916717][T17702] RAX: ffffffffffffffda RBX: 00007f0d48fac120 RCX: 00007f0d48e8c169 [ 1043.924808][T17702] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 1043.932808][T17702] RBP: 00007f0d48ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1043.940823][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.948820][T17702] R13: 00007ffce9c70d9f R14: 00007f0d49c1c300 R15: 0000000000022000 [ 1043.956843][T17702] [ 1043.968968][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1043.977302][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1043.987371][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1043.990347][T17702] memory: usage 8660kB, limit 0kB, failcnt 104 [ 1043.996303][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1044.010691][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1044.025720][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.040089][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.050039][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.056575][T17702] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1044.060708][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.081517][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.091140][T17702] Memory cgroup stats for /syz1 [ 1044.092157][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.092358][T17702] : [ 1044.097306][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.120924][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.130805][T17498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.141445][T17498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.155082][T17498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.183695][T17702] anon 122880 [ 1044.183695][T17702] file 8343552 [ 1044.183695][T17702] kernel 372736 [ 1044.183695][T17702] kernel_stack 131072 [ 1044.183695][T17702] pagetables 81920 [ 1044.183695][T17702] sec_pagetables 0 [ 1044.183695][T17702] percpu 0 [ 1044.183695][T17702] sock 0 [ 1044.183695][T17702] vmalloc 0 [ 1044.183695][T17702] shmem 8343552 [ 1044.183695][T17702] zswap 0 [ 1044.183695][T17702] zswapped 0 [ 1044.183695][T17702] file_mapped 147456 [ 1044.183695][T17702] file_dirty 0 [ 1044.183695][T17702] file_writeback 0 [ 1044.183695][T17702] swapcached 0 [ 1044.183695][T17702] anon_thp 0 [ 1044.183695][T17702] file_thp 0 [ 1044.183695][T17702] shmem_thp 0 [ 1044.183695][T17702] inactive_anon 8343552 [ 1044.183695][T17702] active_anon 122880 [ 1044.183695][T17702] inactive_file 0 [ 1044.183695][T17702] active_file 0 [ 1044.183695][T17702] unevictable 0 [ 1044.183695][T17702] slab_reclaimable 42040 [ 1044.183695][T17702] slab_unreclaimable 91888 [ 1044.183695][T17702] slab 133928 [ 1044.289305][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1044.292177][T17702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17497,uid=0 [ 1044.298097][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1044.313559][T17702] Memory cgroup out of memory: Killed process 17497 (syz-executor.1) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1044.407235][T17498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.416613][T17498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.425843][T17498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.434650][T17498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.544515][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.565421][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.597092][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1044.720908][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.733755][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.804505][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1044.875540][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.905644][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.935645][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.040210][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.074454][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1045.154540][T17705] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1045.166304][T17705] CPU: 1 PID: 17705 Comm: syz-executor.4 Not tainted 6.1.24-syzkaller #0 [ 1045.174783][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1045.184889][T17705] Call Trace: [ 1045.188203][T17705] [ 1045.191165][T17705] dump_stack_lvl+0x1e3/0x2cb [ 1045.195897][T17705] ? nf_tcp_handle_invalid+0x642/0x642 [ 1045.201419][T17705] ? panic+0x75d/0x75d [ 1045.205541][T17705] ? ___ratelimit+0x4c0/0x670 [ 1045.210271][T17705] ? local_lock_release+0x170/0x170 [ 1045.215541][T17705] dump_header+0xdf/0x9c0 [ 1045.219972][T17705] oom_kill_process+0xf8/0x520 [ 1045.224799][T17705] out_of_memory+0xf30/0x12f0 [ 