96ff070100000085100000faffffff181b0000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff]}, 0x80) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x9, 0x6, 0xc9dd, 0x1210, r0, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000300)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xf6, &(0x7f00000001c0)=""/246, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x8, 0x6632f9e7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r4, r0, r5, r6, r7]}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r8}, 0xc) 14:30:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:47 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x8b91, 0x8}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x4, 0x8}, @jmp={0x5, 0x0, 0x9, 0x5, 0xc, 0xc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0xc2, &(0x7f00000001c0)=""/194, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0xab4c, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, r3]}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) 14:30:47 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1692.046017][T18187] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1692.077383][T18187] CPU: 0 PID: 18187 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1692.087933][T18187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.098004][T18187] Call Trace: [ 1692.101296][T18187] [ 1692.104239][T18187] dump_stack_lvl+0xcd/0x134 [ 1692.108856][T18187] dump_header+0x10b/0x7f9 [ 1692.113298][T18187] oom_kill_process.cold+0x10/0x15 [ 1692.118439][T18187] out_of_memory+0x358/0x14b0 [ 1692.123150][T18187] ? oom_killer_disable+0x270/0x270 [ 1692.128372][T18187] ? io_schedule_timeout+0x140/0x140 [ 1692.133694][T18187] mem_cgroup_out_of_memory+0x206/0x270 [ 1692.139277][T18187] ? mem_cgroup_margin+0x130/0x130 [ 1692.144438][T18187] memory_max_write+0x25c/0x3b0 [ 1692.149311][T18187] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1692.155401][T18187] ? lock_release+0x720/0x720 [ 1692.160110][T18187] cgroup_file_write+0x1de/0x770 [ 1692.165078][T18187] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1692.171167][T18187] ? kill_css+0x370/0x370 [ 1692.175516][T18187] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1692.181790][T18187] ? kill_css+0x370/0x370 [ 1692.186123][T18187] kernfs_fop_write_iter+0x3f8/0x610 [ 1692.191412][T18187] new_sync_write+0x38a/0x560 [ 1692.196103][T18187] ? new_sync_read+0x5f0/0x5f0 [ 1692.200882][T18187] ? lock_release+0x720/0x720 [ 1692.205599][T18187] vfs_write+0x7c0/0xac0 [ 1692.209857][T18187] ksys_write+0x127/0x250 [ 1692.214200][T18187] ? __ia32_sys_read+0xb0/0xb0 [ 1692.218973][T18187] ? syscall_enter_from_user_mode+0x21/0x70 [ 1692.224879][T18187] do_syscall_64+0x35/0xb0 [ 1692.229305][T18187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.235209][T18187] RIP: 0033:0x7f31406890e9 [ 1692.239628][T18187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1692.259243][T18187] RSP: 002b:00007f3141774168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1692.268010][T18187] RAX: ffffffffffffffda RBX: 00007f314079bf60 RCX: 00007f31406890e9 [ 1692.275980][T18187] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1692.283950][T18187] RBP: 00007f31406e308d R08: 0000000000000000 R09: 0000000000000000 [ 1692.291916][T18187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.299888][T18187] R13: 00007ffd7eaa4fef R14: 00007f3141774300 R15: 0000000000022000 [ 1692.307882][T18187] [ 1692.320506][T18187] memory: usage 912kB, limit 0kB, failcnt 180 [ 1692.329549][T18187] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1692.336438][T18187] Memory cgroup stats for /syz1: [ 1692.336635][T18187] anon 139264 [ 1692.336635][T18187] file 139264 [ 1692.336635][T18187] kernel 655360 [ 1692.336635][T18187] kernel_stack 65536 [ 1692.336635][T18187] pagetables 81920 [ 1692.336635][T18187] percpu 0 [ 1692.336635][T18187] sock 0 [ 1692.336635][T18187] vmalloc 0 [ 1692.336635][T18187] shmem 139264 [ 1692.336635][T18187] file_mapped 135168 [ 1692.336635][T18187] file_dirty 0 [ 1692.336635][T18187] file_writeback 0 [ 1692.336635][T18187] swapcached 0 [ 1692.336635][T18187] anon_thp 0 [ 1692.336635][T18187] file_thp 0 [ 1692.336635][T18187] shmem_thp 0 [ 1692.336635][T18187] inactive_anon 143360 [ 1692.336635][T18187] active_anon 135168 [ 1692.336635][T18187] inactive_file 0 [ 1692.336635][T18187] active_file 0 [ 1692.336635][T18187] unevictable 0 [ 1692.336635][T18187] slab_reclaimable 152832 [ 1692.336635][T18187] slab_unreclaimable 321936 [ 1692.336635][T18187] slab 474768 [ 1692.336635][T18187] workingset_refault_anon 0 [ 1692.336635][T18187] workingset_refault_file 4 [ 1692.432094][T18187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18015,uid=0 [ 1692.451286][T18187] Memory cgroup out of memory: Killed process 18015 (syz-executor.1) total-vm:50532kB, anon-rss:380kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1692.476067][ T28] oom_reaper: reaped process 18015 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1692.493530][T18187] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1692.511879][T18187] CPU: 0 PID: 18187 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1692.522411][T18187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.532608][T18187] Call Trace: [ 1692.535976][T18187] [ 1692.538898][T18187] dump_stack_lvl+0xcd/0x134 [ 1692.543490][T18187] dump_header+0x10b/0x7f9 [ 1692.547914][T18187] oom_kill_process.cold+0x10/0x15 [ 1692.553023][T18187] out_of_memory+0x358/0x14b0 [ 1692.557750][T18187] ? oom_killer_disable+0x270/0x270 [ 1692.562950][T18187] ? find_held_lock+0x2d/0x110 [ 1692.567743][T18187] mem_cgroup_out_of_memory+0x206/0x270 [ 1692.573317][T18187] ? mem_cgroup_margin+0x130/0x130 [ 1692.578460][T18187] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1692.584561][T18187] memory_max_write+0x25c/0x3b0 [ 1692.589529][T18187] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1692.595623][T18187] ? lock_release+0x720/0x720 [ 1692.600340][T18187] cgroup_file_write+0x1de/0x770 [ 1692.605305][T18187] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1692.611378][T18187] ? kill_css+0x370/0x370 [ 1692.615714][T18187] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1692.621974][T18187] ? kill_css+0x370/0x370 [ 1692.626313][T18187] kernfs_fop_write_iter+0x3f8/0x610 [ 1692.631618][T18187] new_sync_write+0x38a/0x560 [ 1692.636305][T18187] ? new_sync_read+0x5f0/0x5f0 [ 1692.641080][T18187] ? lock_release+0x720/0x720 [ 1692.645786][T18187] vfs_write+0x7c0/0xac0 [ 1692.650039][T18187] ksys_write+0x127/0x250 [ 1692.654373][T18187] ? __ia32_sys_read+0xb0/0xb0 [ 1692.659142][T18187] ? syscall_enter_from_user_mode+0x21/0x70 [ 1692.665050][T18187] do_syscall_64+0x35/0xb0 [ 1692.669472][T18187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.675371][T18187] RIP: 0033:0x7f31406890e9 [ 1692.679788][T18187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1692.699409][T18187] RSP: 002b:00007f3141774168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1692.707822][T18187] RAX: ffffffffffffffda RBX: 00007f314079bf60 RCX: 00007f31406890e9 [ 1692.715791][T18187] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1692.723765][T18187] RBP: 00007f31406e308d R08: 0000000000000000 R09: 0000000000000000 [ 1692.731734][T18187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.739703][T18187] R13: 00007ffd7eaa4fef R14: 00007f3141774300 R15: 0000000000022000 [ 1692.747870][T18187] [ 1692.762482][T18187] memory: usage 880kB, limit 0kB, failcnt 180 [ 1692.768783][T18187] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1692.775667][T18187] Memory cgroup stats for /syz1: [ 1692.775907][T18187] anon 118784 [ 1692.775907][T18187] file 139264 [ 1692.775907][T18187] kernel 610304 [ 1692.775907][T18187] kernel_stack 32768 [ 1692.775907][T18187] pagetables 73728 [ 1692.775907][T18187] percpu 0 [ 1692.775907][T18187] sock 0 [ 1692.775907][T18187] vmalloc 0 [ 1692.775907][T18187] shmem 139264 [ 1692.775907][T18187] file_mapped 135168 [ 1692.775907][T18187] file_dirty 0 [ 1692.775907][T18187] file_writeback 0 [ 1692.775907][T18187] swapcached 0 [ 1692.775907][T18187] anon_thp 0 [ 1692.775907][T18187] file_thp 0 [ 1692.775907][T18187] shmem_thp 0 [ 1692.775907][T18187] inactive_anon 122880 [ 1692.775907][T18187] active_anon 135168 [ 1692.775907][T18187] inactive_file 0 [ 1692.775907][T18187] active_file 0 [ 1692.775907][T18187] unevictable 0 [ 1692.775907][T18187] slab_reclaimable 152832 [ 1692.775907][T18187] slab_unreclaimable 321936 [ 1692.775907][T18187] slab 474768 [ 1692.775907][T18187] workingset_refault_anon 0 [ 1692.775907][T18187] workingset_refault_file 4 [ 1692.874878][T18187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18186,uid=0 [ 1692.891216][T18187] Memory cgroup out of memory: Killed process 18187 (syz-executor.1) total-vm:54504kB, anon-rss:424kB, file-rss:8888kB, shmem-rss:56kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1692.925046][ T28] oom_reaper: reaped process 18187 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:16kB [ 1693.011648][ T9330] device hsr_slave_0 left promiscuous mode [ 1693.022658][ T9330] device hsr_slave_1 left promiscuous mode [ 1693.031585][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.043316][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.054561][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.066217][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.077765][ T9330] device bridge_slave_1 left promiscuous mode [ 1693.084663][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.095628][ T9330] device bridge_slave_0 left promiscuous mode [ 1693.104934][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.116059][ T9330] device veth1_macvtap left promiscuous mode [ 1693.124902][ T9330] device veth0_macvtap left promiscuous mode [ 1693.131138][ T9330] device veth1_vlan left promiscuous mode [ 1693.137024][ T9330] device veth0_vlan left promiscuous mode [ 1693.470206][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1693.501370][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1693.517429][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.534554][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.593709][ T9330] bond0 (unregistering): Released all slaves [ 1694.576402][T13551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1694.591160][T13551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1694.592835][T17007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1694.599816][T13551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1694.606411][ T7812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1694.616346][T17007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1694.622937][T13551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1694.630106][ T7812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1694.634539][T13551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1694.643786][ T7812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1694.651741][T13551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1694.655828][T17007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1694.758154][ T9330] device hsr_slave_0 left promiscuous mode [ 1694.764522][ T9330] device hsr_slave_1 left promiscuous mode [ 1694.771357][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.779115][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.788616][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.796011][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.805911][ T9330] device bridge_slave_1 left promiscuous mode [ 1694.812629][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.822065][ T9330] device bridge_slave_0 left promiscuous mode [ 1694.829654][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.841650][ T9330] device veth1_macvtap left promiscuous mode [ 1694.847875][ T9330] device veth0_macvtap left promiscuous mode [ 1694.853960][ T9330] device veth1_vlan left promiscuous mode [ 1694.859907][ T9330] device veth0_vlan left promiscuous mode [ 1695.014037][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1695.031934][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1695.052361][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.068092][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.125475][ T9330] bond0 (unregistering): Released all slaves [ 1695.302349][T18193] chnl_net:caif_netlink_parms(): no params data found [ 1695.318377][T18192] chnl_net:caif_netlink_parms(): no params data found [ 1695.419596][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.427139][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.435370][T18193] device bridge_slave_0 entered promiscuous mode [ 1695.461958][T18192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.470070][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.478181][T18192] device bridge_slave_0 entered promiscuous mode [ 1695.485547][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.501356][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.509447][T18193] device bridge_slave_1 entered promiscuous mode [ 1695.516233][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.523554][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.531711][T18192] device bridge_slave_1 entered promiscuous mode [ 1695.573550][T18192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.585639][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.597077][T18192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.628714][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.649808][T18192] team0: Port device team_slave_0 added [ 1695.658478][T18192] team0: Port device team_slave_1 added [ 1695.695884][T18193] team0: Port device team_slave_0 added [ 1695.704492][T18193] team0: Port device team_slave_1 added [ 1695.711135][T18192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.722036][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.748478][T18192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.781218][T18192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.788324][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.815057][T18192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.826659][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.833703][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.859985][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.881708][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.888926][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.915010][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.936377][T18192] device hsr_slave_0 entered promiscuous mode [ 1695.943073][T18192] device hsr_slave_1 entered promiscuous mode [ 1695.977618][T18193] device hsr_slave_0 entered promiscuous mode [ 1695.984372][T18193] device hsr_slave_1 entered promiscuous mode [ 1695.991405][T18193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1695.999401][T18193] Cannot create hsr debugfs directory [ 1696.195034][T18192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.215518][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1696.224181][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1696.239010][T18192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.247248][ T3646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1696.267867][T18193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.284560][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1696.295181][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1696.309352][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.316447][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.332673][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1696.358616][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1696.373497][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1696.382931][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.390073][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.398973][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1696.407878][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1696.415694][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1696.440552][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1696.462397][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1696.479732][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1696.498716][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1696.508313][T18193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.525709][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1696.544784][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1696.554976][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1696.575120][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1696.598197][T18192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1696.615989][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1696.626029][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1696.637157][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.644245][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.655373][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1696.673977][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1696.685530][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1696.694267][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.701361][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.712170][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1696.717206][ T7092] Bluetooth: hci2: command 0x0409 tx timeout [ 1696.721720][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1696.745766][T18193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1696.757581][T16992] Bluetooth: hci4: command 0x0409 tx timeout [ 1696.761102][T18193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1696.785934][T18192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.794986][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1696.805348][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1696.814101][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1696.823165][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1696.831825][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1696.840491][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1696.848958][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1696.856411][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1696.877857][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1696.885890][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1696.894244][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1696.902463][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1696.912625][T18193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.223125][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1697.238064][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1697.260025][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1697.274752][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1697.289213][T18192] device veth0_vlan entered promiscuous mode [ 1697.308377][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1697.316003][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1697.330504][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1697.339586][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1697.353741][T18192] device veth1_vlan entered promiscuous mode [ 1697.375348][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1697.384958][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1697.393603][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1697.403316][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1697.413049][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1697.421644][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1697.429725][T18193] device veth0_vlan entered promiscuous mode [ 1697.444950][T18193] device veth1_vlan entered promiscuous mode [ 1697.454876][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1697.464977][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1697.474234][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1697.485027][T18192] device veth0_macvtap entered promiscuous mode [ 1697.502189][T18192] device veth1_macvtap entered promiscuous mode [ 1697.517615][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1697.525636][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1697.535382][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1697.543625][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1697.552369][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1697.563308][T18193] device veth0_macvtap entered promiscuous mode [ 1697.576259][T18192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1697.587412][T18192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.598459][T18192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1697.612015][T18192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.623238][T18192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.641455][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1697.650404][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1697.659882][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1697.670438][T18193] device veth1_macvtap entered promiscuous mode [ 1697.691943][T18192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1697.703287][T18192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.713561][T18192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1697.725535][T18192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.743435][T18192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.753059][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1697.762433][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1697.771529][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1697.800104][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1697.816649][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.826629][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1697.840320][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.850837][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1697.861441][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.873486][T18193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.881045][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1697.890089][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1697.952910][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.957061][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1697.961349][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.975982][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.989910][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1698.001974][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.011896][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1698.022349][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.033271][T18193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.049323][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1698.057472][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1698.065963][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1698.088302][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.106534][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.123536][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1698.207621][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.219176][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.244998][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1698.263225][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.277552][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.290203][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1698.363624][T18233] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1698.383481][T18233] CPU: 0 PID: 18233 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1698.394030][T18233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.404100][T18233] Call Trace: [ 1698.407390][T18233] [ 1698.410334][T18233] dump_stack_lvl+0xcd/0x134 [ 1698.414965][T18233] dump_header+0x10b/0x7f9 [ 1698.419416][T18233] oom_kill_process.cold+0x10/0x15 [ 1698.424556][T18233] out_of_memory+0x358/0x14b0 [ 1698.429277][T18233] ? oom_killer_disable+0x270/0x270 [ 1698.434508][T18233] ? io_schedule_timeout+0x140/0x140 [ 1698.439833][T18233] mem_cgroup_out_of_memory+0x206/0x270 [ 1698.445403][T18233] ? mem_cgroup_margin+0x130/0x130 [ 1698.450568][T18233] memory_max_write+0x25c/0x3b0 [ 1698.455454][T18233] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1698.461555][T18233] ? lock_release+0x720/0x720 [ 1698.466264][T18233] cgroup_file_write+0x1de/0x770 [ 1698.471224][T18233] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1698.477314][T18233] ? kill_css+0x370/0x370 [ 1698.481674][T18233] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1698.487954][T18233] ? kill_css+0x370/0x370 [ 1698.492306][T18233] kernfs_fop_write_iter+0x3f8/0x610 [ 1698.497619][T18233] new_sync_write+0x38a/0x560 [ 1698.502322][T18233] ? new_sync_read+0x5f0/0x5f0 [ 1698.507112][T18233] ? lock_release+0x720/0x720 [ 1698.511832][T18233] vfs_write+0x7c0/0xac0 [ 1698.516100][T18233] ksys_write+0x127/0x250 [ 1698.520446][T18233] ? __ia32_sys_read+0xb0/0xb0 [ 1698.525230][T18233] ? syscall_enter_from_user_mode+0x21/0x70 [ 1698.531151][T18233] do_syscall_64+0x35/0xb0 [ 1698.535600][T18233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1698.541545][T18233] RIP: 0033:0x7fcba88890e9 [ 1698.545979][T18233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1698.565618][T18233] RSP: 002b:00007fcba99d8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.574062][T18233] RAX: ffffffffffffffda RBX: 00007fcba899bf60 RCX: 00007fcba88890e9 [ 1698.582054][T18233] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1698.590041][T18233] RBP: 00007fcba88e308d R08: 0000000000000000 R09: 0000000000000000 [ 1698.598056][T18233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.606048][T18233] R13: 00007ffcfb1a6e0f R14: 00007fcba99d8300 R15: 0000000000022000 [ 1698.614064][T18233] [ 1698.653432][T18233] memory: usage 824kB, limit 0kB, failcnt 154 [ 1698.659896][T18233] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1698.672446][T18233] Memory cgroup stats for /syz5: [ 1698.672631][T18233] anon 114688 [ 1698.672631][T18233] file 282624 [ 1698.672631][T18233] kernel 446464 [ 1698.672631][T18233] kernel_stack 65536 [ 1698.672631][T18233] pagetables 77824 [ 1698.672631][T18233] percpu 0 [ 1698.672631][T18233] sock 0 [ 1698.672631][T18233] vmalloc 0 [ 1698.672631][T18233] shmem 282624 [ 1698.672631][T18233] file_mapped 282624 [ 1698.672631][T18233] file_dirty 0 [ 1698.672631][T18233] file_writeback 0 [ 1698.672631][T18233] swapcached 0 [ 1698.672631][T18233] anon_thp 0 [ 1698.672631][T18233] file_thp 0 [ 1698.672631][T18233] shmem_thp 0 [ 1698.672631][T18233] inactive_anon 131072 [ 1698.672631][T18233] active_anon 266240 [ 1698.672631][T18233] inactive_file 0 [ 1698.672631][T18233] active_file 0 [ 1698.672631][T18233] unevictable 0 [ 1698.672631][T18233] slab_reclaimable 83552 [ 1698.672631][T18233] slab_unreclaimable 192160 [ 1698.672631][T18233] slab 275712 [ 1698.672631][T18233] workingset_refault_anon 0 [ 1698.672631][T18233] workingset_refault_file 15 [ 1698.786055][T18233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18193,uid=0 [ 1698.797935][T17389] Bluetooth: hci2: command 0x041b tx timeout [ 1698.803166][T16992] Bluetooth: hci4: command 0x041b tx timeout [ 1698.816637][T18233] Memory cgroup out of memory: Killed process 18193 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1698.834960][T18231] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1698.835481][ T28] oom_reaper: reaped process 18193 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1698.853594][T18231] CPU: 1 PID: 18231 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1698.867474][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.877541][T18231] Call Trace: [ 1698.880812][T18231] [ 1698.883731][T18231] dump_stack_lvl+0xcd/0x134 [ 1698.888320][T18231] dump_header+0x10b/0x7f9 [ 1698.892730][T18231] oom_kill_process.cold+0x10/0x15 [ 1698.897841][T18231] out_of_memory+0x358/0x14b0 [ 1698.902515][T18231] ? oom_killer_disable+0x270/0x270 [ 1698.907715][T18231] ? mark_held_locks+0x9f/0xe0 [ 1698.912506][T18231] mem_cgroup_out_of_memory+0x206/0x270 [ 1698.918079][T18231] ? mem_cgroup_margin+0x130/0x130 [ 1698.923218][T18231] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1698.929041][T18231] memory_max_write+0x25c/0x3b0 [ 1698.933900][T18231] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1698.939981][T18231] ? lock_release+0x720/0x720 [ 1698.944677][T18231] cgroup_file_write+0x1de/0x770 [ 1698.949624][T18231] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1698.955700][T18231] ? kill_css+0x370/0x370 [ 1698.960036][T18231] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1698.966291][T18231] ? kill_css+0x370/0x370 [ 1698.970625][T18231] kernfs_fop_write_iter+0x3f8/0x610 [ 1698.975924][T18231] new_sync_write+0x38a/0x560 [ 1698.980609][T18231] ? new_sync_read+0x5f0/0x5f0 [ 1698.985382][T18231] ? lock_release+0x720/0x720 [ 1698.990068][T18231] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1698.996253][T18231] vfs_write+0x7c0/0xac0 [ 1699.000508][T18231] ksys_write+0x127/0x250 [ 1699.004845][T18231] ? __ia32_sys_read+0xb0/0xb0 [ 1699.009618][T18231] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1699.015522][T18231] do_syscall_64+0x35/0xb0 [ 1699.019944][T18231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.025849][T18231] RIP: 0033:0x7feea20890e9 [ 1699.030265][T18231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1699.049874][T18231] RSP: 002b:00007feea0ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1699.058292][T18231] RAX: ffffffffffffffda RBX: 00007feea219bf60 RCX: 00007feea20890e9 [ 1699.066261][T18231] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1699.074228][T18231] RBP: 00007feea20e308d R08: 0000000000000000 R09: 0000000000000000 [ 1699.082197][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.090165][T18231] R13: 00007fff49880b0f R14: 00007feea0ffe300 R15: 0000000000022000 [ 1699.098163][T18231] [ 1699.128344][T18231] memory: usage 628kB, limit 0kB, failcnt 288 [ 1699.138027][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1699.158139][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1699.171055][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1699.171642][T18231] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1699.188222][T18231] Memory cgroup stats for /syz4: [ 1699.188428][T18231] anon 110592 [ 1699.188428][T18231] file 208896 [ 1699.188428][T18231] kernel 290816 [ 1699.188428][T18231] kernel_stack 32768 [ 1699.188428][T18231] pagetables 81920 [ 1699.188428][T18231] percpu 0 [ 1699.188428][T18231] sock 0 [ 1699.188428][T18231] vmalloc 0 [ 1699.188428][T18231] shmem 208896 [ 1699.188428][T18231] file_mapped 159744 [ 1699.188428][T18231] file_dirty 0 [ 1699.188428][T18231] file_writeback 0 [ 1699.188428][T18231] swapcached 0 [ 1699.188428][T18231] anon_thp 0 [ 1699.188428][T18231] file_thp 0 [ 1699.188428][T18231] shmem_thp 0 [ 1699.188428][T18231] inactive_anon 159744 [ 1699.188428][T18231] active_anon 159744 [ 1699.188428][T18231] inactive_file 0 [ 1699.188428][T18231] active_file 0 [ 1699.188428][T18231] unevictable 0 [ 1699.188428][T18231] slab_reclaimable 46448 [ 1699.188428][T18231] slab_unreclaimable 101024 [ 1699.188428][T18231] slab 147472 [ 1699.188428][T18231] workingset_refault_anon 0 [ 1699.188428][T18231] workingset_refault_file 8 [ 1699.217496][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1699.297988][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1699.305909][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1699.310570][T18231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18192,uid=0 [ 1699.332831][T18231] Memory cgroup out of memory: Killed process 18192 (syz-executor.4) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 14:30:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1699.571413][T18229] chnl_net:caif_netlink_parms(): no params data found [ 1699.676562][T18229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.684273][T18229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.692724][T18229] device bridge_slave_0 entered promiscuous mode [ 1699.704508][T18229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.712849][T18229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.721808][T18229] device bridge_slave_1 entered promiscuous mode [ 1699.750193][T18229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.764926][T18229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.796651][T18229] team0: Port device team_slave_0 added [ 1699.803998][T18229] team0: Port device team_slave_1 added [ 1699.826599][T18229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.834038][T18229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.862584][T18229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.885458][T18229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.892675][T18229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.919651][T18229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.954870][T18229] device hsr_slave_0 entered promiscuous mode [ 1699.961556][T18229] device hsr_slave_1 entered promiscuous mode [ 1699.971760][T18229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.980104][T18229] Cannot create hsr debugfs directory [ 1700.059154][T18229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.066223][T18229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.073559][T18229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.080651][T18229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.145214][T18229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.175220][T18229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.184394][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1700.192786][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.201883][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.243559][ T90] device hsr_slave_0 left promiscuous mode [ 1700.250019][ T90] device hsr_slave_1 left promiscuous mode [ 1700.257892][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.265295][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.275058][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.286517][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.295195][ T90] device bridge_slave_1 left promiscuous mode [ 1700.301910][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.310703][ T90] device bridge_slave_0 left promiscuous mode [ 1700.321177][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.332117][ T90] device veth1_macvtap left promiscuous mode [ 1700.338384][ T90] device veth0_macvtap left promiscuous mode [ 1700.344457][ T90] device veth1_vlan left promiscuous mode [ 1700.350540][ T90] device veth0_vlan left promiscuous mode [ 1700.529807][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1700.542393][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1700.560637][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.578043][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.640255][ T90] bond0 (unregistering): Released all slaves [ 