1045.229624][T17705] ? mutex_lock_io_nested+0x60/0x60 [ 1045.234904][T17705] ? mark_lock+0x9a/0x340 [ 1045.239288][T17705] ? unregister_oom_notifier+0x20/0x20 [ 1045.244802][T17705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1045.250863][T17705] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1045.256465][T17705] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1045.262080][T17705] ? cgroup_file_notify+0x123/0x190 [ 1045.267339][T17705] memory_max_write+0x34d/0x470 [ 1045.272269][T17705] ? memory_max_show+0xa0/0xa0 [ 1045.277156][T17705] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1045.283182][T17705] ? print_irqtrace_events+0x210/0x210 [ 1045.288683][T17705] ? memory_max_show+0xa0/0xa0 [ 1045.293474][T17705] cgroup_file_write+0x2c6/0x690 [ 1045.298445][T17705] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1045.303596][T17705] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1045.308742][T17705] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1045.314058][T17705] vfs_write+0x7ae/0xba0 [ 1045.318337][T17705] ? file_end_write+0x250/0x250 [ 1045.323230][T17705] ksys_write+0x19c/0x2c0 [ 1045.327582][T17705] ? lockdep_hardirqs_on+0x94/0x130 [ 1045.332826][T17705] ? __ia32_sys_read+0x80/0x80 [ 1045.337627][T17705] do_syscall_64+0x3d/0xb0 [ 1045.342065][T17705] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1045.348662][T17705] RIP: 0033:0x7f833d48c169 [ 1045.353093][T17705] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1045.372882][T17705] RSP: 002b:00007f833e174168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1045.382194][T17705] RAX: ffffffffffffffda RBX: 00007f833d5abf80 RCX: 00007f833d48c169 [ 1045.390187][T17705] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 1045.398171][T17705] RBP: 00007f833d4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1045.406156][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.414139][T17705] R13: 00007ffceabb445f R14: 00007f833e174300 R15: 0000000000022000 [ 1045.422141][T17705] [ 1045.509263][T17705] memory: usage 4680kB, limit 0kB, failcnt 136 [ 1045.519332][T17705] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1045.540048][T17705] Memory cgroup stats for /syz4: [ 1045.559626][T17705] anon 114688 [ 1045.559626][T17705] file 4407296 [ 1045.559626][T17705] kernel 270336 [ 1045.559626][T17705] kernel_stack 65536 [ 1045.559626][T17705] pagetables 77824 [ 1045.559626][T17705] sec_pagetables 0 [ 1045.559626][T17705] percpu 0 [ 1045.559626][T17705] sock 0 [ 1045.559626][T17705] vmalloc 0 [ 1045.559626][T17705] shmem 4407296 [ 1045.559626][T17705] zswap 0 [ 1045.559626][T17705] zswapped 0 [ 1045.559626][T17705] file_mapped 81920 [ 1045.559626][T17705] file_dirty 0 [ 1045.559626][T17705] file_writeback 0 [ 1045.559626][T17705] swapcached 0 [ 1045.559626][T17705] anon_thp 0 [ 1045.559626][T17705] file_thp 0 [ 1045.559626][T17705] shmem_thp 0 [ 1045.559626][T17705] inactive_anon 4407296 [ 1045.559626][T17705] active_anon 114688 [ 1045.559626][T17705] inactive_file 0 [ 1045.559626][T17705] active_file 0 [ 1045.559626][T17705] unevictable 0 [ 1045.559626][T17705] slab_reclaimable 26576 [ 1045.559626][T17705] slab_unreclaimable 72600 [ 1045.559626][T17705] slab 99176 [ 1045.690065][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.880008][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.949735][T17705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17504,uid=0 [ 1046.011799][T17705] Memory cgroup out of memory: Killed process 17504 (syz-executor.4) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1046.034425][T17710] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1046.045731][T17710] CPU: 1 PID: 17710 Comm: syz-executor.5 Not tainted 6.1.24-syzkaller #0 [ 1046.054193][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1046.064289][T17710] Call Trace: [ 1046.067607][T17710] [ 1046.070575][T17710] dump_stack_lvl+0x1e3/0x2cb [ 1046.075306][T17710] ? nf_tcp_handle_invalid+0x642/0x642 [ 1046.080825][T17710] ? panic+0x75d/0x75d [ 1046.084952][T17710] ? ___ratelimit+0x4c0/0x670 [ 1046.089686][T17710] ? local_lock_release+0x170/0x170 [ 1046.094944][T17710] dump_header+0xdf/0x9c0 [ 1046.099421][T17710] oom_kill_process+0xf8/0x520 [ 1046.104247][T17710] out_of_memory+0xf30/0x12f0 [ 1046.109734][T17710] ? mutex_lock_io_nested+0x60/0x60 [ 1046.114974][T17710] ? preempt_schedule+0xd9/0xe0 [ 1046.119840][T17710] ? unregister_oom_notifier+0x20/0x20 [ 1046.125305][T17710] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1046.131519][T17710] ? lockdep_hardirqs_on+0x94/0x130 [ 1046.136741][T17710] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1046.142910][T17710] mem_cgroup_out_of_memory+0x25f/0x3b0 [ 1046.148472][T17710] ? preempt_schedule_thunk+0x16/0x18 [ 1046.153876][T17710] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1046.159535][T17710] ? cgroup_file_notify+0x123/0x190 [ 1046.164771][T17710] memory_max_write+0x34d/0x470 [ 1046.169654][T17710] ? memory_max_show+0xa0/0xa0 [ 1046.174444][T17710] ? read_lock_is_recursive+0x10/0x10 [ 1046.179845][T17710] ? memory_max_show+0xa0/0xa0 [ 1046.184647][T17710] cgroup_file_write+0x2c6/0x690 [ 1046.189606][T17710] ? mutex_lock_io_nested+0x60/0x60 [ 1046.194828][T17710] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1046.199975][T17710] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1046.205107][T17710] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1046.210423][T17710] vfs_write+0x7ae/0xba0 [ 1046.214797][T17710] ? file_end_write+0x250/0x250 [ 1046.219688][T17710] ksys_write+0x19c/0x2c0 [ 1046.224035][T17710] ? lockdep_hardirqs_on+0x94/0x130 [ 1046.229266][T17710] ? __ia32_sys_read+0x80/0x80 [ 1046.234066][T17710] do_syscall_64+0x3d/0xb0 [ 1046.238504][T17710] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1046.244410][T17710] RIP: 0033:0x7fd113c8c169 [ 1046.248848][T17710] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1046.268463][T17710] RSP: 002b:00007fd114a40168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1046.276914][T17710] RAX: ffffffffffffffda RBX: 00007fd113dac050 RCX: 00007fd113c8c169 [ 1046.284898][T17710] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 1046.292882][T17710] RBP: 00007fd113ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1046.300872][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.308849][T17710] R13: 00007ffc294be8bf R14: 00007fd114a40300 R15: 0000000000022000 [ 1046.316847][T17710] [ 1046.379178][T17710] memory: usage 10648kB, limit 0kB, failcnt 166 [ 1046.386049][T17710] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1046.417267][T17710] Memory cgroup stats for /syz5: [ 1046.441484][T17710] anon 118784 [ 1046.441484][T17710] file 10440704 [ 1046.441484][T17710] kernel 331776 [ 1046.441484][T17710] kernel_stack 98304 [ 1046.441484][T17710] pagetables 81920 [ 1046.441484][T17710] sec_pagetables 0 [ 1046.441484][T17710] percpu 0 [ 1046.441484][T17710] sock 0 [ 1046.441484][T17710] vmalloc 0 [ 1046.441484][T17710] shmem 10440704 [ 1046.441484][T17710] zswap 0 [ 1046.441484][T17710] zswapped 0 [ 1046.441484][T17710] file_mapped 86016 [ 1046.441484][T17710] file_dirty 0 [ 1046.441484][T17710] file_writeback 0 [ 1046.441484][T17710] swapcached 0 [ 1046.441484][T17710] anon_thp 0 [ 1046.441484][T17710] file_thp 0 [ 1046.441484][T17710] shmem_thp 0 [ 1046.441484][T17710] inactive_anon 0 [ 1046.441484][T17710] active_anon 10559488 [ 1046.441484][T17710] inactive_file 0 [ 1046.441484][T17710] active_file 0 [ 1046.441484][T17710] unevictable 0 [ 1046.441484][T17710] slab_reclaimable 43280 [ 1046.441484][T17710] slab_unreclaimable 81920 [ 1046.441484][T17710] slab 125200 [ 1046.576204][T17710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17498,uid=0 [ 1046.606274][T17710] Memory cgroup out of memory: Killed process 17498 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 12:20:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:38 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:38 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 12:20:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 12:20:38 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 12:20:38 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffe1}, 0x80000, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0xb) socketpair(0x1f, 0x4, 0xadef, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x23000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000fc0)=""/4096}, 0x20) write$cgroup_int(r3, &(0x7f0000000040), 0x12) 12:20:39 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:39 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) [ 1047.989769][ T11] device hsr_slave_0 left promiscuous mode [ 1047.996470][ T11] device hsr_slave_1 left promiscuous mode 12:20:39 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1048.390338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.397906][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.470117][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.507975][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.561220][ T11] device bridge_slave_1 left promiscuous mode [ 1048.599417][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.632904][ T11] device bridge_slave_0 left promiscuous mode [ 1048.655274][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.716329][ T11] device veth1_macvtap left promiscuous mode [ 1048.735378][ T11] device veth0_macvtap left promiscuous mode [ 1048.763392][ T11] device veth1_vlan left promiscuous mode [ 1048.794240][ T11] device veth0_vlan left promiscuous mode [ 1049.123376][T13757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1049.133377][T13757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1049.141618][T13757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1049.153043][T13757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1049.160439][ T3662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1049.169479][ T3662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1049.177768][ T3662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1049.187676][ T3662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1049.196123][ T3662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1049.205070][ T3662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1049.214453][ T3662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1049.222039][ T3662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1049.272009][T13761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.281249][T13761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.290469][T13761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.301376][T13761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1049.309490][T13757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1049.313630][T13761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1049.325464][T13761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1049.349718][T13757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1049.358140][T13757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1049.365902][T13757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1049.660829][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1049.678717][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1049.693661][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.715590][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.793306][ T11] bond0 (unregistering): Released all slaves 12:20:41 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 12:20:41 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 12:20:41 executing program 3: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) [ 1050.942065][T17785] chnl_net:caif_netlink_parms(): no params data found 12:20:42 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x0, 'cpuset'}, {0x0, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x2b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xf330}], 0xb}, 0xfc00) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x700, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(r3, 0x0, 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x23000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) [ 1051.280891][T17790] chnl_net:caif_netlink_parms(): no params data found [ 1051.299119][T13757] Bluetooth: hci0: command 0x0409 tx timeout [ 1051.309325][T13757] Bluetooth: hci1: command 0x0409 tx timeout [ 1051.325420][T17788] chnl_net:caif_netlink_parms(): no params data found [ 1051.379619][T13757] Bluetooth: hci3: command 0x0409 tx timeout [ 1051.459279][T13757] Bluetooth: hci4: command 0x0409 tx timeout [ 1051.558298][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.570301][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.601439][T17785] device bridge_slave_0 entered promiscuous mode [ 1051.650153][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.661914][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.689067][T17785] device bridge_slave_1 entered promiscuous mode [ 1051.786522][T17783] chnl_net:caif_netlink_parms(): no params data found [ 1051.885524][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.949433][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.973383][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.987742][T17788] device bridge_slave_0 entered promiscuous mode [ 1051.998441][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.082279][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.095466][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.119875][T17788] device bridge_slave_1 entered promiscuous mode [ 1052.165680][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.179817][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.199237][T17790] device bridge_slave_0 entered promiscuous mode [ 1052.260198][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.273938][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.286217][T17790] device bridge_slave_1 entered promiscuous mode [ 1052.322493][T17785] team0: Port device team_slave_0 added [ 1052.353977][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.398267][T17785] team0: Port device team_slave_1 added [ 