1700.704613][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1700.713045][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.720166][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.728124][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1700.736454][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.743566][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.758000][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1700.769073][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1700.778698][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1700.795695][T18229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1700.807212][T18229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.826194][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1700.835102][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1700.844422][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1700.852850][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1700.861253][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1700.869695][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1700.879891][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1700.895578][T18229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.907252][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1700.914748][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1701.200387][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1701.209816][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1701.241491][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1701.250253][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1701.261000][T18229] device veth0_vlan entered promiscuous mode [ 1701.275049][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1701.282901][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1701.297729][T18229] device veth1_vlan entered promiscuous mode [ 1701.323670][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1701.331650][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1701.340119][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1701.348985][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1701.365736][T18229] device veth0_macvtap entered promiscuous mode [ 1701.372174][T16992] Bluetooth: hci0: command 0x0409 tx timeout [ 1701.380541][T18229] device veth1_macvtap entered promiscuous mode [ 1701.394499][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1701.405134][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.415090][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1701.425710][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.435852][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1701.446845][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.458008][T18229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.470177][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1701.478363][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1701.486298][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1701.495623][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1701.506008][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1701.517524][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.530538][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1701.541138][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.553974][T18229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1701.564615][T18229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.578438][T18229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.593921][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1701.602785][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1701.665194][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.681197][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.706310][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1701.720447][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.729613][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.746554][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1701.957905][ T90] device hsr_slave_0 left promiscuous mode [ 1701.972152][ T90] device hsr_slave_1 left promiscuous mode [ 1701.983998][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.996442][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.014952][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.024070][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.041119][ T90] device bridge_slave_1 left promiscuous mode [ 1702.051837][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.063370][ T90] device bridge_slave_0 left promiscuous mode [ 1702.074256][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.102073][ T90] device veth1_macvtap left promiscuous mode [ 1702.112523][ T90] device veth0_macvtap left promiscuous mode [ 1702.120677][ T90] device veth1_vlan left promiscuous mode [ 1702.126636][ T90] device veth0_vlan left promiscuous mode [ 1702.155285][T18252] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1702.170975][T18252] CPU: 0 PID: 18252 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1702.181507][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.191577][T18252] Call Trace: [ 1702.194862][T18252] [ 1702.197802][T18252] dump_stack_lvl+0xcd/0x134 [ 1702.202589][T18252] dump_header+0x10b/0x7f9 [ 1702.207014][T18252] oom_kill_process.cold+0x10/0x15 [ 1702.212150][T18252] out_of_memory+0x358/0x14b0 [ 1702.216850][T18252] ? oom_killer_disable+0x270/0x270 [ 1702.222068][T18252] ? mark_held_locks+0x9f/0xe0 [ 1702.226844][T18252] mem_cgroup_out_of_memory+0x206/0x270 [ 1702.232430][T18252] ? mem_cgroup_margin+0x130/0x130 [ 1702.237546][T18252] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1702.243749][T18252] memory_max_write+0x25c/0x3b0 [ 1702.248625][T18252] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1702.254709][T18252] ? cgroup_file_write+0x7c/0x770 [ 1702.259743][T18252] cgroup_file_write+0x1de/0x770 [ 1702.264696][T18252] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1702.270770][T18252] ? kill_css+0x370/0x370 [ 1702.275110][T18252] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1702.281407][T18252] ? kill_css+0x370/0x370 [ 1702.285748][T18252] kernfs_fop_write_iter+0x3f8/0x610 [ 1702.291052][T18252] new_sync_write+0x38a/0x560 [ 1702.295732][T18252] ? new_sync_read+0x5f0/0x5f0 [ 1702.300496][T18252] ? lock_acquire+0x1ef/0x510 [ 1702.305186][T18252] ? lock_release+0x720/0x720 [ 1702.309891][T18252] vfs_write+0x7c0/0xac0 [ 1702.314143][T18252] ksys_write+0x127/0x250 [ 1702.318481][T18252] ? __ia32_sys_read+0xb0/0xb0 [ 1702.323251][T18252] ? syscall_enter_from_user_mode+0x21/0x70 [ 1702.329162][T18252] do_syscall_64+0x35/0xb0 [ 1702.333583][T18252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.339483][T18252] RIP: 0033:0x7f78310890e9 [ 1702.343898][T18252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1702.363508][T18252] RSP: 002b:00007f7832162168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1702.371922][T18252] RAX: ffffffffffffffda RBX: 00007f783119bf60 RCX: 00007f78310890e9 [ 1702.379904][T18252] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1702.387884][T18252] RBP: 00007f78310e308d R08: 0000000000000000 R09: 0000000000000000 [ 1702.395864][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.403839][T18252] R13: 00007ffc8b81d65f R14: 00007f7832162300 R15: 0000000000022000 [ 1702.412006][T18252] [ 1702.444667][T18252] memory: usage 516kB, limit 0kB, failcnt 144 [ 1702.452828][T18252] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1702.461008][T18252] Memory cgroup stats for /syz0: [ 1702.468158][T18252] anon 114688 [ 1702.468158][T18252] file 94208 [ 1702.468158][T18252] kernel 319488 [ 1702.468158][T18252] kernel_stack 65536 [ 1702.468158][T18252] pagetables 77824 [ 1702.468158][T18252] percpu 0 [ 1702.468158][T18252] sock 0 [ 1702.468158][T18252] vmalloc 0 [ 1702.468158][T18252] shmem 94208 [ 1702.468158][T18252] file_mapped 86016 [ 1702.468158][T18252] file_dirty 0 [ 1702.468158][T18252] file_writeback 0 [ 1702.468158][T18252] swapcached 0 [ 1702.468158][T18252] anon_thp 0 [ 1702.468158][T18252] file_thp 0 [ 1702.468158][T18252] shmem_thp 0 [ 1702.468158][T18252] inactive_anon 73728 [ 1702.468158][T18252] active_anon 94208 [ 1702.468158][T18252] inactive_file 0 [ 1702.468158][T18252] active_file 0 [ 1702.468158][T18252] unevictable 0 [ 1702.468158][T18252] slab_reclaimable 47728 [ 1702.468158][T18252] slab_unreclaimable 99048 [ 1702.468158][T18252] slab 146776 [ 1702.468158][T18252] workingset_refault_anon 0 [ 1702.468158][T18252] workingset_refault_file 8 [ 1702.578122][T18252] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18229,uid=0 [ 1702.600243][T18252] Memory cgroup out of memory: Killed process 18229 (syz-executor.0) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1702.626226][ T28] oom_reaper: reaped process 18229 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1702.778947][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1702.798405][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1702.813733][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.828570][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.891106][ T90] bond0 (unregistering): Released all slaves 14:30:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x2, 0x0, 0x41, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xb}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ffffffff000000000500000018680000080000000000000003000000b4072000100000001853000007000000000000000000000018490000fdffffff00000000000000001833000002000e00000000000000000055a2fcff0100000018100000", @ANYRES32, @ANYBLOB="0000000000000000cc161000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x6, 0x86, &(0x7f00000007c0)=""/134, 0x41000, 0xd, '\x00', r5, 0x17, r6, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x0, 0x6, 0x81}, 0x10, r4, r1}, 0x80) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r7, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r8}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='[*-\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0x101, 0x80, 0x1000, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x1000, 0x9, 0x1b7c, 0x62, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x1, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x4}, @generic={0x3f, 0x4, 0x0, 0x5, 0x800}, @ldst={0x0, 0x0, 0x0, 0xb, 0x3, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x17, &(0x7f0000000240)=""/23, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x3, 0x626}, 0x10, r4, r1, 0x0, &(0x7f0000000300)=[r9, r10, r0, r2, r0]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:30:58 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x8b91, 0x8}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x4, 0x8}, @jmp={0x5, 0x0, 0x9, 0x5, 0xc, 0xc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0xc2, &(0x7f00000001c0)=""/194, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0xab4c, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, r3]}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x8b91, 0x8}, 0xc) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x4, 0x8}, @jmp={0x5, 0x0, 0x9, 0x5, 0xc, 0xc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0xc2, &(0x7f00000001c0)=""/194, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0xab4c, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, r3]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) (async) 14:30:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x2, 0x0, 0x41, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xb}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ffffffff000000000500000018680000080000000000000003000000b4072000100000001853000007000000000000000000000018490000fdffffff00000000000000001833000002000e00000000000000000055a2fcff0100000018100000", @ANYRES32, @ANYBLOB="0000000000000000cc161000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x6, 0x86, &(0x7f00000007c0)=""/134, 0x41000, 0xd, '\x00', r5, 0x17, r6, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x0, 0x6, 0x81}, 0x10, r4, r1}, 0x80) (async) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r7, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r8}, 0x78) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='[*-\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0x101, 0x80, 0x1000, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x1000, 0x9, 0x1b7c, 0x62, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x1, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x4}, @generic={0x3f, 0x4, 0x0, 0x5, 0x800}, @ldst={0x0, 0x0, 0x0, 0xb, 0x3, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x17, &(0x7f0000000240)=""/23, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x3, 0x626}, 0x10, r4, r1, 0x0, &(0x7f0000000300)=[r9, r10, r0, r2, r0]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:30:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x8b91, 0x8}, 0xc) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x4, 0x8}, @jmp={0x5, 0x0, 0x9, 0x5, 0xc, 0xc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0xc2, &(0x7f00000001c0)=""/194, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0xab4c, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, r3]}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) 14:30:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100907e600000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:30:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x2, 0x0, 0x41, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xb}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ffffffff000000000500000018680000080000000000000003000000b4072000100000001853000007000000000000000000000018490000fdffffff00000000000000001833000002000e00000000000000000055a2fcff0100000018100000", @ANYRES32, @ANYBLOB="0000000000000000cc161000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x6, 0x86, &(0x7f00000007c0)=""/134, 0x41000, 0xd, '\x00', r5, 0x17, r6, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x0, 0x6, 0x81}, 0x10, r4, r1}, 0x80) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r7, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r8}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='[*-\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0x101, 0x80, 0x1000, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x1000, 0x9, 0x1b7c, 0x62, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ldst={0x2, 0x1, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x4}, @generic={0x3f, 0x4, 0x0, 0x5, 0x800}, @ldst={0x0, 0x0, 0x0, 0xb, 0x3, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x17, &(0x7f0000000240)=""/23, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x3, 0x626}, 0x10, r4, r1, 0x0, &(0x7f0000000300)=[r9, r10, r0, r2, r0]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:30:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:30:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100907e600000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:30:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="7c004dde212f14bccf32c16bed56de1defa1bdd0ccbbfac168c3164460b877d1a3f04c0f32a3b1230e75419989dd4d6902433556460b2b75ab754075c45b5e5af4e8869e2869e8714965f08c5ace09acb5e24566c5d3e9c8fc8dfb2f459b43326868905c022859bf2536bab792e0ef403354fbdcab3e44ede243fb3fa6b0ee1fb32c61111e951fb9b71f78b4ad3f713aeeff924a5db2fcd59ad5e873f556687cf64ece310fc34a61ec", 0xa9}, {&(0x7f00000001c0)="4afac876706accf317e494f1cc33b70225bae4f2057f5feac8f3c5032b7d933c122718fc64ef32c1bd03c19076e0f6dcb9e294c8cb88f50f799ed50cd8b55b87ddd2c7", 0x43}, {&(0x7f0000000240)="3a7fa9054a7706101583e9713fd0e3051bfdda8786263cf82de8d7cec8279ee783706d5bae59752f12cad392224bb335720c4b0dc71dc156f70c1f9c1d3d1e85c41034d1b2a3f24312954d40e3c8eea097caa609b2da9e088ed0d3657b10c4e73c74c24857e76479a7925f3120f79a37b9bfc1820cb53b2e2c3f294e4690ce2b4c78ef96992398a4f423c1", 0x8b}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="a01fe9811a3a7e1ba0baa898d93d7e010e158f3e87818d51f474ef7d34d70bf2c25dead810b29186e39f8589f2e63401ce531cc798760f1098d39c006947253d21b51ed6bc12ede38eab0226d5fc1b866aa554e3b74910aa4156b53b789109abde76217140b8bccb9a8d4f1657588827277c03722493e77da074a96e158eff6f96055c712176ce55b53d49c1620359926c26504245c26fb263b6a7f8a3bee07c34ab23dc103e34810b0befbaf921a8a68c4ed4fcacd178cdde42eeef6b8fad293164336f281eb7ab09e944fdac4143c03ba428c1209e5056ed3923dd32a90097c5bbb7815f5634f36c29b75bb4c029e41287addf958133", 0xf7}, {&(0x7f0000000300)}], 0x6, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x95, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xe, [0x7, 0x4, 0x1000]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb0, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @local]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x12, "b76d83250530135dddabb932a6588e4a"}, {0x0, 0x4, "e2bd"}]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x1, 0xc, "8aca7a46ba081a02eb93"}, {0x6, 0xc, "1d86777517dd776f09f9"}, {0x2, 0x7, "2eba899308"}, {0x2, 0x9, "a0131df619ed6d"}]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x7, "ecee9d3cb7"}, {0x0, 0x12, "541f01bd995f9fe53261a42d49738e54"}, {0xbab71ef0d489f348, 0xb, "9831008a2bbf315ed2"}, {0x6, 0x7, "ce306c9b60"}, {0x0, 0x7, "1b5d8a4237"}, {0x7, 0x6, "66e43397"}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}]}}}], 0x150}, 0x40000) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) 14:30:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100907e600000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) [ 1704.231539][ T90] device hsr_slave_0 left promiscuous mode [ 1704.239931][ T90] device hsr_slave_1 left promiscuous mode [ 1704.247434][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.254834][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.264873][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1704.272422][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.282220][ T90] device bridge_slave_1 left promiscuous mode [ 1704.288599][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.297393][ T90] device bridge_slave_0 left promiscuous mode [ 1704.303685][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.314634][ T90] device veth1_macvtap left promiscuous mode [ 1704.321779][ T90] device veth0_macvtap left promiscuous mode [ 1704.328012][ T90] device veth1_vlan left promiscuous mode [ 1704.333910][ T90] device veth0_vlan left promiscuous mode [ 1704.556275][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1704.581675][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1704.601145][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.618907][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.711469][ T90] bond0 (unregistering): Released all slaves [ 1705.692639][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1705.701201][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1705.710196][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1705.719129][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1705.726653][ T3646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1705.734832][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1705.810430][T18288] chnl_net:caif_netlink_parms(): no params data found [ 1705.851094][T18288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.858321][T18288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.866005][T18288] device bridge_slave_0 entered promiscuous mode [ 1705.874312][T18288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.881598][T18288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.892828][T18288] device bridge_slave_1 entered promiscuous mode [ 1705.912511][T18288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.925966][T18288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.952038][T18288] team0: Port device team_slave_0 added [ 1705.960585][T18288] team0: Port device team_slave_1 added [ 1705.976661][T18288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.983756][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.010719][T18288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.023168][T18288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.030426][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.057215][T18288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.086131][T13551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1706.105728][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1706.113356][T17007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1706.118518][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1706.123908][T17007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1706.136361][T17007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1706.143992][T17007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1706.145436][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1706.153883][T17007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1706.161498][T18288] device hsr_slave_0 entered promiscuous mode [ 1706.166061][T17007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1706.171447][ T7812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1706.188677][ T7812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1706.203799][T18288] device hsr_slave_1 entered promiscuous mode [ 1706.402326][T18292] chnl_net:caif_netlink_parms(): no params data found [ 1706.482844][T18294] chnl_net:caif_netlink_parms(): no params data found [ 1706.526674][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.534188][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.543116][T18292] device bridge_slave_0 entered promiscuous mode [ 1706.563683][T18288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.570897][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.578150][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.585916][T18292] device bridge_slave_1 entered promiscuous mode [ 1706.627986][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.644528][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.664422][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1706.672858][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1706.687253][T18294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.694328][T18294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.702776][T18294] device bridge_slave_0 entered promiscuous mode [ 1706.712717][T18288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.729094][T18294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.736178][T18294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.744578][T18294] device bridge_slave_1 entered promiscuous mode [ 1706.759040][T18292] team0: Port device team_slave_0 added [ 1706.767331][T18292] team0: Port device team_slave_1 added [ 1706.801567][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1706.810809][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1706.819320][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.826370][T16992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.834321][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1706.843141][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1706.851644][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.858763][T16992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.871714][T18294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.899125][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1706.907312][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1706.916335][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1706.925418][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1706.934963][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1706.943459][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1706.952261][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1706.960954][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1706.971012][T18294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.980904][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.988510][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.014685][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.029789][T18288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1707.041244][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1707.053811][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1707.061819][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1707.081101][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.092020][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.118526][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.166185][T18294] team0: Port device team_slave_0 added [ 1707.178725][T18292] device hsr_slave_0 entered promiscuous mode [ 1707.185378][T18292] device hsr_slave_1 entered promiscuous mode [ 1707.192658][T18292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.200631][T18292] Cannot create hsr debugfs directory [ 1707.222427][T18294] team0: Port device team_slave_1 added [ 1707.230751][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1707.238655][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1707.261767][T18288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.322377][T18294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.331126][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.358369][T18294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.383466][T18294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.393269][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.428253][T18294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.486778][T18294] device hsr_slave_0 entered promiscuous mode [ 1707.493882][T18294] device hsr_slave_1 entered promiscuous mode [ 1707.504653][T18294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.512714][T18294] Cannot create hsr debugfs directory [ 1707.652492][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.686436][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1707.695088][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1707.706523][T18292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.732164][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1707.742266][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1707.751560][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.758676][T16992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.785446][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1707.793531][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1707.803286][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1707.811881][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.818975][T16992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.827292][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1707.837248][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1707.845749][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1707.854503][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1707.863422][T16992] Bluetooth: hci0: command 0x0409 tx timeout [ 1707.880216][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1707.889231][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1707.910616][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1707.927404][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1707.936022][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1707.944696][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1707.962795][T18288] device veth0_vlan entered promiscuous mode [ 1707.969962][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1707.978520][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1707.986699][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1708.001161][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1708.009610][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1708.020632][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1708.046964][T18288] device veth1_vlan entered promiscuous mode [ 1708.061031][T18294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.081069][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.093975][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1708.103234][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1708.119113][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1708.126611][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1708.148880][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1708.157314][T15874] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 1708.177610][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1708.191248][T18294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.201907][T18288] device veth0_macvtap entered promiscuous mode [ 1708.213241][T18288] device veth1_macvtap entered promiscuous mode [ 1708.224925][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1708.235037][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1708.243822][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1708.252160][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1708.267018][T16991] Bluetooth: hci2: command 0x0409 tx timeout [ 1708.296075][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1708.305936][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1708.315556][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.322710][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.331584][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1708.340529][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1708.367460][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.374673][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.390176][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1708.399775][T17412] Bluetooth: hci5: command 0x0409 tx timeout [ 1708.401348][T18288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1708.432381][T18288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.454150][T18288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1708.477651][T18288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.489039][T18288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.513480][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1708.522305][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1708.532368][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1708.541787][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1708.552986][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1708.570185][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1708.582590][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1708.594626][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1708.623664][T18288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1708.648008][T18288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.674214][T18288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1708.703105][T18288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.720347][T18288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.740703][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1708.748583][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1708.758641][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1708.767492][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1708.775778][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1708.798718][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1708.814993][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1708.828850][T18294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1708.901718][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1708.917755][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1708.930751][T18294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.981170][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.998432][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.044512][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1709.076342][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1709.087182][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1709.109628][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.112541][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1709.127551][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1709.139200][T18292] device veth0_vlan entered promiscuous mode [ 1709.145670][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.154834][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1709.165918][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1709.178998][T18292] device veth1_vlan entered promiscuous mode [ 1709.187764][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1709.262653][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1709.272803][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1709.303686][T18292] device veth0_macvtap entered promiscuous mode [ 1709.323483][T18292] device veth1_macvtap entered promiscuous mode [ 1709.399059][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1709.420356][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.440821][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1709.458770][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.474732][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1709.538459][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.555536][T18292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1709.571515][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1709.589505][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1709.605081][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1709.615958][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1709.635531][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1709.650093][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.660769][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1709.674181][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.684769][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1709.695884][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.708199][T18292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.717380][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1709.731695][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1709.920141][T17403] Bluetooth: hci0: command 0x041b tx timeout [ 1709.996806][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1710.005966][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1710.096461][T18341] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1710.127413][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.135534][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.157341][T18341] CPU: 1 PID: 18341 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1710.167890][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.177960][T18341] Call Trace: [ 1710.181252][T18341] [ 1710.184193][T18341] dump_stack_lvl+0xcd/0x134 [ 1710.188813][T18341] dump_header+0x10b/0x7f9 [ 1710.193370][T18341] oom_kill_process.cold+0x10/0x15 [ 1710.198519][T18341] out_of_memory+0x358/0x14b0 [ 1710.203233][T18341] ? oom_killer_disable+0x270/0x270 [ 1710.208456][T18341] ? mark_held_locks+0x9f/0xe0 [ 1710.213262][T18341] mem_cgroup_out_of_memory+0x206/0x270 [ 1710.215097][T18294] device veth0_vlan entered promiscuous mode [ 1710.218840][T18341] ? mem_cgroup_margin+0x130/0x130 [ 1710.218897][T18341] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1710.235848][T18341] memory_max_write+0x25c/0x3b0 [ 1710.240753][T18341] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1710.243854][T18294] device veth1_vlan entered promiscuous mode [ 1710.246837][T18341] ? cgroup_file_write+0x7c/0x770 [ 1710.246890][T18341] cgroup_file_write+0x1de/0x770 [ 1710.262783][T18341] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1710.268866][T18341] ? kill_css+0x370/0x370 [ 1710.273208][T18341] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1710.279466][T18341] ? kill_css+0x370/0x370 [ 1710.283896][T18341] kernfs_fop_write_iter+0x3f8/0x610 [ 1710.289197][T18341] new_sync_write+0x38a/0x560 [ 1710.293882][T18341] ? new_sync_read+0x5f0/0x5f0 [ 1710.298666][T18341] ? lock_release+0x720/0x720 [ 1710.303376][T18341] vfs_write+0x7c0/0xac0 [ 1710.307632][T18341] ksys_write+0x127/0x250 [ 1710.311966][T18341] ? __ia32_sys_read+0xb0/0xb0 [ 1710.316741][T18341] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1710.322651][T18341] do_syscall_64+0x35/0xb0 [ 1710.327090][T18341] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.332992][T18341] RIP: 0033:0x7fad34a890e9 [ 1710.337411][T18341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1710.357023][T18341] RSP: 002b:00007fad35c57168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.365441][T18341] RAX: ffffffffffffffda RBX: 00007fad34b9bf60 RCX: 00007fad34a890e9 [ 