1052.419242][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.444080][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.493444][T17783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.501161][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.515549][T17783] device bridge_slave_0 entered promiscuous mode [ 1052.527789][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.555526][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.569093][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.577034][T17783] device bridge_slave_1 entered promiscuous mode [ 1052.596911][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.604088][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.630652][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.644815][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.652089][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.681117][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.697199][T17788] team0: Port device team_slave_0 added [ 1052.708322][T17788] team0: Port device team_slave_1 added [ 1052.743605][T17790] team0: Port device team_slave_0 added [ 1052.815166][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.890871][T17790] team0: Port device team_slave_1 added [ 1052.927308][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.952721][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.996769][T17785] device hsr_slave_0 entered promiscuous mode [ 1053.011439][T17785] device hsr_slave_1 entered promiscuous mode [ 1053.051312][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.058302][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.102869][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.128099][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.155549][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.242070][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.250060][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.308975][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.358600][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.379074][T13757] Bluetooth: hci0: command 0x041b tx timeout [ 1053.385249][T13757] Bluetooth: hci1: command 0x041b tx timeout [ 1053.432487][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.450585][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.480100][T13757] Bluetooth: hci3: command 0x041b tx timeout [ 1053.504598][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.549086][T13757] Bluetooth: hci4: command 0x041b tx timeout [ 1053.609449][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.616451][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.654099][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.691736][T17783] team0: Port device team_slave_0 added [ 1053.750578][T17788] device hsr_slave_0 entered promiscuous mode [ 1053.757715][T17788] device hsr_slave_1 entered promiscuous mode [ 1053.774543][T17788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.797790][T17788] Cannot create hsr debugfs directory [ 1053.813225][T17783] team0: Port device team_slave_1 added [ 1054.107386][T17790] device hsr_slave_0 entered promiscuous mode [ 1054.115760][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.115812][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.149894][T17790] device hsr_slave_1 entered promiscuous mode [ 1054.169268][T17790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.176876][T17790] Cannot create hsr debugfs directory [ 1054.199669][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.207085][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.265576][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.327494][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.339284][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.377575][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.440439][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.576497][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.625905][T17783] device hsr_slave_0 entered promiscuous mode [ 1054.642603][T17783] device hsr_slave_1 entered promiscuous mode [ 1054.659553][T17783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.667168][T17783] Cannot create hsr debugfs directory [ 1054.707396][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.869954][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.083060][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.183304][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.303057][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.390127][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.459172][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1055.461104][ T3662] Bluetooth: hci1: command 0x040f tx timeout [ 1055.539151][ T3662] Bluetooth: hci3: command 0x040f tx timeout [ 1055.619103][ T3662] Bluetooth: hci4: command 0x040f tx timeout [ 1056.612769][T17785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.819805][T17785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.895522][T17785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.905722][T17785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1057.263707][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.316349][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1057.324919][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1057.351504][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.379659][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1057.402844][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.423458][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.431208][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.439710][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.448523][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.457701][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.464874][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.530565][T17788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1057.539207][ T3662] Bluetooth: hci0: command 0x0419 tx timeout [ 1057.539288][T13757] Bluetooth: hci1: command 0x0419 tx timeout [ 1057.559755][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1057.567920][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1057.577104][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1057.587313][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1057.596608][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1057.605414][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1057.614361][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1057.622458][T13757] Bluetooth: hci3: command 0x0419 tx timeout [ 1057.697762][T17785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.708331][T13757] Bluetooth: hci4: command 0x0419 tx timeout [ 1057.754665][T17785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.807023][T17788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1057.823355][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1057.831676][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1057.840315][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1057.848766][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1057.857304][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1057.867109][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1057.891311][ T11] device hsr_slave_0 left promiscuous mode [ 1057.911317][ T11] device hsr_slave_1 left promiscuous mode [ 1057.917895][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.936575][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.961255][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.968706][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.990878][ T11] device bridge_slave_1 left promiscuous mode [ 1057.997125][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.006929][ T11] device bridge_slave_0 left promiscuous mode [ 1058.013567][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.028088][ T11] device hsr_slave_0 left promiscuous mode [ 1058.034869][ T11] device hsr_slave_1 left promiscuous mode [ 1058.041891][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.049712][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.059542][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.067026][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.076951][ T11] device bridge_slave_1 left promiscuous mode [ 1058.083604][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.093119][ T11] device bridge_slave_0 left promiscuous mode [ 1058.100035][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.118109][ T11] device hsr_slave_0 left promiscuous mode [ 1058.124750][ T11] device hsr_slave_1 left promiscuous mode [ 1058.142549][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.158383][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.178372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.186455][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.196534][ T11] device bridge_slave_1 left promiscuous mode [ 1058.203650][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.215172][ T11] device bridge_slave_0 left promiscuous mode [ 1058.234608][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.287358][ T11] device veth1_macvtap left promiscuous mode [ 1058.294011][ T11] device veth0_macvtap left promiscuous mode [ 1058.309474][ T11] device veth1_vlan left promiscuous mode [ 1058.315354][ T11] device veth0_vlan left promiscuous mode [ 1058.333805][ T11] device veth1_macvtap left promiscuous