1710.373424][T18341] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1710.381411][T18341] RBP: 00007fad34ae308d R08: 0000000000000000 R09: 0000000000000000 [ 1710.389398][T18341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.397386][T18341] R13: 00007ffc140d121f R14: 00007fad35c57300 R15: 0000000000022000 [ 1710.405409][T18341] [ 1710.414041][T18341] memory: usage 680kB, limit 0kB, failcnt 288 [ 1710.418334][T16001] Bluetooth: hci2: command 0x041b tx timeout [ 1710.420902][T18341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1710.437181][T18341] Memory cgroup stats for /syz4: [ 1710.437355][T18341] anon 114688 [ 1710.437355][T18341] file 208896 [ 1710.437355][T18341] kernel 311296 [ 1710.437355][T18341] kernel_stack 32768 [ 1710.437355][T18341] pagetables 81920 [ 1710.437355][T18341] percpu 0 [ 1710.437355][T18341] sock 0 [ 1710.437355][T18341] vmalloc 0 [ 1710.437355][T18341] shmem 208896 [ 1710.437355][T18341] file_mapped 159744 [ 1710.437355][T18341] file_dirty 0 [ 1710.437355][T18341] file_writeback 0 [ 1710.437355][T18341] swapcached 0 [ 1710.437355][T18341] anon_thp 0 [ 1710.437355][T18341] file_thp 0 [ 1710.437355][T18341] shmem_thp 0 [ 1710.437355][T18341] inactive_anon 163840 [ 1710.437355][T18341] active_anon 159744 [ 1710.437355][T18341] inactive_file 0 [ 1710.437355][T18341] active_file 0 [ 1710.437355][T18341] unevictable 0 [ 1710.437355][T18341] slab_reclaimable 52280 [ 1710.437355][T18341] slab_unreclaimable 123352 [ 1710.437355][T18341] slab 175632 [ 1710.437355][T18341] workingset_refault_anon 0 [ 1710.437355][T18341] workingset_refault_file 8 [ 1710.441019][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1710.442508][T18341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1710.541215][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1710.543158][T18341] ,cpuset= [ 1710.552164][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1710.556177][T18341] syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18288,uid=0 [ 1710.577038][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1710.578506][T18341] Memory cgroup out of memory: Killed process 18288 (syz-executor.4) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1710.611669][T16991] Bluetooth: hci5: command 0x041b tx timeout [ 1710.618501][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.626697][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.640810][T18294] device veth0_macvtap entered promiscuous mode [ 1710.654907][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1710.663500][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1710.672474][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1710.681679][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1710.689613][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1710.702818][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1710.712235][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1710.721723][T18294] device veth1_macvtap entered promiscuous mode [ 1710.769234][T18351] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1710.780055][T18351] CPU: 0 PID: 18351 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1710.790571][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.800616][T18351] Call Trace: [ 1710.803884][T18351] [ 1710.806799][T18351] dump_stack_lvl+0xcd/0x134 [ 1710.811386][T18351] dump_header+0x10b/0x7f9 [ 1710.815793][T18351] oom_kill_process.cold+0x10/0x15 [ 1710.820900][T18351] out_of_memory+0x358/0x14b0 [ 1710.825568][T18351] ? oom_killer_disable+0x270/0x270 [ 1710.830753][T18351] ? io_schedule_timeout+0x140/0x140 [ 1710.836029][T18351] mem_cgroup_out_of_memory+0x206/0x270 [ 1710.841578][T18351] ? mem_cgroup_margin+0x130/0x130 [ 1710.846733][T18351] memory_max_write+0x25c/0x3b0 [ 1710.851604][T18351] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1710.857684][T18351] ? lock_release+0x720/0x720 [ 1710.862352][T18351] cgroup_file_write+0x1de/0x770 [ 1710.867279][T18351] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1710.873333][T18351] ? kill_css+0x370/0x370 [ 1710.877647][T18351] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1710.883881][T18351] ? kill_css+0x370/0x370 [ 1710.888200][T18351] kernfs_fop_write_iter+0x3f8/0x610 [ 1710.893513][T18351] new_sync_write+0x38a/0x560 [ 1710.898201][T18351] ? new_sync_read+0x5f0/0x5f0 [ 1710.902960][T18351] ? lock_release+0x720/0x720 [ 1710.907657][T18351] vfs_write+0x7c0/0xac0 [ 1710.911893][T18351] ksys_write+0x127/0x250 [ 1710.916210][T18351] ? __ia32_sys_read+0xb0/0xb0 [ 1710.920959][T18351] ? syscall_enter_from_user_mode+0x21/0x70 [ 1710.926844][T18351] do_syscall_64+0x35/0xb0 [ 1710.931249][T18351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.937138][T18351] RIP: 0033:0x7f5b77a890e9 [ 1710.941562][T18351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1710.961177][T18351] RSP: 002b:00007f5b78b21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.969576][T18351] RAX: ffffffffffffffda RBX: 00007f5b77b9bf60 RCX: 00007f5b77a890e9 [ 1710.977532][T18351] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1710.985499][T18351] RBP: 00007f5b77ae308d R08: 0000000000000000 R09: 0000000000000000 [ 1710.993462][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.001439][T18351] R13: 00007ffeafa1c0af R14: 00007f5b78b21300 R15: 0000000000022000 [ 1711.009411][T18351] [ 1711.018813][T18351] memory: usage 560kB, limit 0kB, failcnt 180 [ 1711.025101][T18351] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1711.032204][T18351] Memory cgroup stats for /syz1: [ 1711.032426][T18351] anon 114688 [ 1711.032426][T18351] file 139264 [ 1711.032426][T18351] kernel 319488 [ 1711.032426][T18351] kernel_stack 65536 [ 1711.032426][T18351] pagetables 77824 [ 1711.032426][T18351] percpu 0 [ 1711.032426][T18351] sock 0 [ 1711.032426][T18351] vmalloc 0 [ 1711.032426][T18351] shmem 139264 [ 1711.032426][T18351] file_mapped 135168 [ 1711.032426][T18351] file_dirty 0 [ 1711.032426][T18351] file_writeback 0 [ 1711.032426][T18351] swapcached 0 [ 1711.032426][T18351] anon_thp 0 [ 1711.032426][T18351] file_thp 0 [ 1711.032426][T18351] shmem_thp 0 [ 1711.032426][T18351] inactive_anon 61440 [ 1711.032426][T18351] active_anon 135168 [ 1711.032426][T18351] inactive_file 0 [ 1711.032426][T18351] active_file 0 [ 1711.032426][T18351] unevictable 0 [ 1711.032426][T18351] slab_reclaimable 50784 [ 1711.032426][T18351] slab_unreclaimable 92616 [ 1711.032426][T18351] slab 143400 [ 1711.032426][T18351] workingset_refault_anon 0 [ 1711.032426][T18351] workingset_refault_file 4 [ 1711.129974][T18351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18292,uid=0 [ 1711.144361][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1711.149624][T18351] Memory cgroup out of memory: Killed process 18292 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1711.164185][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.185672][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1711.196758][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.207892][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1711.212664][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1711.225717][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.230989][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1711.243713][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1711.251742][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1711.259813][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1711.270406][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.280489][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1711.287902][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1711.289681][T18294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.327122][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1711.335256][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1711.364357][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1711.423213][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1711.433824][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.444128][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1711.454663][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.464507][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1711.474947][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.484802][T18294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1711.495628][T18294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.508588][T18294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.548746][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1711.557884][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:31:06 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:06 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="7c004dde212f14bccf32c16bed56de1defa1bdd0ccbbfac168c3164460b877d1a3f04c0f32a3b1230e75419989dd4d6902433556460b2b75ab754075c45b5e5af4e8869e2869e8714965f08c5ace09acb5e24566c5d3e9c8fc8dfb2f459b43326868905c022859bf2536bab792e0ef403354fbdcab3e44ede243fb3fa6b0ee1fb32c61111e951fb9b71f78b4ad3f713aeeff924a5db2fcd59ad5e873f556687cf64ece310fc34a61ec", 0xa9}, {&(0x7f00000001c0)="4afac876706accf317e494f1cc33b70225bae4f2057f5feac8f3c5032b7d933c122718fc64ef32c1bd03c19076e0f6dcb9e294c8cb88f50f799ed50cd8b55b87ddd2c7", 0x43}, {&(0x7f0000000240)="3a7fa9054a7706101583e9713fd0e3051bfdda8786263cf82de8d7cec8279ee783706d5bae59752f12cad392224bb335720c4b0dc71dc156f70c1f9c1d3d1e85c41034d1b2a3f24312954d40e3c8eea097caa609b2da9e088ed0d3657b10c4e73c74c24857e76479a7925f3120f79a37b9bfc1820cb53b2e2c3f294e4690ce2b4c78ef96992398a4f423c1", 0x8b}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="a01fe9811a3a7e1ba0baa898d93d7e010e158f3e87818d51f474ef7d34d70bf2c25dead810b29186e39f8589f2e63401ce531cc798760f1098d39c006947253d21b51ed6bc12ede38eab0226d5fc1b866aa554e3b74910aa4156b53b789109abde76217140b8bccb9a8d4f1657588827277c03722493e77da074a96e158eff6f96055c712176ce55b53d49c1620359926c26504245c26fb263b6a7f8a3bee07c34ab23dc103e34810b0befbaf921a8a68c4ed4fcacd178cdde42eeef6b8fad293164336f281eb7ab09e944fdac4143c03ba428c1209e5056ed3923dd32a90097c5bbb7815f5634f36c29b75bb4c029e41287addf958133", 0xf7}, {&(0x7f0000000300)}], 0x6, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x95, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xe, [0x7, 0x4, 0x1000]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb0, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @local]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x12, "b76d83250530135dddabb932a6588e4a"}, {0x0, 0x4, "e2bd"}]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x1, 0xc, "8aca7a46ba081a02eb93"}, {0x6, 0xc, "1d86777517dd776f09f9"}, {0x2, 0x7, "2eba899308"}, {0x2, 0x9, "a0131df619ed6d"}]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x7, "ecee9d3cb7"}, {0x0, 0x12, "541f01bd995f9fe53261a42d49738e54"}, {0xbab71ef0d489f348, 0xb, "9831008a2bbf315ed2"}, {0x6, 0x7, "ce306c9b60"}, {0x0, 0x7, "1b5d8a4237"}, {0x7, 0x6, "66e43397"}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}]}}}], 0x150}, 0x40000) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) [ 1711.821028][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.834727][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.836632][T18349] chnl_net:caif_netlink_parms(): no params data found [ 1711.858054][T16992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1711.872221][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.880894][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.901789][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1711.970812][T18361] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1711.981632][T18361] CPU: 1 PID: 18361 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1711.992156][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.002208][T18361] Call Trace: [ 1712.005486][T18361] [ 1712.008414][T18361] dump_stack_lvl+0xcd/0x134 [ 1712.013024][T18361] dump_header+0x10b/0x7f9 [ 1712.017447][T18361] oom_kill_process.cold+0x10/0x15 [ 1712.022579][T18361] out_of_memory+0x358/0x14b0 [ 1712.027265][T18361] ? oom_killer_disable+0x270/0x270 [ 1712.032478][T18361] ? io_schedule_timeout+0x140/0x140 [ 1712.037796][T18361] mem_cgroup_out_of_memory+0x206/0x270 [ 1712.043366][T18361] ? mem_cgroup_margin+0x130/0x130 [ 1712.048515][T18361] memory_max_write+0x25c/0x3b0 [ 1712.053380][T18361] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1712.059444][T18361] ? lock_release+0x720/0x720 [ 1712.064140][T18361] cgroup_file_write+0x1de/0x770 [ 1712.069072][T18361] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1712.075169][T18361] ? kill_css+0x370/0x370 [ 1712.079493][T18361] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1712.085755][T18361] ? kill_css+0x370/0x370 [ 1712.090095][T18361] kernfs_fop_write_iter+0x3f8/0x610 [ 1712.095384][T18361] new_sync_write+0x38a/0x560 [ 1712.100058][T18361] ? new_sync_read+0x5f0/0x5f0 [ 1712.104835][T18361] ? lock_release+0x720/0x720 [ 1712.109535][T18361] vfs_write+0x7c0/0xac0 [ 1712.113791][T18361] ksys_write+0x127/0x250 [ 1712.118114][T18361] ? __ia32_sys_read+0xb0/0xb0 [ 1712.122899][T18361] ? syscall_enter_from_user_mode+0x21/0x70 [ 1712.128800][T18361] do_syscall_64+0x35/0xb0 [ 1712.133236][T18361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.139149][T18361] RIP: 0033:0x7fb17a0890e9 [ 1712.143577][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1712.163199][T18361] RSP: 002b:00007fb17b1b0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1712.171607][T18361] RAX: ffffffffffffffda RBX: 00007fb17a19bf60 RCX: 00007fb17a0890e9 [ 1712.179574][T18361] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1712.187558][T18361] RBP: 00007fb17a0e308d R08: 0000000000000000 R09: 0000000000000000 [ 1712.195536][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.203506][T18361] R13: 00007ffe2e54702f R14: 00007fb17b1b0300 R15: 0000000000022000 [ 1712.211485][T18361] [ 1712.217195][T18349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.218198][T18361] memory: usage 736kB, limit 0kB, failcnt 154 [ 1712.224296][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.230416][T18361] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1712.230437][T18361] Memory cgroup stats for /syz5: [ 1712.230604][T18361] anon 114688 [ 1712.230604][T18361] file 282624 [ 1712.230604][T18361] kernel 356352 [ 1712.230604][T18361] kernel_stack 65536 [ 1712.230604][T18361] pagetables 77824 [ 1712.230604][T18361] percpu 0 [ 1712.230604][T18361] sock 0 [ 1712.230604][T18361] vmalloc 0 [ 1712.230604][T18361] shmem 282624 [ 1712.230604][T18361] file_mapped 282624 [ 1712.230604][T18361] file_dirty 0 [ 1712.230604][T18361] file_writeback 0 [ 1712.230604][T18361] swapcached 0 [ 1712.230604][T18361] anon_thp 0 [ 1712.230604][T18361] file_thp 0 [ 1712.230604][T18361] shmem_thp 0 [ 1712.230604][T18361] inactive_anon 73728 [ 1712.230604][T18361] active_anon 266240 [ 1712.230604][T18361] inactive_file 0 [ 1712.230604][T18361] active_file 0 [ 1712.230604][T18361] unevictable 0 [ 1712.230604][T18361] slab_reclaimable 51104 [ 1712.230604][T18361] slab_unreclaimable 130816 [ 1712.230604][T18361] slab 181920 [ 1712.230604][T18361] workingset_refault_anon 0 [ 1712.230604][T18361] workingset_refault_file 15 [ 1712.264052][T18349] device bridge_slave_0 entered promiscuous mode [ 1712.347228][T18361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18294,uid=0 [ 1712.367868][T18349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.375188][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.379308][T18361] Memory cgroup out of memory: Killed process 18294 (syz-executor.5) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1712.384144][T18349] device bridge_slave_1 entered promiscuous mode [ 1712.489578][T18349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.500492][T18349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.525953][T18349] team0: Port device team_slave_0 added 14:31:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:07 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5cb1, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x95}, @exit, @map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0xa, 0x1, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5d11, 0xd8, &(0x7f00000001c0)=""/214, 0x41100, 0x17, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x3, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, r1}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r5, &(0x7f0000000640)="73fe02ed778d64f8924355265f6f521249f9c47a45bff24e43b1bb7c2a50e0f8205ba5ffa06e0f036d5abbed5b6b6fb44eb1e688cd5e491c9c501e9e7b0b1319edc4248606fea0b4348de6b2ac3f26b7440077359696602d35e9c790c141232168e5a8f139ff7021093af4b57f8a3ecaf9c1a798f4e66e5ec2afb2ab3704fa308462be23c3388f055e2610df401c1dde7fff022e0b3304e8773cdb2ce138875a5f5dc5a84b202b4a3ec3f07a8c22db8ea16ff10df591bee690c079abfef06f857506badb8fa6cb50bde8cbc03cba98e526c9fdcced96084464a1", &(0x7f0000000580)=""/2}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) 14:31:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:07 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:07 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="7c004dde212f14bccf32c16bed56de1defa1bdd0ccbbfac168c3164460b877d1a3f04c0f32a3b1230e75419989dd4d6902433556460b2b75ab754075c45b5e5af4e8869e2869e8714965f08c5ace09acb5e24566c5d3e9c8fc8dfb2f459b43326868905c022859bf2536bab792e0ef403354fbdcab3e44ede243fb3fa6b0ee1fb32c61111e951fb9b71f78b4ad3f713aeeff924a5db2fcd59ad5e873f556687cf64ece310fc34a61ec", 0xa9}, {&(0x7f00000001c0)="4afac876706accf317e494f1cc33b70225bae4f2057f5feac8f3c5032b7d933c122718fc64ef32c1bd03c19076e0f6dcb9e294c8cb88f50f799ed50cd8b55b87ddd2c7", 0x43}, {&(0x7f0000000240)="3a7fa9054a7706101583e9713fd0e3051bfdda8786263cf82de8d7cec8279ee783706d5bae59752f12cad392224bb335720c4b0dc71dc156f70c1f9c1d3d1e85c41034d1b2a3f24312954d40e3c8eea097caa609b2da9e088ed0d3657b10c4e73c74c24857e76479a7925f3120f79a37b9bfc1820cb53b2e2c3f294e4690ce2b4c78ef96992398a4f423c1", 0x8b}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="a01fe9811a3a7e1ba0baa898d93d7e010e158f3e87818d51f474ef7d34d70bf2c25dead810b29186e39f8589f2e63401ce531cc798760f1098d39c006947253d21b51ed6bc12ede38eab0226d5fc1b866aa554e3b74910aa4156b53b789109abde76217140b8bccb9a8d4f1657588827277c03722493e77da074a96e158eff6f96055c712176ce55b53d49c1620359926c26504245c26fb263b6a7f8a3bee07c34ab23dc103e34810b0befbaf921a8a68c4ed4fcacd178cdde42eeef6b8fad293164336f281eb7ab09e944fdac4143c03ba428c1209e5056ed3923dd32a90097c5bbb7815f5634f36c29b75bb4c029e41287addf958133", 0xf7}, {&(0x7f0000000300)}], 0x6, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x95, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xe, [0x7, 0x4, 0x1000]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb0, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @local]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x12, "b76d83250530135dddabb932a6588e4a"}, {0x0, 0x4, "e2bd"}]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x1, 0xc, "8aca7a46ba081a02eb93"}, {0x6, 0xc, "1d86777517dd776f09f9"}, {0x2, 0x7, "2eba899308"}, {0x2, 0x9, "a0131df619ed6d"}]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x7, "ecee9d3cb7"}, {0x0, 0x12, "541f01bd995f9fe53261a42d49738e54"}, {0xbab71ef0d489f348, 0xb, "9831008a2bbf315ed2"}, {0x6, 0x7, "ce306c9b60"}, {0x0, 0x7, "1b5d8a4237"}, {0x7, 0x6, "66e43397"}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}]}}}], 0x150}, 0x40000) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="7c004dde212f14bccf32c16bed56de1defa1bdd0ccbbfac168c3164460b877d1a3f04c0f32a3b1230e75419989dd4d6902433556460b2b75ab754075c45b5e5af4e8869e2869e8714965f08c5ace09acb5e24566c5d3e9c8fc8dfb2f459b43326868905c022859bf2536bab792e0ef403354fbdcab3e44ede243fb3fa6b0ee1fb32c61111e951fb9b71f78b4ad3f713aeeff924a5db2fcd59ad5e873f556687cf64ece310fc34a61ec", 0xa9}, {&(0x7f00000001c0)="4afac876706accf317e494f1cc33b70225bae4f2057f5feac8f3c5032b7d933c122718fc64ef32c1bd03c19076e0f6dcb9e294c8cb88f50f799ed50cd8b55b87ddd2c7", 0x43}, {&(0x7f0000000240)="3a7fa9054a7706101583e9713fd0e3051bfdda8786263cf82de8d7cec8279ee783706d5bae59752f12cad392224bb335720c4b0dc71dc156f70c1f9c1d3d1e85c41034d1b2a3f24312954d40e3c8eea097caa609b2da9e088ed0d3657b10c4e73c74c24857e76479a7925f3120f79a37b9bfc1820cb53b2e2c3f294e4690ce2b4c78ef96992398a4f423c1", 0x8b}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="a01fe9811a3a7e1ba0baa898d93d7e010e158f3e87818d51f474ef7d34d70bf2c25dead810b29186e39f8589f2e63401ce531cc798760f1098d39c006947253d21b51ed6bc12ede38eab0226d5fc1b866aa554e3b74910aa4156b53b789109abde76217140b8bccb9a8d4f1657588827277c03722493e77da074a96e158eff6f96055c712176ce55b53d49c1620359926c26504245c26fb263b6a7f8a3bee07c34ab23dc103e34810b0befbaf921a8a68c4ed4fcacd178cdde42eeef6b8fad293164336f281eb7ab09e944fdac4143c03ba428c1209e5056ed3923dd32a90097c5bbb7815f5634f36c29b75bb4c029e41287addf958133", 0xf7}, {&(0x7f0000000300)}], 0x6, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x95, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xe, [0x7, 0x4, 0x1000]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb0, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @local]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x12, "b76d83250530135dddabb932a6588e4a"}, {0x0, 0x4, "e2bd"}]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x1, 0xc, "8aca7a46ba081a02eb93"}, {0x6, 0xc, "1d86777517dd776f09f9"}, {0x2, 0x7, "2eba899308"}, {0x2, 0x9, "a0131df619ed6d"}]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x7, "ecee9d3cb7"}, {0x0, 0x12, "541f01bd995f9fe53261a42d49738e54"}, {0xbab71ef0d489f348, 0xb, "9831008a2bbf315ed2"}, {0x6, 0x7, "ce306c9b60"}, {0x0, 0x7, "1b5d8a4237"}, {0x7, 0x6, "66e43397"}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}]}}}], 0x150}, 0x40000) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) (async) [ 1712.534894][T18349] team0: Port device team_slave_1 added 14:31:07 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5cb1, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x95}, @exit, @map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0xa, 0x1, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5d11, 0xd8, &(0x7f00000001c0)=""/214, 0x41100, 0x17, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x3, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, r1}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r5, &(0x7f0000000640)="73fe02ed778d64f8924355265f6f521249f9c47a45bff24e43b1bb7c2a50e0f8205ba5ffa06e0f036d5abbed5b6b6fb44eb1e688cd5e491c9c501e9e7b0b1319edc4248606fea0b4348de6b2ac3f26b7440077359696602d35e9c790c141232168e5a8f139ff7021093af4b57f8a3ecaf9c1a798f4e66e5ec2afb2ab3704fa308462be23c3388f055e2610df401c1dde7fff022e0b3304e8773cdb2ce138875a5f5dc5a84b202b4a3ec3f07a8c22db8ea16ff10df591bee690c079abfef06f857506badb8fa6cb50bde8cbc03cba98e526c9fdcced96084464a1", &(0x7f0000000580)=""/2}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5cb1, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x95}, @exit, @map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0xa, 0x1, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5d11, 0xd8, &(0x7f00000001c0)=""/214, 0x41100, 0x17, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x3, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, r1}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000f9ff14080000000000001800000000000000000000000000000095000000000000009565f827ff89c1e63862e2e749b7a3da74d3cdcf16d5c90cb1a922ffd544fcf8fb3128ce0f2ed072625afb253a7750720eb34bdeb74282c104b7078aea311cc795af62a92be42a3c5d94664d8797327fc7023d177f8cb96077aae95c53c3dddddb924f45baaebda6e5d5bed6c0258daa5c80577c9ce7bd0e0f8ffa4fe2051a5d344cedf62c4768566ffd6fd48d1bb043e16479f919b7e15777bb8c3957f80ed6aff01b7ce44723562845a65f9ce10c9084cead7da21afd72207b5167f31d98a5bdb9ca56b77d2d0fa842213b2440df76dc53e57a8dbfce7cac6b700bc28ff0924bc7b142df9f0e32a15177c6431b131d4c4ed769512b0aa6219d236e204c038fc8b883470a0102eaa8f8bfc1805346233b3409e7e881b3aa8882a6c8cd5598bca91e3a54e48d5655758b42a8c7dd7d551c7ac5838d23769ffaaa09100f6b19d2aaa0c24a877b3c3d7a0317862bff0d536e1e58ebdf7e0d0a098ed1c99c693dadf9e64061c45ebf3ca2913f9ced2f82004bc47c66f24476bdc7cad77b05f62694243d8c0d4fa4a3aa7b80e6ca8b7c097d5af62ac963d04bb881f16baa0cb2f31c38c6ad33d89645297c670ab49745a1b9b4a2f312dbe4c838f2a1343b5c0b94455478c95ea578b655edb07e4a0dd53a510a3490a05bad8bd6cf055f09b2d2248762d37e4c518e693d7c9782993ff8822a7579e14678123a284d358b4c068368b0fd11528c9e8ce2afcf3bbf187c65c8d2beaafef38491a1330cfc7744f49ee295e54947dbec59b83417047ab4cdb080a33cc73cea50e90de7570a12f9ccbead4d24e0539a8372bf6913f1f6df3b92ed2cce6b73ca3c635f91ddfc70fff3b664522a08a5821afdc7fade9bae28bd29173a530d24accbf5c7d99ee4a77dc2fce3974ef69971f7646c2a9e0594197010b572d879c122c85b7c1b5f9074c781bd38641fb58f89f2496c9b8e95377de3bbdac4a44c1af7e7a17dd2a925985040ee288609617f6b302c"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r5, &(0x7f0000000640)="73fe02ed778d64f8924355265f6f521249f9c47a45bff24e43b1bb7c2a50e0f8205ba5ffa06e0f036d5abbed5b6b6fb44eb1e688cd5e491c9c501e9e7b0b1319edc4248606fea0b4348de6b2ac3f26b7440077359696602d35e9c790c141232168e5a8f139ff7021093af4b57f8a3ecaf9c1a798f4e66e5ec2afb2ab3704fa308462be23c3388f055e2610df401c1dde7fff022e0b3304e8773cdb2ce138875a5f5dc5a84b202b4a3ec3f07a8c22db8ea16ff10df591bee690c079abfef06f857506badb8fa6cb50bde8cbc03cba98e526c9fdcced96084464a1", &(0x7f0000000580)=""/2}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) (async) [ 1712.734725][T18349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.746911][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.864699][T18349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.932210][T18349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.946769][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.984768][T18349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.055171][T18349] device hsr_slave_0 entered promiscuous mode [ 1713.065019][T18349] device hsr_slave_1 entered promiscuous mode [ 1713.085218][T18349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1713.099989][T18349] Cannot create hsr debugfs directory [ 1713.136027][ T9330] device hsr_slave_0 left promiscuous mode [ 1713.142973][ T9330] device hsr_slave_1 left promiscuous mode [ 1713.167048][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.184800][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.197371][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.206941][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.237995][ T9330] device bridge_slave_1 left promiscuous mode [ 1713.244275][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.268431][ T9330] device bridge_slave_0 left promiscuous mode [ 1713.282227][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.303165][ T9330] device veth1_macvtap left promiscuous mode [ 1713.309345][ T9330] device veth0_macvtap left promiscuous mode [ 1713.315496][ T9330] device veth1_vlan left promiscuous mode [ 1713.321534][ T9330] device veth0_vlan left promiscuous mode [ 1713.357229][T17418] Bluetooth: hci0: command 0x0409 tx timeout [ 1713.504583][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1713.523491][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1713.539361][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.556374][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.626449][ T9330] bond0 (unregistering): Released all slaves [ 1713.823949][T18349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.844228][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1713.852775][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1713.863800][T18349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1713.878276][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1713.891579][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1713.900314][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.907440][T17403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1713.921300][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1713.955378][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1713.964184][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1713.974533][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.981707][T17418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.989780][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1713.999656][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1714.008734][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1714.018165][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1714.043231][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1714.051917][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1714.061350][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1714.070376][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1714.083417][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1714.093130][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1714.102064][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1714.114517][T18349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1714.160780][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1714.177116][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1714.191902][T18349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.895745][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1714.905154][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1715.068866][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1715.078620][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1715.090670][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1715.100946][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1715.109698][T18349] device veth0_vlan entered promiscuous mode [ 1715.135500][T18349] device veth1_vlan entered promiscuous mode [ 1715.160106][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1715.168701][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1715.176615][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1715.185943][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1715.212531][T18349] device veth0_macvtap entered promiscuous mode [ 1715.222988][T18349] device veth1_macvtap entered promiscuous mode [ 1715.239222][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1715.249743][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.262135][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1715.272910][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.285359][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1715.292669][T15874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1715.296195][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.306462][T15874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1715.313305][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1715.321553][T15874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1715.330684][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.339013][T15874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1715.355906][T15874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1715.357935][T18349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.364308][T15874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1715.405549][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1715.414738][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1715.423346][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1715.432787][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1715.444918][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1715.447010][T17403] Bluetooth: hci0: command 0x041b tx timeout [ 1715.456365][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.471446][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1715.486478][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.496423][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1715.506932][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.519224][T18349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1715.529928][T18349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.541815][T18349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.565760][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1715.574662][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1715.678802][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.694069][T13551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1715.705078][T13551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1715.712282][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.722999][T13551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1715.731793][T13551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1715.741631][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1715.742779][T13551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1715.756538][T13551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1715.809441][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.830860][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.859398][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1715.907853][T18390] chnl_net:caif_netlink_parms(): no params data found [ 1716.201199][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.221738][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.241759][T18390] device bridge_slave_0 entered promiscuous mode [ 1716.252236][T18390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.259830][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.268431][T18390] device bridge_slave_1 entered promiscuous mode [ 1716.280880][ T9330] device hsr_slave_0 left promiscuous mode [ 1716.291119][ T9330] device hsr_slave_1 left promiscuous mode [ 1716.299920][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.316000][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.337223][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.346261][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.365674][ T9330] device bridge_slave_1 left promiscuous mode [ 1716.375477][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.396297][ T9330] device bridge_slave_0 left promiscuous mode [ 1716.415214][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.442984][ T9330] device hsr_slave_0 left promiscuous mode [ 1716.459409][ T9330] device hsr_slave_1 left promiscuous mode [ 1716.472693][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.478252][T18408] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1716.486057][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.495965][T18408] CPU: 1 PID: 18408 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1716.508745][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.518950][T18408] Call Trace: [ 1716.522236][T18408] [ 1716.525169][T18408] dump_stack_lvl+0xcd/0x134 [ 1716.529765][T18408] dump_header+0x10b/0x7f9 [ 1716.534214][T18408] oom_kill_process.cold+0x10/0x15 [ 1716.539361][T18408] out_of_memory+0x358/0x14b0 [ 1716.544106][T18408] ? oom_killer_disable+0x270/0x270 [ 1716.549319][T18408] ? io_schedule_timeout+0x140/0x140 [ 1716.554626][T18408] mem_cgroup_out_of_memory+0x206/0x270 [ 1716.560198][T18408] ? mem_cgroup_margin+0x130/0x130 [ 1716.565345][T18408] memory_max_write+0x25c/0x3b0 [ 1716.570206][T18408] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1716.576277][T18408] ? cgroup_file_write+0x17d/0x770 [ 1716.581400][T18408] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1716.587483][T18408] cgroup_file_write+0x1de/0x770 [ 1716.592432][T18408] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1716.598505][T18408] ? kill_css+0x370/0x370 [ 1716.602855][T18408] ? kernfs_fop_write_iter+0x507/0x610 [ 1716.608334][T18408] ? kill_css+0x370/0x370 [ 1716.612675][T18408] kernfs_fop_write_iter+0x3f8/0x610 [ 1716.617975][T18408] new_sync_write+0x38a/0x560 [ 1716.622669][T18408] ? new_sync_read+0x5f0/0x5f0 [ 1716.627445][T18408] ? lock_release+0x720/0x720 [ 1716.632154][T18408] vfs_write+0x7c0/0xac0 [ 1716.636411][T18408] ksys_write+0x127/0x250 [ 1716.640750][T18408] ? __ia32_sys_read+0xb0/0xb0 [ 1716.645528][T18408] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1716.651433][T18408] do_syscall_64+0x35/0xb0 [ 1716.655860][T18408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.661765][T18408] RIP: 0033:0x7fc3cc6890e9 [ 1716.666186][T18408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1716.685797][T18408] RSP: 002b:00007fc3cd830168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1716.694217][T18408] RAX: ffffffffffffffda RBX: 00007fc3cc79bf60 RCX: 00007fc3cc6890e9 [ 1716.702208][T18408] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1716.710183][T18408] RBP: 00007fc3cc6e308d R08: 0000000000000000 R09: 0000000000000000 [ 1716.718170][T18408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.726242][T18408] R13: 00007fff6a4e014f R14: 00007fc3cd830300 R15: 0000000000022000 [ 1716.734238][T18408] [ 1716.746210][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.756564][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.766427][ T9330] device bridge_slave_1 left promiscuous mode [ 1716.768249][T18408] memory: usage 536kB, limit 0kB, failcnt 144 [ 1716.773821][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.785870][T18408] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1716.792997][T18408] Memory cgroup stats for /syz0: [ 1716.793170][T18408] anon 114688 [ 1716.793170][T18408] file 94208 [ 1716.793170][T18408] kernel 339968 [ 1716.793170][T18408] kernel_stack 65536 [ 1716.793170][T18408] pagetables 81920 [ 1716.793170][T18408] percpu 0 [ 1716.793170][T18408] sock 0 [ 1716.793170][T18408] vmalloc 0 [ 1716.793170][T18408] shmem 94208 [ 1716.793170][T18408] file_mapped 86016 [ 1716.793170][T18408] file_dirty 0 [ 1716.793170][T18408] file_writeback 0 [ 1716.793170][T18408] swapcached 0 [ 1716.793170][T18408] anon_thp 0 [ 1716.793170][T18408] file_thp 0 [ 1716.793170][T18408] shmem_thp 0 [ 1716.793170][T18408] inactive_anon 61440 [ 1716.793170][T18408] active_anon 94208 [ 1716.793170][T18408] inactive_file 0 [ 1716.793170][T18408] active_file 0 [ 1716.793170][T18408] unevictable 0 [ 1716.793170][T18408] slab_reclaimable 42840 [ 1716.793170][T18408] slab_unreclaimable 121192 [ 1716.793170][T18408] slab 164032 [ 1716.793170][T18408] workingset_refault_anon 0 [ 1716.793170][T18408] workingset_refault_file 8 [ 1716.891932][ T9330] device bridge_slave_0 left promiscuous mode [ 1716.898280][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.910785][T18408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18349,uid=0 [ 1716.928107][ T9330] device veth1_macvtap left promiscuous mode [ 1716.933904][T18408] Memory cgroup out of memory: Killed process 18349 (syz-executor.0) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1716.934173][ T9330] device veth0_macvtap left promiscuous mode [ 1716.959386][ T9330] device veth1_vlan left promiscuous mode [ 1716.965246][ T9330] device veth0_vlan left promiscuous mode [ 1716.973904][ T9330] device veth1_macvtap left promiscuous mode [ 1716.992560][ T9330] device veth0_macvtap left promiscuous mode [ 1716.998875][ T9330] device veth1_vlan left promiscuous mode [ 1717.004745][ T9330] device veth0_vlan left promiscuous mode [ 1717.266925][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1717.279342][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1717.295439][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.310716][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.382489][ T9330] bond0 (unregistering): Released all slaves [ 1717.436953][T11915] Bluetooth: hci2: command 0x0409 tx timeout [ 1717.508659][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1717.524330][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1717.535878][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.552932][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.619561][ T9330] bond0 (unregistering): Released all slaves 14:31:13 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000d3c6273700000000008510000006001000000000008d02b76a8ba60fe86ce597898c47828f258dea82aad2678acc71dbc6ba134c0a72f58f3943dced264bc03a6535cd2e8a658fe86208de9a07b75c012e3a96ab8a644b8bad0beaca8236115596691843158c87e58598f9f4553bebc6daedfc0f3fd05100b50865d65119f15662b889a0d1ccd8aac99d7a712d65d8fe7d4a2170a847a76487bd99dac1ca291bae8e112d7e27215010bdf79cbfb9c360e52f3bc3a21a4587d701741f0e517a0ce5fb64", @ANYRES32=r0, @ANYBLOB="0000009964000000140800200000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_config_ext={0x877}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ldst={0x3, 0x3, 0x1, 0x6, 0x8, 0x8, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x54, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0xdd25, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:31:13 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5cb1, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x95}, @exit, @map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0xa, 0x1, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5d11, 0xd8, &(0x7f00000001c0)=""/214, 0x41100, 0x17, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x3, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, r1}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r5, &(0x7f0000000640)="73fe02ed778d64f8924355265f6f521249f9c47a45bff24e43b1bb7c2a50e0f8205ba5ffa06e0f036d5abbed5b6b6fb44eb1e688cd5e491c9c501e9e7b0b1319edc4248606fea0b4348de6b2ac3f26b7440077359696602d35e9c790c141232168e5a8f139ff7021093af4b57f8a3ecaf9c1a798f4e66e5ec2afb2ab3704fa308462be23c3388f055e2610df401c1dde7fff022e0b3304e8773cdb2ce138875a5f5dc5a84b202b4a3ec3f07a8c22db8ea16ff10df591bee690c079abfef06f857506badb8fa6cb50bde8cbc03cba98e526c9fdcced96084464a1", &(0x7f0000000580)=""/2}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) 14:31:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1717.792539][T18390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:31:13 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2004, 0xee, &(0x7f00000004c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) [ 1717.836920][T17403] Bluetooth: hci4: command 0x0409 tx timeout [ 1717.840747][T18400] chnl_net:caif_netlink_parms(): no params data found 14:31:13 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000d3c6273700000000008510000006001000000000008d02b76a8ba60fe86ce597898c47828f258dea82aad2678acc71dbc6ba134c0a72f58f3943dced264bc03a6535cd2e8a658fe86208de9a07b75c012e3a96ab8a644b8bad0beaca8236115596691843158c87e58598f9f4553bebc6daedfc0f3fd05100b50865d65119f15662b889a0d1ccd8aac99d7a712d65d8fe7d4a2170a847a76487bd99dac1ca291bae8e112d7e27215010bdf79cbfb9c360e52f3bc3a21a4587d701741f0e517a0ce5fb64", @ANYRES32=r0, @ANYBLOB="0000009964000000140800200000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_config_ext={0x877}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ldst={0x3, 0x3, 0x1, 0x6, 0x8, 0x8, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x54, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0xdd25, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:31:13 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async, rerun: 32) r0 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2004, 0xee, &(0x7f00000004c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) [ 1717.951764][T18390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:31:13 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000d3c6273700000000008510000006001000000000008d02b76a8ba60fe86ce597898c47828f258dea82aad2678acc71dbc6ba134c0a72f58f3943dced264bc03a6535cd2e8a658fe86208de9a07b75c012e3a96ab8a644b8bad0beaca8236115596691843158c87e58598f9f4553bebc6daedfc0f3fd05100b50865d65119f15662b889a0d1ccd8aac99d7a712d65d8fe7d4a2170a847a76487bd99dac1ca291bae8e112d7e27215010bdf79cbfb9c360e52f3bc3a21a4587d701741f0e517a0ce5fb64", @ANYRES32=r0, @ANYBLOB="0000009964000000140800200000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_config_ext={0x877}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ldst={0x3, 0x3, 0x1, 0x6, 0x8, 0x8, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x54, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0xdd25, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000d3c6273700000000008510000006001000000000008d02b76a8ba60fe86ce597898c47828f258dea82aad2678acc71dbc6ba134c0a72f58f3943dced264bc03a6535cd2e8a658fe86208de9a07b75c012e3a96ab8a644b8bad0beaca8236115596691843158c87e58598f9f4553bebc6daedfc0f3fd05100b50865d65119f15662b889a0d1ccd8aac99d7a712d65d8fe7d4a2170a847a76487bd99dac1ca291bae8e112d7e27215010bdf79cbfb9c360e52f3bc3a21a4587d701741f0e517a0ce5fb64", @ANYRES32=r0, @ANYBLOB="0000009964000000140800200000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_config_ext={0x877}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @ldst={0x3, 0x3, 0x1, 0x6, 0x8, 0x8, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x54, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0xdd25, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 1718.144568][T18390] team0: Port device team_slave_0 added [ 1718.258938][T18390] team0: Port device team_slave_1 added [ 1718.352718][T18400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.389068][T18400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.408512][T18400] device bridge_slave_0 entered promiscuous mode [ 1718.431141][T18390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.438643][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.469305][T18390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.482464][T18400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.491022][T18400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.499030][T18400] device bridge_slave_1 entered promiscuous mode [ 1718.506404][T18390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.513500][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.540202][T18390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.598874][T18400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.616439][T18390] device hsr_slave_0 entered promiscuous mode [ 1718.623465][T18390] device hsr_slave_1 entered promiscuous mode [ 1718.632071][T18400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.694296][T18400] team0: Port device team_slave_0 added [ 1718.711217][T18400] team0: Port device team_slave_1 added [ 1718.755499][T18400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.762601][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.790984][T18400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.826659][T18400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.834714][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.861532][T18400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.922757][T18400] device hsr_slave_0 entered promiscuous mode [ 1718.933865][T18400] device hsr_slave_1 entered promiscuous mode [ 1718.941377][T18400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1718.949252][T18400] Cannot create hsr debugfs directory [ 1719.112795][T18390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.147818][T18390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.164859][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1719.172753][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.205001][T18400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.236256][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1719.244922][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1719.253803][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.260918][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.269866][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1719.279000][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1719.287608][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.294673][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.303179][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1719.311162][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.319017][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1719.327876][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1719.336486][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1719.345542][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1719.368394][T18400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.375490][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1719.383474][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1719.398330][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1719.407844][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1719.416506][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1719.433855][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1719.443443][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1719.459273][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1719.479503][T18390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1719.495171][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1719.504955][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1719.514183][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.521347][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.527107][T16991] Bluetooth: hci2: command 0x041b tx timeout [ 1719.561011][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1719.570215][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1719.579620][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1719.589371][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.596489][T17403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.612556][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1719.622944][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1719.642852][T18390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.677303][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1719.685432][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1719.695394][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1719.712964][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1719.722390][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1719.731631][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1719.747781][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1719.755567][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1719.776362][T18400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1719.791699][T18400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1719.802644][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1719.815752][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1719.866828][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1719.874357][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1719.884686][T18400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.917415][T16001] Bluetooth: hci4: command 0x041b tx timeout [ 1720.143839][ T9330] device hsr_slave_0 left promiscuous mode [ 1720.159209][ T9330] device hsr_slave_1 left promiscuous mode [ 1720.165798][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1720.181064][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.191002][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.198770][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1720.207441][ T9330] device bridge_slave_1 left promiscuous mode [ 1720.213656][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.222107][ T9330] device bridge_slave_0 left promiscuous mode [ 1720.232015][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.246402][ T9330] device veth1_macvtap left promiscuous mode [ 1720.253347][ T9330] device veth0_macvtap left promiscuous mode [ 1720.259539][ T9330] device veth1_vlan left promiscuous mode [ 1720.265299][ T9330] device veth0_vlan left promiscuous mode [ 1720.435737][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1720.451108][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1720.463679][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.479203][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.540566][ T9330] bond0 (unregistering): Released all slaves [ 1720.645702][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1720.664676][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1720.681766][T18390] device veth0_vlan entered promiscuous mode [ 1720.697910][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1720.707021][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1720.712474][T15874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1720.715715][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1720.724920][T15874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1720.738707][T15874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1720.738755][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1720.746580][ T7812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1720.760752][T15874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1720.766266][T18390] device veth1_vlan entered promiscuous mode [ 1720.768055][T15874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1720.902334][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1720.912376][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1720.931906][T18390] device veth0_macvtap entered promiscuous mode [ 1720.950630][T18390] device veth1_macvtap entered promiscuous mode [ 1720.987979][T18390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1720.999148][T18390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.009455][T18390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1721.020485][T18390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.032244][T18390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.062446][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1721.072873][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1721.081201][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1721.090524][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1721.123203][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1721.132197][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1721.143153][T18390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1721.155306][T18390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.165259][T18390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1721.178275][T18390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.189415][T18390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.211709][T18452] chnl_net:caif_netlink_parms(): no params data found [ 1721.222678][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1721.231482][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1721.265777][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1721.274305][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1721.284414][T18400] device veth0_vlan entered promiscuous mode [ 1721.305776][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1721.313589][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1721.330849][T18400] device veth1_vlan entered promiscuous mode [ 1721.403262][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1721.411364][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1721.424761][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1721.433773][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1721.445218][T18400] device veth0_macvtap entered promiscuous mode [ 1721.484457][T18452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.491835][T18452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.500456][T18452] device bridge_slave_0 entered promiscuous mode [ 1721.509523][T18452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.516659][T18452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.525311][T18452] device bridge_slave_1 entered promiscuous mode [ 1721.548013][T18400] device veth1_macvtap entered promiscuous mode [ 1721.568283][T18452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.580097][T18452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.600891][T16001] Bluetooth: hci2: command 0x040f tx timeout [ 1721.614047][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.624281][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.636106][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.640404][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1721.655363][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.666860][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.666922][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1721.686204][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.696137][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1721.706634][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.718402][T18400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.740950][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1721.749365][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1721.765988][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1721.774101][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1721.782777][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1721.791993][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1721.806571][T18452] team0: Port device team_slave_0 added [ 1721.818382][T18452] team0: Port device team_slave_1 added [ 1721.824303][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1721.834978][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.845161][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1721.856954][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.866855][T18400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1721.877305][T18400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.888593][T18400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.898904][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1721.908014][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1721.996111][T18452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.996183][T18486] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1722.006013][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.014018][T16993] Bluetooth: hci4: command 0x040f tx timeout [ 1722.045860][T18486] CPU: 0 PID: 18486 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1722.056378][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.066445][T18486] Call Trace: [ 1722.069725][T18486] [ 1722.072707][T18486] dump_stack_lvl+0xcd/0x134 [ 1722.077323][T18486] dump_header+0x10b/0x7f9 [ 1722.081753][T18486] oom_kill_process.cold+0x10/0x15 [ 1722.086885][T18486] out_of_memory+0x358/0x14b0 [ 1722.091580][T18486] ? oom_killer_disable+0x270/0x270 [ 1722.096792][T18486] ? io_schedule_timeout+0x140/0x140 [ 1722.102095][T18486] mem_cgroup_out_of_memory+0x206/0x270 [ 1722.107659][T18486] ? mem_cgroup_margin+0x130/0x130 [ 1722.112802][T18486] memory_max_write+0x25c/0x3b0 [ 1722.117663][T18486] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1722.123741][T18486] ? lock_release+0x720/0x720 [ 1722.128434][T18486] cgroup_file_write+0x1de/0x770 [ 1722.133381][T18486] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1722.139463][T18486] ? kill_css+0x370/0x370 [ 1722.143816][T18486] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.150073][T18486] ? kill_css+0x370/0x370 [ 1722.154407][T18486] kernfs_fop_write_iter+0x3f8/0x610 [ 1722.159708][T18486] new_sync_write+0x38a/0x560 [ 1722.164394][T18486] ? new_sync_read+0x5f0/0x5f0 [ 1722.169174][T18486] ? lock_release+0x720/0x720 [ 1722.173880][T18486] vfs_write+0x7c0/0xac0 [ 1722.178156][T18486] ksys_write+0x127/0x250 [ 1722.182492][T18486] ? __ia32_sys_read+0xb0/0xb0 [ 1722.187266][T18486] ? syscall_enter_from_user_mode+0x21/0x70 [ 1722.193177][T18486] do_syscall_64+0x35/0xb0 [ 1722.197602][T18486] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.203505][T18486] RIP: 0033:0x7fede7a890e9 [ 1722.207923][T18486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1722.227535][T18486] RSP: 002b:00007fede8cb6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1722.235966][T18486] RAX: ffffffffffffffda RBX: 00007fede7b9bf60 RCX: 00007fede7a890e9 [ 1722.243937][T18486] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1722.251908][T18486] RBP: 00007fede7ae308d R08: 0000000000000000 R09: 0000000000000000 [ 1722.259877][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.267854][T18486] R13: 00007ffc9ff97cef R14: 00007fede8cb6300 R15: 0000000000022000 [ 1722.275855][T18486] [ 1722.287034][T18452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.300013][T18452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.307098][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.338667][T18452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.350744][T18486] memory: usage 588kB, limit 0kB, failcnt 180 [ 1722.375212][T18486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1722.392822][T18486] Memory cgroup stats for /syz1: [ 1722.393034][T18486] anon 114688 [ 1722.393034][T18486] file 139264 [ 1722.393034][T18486] kernel 348160 [ 1722.393034][T18486] kernel_stack 65536 [ 1722.393034][T18486] pagetables 81920 [ 1722.393034][T18486] percpu 0 [ 1722.393034][T18486] sock 0 [ 1722.393034][T18486] vmalloc 0 [ 1722.393034][T18486] shmem 139264 [ 1722.393034][T18486] file_mapped 135168 [ 1722.393034][T18486] file_dirty 0 [ 1722.393034][T18486] file_writeback 0 [ 1722.393034][T18486] swapcached 0 [ 1722.393034][T18486] anon_thp 0 [ 1722.393034][T18486] file_thp 0 [ 1722.393034][T18486] shmem_thp 0 [ 1722.393034][T18486] inactive_anon 118784 [ 1722.393034][T18486] active_anon 135168 [ 1722.393034][T18486] inactive_file 0 [ 1722.393034][T18486] active_file 0 [ 1722.393034][T18486] unevictable 0 [ 1722.393034][T18486] slab_reclaimable 48208 [ 1722.393034][T18486] slab_unreclaimable 124912 [ 1722.393034][T18486] slab 173120 [ 1722.393034][T18486] workingset_refault_anon 0 [ 1722.393034][T18486] workingset_refault_file 4 [ 1722.488771][T18486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18390,uid=0 [ 1722.505168][T18486] Memory cgroup out of memory: Killed process 18390 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1722.523918][ T28] oom_reaper: reaped process 18390 (syz-executor.1), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1722.535504][T18486] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1722.545959][T18486] CPU: 1 PID: 18486 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1722.556487][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.566570][T18486] Call Trace: [ 1722.569868][T18486] [ 1722.572817][T18486] dump_stack_lvl+0xcd/0x134 [ 1722.577447][T18486] dump_header+0x10b/0x7f9 [ 1722.578980][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.581902][T18486] oom_kill_process.cold+0x10/0x15 [ 1722.595001][T18486] out_of_memory+0x358/0x14b0 [ 1722.599823][T18486] ? oom_killer_disable+0x270/0x270 [ 1722.605060][T18486] ? find_held_lock+0x2d/0x110 [ 1722.609860][T18486] mem_cgroup_out_of_memory+0x206/0x270 [ 1722.611915][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.615433][T18486] ? mem_cgroup_margin+0x130/0x130 [ 1722.628004][T18486] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1722.633851][T18486] memory_max_write+0x25c/0x3b0 [ 1722.638730][T18486] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1722.642409][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.644817][T18486] ? lock_release+0x720/0x720 [ 1722.644861][T18486] cgroup_file_write+0x1de/0x770 [ 1722.662543][T18486] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1722.668737][T18486] ? kill_css+0x370/0x370 [ 1722.673089][T18486] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.679354][T18486] ? kill_css+0x370/0x370 [ 1722.683695][T18486] kernfs_fop_write_iter+0x3f8/0x610 [ 1722.689002][T18486] new_sync_write+0x38a/0x560 [ 1722.693691][T18486] ? new_sync_read+0x5f0/0x5f0 [ 1722.698474][T18486] ? lock_release+0x720/0x720 [ 1722.703194][T18486] vfs_write+0x7c0/0xac0 [ 1722.707453][T18486] ksys_write+0x127/0x250 [ 1722.711788][T18486] ? __ia32_sys_read+0xb0/0xb0 [ 1722.716560][T18486] ? syscall_enter_from_user_mode+0x21/0x70 [ 1722.722467][T18486] do_syscall_64+0x35/0xb0 [ 1722.726894][T18486] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.732802][T18486] RIP: 0033:0x7fede7a890e9 [ 1722.737221][T18486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1722.756834][T18486] RSP: 002b:00007fede8cb6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1722.765254][T18486] RAX: ffffffffffffffda RBX: 00007fede7b9bf60 RCX: 00007fede7a890e9 [ 1722.773226][T18486] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1722.781195][T18486] RBP: 00007fede7ae308d R08: 0000000000000000 R09: 0000000000000000 [ 1722.789181][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.797151][T18486] R13: 00007ffc9ff97cef R14: 00007fede8cb6300 R15: 0000000000022000 [ 1722.805148][T18486] [ 1722.811076][ T7092] Bluetooth: hci0: command 0x0409 tx timeout [ 1722.834482][T18486] memory: usage 556kB, limit 0kB, failcnt 180 [ 1722.840771][T18486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1722.841165][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1722.847818][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.862571][T18486] Memory cgroup stats for /syz1: [ 1722.862786][T18486] anon 94208 [ 1722.862786][T18486] file 139264 [ 1722.862786][T18486] kernel 303104 [ 1722.862786][T18486] kernel_stack 32768 [ 1722.862786][T18486] pagetables 73728 [ 1722.862786][T18486] percpu 0 [ 1722.862786][T18486] sock 0 [ 1722.862786][T18486] vmalloc 0 [ 1722.862786][T18486] shmem 139264 [ 1722.862786][T18486] file_mapped 135168 [ 1722.862786][T18486] file_dirty 0 [ 1722.862786][T18486] file_writeback 0 [ 1722.862786][T18486] swapcached 0 [ 1722.862786][T18486] anon_thp 0 [ 1722.862786][T18486] file_thp 0 [ 1722.862786][T18486] shmem_thp 0 [ 1722.862786][T18486] inactive_anon 98304 [ 1722.862786][T18486] active_anon 135168 [ 1722.862786][T18486] inactive_file 0 [ 1722.862786][T18486] active_file 0 [ 1722.862786][T18486] unevictable 0 [ 1722.862786][T18486] slab_reclaimable 48208 [ 1722.862786][T18486] slab_unreclaimable 124912 [ 1722.862786][T18486] slab 173120 [ 1722.862786][T18486] workingset_refault_anon 0 [ 1722.862786][T18486] workingset_refault_file 4 [ 1722.867615][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1722.870012][T18486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18485,uid=0 [ 1722.976775][T18452] device hsr_slave_0 entered promiscuous mode [ 1723.000119][T18486] Memory cgroup out of memory: Killed process 18486 (syz-executor.1) total-vm:54504kB, anon-rss:424kB, file-rss:8888kB, shmem-rss:56kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1723.019453][ T28] oom_reaper: reaped process 18486 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:16kB [ 1723.019764][T18452] device hsr_slave_1 entered promiscuous mode [ 1723.037740][T18452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.046177][T18452] Cannot create hsr debugfs directory [ 1723.569771][T18452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.631525][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1723.644021][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1723.678889][T18452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.700371][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1723.720334][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1723.733574][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.740767][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.785586][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1723.801489][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1723.814899][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1723.832714][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.839915][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.846519][T18490] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1723.857713][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1723.865392][T18490] CPU: 0 PID: 18490 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1723.883028][T18490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.893096][T18490] Call Trace: [ 1723.896373][T18490] [ 1723.899307][T18490] dump_stack_lvl+0xcd/0x134 [ 1723.903913][T18490] dump_header+0x10b/0x7f9 [ 1723.908348][T18490] oom_kill_process.cold+0x10/0x15 [ 1723.913476][T18490] out_of_memory+0x358/0x14b0 [ 1723.918180][T18490] ? lockdep_hardirqs_on+0x79/0x100 [ 1723.923407][T18490] ? oom_killer_disable+0x270/0x270 [ 1723.928655][T18490] mem_cgroup_out_of_memory+0x206/0x270 [ 1723.934229][T18490] ? mem_cgroup_margin+0x130/0x130 [ 1723.939383][T18490] memory_max_write+0x25c/0x3b0 [ 1723.944254][T18490] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1723.950334][T18490] ? cgroup_file_write+0x7c/0x770 [ 1723.955382][T18490] cgroup_file_write+0x1de/0x770 [ 1723.960333][T18490] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1723.966410][T18490] ? kill_css+0x370/0x370 [ 1723.970765][T18490] ? kill_css+0x370/0x370 [ 1723.975102][T18490] kernfs_fop_write_iter+0x3f8/0x610 [ 1723.980401][T18490] new_sync_write+0x38a/0x560 [ 1723.985092][T18490] ? new_sync_read+0x5f0/0x5f0 [ 1723.989869][T18490] ? lockdep_hardirqs_on+0x79/0x100 [ 1723.995075][T18490] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1724.001244][T18490] ? vfs_write+0x750/0xac0 [ 1724.005668][T18490] ? vfs_write+0x772/0xac0 [ 1724.010093][T18490] vfs_write+0x7c0/0xac0 [ 1724.014345][T18490] ksys_write+0x127/0x250 [ 1724.018774][T18490] ? __ia32_sys_read+0xb0/0xb0 [ 1724.023550][T18490] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1724.029456][T18490] do_syscall_64+0x35/0xb0 [ 1724.033883][T18490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.039785][T18490] RIP: 0033:0x7f046b0890e9 [ 1724.044203][T18490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1724.063814][T18490] RSP: 002b:00007f046a1fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1724.072230][T18490] RAX: ffffffffffffffda RBX: 00007f046b19bf60 RCX: 00007f046b0890e9 [ 1724.080203][T18490] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1724.088172][T18490] RBP: 00007f046b0e308d R08: 0000000000000000 R09: 0000000000000000 [ 1724.096141][T18490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.104113][T18490] R13: 00007fff7970c02f R14: 00007f046a1fe300 R15: 0000000000022000 [ 1724.112109][T18490] [ 1724.121888][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1724.133615][T18490] memory: usage 648kB, limit 0kB, failcnt 288 [ 1724.144820][T18490] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1724.156085][T18490] Memory cgroup stats for /syz4: [ 1724.156303][T18490] anon 114688 [ 1724.156303][T18490] file 208896 [ 1724.156303][T18490] kernel 307200 [ 1724.156303][T18490] kernel_stack 32768 [ 1724.156303][T18490] pagetables 81920 [ 1724.156303][T18490] percpu 0 [ 1724.156303][T18490] sock 0 [ 1724.156303][T18490] vmalloc 0 [ 1724.156303][T18490] shmem 208896 [ 1724.156303][T18490] file_mapped 159744 [ 1724.156303][T18490] file_dirty 0 [ 1724.156303][T18490] file_writeback 0 [ 1724.156303][T18490] swapcached 0 [ 1724.156303][T18490] anon_thp 0 [ 1724.156303][T18490] file_thp 0 [ 1724.156303][T18490] shmem_thp 0 [ 1724.156303][T18490] inactive_anon 163840 [ 1724.156303][T18490] active_anon 159744 [ 1724.156303][T18490] inactive_file 0 [ 1724.156303][T18490] active_file 0 [ 1724.156303][T18490] unevictable 0 [ 1724.156303][T18490] slab_reclaimable 40912 [ 1724.156303][T18490] slab_unreclaimable 117464 [ 1724.156303][T18490] slab 158376 [ 1724.156303][T18490] workingset_refault_anon 0 [ 1724.156303][T18490] workingset_refault_file 8 [ 1724.261728][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1724.269169][T18490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18400,uid=0 [ 1724.271643][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1724.285835][T18490] Memory cgroup out of memory: Killed process 18400 (syz-executor.4) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1724.302041][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1724.335531][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1724.346462][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1724.356599][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1724.365807][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1724.374709][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1724.421722][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1724.431606][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1724.455836][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1724.463866][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:31:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:19 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2004, 0xee, &(0x7f00000004c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:31:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:19 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000290000000696ff070100000085100000faffffff181b0000", @ANYRES32, @ANYBLOB="43392557a4a71d325625e7056f8c4da57458d35c58d8be43d3b396c97194ea722d9072807a7a8633f4aabea22b1270562bed87441df53e37184533937f23b7c5cc0b49de25655ccc7724dccd984ce9db4ba4b91b4d90001fa648ea17adfb681eb5b2b516c4f9f439a92e98e1190c8f83f2cafb913099a88ded68ad26bb43f7f0d8a4225c48f205d5c8b6406dcafff1e0f11c4e93"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff]}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0xd2, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x0, 0x1}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x10001}, 0x10}, 0x80) 14:31:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1724.474863][T18452] 8021q: adding VLAN 0 to HW filter on device batadv0 14:31:19 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000a000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) [ 1724.826032][ T6993] device hsr_slave_0 left promiscuous mode [ 1724.848029][ T6993] device hsr_slave_1 left promiscuous mode [ 1724.864880][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.877188][T17389] Bluetooth: hci0: command 0x041b tx timeout [ 1724.883698][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.899934][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1724.907677][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.917120][ T6993] device bridge_slave_1 left promiscuous mode [ 1724.923356][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.933174][ T6993] device bridge_slave_0 left promiscuous mode [ 1724.939779][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.956139][ T6993] device veth1_macvtap left promiscuous mode [ 1724.963479][ T6993] device veth0_macvtap left promiscuous mode [ 1724.970412][ T6993] device veth1_vlan left promiscuous mode [ 1724.976240][ T6993] device veth0_vlan left promiscuous mode [ 1725.241920][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 1725.257865][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 1725.270214][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1725.287725][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.355681][ T6993] bond0 (unregistering): Released all slaves [ 1725.617162][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1725.625703][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1725.653983][T18452] device veth0_vlan entered promiscuous mode [ 1725.662007][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1725.670387][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1725.679632][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1725.695940][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1725.719044][T18452] device veth1_vlan entered promiscuous mode [ 1725.743435][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1725.752004][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1725.760414][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1725.769942][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1725.783089][T18452] device veth0_macvtap entered promiscuous mode [ 1725.793396][T18452] device veth1_macvtap entered promiscuous mode [ 1725.812502][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1725.824734][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.834864][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1725.845680][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.855870][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1725.866555][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.878834][T18452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.887118][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1725.895827][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.903808][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1725.927091][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1725.938469][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1725.956506][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.966960][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1725.983151][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.996085][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1726.013815][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.025403][T18452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.040431][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1726.052598][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1726.153380][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.164148][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.206316][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1726.234487][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.259005][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.276271][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1726.332400][T18516] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1726.343950][T18516] CPU: 1 PID: 18516 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1726.354486][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.364551][T18516] Call Trace: [ 1726.367832][T18516] [ 1726.370828][T18516] dump_stack_lvl+0xcd/0x134 [ 1726.375468][T18516] dump_header+0x10b/0x7f9 [ 1726.379919][T18516] oom_kill_process.cold+0x10/0x15 [ 1726.385051][T18516] out_of_memory+0x358/0x14b0 [ 1726.389758][T18516] ? oom_killer_disable+0x270/0x270 [ 1726.394971][T18516] ? io_schedule_timeout+0x140/0x140 [ 1726.400277][T18516] mem_cgroup_out_of_memory+0x206/0x270 [ 1726.405850][T18516] ? mem_cgroup_margin+0x130/0x130 [ 1726.410998][T18516] memory_max_write+0x25c/0x3b0 [ 1726.415861][T18516] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1726.421941][T18516] ? lock_release+0x720/0x720 [ 1726.426636][T18516] cgroup_file_write+0x1de/0x770 [ 1726.431584][T18516] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1726.437663][T18516] ? kill_css+0x370/0x370 [ 1726.442001][T18516] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1726.448263][T18516] ? kill_css+0x370/0x370 [ 1726.452608][T18516] kernfs_fop_write_iter+0x3f8/0x610 [ 1726.457916][T18516] new_sync_write+0x38a/0x560 [ 1726.462604][T18516] ? new_sync_read+0x5f0/0x5f0 [ 1726.467387][T18516] ? lock_release+0x720/0x720 [ 1726.472097][T18516] vfs_write+0x7c0/0xac0 [ 1726.476359][T18516] ksys_write+0x127/0x250 [ 1726.480702][T18516] ? __ia32_sys_read+0xb0/0xb0 [ 1726.485480][T18516] ? syscall_enter_from_user_mode+0x21/0x70 [ 1726.491388][T18516] do_syscall_64+0x35/0xb0 [ 1726.495820][T18516] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1726.501726][T18516] RIP: 0033:0x7f47478890e9 [ 1726.506235][T18516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1726.525852][T18516] RSP: 002b:00007f4748980168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1726.534272][T18516] RAX: ffffffffffffffda RBX: 00007f474799bf60 RCX: 00007f47478890e9 [ 1726.542256][T18516] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1726.550230][T18516] RBP: 00007f47478e308d R08: 0000000000000000 R09: 0000000000000000 [ 1726.558204][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.566344][T18516] R13: 00007ffe6f7aeebf R14: 00007f4748980300 R15: 0000000000022000 [ 1726.574365][T18516] [ 1726.620002][T18516] memory: usage 732kB, limit 0kB, failcnt 154 [ 1726.626233][T18516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1726.637320][T18516] Memory cgroup stats for /syz5: [ 1726.637509][T18516] anon 114688 [ 1726.637509][T18516] file 282624 [ 1726.637509][T18516] kernel 352256 [ 1726.637509][T18516] kernel_stack 65536 [ 1726.637509][T18516] pagetables 77824 [ 1726.637509][T18516] percpu 0 [ 1726.637509][T18516] sock 0 [ 1726.637509][T18516] vmalloc 0 [ 1726.637509][T18516] shmem 282624 [ 1726.637509][T18516] file_mapped 282624 [ 1726.637509][T18516] file_dirty 0 [ 1726.637509][T18516] file_writeback 0 [ 1726.637509][T18516] swapcached 0 [ 1726.637509][T18516] anon_thp 0 [ 1726.637509][T18516] file_thp 0 [ 1726.637509][T18516] shmem_thp 0 [ 1726.637509][T18516] inactive_anon 131072 [ 1726.637509][T18516] active_anon 266240 [ 1726.637509][T18516] inactive_file 0 [ 1726.637509][T18516] active_file 0 [ 1726.637509][T18516] unevictable 0 [ 1726.637509][T18516] slab_reclaimable 48912 [ 1726.637509][T18516] slab_unreclaimable 127352 [ 1726.637509][T18516] slab 176264 [ 1726.637509][T18516] workingset_refault_anon 0 [ 1726.637509][T18516] workingset_refault_file 15 [ 1726.737966][T18516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18452,uid=0 [ 1726.753639][T18516] Memory cgroup out of memory: Killed process 18452 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1726.772112][ T28] oom_reaper: reaped process 18452 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1726.778938][T18516] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1726.796124][T18516] CPU: 0 PID: 18516 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1726.806653][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.816702][T18516] Call Trace: [ 1726.819987][T18516] [ 1726.822906][T18516] dump_stack_lvl+0xcd/0x134 [ 1726.827492][T18516] dump_header+0x10b/0x7f9 [ 1726.831903][T18516] oom_kill_process.cold+0x10/0x15 [ 1726.837017][T18516] out_of_memory+0x358/0x14b0 [ 1726.841725][T18516] ? oom_killer_disable+0x270/0x270 [ 1726.846941][T18516] ? io_schedule_timeout+0x140/0x140 [ 1726.852248][T18516] mem_cgroup_out_of_memory+0x206/0x270 [ 1726.857811][T18516] ? mem_cgroup_margin+0x130/0x130 [ 1726.862956][T18516] memory_max_write+0x25c/0x3b0 [ 1726.867816][T18516] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1726.873895][T18516] ? lock_release+0x720/0x720 [ 1726.878591][T18516] cgroup_file_write+0x1de/0x770 [ 1726.883547][T18516] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1726.889625][T18516] ? kill_css+0x370/0x370 [ 1726.893962][T18516] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1726.900222][T18516] ? kill_css+0x370/0x370 [ 1726.904561][T18516] kernfs_fop_write_iter+0x3f8/0x610 [ 1726.909865][T18516] new_sync_write+0x38a/0x560 [ 1726.914556][T18516] ? new_sync_read+0x5f0/0x5f0 [ 1726.919334][T18516] ? lock_release+0x720/0x720 [ 1726.924044][T18516] vfs_write+0x7c0/0xac0 [ 1726.928298][T18516] ksys_write+0x127/0x250 [ 1726.932635][T18516] ? __ia32_sys_read+0xb0/0xb0 [ 1726.937408][T18516] ? syscall_enter_from_user_mode+0x21/0x70 [ 1726.943318][T18516] do_syscall_64+0x35/0xb0 [ 1726.947747][T18516] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1726.953649][T18516] RIP: 0033:0x7f47478890e9 [ 1726.958068][T18516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1726.977684][T18516] RSP: 002b:00007f4748980168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1726.986109][T18516] RAX: ffffffffffffffda RBX: 00007f474799bf60 RCX: 00007f47478890e9 [ 1726.994085][T18516] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1727.002056][T18516] RBP: 00007f47478e308d R08: 0000000000000000 R09: 0000000000000000 [ 1727.010029][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.018003][T18516] R13: 00007ffe6f7aeebf R14: 00007f4748980300 R15: 0000000000022000 [ 1727.025997][T18516] [ 1727.029901][ T7092] Bluetooth: hci0: command 0x040f tx timeout [ 1727.038622][T18516] memory: usage 700kB, limit 0kB, failcnt 154 [ 1727.044721][T18516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1727.051713][T18516] Memory cgroup stats for /syz5: [ 1727.051838][T18516] anon 94208 [ 1727.051838][T18516] file 282624 [ 1727.051838][T18516] kernel 307200 [ 1727.051838][T18516] kernel_stack 32768 [ 1727.051838][T18516] pagetables 69632 [ 1727.051838][T18516] percpu 0 [ 1727.051838][T18516] sock 0 [ 1727.051838][T18516] vmalloc 0 [ 1727.051838][T18516] shmem 282624 [ 1727.051838][T18516] file_mapped 282624 [ 1727.051838][T18516] file_dirty 0 [ 1727.051838][T18516] file_writeback 0 [ 1727.051838][T18516] swapcached 0 [ 1727.051838][T18516] anon_thp 0 [ 1727.051838][T18516] file_thp 0 [ 1727.051838][T18516] shmem_thp 0 [ 1727.051838][T18516] inactive_anon 110592 [ 1727.051838][T18516] active_anon 266240 [ 1727.051838][T18516] inactive_file 0 [ 1727.051838][T18516] active_file 0 [ 1727.051838][T18516] unevictable 0 [ 1727.051838][T18516] slab_reclaimable 48912 [ 1727.051838][T18516] slab_unreclaimable 127352 [ 1727.051838][T18516] slab 176264 [ 1727.051838][T18516] workingset_refault_anon 0 [ 1727.051838][T18516] workingset_refault_file 15 [ 1727.157634][T18516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18515,uid=0 [ 1727.175782][T18516] Memory cgroup out of memory: Killed process 18516 (syz-executor.5) total-vm:54504kB, anon-rss:424kB, file-rss:8888kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1727.198745][ T28] oom_reaper: reaped process 18516 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:16kB 14:31:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:22 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000290000000696ff070100000085100000faffffff181b0000", @ANYRES32, @ANYBLOB="43392557a4a71d325625e7056f8c4da57458d35c58d8be43d3b396c97194ea722d9072807a7a8633f4aabea22b1270562bed87441df53e37184533937f23b7c5cc0b49de25655ccc7724dccd984ce9db4ba4b91b4d90001fa648ea17adfb681eb5b2b516c4f9f439a92e98e1190c8f83f2cafb913099a88ded68ad26bb43f7f0d8a4225c48f205d5c8b6406dcafff1e0f11c4e93"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff]}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0xd2, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x0, 0x1}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x10001}, 0x10}, 0x80) 14:31:22 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000a000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:31:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:22 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000290000000696ff070100000085100000faffffff181b0000", @ANYRES32, @ANYBLOB="43392557a4a71d325625e7056f8c4da57458d35c58d8be43d3b396c97194ea722d9072807a7a8633f4aabea22b1270562bed87441df53e37184533937f23b7c5cc0b49de25655ccc7724dccd984ce9db4ba4b91b4d90001fa648ea17adfb681eb5b2b516c4f9f439a92e98e1190c8f83f2cafb913099a88ded68ad26bb43f7f0d8a4225c48f205d5c8b6406dcafff1e0f11c4e93"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff]}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0xd2, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x0, 0x1}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x10001}, 0x10}, 0x80) 14:31:22 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000a000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:31:22 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) 14:31:22 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x24ae, 0x8}, 0x10, 0x1c47a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r2, r5]}, 0x80) [ 1727.654441][ T6993] device hsr_slave_0 left promiscuous mode [ 1727.661003][ T6993] device hsr_slave_1 left promiscuous mode [ 1727.674309][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.684635][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1727.685454][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.702949][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1727.704908][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.718181][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.719317][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1727.734262][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1727.735838][ T6993] device bridge_slave_1 left promiscuous mode [ 1727.748331][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1727.748453][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.756965][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1727.771399][ T6993] device bridge_slave_0 left promiscuous mode [ 1727.778022][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.792249][ T6993] device veth1_macvtap left promiscuous mode [ 1727.799898][ T6993] device veth0_macvtap left promiscuous mode [ 1727.805978][ T6993] device veth1_vlan left promiscuous mode [ 1727.811890][ T6993] device veth0_vlan left promiscuous mode [ 1727.973554][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 1727.989634][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 1728.005421][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.021926][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.088406][ T6993] bond0 (unregistering): Released all slaves [ 1728.218431][T18517] chnl_net:caif_netlink_parms(): no params data found [ 1728.274540][T18517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.281847][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.289742][T18517] device bridge_slave_0 entered promiscuous mode [ 1728.304824][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.312098][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.324688][T18517] device bridge_slave_1 entered promiscuous mode [ 1728.348308][T18517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.359893][T18517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.389029][T18517] team0: Port device team_slave_0 added [ 1728.396281][T18517] team0: Port device team_slave_1 added [ 1728.416205][T18517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.423243][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.450905][T18517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.465301][T18517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.472533][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.501959][T18517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.534765][T18517] device hsr_slave_0 entered promiscuous mode [ 1728.541806][T18517] device hsr_slave_1 entered promiscuous mode [ 1728.703062][T18517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.755943][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1728.765829][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1728.782103][T18517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.803163][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1728.812043][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1728.821028][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.828170][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.855760][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1728.869397][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1728.882198][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1728.892768][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.899866][T16993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.910360][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1728.930350][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1728.941984][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1728.951286][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1728.962521][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1728.971910][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1728.980389][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1729.000531][T18517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1729.011047][T18517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1729.022516][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1729.031185][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1729.040039][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1729.048447][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1729.064456][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1729.080983][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1729.088587][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1729.102603][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.197207][T15874] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1729.484480][ T6993] device hsr_slave_0 left promiscuous mode [ 1729.498073][ T6993] device hsr_slave_1 left promiscuous mode [ 1729.518816][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.526247][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.554147][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.566515][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.580690][ T6993] device bridge_slave_1 left promiscuous mode [ 1729.589971][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.601569][ T6993] device bridge_slave_0 left promiscuous mode [ 1729.613457][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.629689][ T6993] device veth1_macvtap left promiscuous mode [ 1729.635882][ T6993] device veth0_macvtap left promiscuous mode [ 1729.645755][ T6993] device veth1_vlan left promiscuous mode [ 1729.651748][ T6993] device veth0_vlan left promiscuous mode [ 1729.811730][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 1729.824751][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 1729.840252][ T3710] Bluetooth: hci0: command 0x0409 tx timeout [ 1729.850168][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.865183][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.920228][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.926532][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.950422][ T6993] bond0 (unregistering): Released all slaves [ 1730.026880][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1730.035459][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1730.054878][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1730.063558][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1730.078979][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1730.087344][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1730.097855][T18517] device veth0_vlan entered promiscuous mode [ 1730.111606][T18517] device veth1_vlan entered promiscuous mode [ 1730.133629][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1730.141939][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1730.151057][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1730.161373][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1730.172722][T18517] device veth0_macvtap entered promiscuous mode [ 1730.186070][T18517] device veth1_macvtap entered promiscuous mode [ 1730.207435][T18517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1730.218531][T18517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.228808][T18517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1730.239650][T18517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.253451][T18517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.263032][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1730.271976][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1730.280470][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1730.289694][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1730.299748][T18517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1730.313096][T18517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.323369][T18517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1730.334524][T18517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.346211][T18517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.366422][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1730.375255][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1730.447582][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.451733][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.455871][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.467446][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.482278][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1730.493386][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1730.553042][T18552] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1730.576875][T18552] CPU: 1 PID: 18552 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1730.587422][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.597608][T18552] Call Trace: [ 1730.600876][T18552] [ 1730.603816][T18552] dump_stack_lvl+0xcd/0x134 [ 1730.608404][T18552] dump_header+0x10b/0x7f9 [ 1730.612814][T18552] oom_kill_process.cold+0x10/0x15 [ 1730.617919][T18552] out_of_memory+0x358/0x14b0 [ 1730.622773][T18552] ? oom_killer_disable+0x270/0x270 [ 1730.627973][T18552] ? io_schedule_timeout+0x140/0x140 [ 1730.633262][T18552] mem_cgroup_out_of_memory+0x206/0x270 [ 1730.638821][T18552] ? mem_cgroup_margin+0x130/0x130 [ 1730.643986][T18552] memory_max_write+0x25c/0x3b0 [ 1730.648855][T18552] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1730.655018][T18552] ? lock_release+0x720/0x720 [ 1730.659697][T18552] cgroup_file_write+0x1de/0x770 [ 1730.664637][T18552] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1730.670718][T18552] ? kill_css+0x370/0x370 [ 1730.675038][T18552] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.681273][T18552] ? kill_css+0x370/0x370 [ 1730.685591][T18552] kernfs_fop_write_iter+0x3f8/0x610 [ 1730.690881][T18552] new_sync_write+0x38a/0x560 [ 1730.695574][T18552] ? new_sync_read+0x5f0/0x5f0 [ 1730.700347][T18552] ? lock_release+0x720/0x720 [ 1730.705044][T18552] vfs_write+0x7c0/0xac0 [ 1730.709282][T18552] ksys_write+0x127/0x250 [ 1730.713601][T18552] ? __ia32_sys_read+0xb0/0xb0 [ 1730.718356][T18552] ? syscall_enter_from_user_mode+0x21/0x70 [ 1730.724241][T18552] do_syscall_64+0x35/0xb0 [ 1730.728663][T18552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1730.734546][T18552] RIP: 0033:0x7fb4b00890e9 [ 1730.738959][T18552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1730.758623][T18552] RSP: 002b:00007fb4b1114168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1730.767050][T18552] RAX: ffffffffffffffda RBX: 00007fb4b019bf60 RCX: 00007fb4b00890e9 [ 1730.775043][T18552] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1730.783095][T18552] RBP: 00007fb4b00e308d R08: 0000000000000000 R09: 0000000000000000 [ 1730.791059][T18552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.799022][T18552] R13: 00007fff8b5d534f R14: 00007fb4b1114300 R15: 0000000000022000 [ 1730.807000][T18552] [ 1730.819879][T18552] memory: usage 672kB, limit 0kB, failcnt 180 [ 1730.831362][T18552] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1730.843372][T18552] Memory cgroup stats for /syz1: [ 1730.843595][T18552] anon 114688 [ 1730.843595][T18552] file 139264 [ 1730.843595][T18552] kernel 434176 [ 1730.843595][T18552] kernel_stack 65536 [ 1730.843595][T18552] pagetables 77824 [ 1730.843595][T18552] percpu 0 [ 1730.843595][T18552] sock 0 [ 1730.843595][T18552] vmalloc 0 [ 1730.843595][T18552] shmem 139264 [ 1730.843595][T18552] file_mapped 135168 [ 1730.843595][T18552] file_dirty 0 [ 1730.843595][T18552] file_writeback 0 [ 1730.843595][T18552] swapcached 0 [ 1730.843595][T18552] anon_thp 0 [ 1730.843595][T18552] file_thp 0 [ 1730.843595][T18552] shmem_thp 0 [ 1730.843595][T18552] inactive_anon 118784 [ 1730.843595][T18552] active_anon 135168 [ 1730.843595][T18552] inactive_file 0 [ 1730.843595][T18552] active_file 0 [ 1730.843595][T18552] unevictable 0 [ 1730.843595][T18552] slab_reclaimable 82848 [ 1730.843595][T18552] slab_unreclaimable 180480 [ 1730.843595][T18552] slab 263328 [ 1730.843595][T18552] workingset_refault_anon 0 [ 1730.843595][T18552] workingset_refault_file 4 [ 1730.951192][T18552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18517,uid=0 [ 1730.974672][T18552] Memory cgroup out of memory: Killed process 18517 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1731.765995][ T8] device hsr_slave_0 left promiscuous mode [ 1731.772278][ T8] device hsr_slave_1 left promiscuous mode [ 1731.778798][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.786185][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.795440][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.803218][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.814516][ T8] device bridge_slave_1 left promiscuous mode [ 1731.820774][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.829138][ T8] device bridge_slave_0 left promiscuous mode [ 1731.835292][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.852204][ T8] device veth1_macvtap left promiscuous mode [ 1731.858391][ T8] device veth0_macvtap left promiscuous mode [ 1731.864439][ T8] device veth1_vlan left promiscuous mode [ 1731.872534][ T8] device veth0_vlan left promiscuous mode [ 1731.996908][T15874] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1732.055813][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1732.100934][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1732.120742][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.144155][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.327461][ T8] bond0 (unregistering): Released all slaves [ 1734.166916][T15874] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1736.556901][T15874] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1738.636865][T15874] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1740.969648][ T7812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1740.978517][ T7812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1740.986108][ T7812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1740.994185][ T7812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1741.001850][ T7812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1741.009122][ T7812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1741.036963][T15874] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1741.150689][T18566] chnl_net:caif_netlink_parms(): no params data found [ 1741.260080][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.278160][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.297975][T18566] device bridge_slave_0 entered promiscuous mode [ 1741.319121][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.336957][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.344663][T18566] device bridge_slave_1 entered promiscuous mode [ 1741.369781][T18566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1741.380624][T18566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.404169][T18566] team0: Port device team_slave_0 added [ 1741.411893][T18566] team0: Port device team_slave_1 added [ 1741.430414][T18566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.437562][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.463668][T18566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.475549][T18566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.483197][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.512280][T18566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.539532][T18566] device hsr_slave_0 entered promiscuous mode [ 1741.546180][T18566] device hsr_slave_1 entered promiscuous mode [ 1741.612414][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.619524][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.626944][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.634024][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.674974][T18566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.689165][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1741.700996][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.708748][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.717558][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1741.730612][T18566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.740845][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1741.750348][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.757449][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.779227][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1741.788091][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.795162][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.804155][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1741.812969][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1741.823288][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1741.833421][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1741.847190][T18566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1741.858580][T18566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1741.866320][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1741.883924][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1741.891606][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1741.903711][T18566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.117654][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1742.129351][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1742.141771][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1742.152202][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1742.160290][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1742.168501][T18566] device veth0_vlan entered promiscuous mode [ 1742.180452][T18566] device veth1_vlan entered promiscuous mode [ 1742.196877][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1742.204785][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1742.215047][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1742.223672][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1742.242262][T18566] device veth0_macvtap entered promiscuous mode [ 1742.256223][T18566] device veth1_macvtap entered promiscuous mode [ 1742.271363][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1742.282424][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.293596][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1742.304295][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.315398][T18566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.324385][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1742.332456][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1742.341142][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1742.350110][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1742.361656][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1742.373484][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.383709][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1742.394762][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.407520][T18566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.416597][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1742.426295][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1742.507924][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.516114][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.551872][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1742.570400][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.580297][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.596249][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1742.741577][T18587] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1742.753461][T18587] CPU: 0 PID: 18587 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1742.763998][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.774061][T18587] Call Trace: [ 1742.777337][T18587] [ 1742.780271][T18587] dump_stack_lvl+0xcd/0x134 [ 1742.784882][T18587] dump_header+0x10b/0x7f9 [ 1742.789317][T18587] oom_kill_process.cold+0x10/0x15 [ 1742.794445][T18587] out_of_memory+0x358/0x14b0 [ 1742.799141][T18587] ? oom_killer_disable+0x270/0x270 [ 1742.804350][T18587] ? io_schedule_timeout+0x140/0x140 [ 1742.809652][T18587] mem_cgroup_out_of_memory+0x206/0x270 [ 1742.815211][T18587] ? mem_cgroup_margin+0x130/0x130 [ 1742.820352][T18587] memory_max_write+0x25c/0x3b0 [ 1742.825211][T18587] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1742.831287][T18587] ? lock_release+0x720/0x720 [ 1742.835976][T18587] cgroup_file_write+0x1de/0x770 [ 1742.840920][T18587] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1742.846992][T18587] ? kill_css+0x370/0x370 [ 1742.851342][T18587] ? kill_css+0x370/0x370 [ 1742.855677][T18587] kernfs_fop_write_iter+0x3f8/0x610 [ 1742.860977][T18587] new_sync_write+0x38a/0x560 [ 1742.865657][T18587] ? new_sync_read+0x5f0/0x5f0 [ 1742.870431][T18587] ? lock_release+0x720/0x720 [ 1742.875139][T18587] vfs_write+0x7c0/0xac0 [ 1742.879393][T18587] ksys_write+0x127/0x250 [ 1742.883729][T18587] ? __ia32_sys_read+0xb0/0xb0 [ 1742.888499][T18587] ? syscall_enter_from_user_mode+0x21/0x70 [ 1742.894413][T18587] do_syscall_64+0x35/0xb0 [ 1742.898838][T18587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1742.904739][T18587] RIP: 0033:0x7fbae32890e9 [ 1742.909169][T18587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1742.928778][T18587] RSP: 002b:00007fbae4472168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1742.937192][T18587] RAX: ffffffffffffffda RBX: 00007fbae339bf60 RCX: 00007fbae32890e9 [ 1742.945259][T18587] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1742.953229][T18587] RBP: 00007fbae32e308d R08: 0000000000000000 R09: 0000000000000000 [ 1742.961195][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.969163][T18587] R13: 00007fff6f779fcf R14: 00007fbae4472300 R15: 0000000000022000 [ 1742.977153][T18587] [ 1743.000349][T18587] memory: usage 516kB, limit 0kB, failcnt 144 [ 1743.009074][T18587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1743.015985][T18587] Memory cgroup stats for /syz0: [ 1743.017846][T18587] anon 114688 [ 1743.017846][T18587] file 94208 [ 1743.017846][T18587] kernel 319488 [ 1743.017846][T18587] kernel_stack 65536 [ 1743.017846][T18587] pagetables 81920 [ 1743.017846][T18587] percpu 0 [ 1743.017846][T18587] sock 0 [ 1743.017846][T18587] vmalloc 0 [ 1743.017846][T18587] shmem 94208 [ 1743.017846][T18587] file_mapped 86016 [ 1743.017846][T18587] file_dirty 0 [ 1743.017846][T18587] file_writeback 0 [ 1743.017846][T18587] swapcached 0 [ 1743.017846][T18587] anon_thp 0 [ 1743.017846][T18587] file_thp 0 [ 1743.017846][T18587] shmem_thp 0 [ 1743.017846][T18587] inactive_anon 86016 [ 1743.017846][T18587] active_anon 94208 [ 1743.017846][T18587] inactive_file 0 [ 1743.017846][T18587] active_file 0 [ 1743.017846][T18587] unevictable 0 [ 1743.017846][T18587] slab_reclaimable 44768 [ 1743.017846][T18587] slab_unreclaimable 96992 [ 1743.017846][T18587] slab 141760 [ 1743.017846][T18587] workingset_refault_anon 0 [ 1743.017846][T18587] workingset_refault_file 8 [ 1743.115415][T11915] Bluetooth: hci2: command 0x0409 tx timeout [ 1743.116060][T18587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18566,uid=0 [ 1743.151517][T18587] Memory cgroup out of memory: Killed process 18566 (syz-executor.0) total-vm:50532kB, anon-rss:372kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1743.175919][ T28] oom_reaper: reaped process 18566 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1743.191627][T18587] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1743.203602][T18587] CPU: 1 PID: 18587 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1743.214096][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.224140][T18587] Call Trace: [ 1743.227421][T18587] [ 1743.230335][T18587] dump_stack_lvl+0xcd/0x134 [ 1743.234925][T18587] dump_header+0x10b/0x7f9 [ 1743.239333][T18587] oom_kill_process.cold+0x10/0x15 [ 1743.244439][T18587] out_of_memory+0x358/0x14b0 [ 1743.249110][T18587] ? oom_killer_disable+0x270/0x270 [ 1743.254293][T18587] ? mark_held_locks+0x9f/0xe0 [ 1743.259065][T18587] mem_cgroup_out_of_memory+0x206/0x270 [ 1743.264637][T18587] ? mem_cgroup_margin+0x130/0x130 [ 1743.269779][T18587] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1743.275598][T18587] memory_max_write+0x25c/0x3b0 [ 1743.280456][T18587] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1743.286534][T18587] ? lock_release+0x720/0x720 [ 1743.291223][T18587] cgroup_file_write+0x1de/0x770 [ 1743.296169][T18587] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1743.302242][T18587] ? kill_css+0x370/0x370 [ 1743.306591][T18587] ? kill_css+0x370/0x370 [ 1743.310924][T18587] kernfs_fop_write_iter+0x3f8/0x610 [ 1743.316224][T18587] new_sync_write+0x38a/0x560 [ 1743.320905][T18587] ? new_sync_read+0x5f0/0x5f0 [ 1743.325689][T18587] ? lock_release+0x720/0x720 [ 1743.330395][T18587] vfs_write+0x7c0/0xac0 [ 1743.334644][T18587] ksys_write+0x127/0x250 [ 1743.338975][T18587] ? __ia32_sys_read+0xb0/0xb0 [ 1743.343744][T18587] ? syscall_enter_from_user_mode+0x21/0x70 [ 1743.349649][T18587] do_syscall_64+0x35/0xb0 [ 1743.354074][T18587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1743.359974][T18587] RIP: 0033:0x7fbae32890e9 [ 1743.364390][T18587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1743.384005][T18587] RSP: 002b:00007fbae4472168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1743.392426][T18587] RAX: ffffffffffffffda RBX: 00007fbae339bf60 RCX: 00007fbae32890e9 [ 1743.400403][T18587] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1743.408391][T18587] RBP: 00007fbae32e308d R08: 0000000000000000 R09: 0000000000000000 [ 1743.416372][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.424351][T18587] R13: 00007fff6f779fcf R14: 00007fbae4472300 R15: 0000000000022000 [ 1743.432365][T18587] [ 1743.447358][T18587] memory: usage 456kB, limit 0kB, failcnt 144 [ 1743.454829][T18587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1743.463418][T18587] Memory cgroup stats for /syz0: [ 1743.483766][T18587] anon 98304 [ 1743.483766][T18587] file 94208 [ 1743.483766][T18587] kernel 274432 [ 1743.483766][T18587] kernel_stack 32768 [ 1743.483766][T18587] pagetables 73728 [ 1743.483766][T18587] percpu 0 [ 1743.483766][T18587] sock 0 [ 1743.483766][T18587] vmalloc 0 [ 1743.483766][T18587] shmem 94208 [ 1743.483766][T18587] file_mapped 86016 [ 1743.483766][T18587] file_dirty 0 [ 1743.483766][T18587] file_writeback 0 [ 1743.483766][T18587] swapcached 0 [ 1743.483766][T18587] anon_thp 0 [ 1743.483766][T18587] file_thp 0 [ 1743.483766][T18587] shmem_thp 0 [ 1743.483766][T18587] inactive_anon 86016 [ 1743.483766][T18587] active_anon 94208 [ 1743.483766][T18587] inactive_file 0 [ 1743.483766][T18587] active_file 0 [ 1743.483766][T18587] unevictable 0 [ 1743.483766][T18587] slab_reclaimable 44768 [ 1743.483766][T18587] slab_unreclaimable 96992 [ 1743.483766][T18587] slab 141760 [ 1743.483766][T18587] workingset_refault_anon 0 [ 1743.483766][T18587] workingset_refault_file 8 [ 1743.584475][T18587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18586,uid=0 [ 1743.606415][T18587] Memory cgroup out of memory: Killed process 18587 (syz-executor.0) total-vm:54504kB, anon-rss:416kB, file-rss:8888kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1743.629977][ T28] oom_reaper: reaped process 18587 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:24kB [ 1743.692030][T17007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1743.707197][T17007] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1743.715516][T17007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1743.725666][T17007] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1743.733603][T17007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1743.741026][T17007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1743.924824][T18585] chnl_net:caif_netlink_parms(): no params data found 14:31:39 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x24ae, 0x8}, 0x10, 0x1c47a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r2, r5]}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x24ae, 0x8}, 0x10, 0x1c47a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r2, r5]}, 0x80) (async) 14:31:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) (async) 14:31:39 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1744.246206][T18585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.261388][T18585] bridge0: port 1(bridge_slave_0) entered disabled state 14:31:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) 14:31:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1744.311266][T18585] device bridge_slave_0 entered promiscuous mode [ 1744.340276][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.377130][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.385259][T18585] device bridge_slave_1 entered promiscuous mode [ 1744.530186][T18585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.543703][T18585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.572746][T18585] team0: Port device team_slave_0 added [ 1744.581210][T18585] team0: Port device team_slave_1 added [ 1744.619096][T18585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.626060][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.687462][T18585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.723664][T18585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.742256][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.768455][T18585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.804828][T18585] device hsr_slave_0 entered promiscuous mode [ 1744.811578][T18585] device hsr_slave_1 entered promiscuous mode [ 1744.820787][T18585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1744.828516][T18585] Cannot create hsr debugfs directory [ 1744.935958][T18585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1744.954880][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1744.969225][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1744.980124][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1744.990838][T18585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.003483][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1745.013053][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1745.021973][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.029094][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.060029][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1745.068542][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1745.077723][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1745.086166][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.093268][T16993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.102865][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1745.111830][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1745.120927][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1745.130626][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1745.151524][T18585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1745.163869][T18585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1745.172765][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1745.204417][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1745.214252][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1745.224494][T18585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1745.303310][ T6993] device hsr_slave_0 left promiscuous mode [ 1745.311879][ T6993] device hsr_slave_1 left promiscuous mode [ 1745.319055][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.326521][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.336496][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.344292][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.352973][ T6993] device bridge_slave_1 left promiscuous mode [ 1745.361363][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.370959][ T6993] device bridge_slave_0 left promiscuous mode [ 1745.377597][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.391433][ T6993] device veth1_macvtap left promiscuous mode [ 1745.397631][ T6993] device veth0_macvtap left promiscuous mode [ 1745.403694][ T6993] device veth1_vlan left promiscuous mode [ 1745.410796][ T6993] device veth0_vlan left promiscuous mode [ 1745.604668][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 1745.634525][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 1745.654613][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.681494][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.759731][T16989] Bluetooth: hci0: command 0x0409 tx timeout [ 1745.792834][ T6993] bond0 (unregistering): Released all slaves [ 1746.198503][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1746.207411][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1746.215922][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1746.224404][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1746.233902][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1746.243201][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1746.256175][T18585] device veth0_vlan entered promiscuous mode [ 1746.270030][T18585] device veth1_vlan entered promiscuous mode [ 1746.296058][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1746.305392][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1746.326206][T18585] device veth0_macvtap entered promiscuous mode [ 1746.342174][T18585] device veth1_macvtap entered promiscuous mode [ 1746.356109][T18585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1746.367277][T18585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.378378][T18585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1746.389164][T18585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.400698][T18585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.409025][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1746.417623][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1746.425468][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1746.434925][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1746.445482][T18585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1746.457186][T18585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.467112][T18585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1746.477703][T18585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.488998][T18585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.496903][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1746.505396][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1746.572099][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.581068][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.597387][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1746.609239][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.617836][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.627508][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1746.784148][T18635] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1746.795015][T18635] CPU: 1 PID: 18635 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1746.805525][T18635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.815591][T18635] Call Trace: [ 1746.818861][T18635] [ 1746.821785][T18635] dump_stack_lvl+0xcd/0x134 [ 1746.826395][T18635] dump_header+0x10b/0x7f9 [ 1746.830819][T18635] oom_kill_process.cold+0x10/0x15 [ 1746.835931][T18635] out_of_memory+0x358/0x14b0 [ 1746.840605][T18635] ? oom_killer_disable+0x270/0x270 [ 1746.845798][T18635] ? io_schedule_timeout+0x140/0x140 [ 1746.851095][T18635] mem_cgroup_out_of_memory+0x206/0x270 [ 1746.856662][T18635] ? mem_cgroup_margin+0x130/0x130 [ 1746.861809][T18635] memory_max_write+0x25c/0x3b0 [ 1746.866673][T18635] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1746.872755][T18635] ? lock_release+0x720/0x720 [ 1746.877448][T18635] cgroup_file_write+0x1de/0x770 [ 1746.882399][T18635] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1746.888484][T18635] ? kill_css+0x370/0x370 [ 1746.892840][T18635] ? kill_css+0x370/0x370 [ 1746.897188][T18635] kernfs_fop_write_iter+0x3f8/0x610 [ 1746.902491][T18635] new_sync_write+0x38a/0x560 [ 1746.907180][T18635] ? new_sync_read+0x5f0/0x5f0 [ 1746.911955][T18635] ? lockdep_hardirqs_on+0x79/0x100 [ 1746.917161][T18635] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1746.923329][T18635] ? vfs_write+0x69d/0xac0 [ 1746.927753][T18635] ? vfs_write+0x6af/0xac0 [ 1746.932179][T18635] vfs_write+0x7c0/0xac0 [ 1746.936435][T18635] ksys_write+0x127/0x250 [ 1746.940794][T18635] ? __ia32_sys_read+0xb0/0xb0 [ 1746.945572][T18635] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1746.951917][T18635] do_syscall_64+0x35/0xb0 [ 1746.956349][T18635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1746.962252][T18635] RIP: 0033:0x7fa4ab8890e9 [ 1746.966680][T18635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1746.986294][T18635] RSP: 002b:00007fa4ac987168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1746.994713][T18635] RAX: ffffffffffffffda RBX: 00007fa4ab99bf60 RCX: 00007fa4ab8890e9 [ 1747.002689][T18635] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1747.010665][T18635] RBP: 00007fa4ab8e308d R08: 0000000000000000 R09: 0000000000000000 [ 1747.018645][T18635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1747.026613][T18635] R13: 00007ffd2327eeaf R14: 00007fa4ac987300 R15: 0000000000022000 [ 1747.034608][T18635] [ 1747.059402][T18635] memory: usage 616kB, limit 0kB, failcnt 288 [ 1747.077859][T15874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1747.087748][T15874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1747.094974][T18635] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1747.098818][T15874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1747.112032][T15874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1747.113364][T18635] Memory cgroup stats for [ 1747.120021][T13551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1747.120301][T13551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1747.161418][T18635] /syz4: [ 1747.180941][T15874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1747.191783][ T7812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1747.201531][ T7812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1747.210830][T15874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1747.223189][T15874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1747.230950][T15874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1747.238383][T15874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1747.259515][T18635] anon 114688 [ 1747.259515][T18635] file 208896 [ 1747.259515][T18635] kernel 307200 [ 1747.259515][T18635] kernel_stack 65536 [ 1747.259515][T18635] pagetables 77824 [ 1747.259515][T18635] percpu 0 [ 1747.259515][T18635] sock 0 [ 1747.259515][T18635] vmalloc 0 [ 1747.259515][T18635] shmem 208896 [ 1747.259515][T18635] file_mapped 159744 [ 1747.259515][T18635] file_dirty 0 [ 1747.259515][T18635] file_writeback 0 [ 1747.259515][T18635] swapcached 0 [ 1747.259515][T18635] anon_thp 0 [ 1747.259515][T18635] file_thp 0 [ 1747.259515][T18635] shmem_thp 0 [ 1747.259515][T18635] inactive_anon 159744 [ 1747.259515][T18635] active_anon 159744 [ 1747.259515][T18635] inactive_file 0 [ 1747.259515][T18635] active_file 0 [ 1747.259515][T18635] unevictable 0 [ 1747.259515][T18635] slab_reclaimable 40528 [ 1747.259515][T18635] slab_unreclaimable 92808 [ 1747.259515][T18635] slab 133336 [ 1747.259515][T18635] workingset_refault_anon 0 [ 1747.259515][T18635] workingset_refault_file 8 [ 1747.300485][T17007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1747.359161][T17007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1747.363141][T18635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 1747.373370][T17007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1747.383241][T17007] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1747.397894][T17007] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1747.416188][T18635] syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18585,uid=0 [ 1747.442513][T18635] Memory cgroup out of memory: Killed process 18585 (syz-executor.4) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1747.535104][T18621] chnl_net:caif_netlink_parms(): no params data found [ 1747.619634][T18630] chnl_net:caif_netlink_parms(): no params data found [ 1747.834784][T18628] chnl_net:caif_netlink_parms(): no params data found [ 1747.841853][T17389] Bluetooth: hci0: command 0x041b tx timeout [ 1747.860364][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.873611][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.885898][T18621] device bridge_slave_0 entered promiscuous mode [ 1747.923224][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.935282][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.952768][T18621] device bridge_slave_1 entered promiscuous mode [ 1748.005771][T18630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.021288][T18630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.032431][T18630] device bridge_slave_0 entered promiscuous mode [ 1748.048034][T18630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.055168][T18630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.067953][T18630] device bridge_slave_1 entered promiscuous mode 14:31:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:43 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x24ae, 0x8}, 0x10, 0x1c47a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r2, r5]}, 0x80) 14:31:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r1, 0x1c}, 0x84) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9a7) write$cgroup_pid(r2, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x3f, 0x6, 0x60, 0x0, 0x8000000000000001, 0x2000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe7, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8400, 0x7f, 0x2, 0x7, 0x1691, 0x29e7658d, 0x17, 0x0, 0x9, 0x0, 0x1}, r2, 0xe1c, r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0x1, 0x2, 0x100, 0x1905, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x6}, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc) r6 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x67, 0x41201, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x10846, 0x8, 0xbf, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x0, 0x9}, r6, 0x0, 0xffffffffffffffff, 0xa) [ 1748.281547][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.301948][T18630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.319680][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:31:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r1, 0x1c}, 0x84) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9a7) write$cgroup_pid(r2, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x3f, 0x6, 0x60, 0x0, 0x8000000000000001, 0x2000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe7, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8400, 0x7f, 0x2, 0x7, 0x1691, 0x29e7658d, 0x17, 0x0, 0x9, 0x0, 0x1}, r2, 0xe1c, r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0x1, 0x2, 0x100, 0x1905, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x6}, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095240dcc30343b03c13575191ba7cb7f62e8610a32abedaf2d5a0a02aba5d75e4e32a6470d3b678ceaf82efeb74e006138f9179b9baa6c1b46ae20997eea3221bbeac1c09f1649e23c75fb92d53bf399bda6637ffb20b8f254ac6a1275375a43bd475120b8109a3a7819819e2329bb5b920fc1cca9d60457eb525397afa64554c6cbb7c04b2729289f52fa04900d4c7b2595e7151a7740ff21bb4732bd7e8b84afd4bf3270f03d1663d334c25d4e039e0c7343a18ba127f3f4f8bbe5328831088a56251b2c889b6f2e7209242bd4a65aa2fb3c9343f1cad745355b2f4a4757132d6c8e65b213419788"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc) r6 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x67, 0x41201, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x10846, 0x8, 0xbf, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x0, 0x9}, r6, 0x0, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r1, 0x1c}, 0x84) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9a7) (async) write$cgroup_pid(r2, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x3f, 0x6, 0x60, 0x0, 0x8000000000000001, 0x2000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe7, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8400, 0x7f, 0x2, 0x7, 0x1691, 0x29e7658d, 0x17, 0x0, 0x9, 0x0, 0x1}, r2, 0xe1c, r1, 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0x1, 0x2, 0x100, 0x1905, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x6}, 0x56) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc) (async) getpid() (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x67, 0x41201, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x10846, 0x8, 0xbf, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x0, 0x9}, r6, 0x0, 0xffffffffffffffff, 0xa) (async) 14:31:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:43 executing program 2: perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x7a, 0x5, 0x3, 0x0, 0xfffffffffffff4c5, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf1f, 0x4, @perf_config_ext={0x81, 0xa86d}, 0x1a4b, 0x4, 0x401, 0x5, 0x7f, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x5, 0x2, 0xe00, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/136, 0x88, 0x0, &(0x7f00000004c0)=""/190, 0xbe}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, 0x1}, 0xc) [ 1748.463687][T18630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.505725][T18628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.513376][T18628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.522049][T18628] device bridge_slave_0 entered promiscuous mode [ 1748.543722][T18621] team0: Port device team_slave_0 added 14:31:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (rerun: 32) openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) (async, rerun: 32) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r1, 0x1c}, 0x84) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9a7) write$cgroup_pid(r2, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x3f, 0x6, 0x60, 0x0, 0x8000000000000001, 0x2000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe7, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8400, 0x7f, 0x2, 0x7, 0x1691, 0x29e7658d, 0x17, 0x0, 0x9, 0x0, 0x1}, r2, 0xe1c, r1, 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0x1, 0x2, 0x100, 0x1905, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x6}, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc) r6 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x67, 0x41201, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x10846, 0x8, 0xbf, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x0, 0x9}, r6, 0x0, 0xffffffffffffffff, 0xa) [ 1748.634658][T18628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.644266][T18628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.677969][T18628] device bridge_slave_1 entered promiscuous mode [ 1748.708572][T18621] team0: Port device team_slave_1 added [ 1748.762869][T18630] team0: Port device team_slave_0 added [ 1748.811247][T18630] team0: Port device team_slave_1 added [ 1748.830050][T18628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.840365][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.848226][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.904752][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.940553][T18628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.950222][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.957923][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.984177][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.022199][T18630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.029222][T18630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.057315][T18630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.089511][T18630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.096471][T18630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.123818][T18630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.139414][T18628] team0: Port device team_slave_0 added [ 1749.150202][T18621] device hsr_slave_0 entered promiscuous mode [ 1749.157184][T18621] device hsr_slave_1 entered promiscuous mode [ 1749.180667][T18628] team0: Port device team_slave_1 added [ 1749.207067][T16991] Bluetooth: hci2: command 0x0409 tx timeout [ 1749.227869][T18630] device hsr_slave_0 entered promiscuous mode [ 1749.234485][T18630] device hsr_slave_1 entered promiscuous mode [ 1749.241719][T18630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1749.249494][T18630] Cannot create hsr debugfs directory [ 1749.271446][T18628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.278587][T16991] Bluetooth: hci4: command 0x0409 tx timeout [ 1749.284643][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.312068][T18628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.328754][T18628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.335701][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.363031][T18628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.437437][T17389] Bluetooth: hci5: command 0x0409 tx timeout [ 1749.455304][T18628] device hsr_slave_0 entered promiscuous mode [ 1749.462007][T18628] device hsr_slave_1 entered promiscuous mode [ 1749.474039][T18628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1749.482439][T18628] Cannot create hsr debugfs directory [ 1749.590325][ T11] device hsr_slave_0 left promiscuous mode [ 1749.598604][ T11] device hsr_slave_1 left promiscuous mode [ 1749.604934][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.614682][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.624482][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.632149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.641257][ T11] device bridge_slave_1 left promiscuous mode [ 1749.648008][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.656183][ T11] device bridge_slave_0 left promiscuous mode [ 1749.662372][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.676106][ T11] device veth1_macvtap left promiscuous mode [ 1749.691474][ T11] device veth0_macvtap left promiscuous mode [ 1749.697700][ T11] device veth1_vlan left promiscuous mode [ 1749.703455][ T11] device veth0_vlan left promiscuous mode [ 1749.873101][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1749.887562][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1749.900498][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.913621][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.027237][ T11] bond0 (unregistering): Released all slaves [ 1750.273078][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.302079][T18630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.330188][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1750.338655][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1750.350794][T18630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.374326][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1750.385444][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1750.394230][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.401362][T17412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.410896][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1750.418884][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1750.437571][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1750.445517][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1750.454562][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1750.463384][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.470521][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.478792][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1750.490641][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.538101][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1750.548422][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1750.558573][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1750.567586][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1750.576148][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1750.584856][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.591992][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.600854][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1750.609506][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1750.618557][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.625608][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.636548][T18628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.658623][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1750.666434][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1750.675153][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1750.684706][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1750.707682][T18628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.714677][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1750.726425][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1750.734936][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1750.746976][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1750.755466][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1750.765408][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1750.802028][T18630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1750.815966][T18630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1750.824526][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1750.833562][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1750.842426][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.849574][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.857475][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1750.866024][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1750.874727][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.881831][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.890400][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1750.899388][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1750.908244][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1750.916541][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1750.925401][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1750.934238][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1750.942776][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1750.951557][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1750.959986][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1750.992721][T18628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1751.009523][T18628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1751.022953][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1751.035066][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1751.045275][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1751.054087][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1751.062628][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1751.071145][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1751.079615][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1751.088036][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1751.096328][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1751.104749][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1751.113037][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1751.121808][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1751.130142][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1751.140131][T18621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1751.172695][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1751.180880][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1751.188885][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1751.196330][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1751.213272][T18628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.232049][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1751.234719][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.247495][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1751.255835][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1751.268305][T18630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.275404][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1751.282897][T17389] Bluetooth: hci2: command 0x041b tx timeout [ 