mode [ 1058.348777][ T11] device veth0_macvtap left promiscuous mode [ 1058.366725][ T11] device veth1_vlan left promiscuous mode [ 1058.372932][ T11] device veth0_vlan left promiscuous mode [ 1058.390800][ T11] device veth1_macvtap left promiscuous mode [ 1058.396876][ T11] device veth0_macvtap left promiscuous mode [ 1058.413892][ T11] device veth1_vlan left promiscuous mode [ 1058.425948][ T11] device veth0_vlan left promiscuous mode [ 1059.146618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1059.188334][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1059.217793][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.280077][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.491064][ T11] bond0 (unregistering): Released all slaves [ 1059.900239][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1059.933190][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1059.989349][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.039386][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.247279][ T11] bond0 (unregistering): Released all slaves [ 1060.490031][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1060.518756][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1060.546920][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.576548][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.707584][ T11] bond0 (unregistering): Released all slaves [ 1060.785085][T17788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1060.833733][T17788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1060.883669][T17790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1060.948433][T17790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1060.992129][T17790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1061.022319][T17790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1061.044792][T17783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1061.090501][T17783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1061.113136][T17783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1061.132001][T17783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1061.202322][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1061.210809][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1061.221999][ T11] ------------[ cut here ]------------ [ 1061.227870][ T11] ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_purge+0x0/0x490 [ 1061.240735][ T11] WARNING: CPU: 1 PID: 11 at lib/debugobjects.c:512 debug_check_no_obj_freed+0x451/0x610 [ 1061.250862][ T11] Modules linked in: [ 1061.254798][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.24-syzkaller #0 [ 1061.263062][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1061.273303][ T11] Workqueue: netns cleanup_net [ 1061.278200][ T11] RIP: 0010:debug_check_no_obj_freed+0x451/0x610 [ 1061.284757][ T11] Code: 74 08 48 89 ef e8 df 80 a7 fd 48 8b 13 4c 8b 45 00 48 c7 c7 00 c2 3c 8b 48 c7 c6 c0 be 3c 8b 44 89 f1 4d 89 f9 e8 bf ef 19 fd <0f> 0b 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 38 ff 05 d4 79 1a [ 1061.305264][ T11] RSP: 0018:ffffc900001077e8 EFLAGS: 00010246 [ 1061.311468][ T11] RAX: 8db53ef2d0da6300 RBX: ffffffff8b3cc278 RCX: ffff88813fe4ba80 [ 1061.319536][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1061.327549][ T11] RBP: ffffffff8aed9c60 R08: ffffffff81521c6e R09: fffff52000020eb5 [ 1061.328444][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.335682][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8aed9c60 [ 1061.335766][ T11] R13: ffff8880645ae330 R14: 0000000000000000 R15: ffffffff8a4d1bc0 [ 1061.335784][ T11] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1061.335805][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.335823][ T11] CR2: 00007f9d622109b0 CR3: 000000001d10e000 CR4: 00000000003506e0 [ 1061.335844][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1061.335859][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1061.335875][ T11] Call Trace: [ 1061.335883][ T11] [ 1061.335908][ T11] __kmem_cache_free+0x205/0x3c0 [ 1061.335943][ T11] ? device_release+0x91/0x1c0 [ 1061.415102][ T11] ? netdev_uevent+0x90/0x90 [ 1061.416301][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.419954][ T11] device_release+0x91/0x1c0 [ 1061.419988][ T11] kobject_put+0x224/0x460 [ 1061.420029][ T11] netdev_run_todo+0xe56/0xf40 [ 1061.440777][ T11] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 1061.445888][ T11] ? netdev_refcnt_read+0x50/0x50 [ 1061.451093][ T11] ? unregister_netdevice_queue+0x258/0x350 [ 1061.457140][ T11] ? list_netdevice+0x450/0x450 [ 1061.461889][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.462160][ T11] ? br_dev_delete+0xd0/0x100 [ 1061.473379][ T11] default_device_exit_batch+0x5c1/0x630 [ 1061.479205][ T11] ? net_rps_action_and_irq_enable+0x220/0x220 [ 1061.485408][ T11] ? rdma_dev_init_net+0x280/0x280 [ 1061.488336][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.490621][ T11] ? mutex_lock_nested+0x17/0x20 [ 1061.490656][ T11] ? net_rps_action_and_irq_enable+0x220/0x220 [ 1061.490686][ T11] cleanup_net+0x763/0xb60 [ 1061.490737][ T11] ? ops_free_list+0x340/0x340 [ 1061.490797][ T11] process_one_work+0x8aa/0x11f0 [ 1061.522957][ T11] ? worker_detach_from_pool+0x260/0x260 [ 1061.528824][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1061.534469][ T11] ? kthread_data+0x4e/0xc0 [ 1061.539166][ T11] ? wq_worker_running+0x97/0x190 [ 1061.539475][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.544212][ T11] worker_thread+0xa5f/0x1210 [ 1061.556178][ T11] kthread+0x268/0x300 [ 1061.560363][ T11] ? rcu_lock_release+0x20/0x20 [ 1061.565255][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1061.569425][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.569939][ T11] ret_from_fork+0x1f/0x30 [ 1061.581571][ T11] [ 1061.584618][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1061.588861][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.598498][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.24-syzkaller #0 [ 1061.606490][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1061.616549][ T11] Workqueue: netns cleanup_net [ 1061.621330][ T11] Call Trace: [ 1061.624611][ T11] [ 1061.627559][ T11] dump_stack_lvl+0x1e3/0x2cb [ 1061.632256][ T11] ? nf_tcp_handle_invalid+0x642/0x642 [ 1061.637730][ T11] ? panic+0x75d/0x75d [ 1061.641825][ T11] ? vscnprintf+0x59/0x80 [ 1061.646173][ T11] panic+0x318/0x75d [ 1061.650084][ T11] ? __warn+0x169/0x520 [ 1061.654250][ T11] ? memcpy_page_flushcache+0xfc/0xfc [ 1061.659643][ T11] ? ret_from_fork+0x1f/0x30 [ 1061.664250][ T11] __warn+0x348/0x520 [ 1061.668244][ T11] ? debug_check_no_obj_freed+0x451/0x610 [ 1061.673978][ T11] report_bug+0x2af/0x500 [ 1061.678325][ T11] ? debug_check_no_obj_freed+0x451/0x610 [ 1061.684062][ T11] handle_bug+0x3d/0x70 [ 1061.688231][ T11] exc_invalid_op+0x16/0x40 [ 1061.692763][ T11] asm_exc_invalid_op+0x16/0x20 [ 1061.697635][ T11] RIP: 0010:debug_check_no_obj_freed+0x451/0x610 [ 1061.703980][ T11] Code: 74 08 48 89 ef e8 df 80 a7 fd 48 8b 13 4c 8b 45 00 48 c7 c7 00 c2 3c 8b 48 c7 c6 c0 be 3c 8b 44 89 f1 4d 89 f9 e8 bf ef 19 fd <0f> 0b 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 38 ff 05 d4 79 1a [ 1061.723605][ T11] RSP: 0018:ffffc900001077e8 EFLAGS: 00010246 [ 1061.729681][ T11] RAX: 8db53ef2d0da6300 RBX: ffffffff8b3cc278 RCX: ffff88813fe4ba80 [ 1061.737663][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1061.745639][ T11] RBP: ffffffff8aed9c60 R08: ffffffff81521c6e R09: fffff52000020eb5 [ 1061.753705][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8aed9c60 [ 1061.761771][ T11] R13: ffff8880645ae330 R14: 0000000000000000 R15: ffffffff8a4d1bc0 [ 1061.769746][ T11] ? batadv_dat_drop_broadcast_packet+0x240/0x240 [ 1061.776180][ T11] ? __warn_printk+0x28e/0x350 [ 1061.780977][ T11] ? debug_check_no_obj_freed+0x451/0x610 [ 1061.786731][ T11] __kmem_cache_free+0x205/0x3c0 [ 1061.791700][ T11] ? device_release+0x91/0x1c0 [ 1061.796486][ T11] ? netdev_uevent+0x90/0x90 [ 1061.801095][ T11] device_release+0x91/0x1c0 [ 1061.805695][ T11] kobject_put+0x224/0x460 [ 1061.810126][ T11] netdev_run_todo+0xe56/0xf40 [ 1061.814925][ T11] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 1061.820052][ T11] ? netdev_refcnt_read+0x50/0x50 [ 1061.825093][ T11] ? unregister_netdevice_queue+0x258/0x350 [ 1061.831004][ T11] ? list_netdevice+0x450/0x450 [ 1061.835874][ T11] ? br_dev_delete+0xd0/0x100 [ 1061.840581][ T11] default_device_exit_batch+0x5c1/0x630 [ 1061.846229][ T11] ? net_rps_action_and_irq_enable+0x220/0x220 [ 1061.852404][ T11] ? rdma_dev_init_net+0x280/0x280 [ 1061.857620][ T11] ? mutex_lock_nested+0x17/0x20 [ 1061.862570][ T11] ? net_rps_action_and_irq_enable+0x220/0x220 [ 1061.868731][ T11] cleanup_net+0x763/0xb60 [ 1061.873181][ T11] ? ops_free_list+0x340/0x340 [ 1061.877968][ T11] process_one_work+0x8aa/0x11f0 [ 1061.882947][ T11] ? worker_detach_from_pool+0x260/0x260 [ 1061.888592][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1061.894155][ T11] ? kthread_data+0x4e/0xc0 [ 1061.898684][ T11] ? wq_worker_running+0x97/0x190 [ 1061.903717][ T11] worker_thread+0xa5f/0x1210 [ 1061.908444][ T11] kthread+0x268/0x300 [ 1061.912521][ T11] ? rcu_lock_release+0x20/0x20 [ 1061.917383][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1061.921982][ T11] ret_from_fork+0x1f/0x30 [ 1061.926427][ T11] [ 1061.929754][ T11] Kernel Offset: disabled [ 1061.934270][ T11] Rebooting in 86400 seconds..