1751.289637][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1751.297699][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1751.299621][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1751.347052][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1751.355075][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1751.357205][T17389] Bluetooth: hci4: command 0x041b tx timeout [ 1751.387059][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1751.517506][T11915] Bluetooth: hci5: command 0x041b tx timeout [ 1751.617898][T18690] chnl_net:caif_netlink_parms(): no params data found [ 1751.791150][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.799496][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.814485][T18690] device bridge_slave_0 entered promiscuous mode [ 1751.825135][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.839550][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.871446][T18690] device bridge_slave_1 entered promiscuous mode [ 1751.950815][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.974182][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.046636][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.064614][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.080808][T18690] team0: Port device team_slave_0 added [ 1752.101269][T18690] team0: Port device team_slave_1 added [ 1752.134417][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1752.141607][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.169258][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1752.192443][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.201018][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.229928][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1752.240175][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.266327][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.290867][T18621] device veth0_vlan entered promiscuous mode [ 1752.302613][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.311181][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1752.319165][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.328260][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.343401][T18628] device veth0_vlan entered promiscuous mode [ 1752.351266][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.359663][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.384123][T18621] device veth1_vlan entered promiscuous mode [ 1752.396154][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.404893][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1752.415887][T18690] device hsr_slave_0 entered promiscuous mode [ 1752.424239][T18690] device hsr_slave_1 entered promiscuous mode [ 1752.434290][T18690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1752.443288][T18690] Cannot create hsr debugfs directory [ 1752.472998][T18628] device veth1_vlan entered promiscuous mode [ 1752.484098][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1752.493411][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.503144][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.541384][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1752.549524][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1752.558886][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1752.571156][T18621] device veth0_macvtap entered promiscuous mode [ 1752.603131][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1752.611608][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1752.620640][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1752.629811][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.638535][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.648298][T18628] device veth0_macvtap entered promiscuous mode [ 1752.655405][T18630] device veth0_vlan entered promiscuous mode [ 1752.662582][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1752.671063][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.678990][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1752.691640][T18621] device veth1_macvtap entered promiscuous mode [ 1752.704079][T18628] device veth1_macvtap entered promiscuous mode [ 1752.742805][T18630] device veth1_vlan entered promiscuous mode [ 1752.788650][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1752.799481][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.813418][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1752.824103][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.835244][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.853482][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1752.861485][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1752.870090][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1752.879376][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1752.890904][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1752.900034][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1752.909419][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1752.923013][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.933224][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1752.944155][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.954198][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1752.965145][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.976444][T18628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.987742][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1752.999661][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.009800][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.021258][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.032157][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.046985][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1753.055479][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1753.064529][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1753.073054][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1753.081749][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1753.091885][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1753.102314][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.115423][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.125634][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.136487][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.146613][T18628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.161846][T18628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.172854][T18628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.185507][T18630] device veth0_macvtap entered promiscuous mode [ 1753.199241][T18630] device veth1_macvtap entered promiscuous mode [ 1753.209718][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1753.218200][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1753.226030][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1753.235144][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1753.264979][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.277517][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.288766][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.300076][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.310220][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.321285][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.331293][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.341931][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.353264][T18630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.357204][T11915] Bluetooth: hci2: command 0x040f tx timeout [ 1753.361378][ T3710] Bluetooth: hci0: command 0x0409 tx timeout [ 1753.385161][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1753.394212][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1753.404439][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.419482][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.433963][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.444772][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.455090][T16989] Bluetooth: hci4: command 0x040f tx timeout [ 1753.461558][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.472726][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.485171][T18630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.496271][T18630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.507964][T18630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.557238][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1753.565795][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1753.614301][ T3710] Bluetooth: hci5: command 0x040f tx timeout [ 1753.703846][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.711463][T18690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.714456][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.726744][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.734821][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.735883][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.763044][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1753.771078][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1753.780324][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1753.788617][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1753.825217][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1753.834127][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1753.843146][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.850285][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.859053][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1753.867925][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1753.876253][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.883403][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.906486][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.925693][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.926263][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1753.942497][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1753.951305][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1753.960391][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1753.969015][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1753.977662][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1753.986185][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1753.995230][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1754.003645][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1754.033886][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.058561][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1754.059126][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.068858][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1754.083753][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1754.092169][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1754.102521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.104789][T18690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1754.113362][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.136456][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1754.145723][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1754.181910][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.198394][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1754.201762][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.205903][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1754.252043][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1754.270126][T18690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.276497][T18738] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1754.292449][T18738] CPU: 0 PID: 18738 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1754.302994][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.313066][T18738] Call Trace: [ 1754.316355][T18738] [ 1754.319297][T18738] dump_stack_lvl+0xcd/0x134 [ 1754.323921][T18738] dump_header+0x10b/0x7f9 [ 1754.328370][T18738] oom_kill_process.cold+0x10/0x15 [ 1754.333515][T18738] out_of_memory+0x358/0x14b0 [ 1754.338352][T18738] ? oom_killer_disable+0x270/0x270 [ 1754.343596][T18738] ? io_schedule_timeout+0x140/0x140 [ 1754.349074][T18738] mem_cgroup_out_of_memory+0x206/0x270 [ 1754.354750][T18738] ? mem_cgroup_margin+0x130/0x130 [ 1754.359914][T18738] memory_max_write+0x25c/0x3b0 [ 1754.364793][T18738] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1754.370893][T18738] ? lock_release+0x720/0x720 [ 1754.375599][T18738] cgroup_file_write+0x1de/0x770 [ 1754.380559][T18738] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1754.386647][T18738] ? kill_css+0x370/0x370 [ 1754.390997][T18738] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.397269][T18738] ? kill_css+0x370/0x370 [ 1754.401628][T18738] kernfs_fop_write_iter+0x3f8/0x610 [ 1754.406943][T18738] new_sync_write+0x38a/0x560 [ 1754.411642][T18738] ? new_sync_read+0x5f0/0x5f0 [ 1754.416434][T18738] ? lock_release+0x720/0x720 [ 1754.421158][T18738] vfs_write+0x7c0/0xac0 [ 1754.425434][T18738] ksys_write+0x127/0x250 [ 1754.429784][T18738] ? __ia32_sys_read+0xb0/0xb0 [ 1754.434573][T18738] ? syscall_enter_from_user_mode+0x21/0x70 [ 1754.440498][T18738] do_syscall_64+0x35/0xb0 [ 1754.444936][T18738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1754.450850][T18738] RIP: 0033:0x7fee29c890e9 [ 1754.455282][T18738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1754.474914][T18738] RSP: 002b:00007fee2ad98168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1754.483361][T18738] RAX: ffffffffffffffda RBX: 00007fee29d9bf60 RCX: 00007fee29c890e9 [ 1754.491353][T18738] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1754.499343][T18738] RBP: 00007fee29ce308d R08: 0000000000000000 R09: 0000000000000000 [ 1754.507332][T18738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.515334][T18738] R13: 00007ffd349ae21f R14: 00007fee2ad98300 R15: 0000000000022000 [ 1754.523351][T18738] [ 1754.623765][T18738] memory: usage 560kB, limit 0kB, failcnt 180 [ 1754.676201][T18738] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1754.707726][T18738] Memory cgroup stats for /syz1: [ 1754.707926][T18738] anon 114688 [ 1754.707926][T18738] file 139264 [ 1754.707926][T18738] kernel 319488 [ 1754.707926][T18738] kernel_stack 65536 [ 1754.707926][T18738] pagetables 77824 [ 1754.707926][T18738] percpu 0 [ 1754.707926][T18738] sock 0 [ 1754.707926][T18738] vmalloc 0 [ 1754.707926][T18738] shmem 139264 [ 1754.707926][T18738] file_mapped 135168 [ 1754.707926][T18738] file_dirty 0 [ 1754.707926][T18738] file_writeback 0 [ 1754.707926][T18738] swapcached 0 [ 1754.707926][T18738] anon_thp 0 [ 1754.707926][T18738] file_thp 0 [ 1754.707926][T18738] shmem_thp 0 [ 1754.707926][T18738] inactive_anon 118784 [ 1754.707926][T18738] active_anon 135168 [ 1754.707926][T18738] inactive_file 0 [ 1754.707926][T18738] active_file 0 [ 1754.707926][T18738] unevictable 0 [ 1754.707926][T18738] slab_reclaimable 45248 [ 1754.707926][T18738] slab_unreclaimable 102888 [ 1754.707926][T18738] slab 148136 [ 1754.707926][T18738] workingset_refault_anon 0 [ 1754.707926][T18738] workingset_refault_file 4 [ 1754.824530][T18738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18621,uid=0 [ 1754.851654][T18738] Memory cgroup out of memory: Killed process 18621 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1754.925119][T18742] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1754.987122][T18742] CPU: 1 PID: 18742 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1754.997667][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.007735][T18742] Call Trace: [ 1755.011024][T18742] [ 1755.013961][T18742] dump_stack_lvl+0xcd/0x134 [ 1755.018578][T18742] dump_header+0x10b/0x7f9 [ 1755.023031][T18742] oom_kill_process.cold+0x10/0x15 [ 1755.028168][T18742] out_of_memory+0x358/0x14b0 [ 1755.032873][T18742] ? oom_killer_disable+0x270/0x270 [ 1755.038097][T18742] ? find_held_lock+0x2d/0x110 [ 1755.042892][T18742] mem_cgroup_out_of_memory+0x206/0x270 [ 1755.048467][T18742] ? mem_cgroup_margin+0x130/0x130 [ 1755.053611][T18742] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1755.059446][T18742] memory_max_write+0x25c/0x3b0 [ 1755.064317][T18742] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1755.070408][T18742] ? lock_release+0x720/0x720 [ 1755.075110][T18742] cgroup_file_write+0x1de/0x770 [ 1755.080067][T18742] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1755.086154][T18742] ? kill_css+0x370/0x370 [ 1755.090505][T18742] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.096774][T18742] ? kill_css+0x370/0x370 [ 1755.101121][T18742] kernfs_fop_write_iter+0x3f8/0x610 [ 1755.106440][T18742] new_sync_write+0x38a/0x560 [ 1755.111140][T18742] ? new_sync_read+0x5f0/0x5f0 [ 1755.115933][T18742] ? lock_release+0x720/0x720 [ 1755.120666][T18742] vfs_write+0x7c0/0xac0 [ 1755.124926][T18742] ksys_write+0x127/0x250 [ 1755.129247][T18742] ? __ia32_sys_read+0xb0/0xb0 [ 1755.134192][T18742] ? syscall_enter_from_user_mode+0x21/0x70 [ 1755.140174][T18742] do_syscall_64+0x35/0xb0 [ 1755.144615][T18742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.150535][T18742] RIP: 0033:0x7ff8ae4890e9 [ 1755.155023][T18742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1755.174614][T18742] RSP: 002b:00007ff8af5e2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1755.183015][T18742] RAX: ffffffffffffffda RBX: 00007ff8ae59bf60 RCX: 00007ff8ae4890e9 [ 1755.190975][T18742] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1755.198948][T18742] RBP: 00007ff8ae4e308d R08: 0000000000000000 R09: 0000000000000000 [ 1755.206901][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.214855][T18742] R13: 00007ffe6432427f R14: 00007ff8af5e2300 R15: 0000000000022000 [ 1755.222823][T18742] [ 1755.228298][T18742] memory: usage 692kB, limit 0kB, failcnt 154 [ 1755.234392][T18742] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1755.245003][T18742] Memory cgroup stats for /syz5: [ 1755.245225][T18742] anon 114688 [ 1755.245225][T18742] file 282624 [ 1755.245225][T18742] kernel 311296 [ 1755.245225][T18742] kernel_stack 65536 [ 1755.245225][T18742] pagetables 77824 [ 1755.245225][T18742] percpu 0 [ 1755.245225][T18742] sock 0 [ 1755.245225][T18742] vmalloc 0 [ 1755.245225][T18742] shmem 282624 [ 1755.245225][T18742] file_mapped 282624 [ 1755.245225][T18742] file_dirty 0 [ 1755.245225][T18742] file_writeback 0 [ 1755.245225][T18742] swapcached 0 [ 1755.245225][T18742] anon_thp 0 [ 1755.245225][T18742] file_thp 0 [ 1755.245225][T18742] shmem_thp 0 [ 1755.245225][T18742] inactive_anon 131072 [ 1755.245225][T18742] active_anon 266240 [ 1755.245225][T18742] inactive_file 0 [ 1755.245225][T18742] active_file 0 [ 1755.245225][T18742] unevictable 0 [ 1755.245225][T18742] slab_reclaimable 45952 [ 1755.245225][T18742] slab_unreclaimable 96536 [ 1755.245225][T18742] slab 142488 [ 1755.245225][T18742] workingset_refault_anon 0 [ 1755.245225][T18742] workingset_refault_file 15 [ 1755.349298][T18742] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18628,uid=0 [ 1755.370621][T18742] Memory cgroup out of memory: Killed process 18628 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1755.389650][ T28] oom_reaper: reaped process 18628 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1755.395123][T18742] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1755.413907][T18742] CPU: 1 PID: 18742 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1755.424431][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.434501][T18742] Call Trace: [ 1755.437791][T18742] [ 1755.440735][T18742] dump_stack_lvl+0xcd/0x134 [ 1755.445355][T18742] dump_header+0x10b/0x7f9 [ 1755.449802][T18742] oom_kill_process.cold+0x10/0x15 [ 1755.454955][T18742] out_of_memory+0x358/0x14b0 [ 1755.459676][T18742] ? oom_killer_disable+0x270/0x270 [ 1755.464902][T18742] ? io_schedule_timeout+0x140/0x140 [ 1755.470220][T18742] mem_cgroup_out_of_memory+0x206/0x270 [ 1755.475645][T17418] Bluetooth: hci0: command 0x041b tx timeout [ 1755.475789][T18742] ? mem_cgroup_margin+0x130/0x130 [ 1755.486874][T18742] memory_max_write+0x25c/0x3b0 [ 1755.491756][T18742] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1755.497860][T18742] ? lock_release+0x720/0x720 [ 1755.502568][T18742] cgroup_file_write+0x1de/0x770 [ 1755.507536][T18742] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1755.513650][T18742] ? kill_css+0x370/0x370 [ 1755.518001][T18742] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.521487][T17418] Bluetooth: hci4: command 0x0419 tx timeout [ 1755.524263][T18742] ? kill_css+0x370/0x370 [ 1755.534528][T18742] kernfs_fop_write_iter+0x3f8/0x610 [ 1755.539840][T18742] new_sync_write+0x38a/0x560 [ 1755.544534][T18742] ? new_sync_read+0x5f0/0x5f0 [ 1755.549332][T18742] ? lock_release+0x720/0x720 [ 1755.554059][T18742] vfs_write+0x7c0/0xac0 [ 1755.558333][T18742] ksys_write+0x127/0x250 [ 1755.562687][T18742] ? __ia32_sys_read+0xb0/0xb0 [ 1755.567476][T18742] ? syscall_enter_from_user_mode+0x21/0x70 [ 1755.573396][T18742] do_syscall_64+0x35/0xb0 [ 1755.577838][T18742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.583758][T18742] RIP: 0033:0x7ff8ae4890e9 [ 1755.588189][T18742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1755.607817][T18742] RSP: 002b:00007ff8af5e2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1755.616254][T18742] RAX: ffffffffffffffda RBX: 00007ff8ae59bf60 RCX: 00007ff8ae4890e9 [ 1755.617359][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1755.624239][T18742] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1755.640248][T18742] RBP: 00007ff8ae4e308d R08: 0000000000000000 R09: 0000000000000000 [ 1755.640581][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1755.648222][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1755.648241][T18742] R13: 00007ffe6432427f R14: 00007ff8af5e2300 R15: 0000000000022000 [ 1755.648280][T18742] [ 1755.653473][T18742] memory: usage 660kB, limit 0kB, failcnt 154 [ 1755.683400][T18742] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1755.709847][T16991] Bluetooth: hci5: command 0x0419 tx timeout [ 1755.717303][T18742] Memory cgroup stats for /syz5: [ 1755.717503][T18742] anon 94208 [ 1755.717503][T18742] file 282624 [ 1755.717503][T18742] kernel 266240 [ 1755.717503][T18742] kernel_stack 32768 [ 1755.717503][T18742] pagetables 69632 [ 1755.717503][T18742] percpu 0 [ 1755.717503][T18742] sock 0 [ 1755.717503][T18742] vmalloc 0 [ 1755.717503][T18742] shmem 282624 [ 1755.717503][T18742] file_mapped 282624 [ 1755.717503][T18742] file_dirty 0 [ 1755.717503][T18742] file_writeback 0 [ 1755.717503][T18742] swapcached 0 [ 1755.717503][T18742] anon_thp 0 [ 1755.717503][T18742] file_thp 0 [ 1755.717503][T18742] shmem_thp 0 [ 1755.717503][T18742] inactive_anon 110592 [ 1755.717503][T18742] active_anon 266240 [ 1755.717503][T18742] inactive_file 0 [ 1755.717503][T18742] active_file 0 [ 1755.717503][T18742] unevictable 0 [ 1755.717503][T18742] slab_reclaimable 45952 [ 1755.717503][T18742] slab_unreclaimable 96536 [ 1755.717503][T18742] slab 142488 [ 1755.717503][T18742] workingset_refault_anon 0 [ 1755.717503][T18742] workingset_refault_file 15 [ 1755.736752][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1755.816784][T18742] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18741,uid=0 [ 1755.856172][T18742] Memory cgroup out of memory: Killed process 18742 (syz-executor.5) total-vm:54504kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:72kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1755.883605][ T28] oom_reaper: reaped process 18742 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:16kB [ 1755.895536][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1755.948761][T18690] device veth0_vlan entered promiscuous mode [ 1755.959515][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1755.975069][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1755.989463][T18690] device veth1_vlan entered promiscuous mode [ 1756.045861][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1756.055064][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1756.064043][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1756.073103][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 14:31:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:51 executing program 2: perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x7a, 0x5, 0x3, 0x0, 0xfffffffffffff4c5, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf1f, 0x4, @perf_config_ext={0x81, 0xa86d}, 0x1a4b, 0x4, 0x401, 0x5, 0x7f, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x5, 0x2, 0xe00, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/136, 0x88, 0x0, &(0x7f00000004c0)=""/190, 0xbe}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, 0x1}, 0xc) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x7a, 0x5, 0x3, 0x0, 0xfffffffffffff4c5, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf1f, 0x4, @perf_config_ext={0x81, 0xa86d}, 0x1a4b, 0x4, 0x401, 0x5, 0x7f, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x5, 0x2, 0xe00, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/136, 0x88, 0x0, &(0x7f00000004c0)=""/190, 0xbe}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, 0x1}, 0xc) (async) 14:31:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:51 executing program 3: r0 = syz_clone(0x8000, &(0x7f0000000540)="a5f1172cf6736e6e23465181814ef58691126d257ebc58bd08e21e3792ace50a5d7a842cf5c7", 0x26, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="530a9bbf9326d061a367a49ad05cd8635a85151c26fac149e5731c394f0617f570abeeffb0e8582bf06aa4645081a799adf1d3d894106703188cf734afe604c6edd0fcb5ceda7d3702479e7853d068dfd8c119fb437edc34115b7b5c89758e4ac34f208db7438023f05f7ba4a020832ba6faf6b2b3930e0c6049") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000680)=0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x1, 0xff, 0x66, 0x0, 0x0, 0x10000, 0x40, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x53, 0x0, @perf_config_ext={0xff, 0xd4}, 0x800, 0xe5d, 0x7, 0x3, 0x8000000000000000, 0x3f, 0x2, 0x0, 0x8001, 0x0, 0x1000}, r0, 0x4, r1, 0x1b) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) close(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000003a0de48f7e58a29ae3f3c40000000000001000000000000000a6", @ANYRES32=r4, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xaf}, 0x48) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0x3, &(0x7f00000006c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000700)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x7, 0x8, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}, 0x80) 14:31:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1756.098586][T18690] device veth0_macvtap entered promiscuous mode [ 1756.109744][T18690] device veth1_macvtap entered promiscuous mode [ 1756.125148][T18630] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1756.185395][T18630] CPU: 0 PID: 18630 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1756.196021][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.206085][T18630] Call Trace: [ 1756.209356][T18630] [ 1756.212279][T18630] dump_stack_lvl+0xcd/0x134 [ 1756.216877][T18630] dump_header+0x10b/0x7f9 [ 1756.221301][T18630] oom_kill_process.cold+0x10/0x15 [ 1756.226419][T18630] out_of_memory+0x358/0x14b0 [ 1756.231102][T18630] ? find_held_lock+0x2d/0x110 [ 1756.235869][T18630] ? oom_killer_disable+0x270/0x270 [ 1756.241073][T18630] ? find_held_lock+0x2d/0x110 [ 1756.245839][T18630] mem_cgroup_out_of_memory+0x206/0x270 [ 1756.251390][T18630] ? mem_cgroup_margin+0x130/0x130 [ 1756.256540][T18630] ? lock_downgrade+0x6e0/0x6e0 [ 1756.261411][T18630] try_charge_memcg+0xef9/0x1380 [ 1756.266353][T18630] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1756.272337][T18630] ? rcu_read_unlock+0x9/0x60 [ 1756.277013][T18630] ? lock_downgrade+0x6e0/0x6e0 [ 1756.281882][T18630] obj_cgroup_charge+0x334/0x700 [ 1756.286831][T18630] kmem_cache_alloc_node+0x99/0x3f0 [ 1756.292027][T18630] ? copy_process+0x5c4/0x6fe0 [ 1756.296797][T18630] copy_process+0x5c4/0x6fe0 [ 1756.301385][T18630] ? lock_chain_count+0x20/0x20 [ 1756.306237][T18630] ? find_held_lock+0x2d/0x110 [ 1756.311005][T18630] ? do_wp_page+0xbcb/0x2030 [ 1756.315602][T18630] ? __cleanup_sighand+0xb0/0xb0 [ 1756.320572][T18630] ? __lock_acquire+0x163e/0x56c0 [ 1756.325603][T18630] ? kernel_clone+0x314/0xab0 [ 1756.330279][T18630] kernel_clone+0xe7/0xab0 [ 1756.334696][T18630] ? create_io_thread+0xf0/0xf0 [ 1756.339553][T18630] ? find_held_lock+0x2d/0x110 [ 1756.344323][T18630] __do_sys_clone+0xc8/0x110 [ 1756.348907][T18630] ? kernel_clone+0xab0/0xab0 [ 1756.353598][T18630] ? syscall_enter_from_user_mode+0x21/0x70 [ 1756.359499][T18630] do_syscall_64+0x35/0xb0 [ 1756.363917][T18630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1756.369810][T18630] RIP: 0033:0x7f9cab0876db [ 1756.374221][T18630] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1756.393951][T18630] RSP: 002b:00007ffd70c88ce0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1756.402374][T18630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cab0876db [ 1756.410345][T18630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1756.418320][T18630] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555608b400 [ 1756.426294][T18630] R10: 000055555608b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1756.434264][T18630] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd70c88dc0 [ 1756.442255][T18630] 14:31:51 executing program 2: perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x7a, 0x5, 0x3, 0x0, 0xfffffffffffff4c5, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf1f, 0x4, @perf_config_ext={0x81, 0xa86d}, 0x1a4b, 0x4, 0x401, 0x5, 0x7f, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x5, 0x2, 0xe00, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/136, 0x88, 0x0, &(0x7f00000004c0)=""/190, 0xbe}}, 0x10) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, 0x1}, 0xc) [ 1756.511832][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1756.539869][T18630] memory: usage 356kB, limit 0kB, failcnt 163 [ 1756.545980][T18630] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1756.569016][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.576823][T18630] Memory cgroup stats for /syz0: [ 1756.583755][T18630] anon 40960 [ 1756.583755][T18630] file 94208 [ 1756.583755][T18630] kernel 229376 [ 1756.583755][T18630] kernel_stack 0 [ 1756.583755][T18630] pagetables 8192 [ 1756.583755][T18630] percpu 0 [ 1756.583755][T18630] sock 0 [ 1756.583755][T18630] vmalloc 0 [ 1756.583755][T18630] shmem 94208 [ 1756.583755][T18630] file_mapped 86016 [ 1756.583755][T18630] file_dirty 0 [ 1756.583755][T18630] file_writeback 0 [ 1756.583755][T18630] swapcached 0 [ 1756.583755][T18630] anon_thp 0 [ 1756.583755][T18630] file_thp 0 [ 1756.583755][T18630] shmem_thp 0 [ 1756.583755][T18630] inactive_anon 40960 [ 1756.583755][T18630] active_anon 94208 [ 1756.583755][T18630] inactive_file 0 [ 1756.583755][T18630] active_file 0 [ 1756.583755][T18630] unevictable 0 [ 1756.583755][T18630] slab_reclaimable 64704 [ 1756.583755][T18630] slab_unreclaimable 146472 [ 1756.583755][T18630] slab 211176 14:31:51 executing program 3: r0 = syz_clone(0x8000, &(0x7f0000000540)="a5f1172cf6736e6e23465181814ef58691126d257ebc58bd08e21e3792ace50a5d7a842cf5c7", 0x26, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="530a9bbf9326d061a367a49ad05cd8635a85151c26fac149e5731c394f0617f570abeeffb0e8582bf06aa4645081a799adf1d3d894106703188cf734afe604c6edd0fcb5ceda7d3702479e7853d068dfd8c119fb437edc34115b7b5c89758e4ac34f208db7438023f05f7ba4a020832ba6faf6b2b3930e0c6049") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000680)=0x4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x1, 0xff, 0x66, 0x0, 0x0, 0x10000, 0x40, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x53, 0x0, @perf_config_ext={0xff, 0xd4}, 0x800, 0xe5d, 0x7, 0x3, 0x8000000000000000, 0x3f, 0x2, 0x0, 0x8001, 0x0, 0x1000}, r0, 0x4, r1, 0x1b) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) close(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000003a0de48f7e58a29ae3f3c40000000000001000000000000000a6", @ANYRES32=r4, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xaf}, 0x48) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0x3, &(0x7f00000006c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000700)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x7, 0x8, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}, 0x80) [ 1756.583755][T18630] workingset_refault_anon 0 [ 1756.583755][T18630] workingset_refault_file 8 [ 1756.616886][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1756.689980][T18630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18630,uid=0 14:31:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1756.707346][T18630] Memory cgroup out of memory: Killed process 18630 (syz-executor.0) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1756.755805][ T28] oom_reaper: reaped process 18630 (syz-executor.0), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1756.765014][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.777886][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1756.789388][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:31:52 executing program 3: r0 = syz_clone(0x8000, &(0x7f0000000540)="a5f1172cf6736e6e23465181814ef58691126d257ebc58bd08e21e3792ace50a5d7a842cf5c7", 0x26, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="530a9bbf9326d061a367a49ad05cd8635a85151c26fac149e5731c394f0617f570abeeffb0e8582bf06aa4645081a799adf1d3d894106703188cf734afe604c6edd0fcb5ceda7d3702479e7853d068dfd8c119fb437edc34115b7b5c89758e4ac34f208db7438023f05f7ba4a020832ba6faf6b2b3930e0c6049") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000680)=0x4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x1, 0xff, 0x66, 0x0, 0x0, 0x10000, 0x40, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x53, 0x0, @perf_config_ext={0xff, 0xd4}, 0x800, 0xe5d, 0x7, 0x3, 0x8000000000000000, 0x3f, 0x2, 0x0, 0x8001, 0x0, 0x1000}, r0, 0x4, r1, 0x1b) (async) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) close(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000003a0de48f7e58a29ae3f3c40000000000001000000000000000a6", @ANYRES32=r4, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xaf}, 0x48) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0x3, &(0x7f00000006c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000700)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x7, 0x8, 0x5}, 0x10, 0x0, r1, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}, 0x80) [ 1756.807269][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1756.825296][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.846755][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1756.867736][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.921662][T18690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.946107][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1756.955515][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1756.964680][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1756.973836][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1757.082837][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1757.114524][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.140809][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1757.172417][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.197161][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1757.216795][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.226765][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1757.244261][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.256323][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1757.268047][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.284480][T18690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.293354][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1757.303339][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1757.423413][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.445410][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.460299][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1757.472866][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.485273][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.506040][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1757.527924][T16989] Bluetooth: hci0: command 0x040f tx timeout [ 1757.810417][T18790] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1757.825270][T18790] CPU: 0 PID: 18790 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1757.835804][T18790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.845878][T18790] Call Trace: [ 1757.849162][T18790] [ 1757.852092][T18790] dump_stack_lvl+0xcd/0x134 [ 1757.856700][T18790] dump_header+0x10b/0x7f9 [ 1757.861135][T18790] oom_kill_process.cold+0x10/0x15 [ 1757.866261][T18790] out_of_memory+0x358/0x14b0 [ 1757.870959][T18790] ? oom_killer_disable+0x270/0x270 [ 1757.876172][T18790] ? find_held_lock+0x2d/0x110 [ 1757.880953][T18790] mem_cgroup_out_of_memory+0x206/0x270 [ 1757.886515][T18790] ? mem_cgroup_margin+0x130/0x130 [ 1757.891671][T18790] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1757.897586][T18790] memory_max_write+0x25c/0x3b0 [ 1757.902447][T18790] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1757.908525][T18790] ? lock_release+0x720/0x720 [ 1757.913220][T18790] cgroup_file_write+0x1de/0x770 [ 1757.918173][T18790] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1757.924248][T18790] ? kill_css+0x370/0x370 [ 1757.928585][T18790] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1757.934843][T18790] ? kill_css+0x370/0x370 [ 1757.939186][T18790] kernfs_fop_write_iter+0x3f8/0x610 [ 1757.944488][T18790] new_sync_write+0x38a/0x560 [ 1757.949170][T18790] ? new_sync_read+0x5f0/0x5f0 [ 1757.953945][T18790] ? lock_release+0x720/0x720 [ 1757.958653][T18790] vfs_write+0x7c0/0xac0 [ 1757.962911][T18790] ksys_write+0x127/0x250 [ 1757.967244][T18790] ? __ia32_sys_read+0xb0/0xb0 [ 1757.972027][T18790] ? syscall_enter_from_user_mode+0x21/0x70 [ 1757.977935][T18790] do_syscall_64+0x35/0xb0 [ 1757.982364][T18790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1757.988265][T18790] RIP: 0033:0x7f49a40890e9 [ 1757.992682][T18790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1758.012293][T18790] RSP: 002b:00007f49a5117168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1758.020720][T18790] RAX: ffffffffffffffda RBX: 00007f49a419bf60 RCX: 00007f49a40890e9 [ 1758.028692][T18790] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1758.036664][T18790] RBP: 00007f49a40e308d R08: 0000000000000000 R09: 0000000000000000 [ 1758.044640][T18790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.052611][T18790] R13: 00007ffd02c481df R14: 00007f49a5117300 R15: 0000000000022000 [ 1758.060607][T18790] [ 1758.158505][T18790] memory: usage 744kB, limit 0kB, failcnt 288 [ 1758.174315][T18790] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1758.188626][ T11] device hsr_slave_0 left promiscuous mode [ 1758.195042][ T11] device hsr_slave_1 left promiscuous mode [ 1758.212694][T18790] Memory cgroup stats for /syz4: [ 1758.218568][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.227563][T18790] anon 114688 [ 1758.227563][T18790] file 208896 [ 1758.227563][T18790] kernel 438272 [ 1758.227563][T18790] kernel_stack 65536 [ 1758.227563][T18790] pagetables 77824 [ 1758.227563][T18790] percpu 0 [ 1758.227563][T18790] sock 0 [ 1758.227563][T18790] vmalloc 0 [ 1758.227563][T18790] shmem 208896 [ 1758.227563][T18790] file_mapped 159744 [ 1758.227563][T18790] file_dirty 0 [ 1758.227563][T18790] file_writeback 0 [ 1758.227563][T18790] swapcached 0 [ 1758.227563][T18790] anon_thp 0 [ 1758.227563][T18790] file_thp 0 [ 1758.227563][T18790] shmem_thp 0 [ 1758.227563][T18790] inactive_anon 163840 [ 1758.227563][T18790] active_anon 159744 [ 1758.227563][T18790] inactive_file 0 [ 1758.227563][T18790] active_file 0 [ 1758.227563][T18790] unevictable 0 [ 1758.227563][T18790] slab_reclaimable 76968 [ 1758.227563][T18790] slab_unreclaimable 189080 [ 1758.227563][T18790] slab 266048 [ 1758.227563][T18790] workingset_refault_anon 0 [ 1758.227563][T18790] workingset_refault_file 8 [ 1758.246796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.380778][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.406855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.417840][ T11] device bridge_slave_1 left promiscuous mode [ 1758.424079][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.433446][ T11] device bridge_slave_0 left promiscuous mode [ 1758.440365][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.448528][T18790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18690,uid=0 [ 1758.469994][T18790] Memory cgroup out of memory: Killed process 18690 (syz-executor.4) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1758.490133][ T11] device veth1_macvtap left promiscuous mode [ 1758.496186][ T11] device veth0_macvtap left promiscuous mode [ 1758.504572][ T11] device veth1_vlan left promiscuous mode [ 1758.510537][ T11] device veth0_vlan left promiscuous mode [ 1758.528152][ T28] oom_reaper: reaped process 18690 (syz-executor.4), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1758.801625][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1758.818927][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1758.834847][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.852538][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.916333][ T11] bond0 (unregistering): Released all slaves 14:31:54 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x20, 0x3f, 0x89, 0x400, 0xffffffffffffffff, 0xc4d7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x7, 0x20, 0x8, 0x1, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x0, 0x8}, 0x40093, 0x4, 0x1, 0xb, 0x10001, 0x74a8, 0xc280, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r6, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r5, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x6f23, 0x96, &(0x7f00000001c0)=""/150, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x219c, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000002c0)=[r3, r1]}, 0x80) 14:31:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x16, 0x16, 0x8, 0x7f, 0x48, 0xffffffffffffffff, 0x198}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:31:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:31:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x16, 0x16, 0x8, 0x7f, 0x48, 0xffffffffffffffff, 0x198}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:31:54 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x20, 0x3f, 0x89, 0x400, 0xffffffffffffffff, 0xc4d7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r3}, 0xc) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (rerun: 64) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x7, 0x20, 0x8, 0x1, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x0, 0x8}, 0x40093, 0x4, 0x1, 0xb, 0x10001, 0x74a8, 0xc280, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) (async) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r6, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r5, r7}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x6f23, 0x96, &(0x7f00000001c0)=""/150, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x219c, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000002c0)=[r3, r1]}, 0x80) 14:31:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x16, 0x16, 0x8, 0x7f, 0x48, 0xffffffffffffffff, 0x198}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x16, 0x16, 0x8, 0x7f, 0x48, 0xffffffffffffffff, 0x198}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 1759.532143][T15874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1759.542037][T15874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1759.550324][T15874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1759.558962][T15874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1759.566443][T15874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1759.574198][T15874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1759.771492][T17007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1759.782245][T17007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1759.799411][T17007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1759.813246][T13551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1759.821557][T13551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1759.829868][T13551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1759.840749][T18793] chnl_net:caif_netlink_parms(): no params data found [ 1759.953336][T18793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.960877][T18793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.969445][T18793] device bridge_slave_0 entered promiscuous mode [ 1759.978054][T18793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.985206][T18793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.993502][T18793] device bridge_slave_1 entered promiscuous mode [ 1760.043061][T18793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.075247][T18793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.134209][T18793] team0: Port device team_slave_0 added [ 1760.150909][T18793] team0: Port device team_slave_1 added [ 1760.190042][T18793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.197081][T18793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.223109][T18793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.262628][T18793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.269647][T18793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.296123][T18793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.314253][T18795] chnl_net:caif_netlink_parms(): no params data found [ 1760.376250][T18793] device hsr_slave_0 entered promiscuous mode [ 1760.384494][T18793] device hsr_slave_1 entered promiscuous mode [ 1760.469506][T18795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.476615][T18795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.485021][T18795] device bridge_slave_0 entered promiscuous mode [ 1760.506006][T18795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.517773][T18795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.525959][T18795] device bridge_slave_1 entered promiscuous mode [ 1760.634813][T18795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.680627][T18795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.782433][T18795] team0: Port device team_slave_0 added [ 1760.792383][T18795] team0: Port device team_slave_1 added [ 1760.838490][T18795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.845459][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.873299][T18795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.890017][T18795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.897641][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.924073][T18795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.991460][T18795] device hsr_slave_0 entered promiscuous mode [ 1760.998465][T18795] device hsr_slave_1 entered promiscuous mode [ 1761.005134][T18795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1761.013278][T18795] Cannot create hsr debugfs directory [ 1761.096019][T18793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.157555][T18793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.181348][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1761.190785][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1761.230980][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1761.241217][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1761.250447][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.257622][T17402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.265263][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1761.273948][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1761.283389][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.290546][T17402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.298862][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1761.323027][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1761.337517][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1761.361611][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1761.371323][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1761.409077][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1761.417404][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1761.427735][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1761.452168][ T11] device hsr_slave_0 left promiscuous mode [ 1761.459034][ T11] device hsr_slave_1 left promiscuous mode [ 1761.465278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.473882][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.483201][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.490785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.500635][ T11] device bridge_slave_1 left promiscuous mode [ 1761.507058][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.515550][ T11] device bridge_slave_0 left promiscuous mode [ 1761.527310][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.539188][ T11] device hsr_slave_0 left promiscuous mode [ 1761.545541][ T11] device hsr_slave_1 left promiscuous mode [ 1761.553368][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.561109][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.569852][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.577685][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.586560][ T11] device bridge_slave_1 left promiscuous mode [ 1761.593667][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.602977][ T11] device bridge_slave_0 left promiscuous mode [ 1761.606835][T16989] Bluetooth: hci0: command 0x0409 tx timeout [ 1761.609599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.626497][ T11] device hsr_slave_0 left promiscuous mode [ 1761.633950][ T11] device hsr_slave_1 left promiscuous mode [ 1761.642127][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.649871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.659671][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.667240][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.675624][ T11] device bridge_slave_1 left promiscuous mode [ 1761.682126][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.691074][ T11] device bridge_slave_0 left promiscuous mode [ 1761.697638][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.715010][ T11] device veth1_macvtap left promiscuous mode [ 1761.721215][ T11] device veth0_macvtap left promiscuous mode [ 1761.728117][ T11] device veth1_vlan left promiscuous mode [ 1761.733905][ T11] device veth0_vlan left promiscuous mode [ 1761.742257][ T11] device veth1_macvtap left promiscuous mode [ 1761.748867][ T11] device veth0_macvtap left promiscuous mode [ 1761.754905][ T11] device veth1_vlan left promiscuous mode [ 1761.765168][ T11] device veth0_vlan left promiscuous mode [ 1761.771751][T15874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1761.781928][T15874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1761.790262][ T11] device veth1_macvtap left promiscuous mode [ 1761.790565][T15874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1761.798972][ T11] device veth0_macvtap left promiscuous mode [ 1761.804232][T15874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1761.816627][T15874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1761.817970][ T11] device veth1_vlan left promiscuous mode [ 1761.824273][T15874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1761.838465][ T11] device veth0_vlan left promiscuous mode [ 1761.917113][T16989] Bluetooth: hci2: command 0x0409 tx timeout [ 1762.229697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1762.252438][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1762.263731][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.280556][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.349510][ T11] bond0 (unregistering): Released all slaves [ 1762.481065][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1762.493666][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1762.508328][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.525709][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.600674][ T11] bond0 (unregistering): Released all slaves [ 1762.753371][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1762.770590][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1762.782651][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.803562][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.876325][ T11] bond0 (unregistering): Released all slaves [ 1762.943731][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1762.952393][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1762.962025][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1762.971122][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1762.987891][T18793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1763.031983][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1763.039674][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1763.053349][T18793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.076577][T18795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.134137][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1763.155766][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1763.167649][T18795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.197026][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1763.205730][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1763.219061][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.226169][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.257614][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1763.266162][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1763.275377][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1763.284305][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.291538][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.299835][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1763.321768][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1763.339387][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1763.354878][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1763.391522][T18795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1763.402232][T18795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1763.423862][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1763.432190][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1763.442557][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1763.451482][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1763.460487][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1763.469332][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1763.478327][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1763.490972][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1763.550766][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1763.564362][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1763.575616][T18824] chnl_net:caif_netlink_parms(): no params data found [ 1763.651977][T18795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.677053][T16989] Bluetooth: hci0: command 0x041b tx timeout [ 1763.701199][T18824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.721821][T18824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.748075][T18824] device bridge_slave_0 entered promiscuous mode [ 1763.768400][T18824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.775494][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.783904][T18824] device bridge_slave_1 entered promiscuous mode [ 1763.814562][T18824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.856247][T18824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.884614][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1763.893466][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1763.909398][T18793] device veth0_vlan entered promiscuous mode [ 1763.933501][T17402] Bluetooth: hci4: command 0x0409 tx timeout [ 1763.945465][T18824] team0: Port device team_slave_0 added [ 1763.955996][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1763.964742][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1763.975392][T18824] team0: Port device team_slave_1 added [ 1763.983480][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1763.991756][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1763.997268][T17412] Bluetooth: hci2: command 0x041b tx timeout [ 1764.003216][T18793] device veth1_vlan entered promiscuous mode [ 1764.065127][T18824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.084128][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.115682][T18824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.133977][T18824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.141330][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.168165][T18824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.237125][T13551] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 1764.291154][T18824] device hsr_slave_0 entered promiscuous mode [ 1764.309597][T18824] device hsr_slave_1 entered promiscuous mode [ 1764.316306][T18824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1764.330887][T18824] Cannot create hsr debugfs directory [ 1764.337401][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1764.346150][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1764.359730][T18793] device veth0_macvtap entered promiscuous mode [ 1764.452812][T18793] device veth1_macvtap entered promiscuous mode [ 1764.543325][T18793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1764.582264][T18793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.597929][T18793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1764.614462][T18793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.628336][T18793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.671891][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1764.685678][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1764.696382][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1764.711094][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1764.721171][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1764.730293][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1764.751744][T18793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1764.762822][T18793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.773083][T18793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1764.783840][T18793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.795307][T18793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.813422][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1764.822042][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1764.835980][T18795] device veth0_vlan entered promiscuous mode [ 1764.859114][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1764.872644][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1764.902332][T18795] device veth1_vlan entered promiscuous mode [ 1764.914540][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1764.922788][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1764.931277][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1764.969032][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1764.996163][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1765.004784][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1765.032108][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.032713][T18795] device veth0_macvtap entered promiscuous mode [ 1765.041960][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.066241][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1765.074973][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1765.102640][T18795] device veth1_macvtap entered promiscuous mode [ 1765.102833][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.118450][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.136156][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1765.144596][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1765.158830][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1765.178396][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.188786][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1765.201255][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.211303][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1765.213904][T18860] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1765.221767][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.223265][T18795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.249889][T18860] CPU: 1 PID: 18860 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1765.253167][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1765.260411][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.260430][T18860] Call Trace: [ 1765.260438][T18860] [ 1765.260449][T18860] dump_stack_lvl+0xcd/0x134 [ 1765.260487][T18860] dump_header+0x10b/0x7f9 [ 1765.260524][T18860] oom_kill_process.cold+0x10/0x15 [ 1765.260561][T18860] out_of_memory+0x358/0x14b0 [ 1765.260602][T18860] ? oom_killer_disable+0x270/0x270 [ 1765.260637][T18860] ? io_schedule_timeout+0x140/0x140 [ 1765.260678][T18860] mem_cgroup_out_of_memory+0x206/0x270 [ 1765.260715][T18860] ? mem_cgroup_margin+0x130/0x130 [ 1765.260766][T18860] memory_max_write+0x25c/0x3b0 [ 1765.271678][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.281244][T18860] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1765.281284][T18860] ? lock_release+0x720/0x720 [ 1765.281319][T18860] cgroup_file_write+0x1de/0x770 [ 1765.281350][T18860] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1765.281378][T18860] ? kill_css+0x370/0x370 [ 1765.281408][T18860] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1765.281451][T18860] ? kill_css+0x370/0x370 [ 1765.281480][T18860] kernfs_fop_write_iter+0x3f8/0x610 [ 1765.281519][T18860] new_sync_write+0x38a/0x560 [ 1765.281551][T18860] ? new_sync_read+0x5f0/0x5f0 [ 1765.281587][T18860] ? lock_release+0x720/0x720 [ 1765.281641][T18860] vfs_write+0x7c0/0xac0 [ 1765.281676][T18860] ksys_write+0x127/0x250 [ 1765.281704][T18860] ? __ia32_sys_read+0xb0/0xb0 [ 1765.281736][T18860] ? syscall_enter_from_user_mode+0x21/0x70 [ 1765.286022][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1765.287957][T18860] do_syscall_64+0x35/0xb0 [ 1765.287994][T18860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1765.292571][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.297004][T18860] RIP: 0033:0x7f7fcc8890e9 [ 1765.297029][T18860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1765.297055][T18860] RSP: 002b:00007f7fcd934168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1765.297082][T18860] RAX: ffffffffffffffda RBX: 00007f7fcc99bf60 RCX: 00007f7fcc8890e9 [ 1765.297100][T18860] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1765.297117][T18860] RBP: 00007f7fcc8e308d R08: 0000000000000000 R09: 0000000000000000 [ 1765.297143][T18860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.297162][T18860] R13: 00007ffe79c8c61f R14: 00007f7fcd934300 R15: 0000000000022000 [ 1765.297205][T18860] [ 1765.308084][T18860] memory: usage 648kB, limit 0kB, failcnt 180 [ 1765.320765][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1765.330208][T18860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1765.334221][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.346392][T18860] Memory cgroup stats for [ 1765.351430][T18795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1765.367215][T18860] /syz1 [ 1765.573218][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1765.584380][T18860] : [ 1765.584553][T18860] anon 114688 [ 1765.584553][T18860] file 139264 [ 1765.584553][T18860] kernel 409600 [ 1765.584553][T18860] kernel_stack 65536 [ 1765.584553][T18860] pagetables 77824 [ 1765.584553][T18860] percpu 0 [ 1765.584553][T18860] sock 0 [ 1765.584553][T18860] vmalloc 0 [ 1765.584553][T18860] shmem 139264 [ 1765.584553][T18860] file_mapped 135168 [ 1765.584553][T18860] file_dirty 0 [ 1765.584553][T18860] file_writeback 0 [ 1765.584553][T18860] swapcached 0 [ 1765.584553][T18860] anon_thp 0 [ 1765.584553][T18860] file_thp 0 [ 1765.584553][T18860] shmem_thp 0 [ 1765.584553][T18860] inactive_anon 65536 [ 1765.584553][T18860] active_anon 135168 [ 1765.584553][T18860] inactive_file 0 [ 1765.584553][T18860] active_file 0 [ 1765.584553][T18860] unevictable 0 [ 1765.584553][T18860] slab_reclaimable 68968 [ 1765.584553][T18860] slab_unreclaimable 167296 [ 1765.584553][T18860] slab 236264 [ 1765.584553][T18860] workingset_refault_anon 0 [ 1765.584553][T18860] workingset_refault_file 4 [ 1765.606460][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1765.678451][T18860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18793,uid=0 [ 1765.698380][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1765.717061][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1765.736933][T18860] Memory cgroup out of memory: Killed process 18793 (syz-executor.1) total-vm:50532kB, anon-rss:372kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1765.757352][ T3601] Bluetooth: hci0: command 0x040f tx timeout [ 1765.844602][T18824] 8021q: adding VLAN 0 to HW filter on device bond0 14:32:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:01 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x20, 0x3f, 0x89, 0x400, 0xffffffffffffffff, 0xc4d7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x7, 0x20, 0x8, 0x1, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x0, 0x8}, 0x40093, 0x4, 0x1, 0xb, 0x10001, 0x74a8, 0xc280, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r6, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r5, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x6f23, 0x96, &(0x7f00000001c0)=""/150, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x219c, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000002c0)=[r3, r1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x20, 0x3f, 0x89, 0x400, 0xffffffffffffffff, 0xc4d7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r3}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x7, 0x20, 0x8, 0x1, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x0, 0x8}, 0x40093, 0x4, 0x1, 0xb, 0x10001, 0x74a8, 0xc280, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) (async) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r5}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r6, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r5, r7}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x6f23, 0x96, &(0x7f00000001c0)=""/150, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x219c, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000002c0)=[r3, r1]}, 0x80) (async) 14:32:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000ebff00000000000095100000060000001810eeff", @ANYRES32=r0, @ANYBLOB="00000000000000001408000000000000180000000000000000000000000000009500c813d8eb537700000000000095a10d55a5649dacc2fc5c402e0a1de4046083de9acd970700000000000000c4e8036c15ba1c972c2aecdbda38aa976fc7544cd2fe364fde731a20fe9ee6b8757a80472dfef2701bdca53fb18bc4a31438c95075a354f3302fde53838c376eb40e6eb713cd78a93c0831b5cefb654ebbb06a2eb27420960eef031a81faa962b378860dc045ffa101254d45c15b9225929a646492367fb2aecc98de830da29124b8d5f36f8caf3902b2860d"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x7fffffff, 0x3, 0x8001, 0x10, r3, 0x4, '\x00', r4, r5, 0x0, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x1, 0x8, 0x9, 0x1282, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x4, 0x1200, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) [ 1765.952704][T18824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.996917][ T3601] Bluetooth: hci4: command 0x041b tx timeout [ 1766.004430][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1766.021609][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1766.068767][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.083032][ T3601] Bluetooth: hci2: command 0x040f tx timeout [ 1766.100112][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.136646][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1766.155195][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1766.165380][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.172520][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.181434][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1766.195984][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.203430][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1766.213111][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1766.222203][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1766.236143][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.236516][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.250716][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.268711][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1766.306469][T18824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1766.332479][T18824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1766.344881][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1766.353621][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1766.362441][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1766.371699][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1766.380269][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1766.389331][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1766.398157][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1766.407118][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1766.415497][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1766.424008][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1766.437545][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1766.445481][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1766.502537][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1766.510589][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1766.533778][T18824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.192274][ T11] device hsr_slave_0 left promiscuous mode [ 1767.212393][T15874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1767.223058][T15874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1767.225375][T18879] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1767.242183][ T11] device hsr_slave_1 left promiscuous mode [ 1767.242832][T18879] CPU: 1 PID: 18879 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1767.248290][T15874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1767.258481][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.258499][T18879] Call Trace: [ 1767.258508][T18879] [ 1767.258520][T18879] dump_stack_lvl+0xcd/0x134 [ 1767.286439][T18879] dump_header+0x10b/0x7f9 [ 1767.290880][T18879] oom_kill_process.cold+0x10/0x15 [ 1767.296014][T18879] out_of_memory+0x358/0x14b0 [ 1767.300712][T18879] ? oom_killer_disable+0x270/0x270 [ 1767.305923][T18879] ? io_schedule_timeout+0x140/0x140 [ 1767.311235][T18879] mem_cgroup_out_of_memory+0x206/0x270 [ 1767.316797][T18879] ? mem_cgroup_margin+0x130/0x130 [ 1767.321954][T18879] memory_max_write+0x25c/0x3b0 [ 1767.326827][T18879] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1767.332949][T18879] ? lock_release+0x720/0x720 [ 1767.337669][T18879] cgroup_file_write+0x1de/0x770 [ 1767.342646][T18879] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1767.348742][T18879] ? kill_css+0x370/0x370 [ 1767.353107][T18879] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1767.359371][T18879] ? kill_css+0x370/0x370 [ 1767.363713][T18879] kernfs_fop_write_iter+0x3f8/0x610 [ 1767.369017][T18879] new_sync_write+0x38a/0x560 [ 1767.373700][T18879] ? new_sync_read+0x5f0/0x5f0 [ 1767.378481][T18879] ? lock_release+0x720/0x720 [ 1767.383192][T18879] vfs_write+0x7c0/0xac0 [ 1767.387447][T18879] ksys_write+0x127/0x250 [ 1767.391784][T18879] ? __ia32_sys_read+0xb0/0xb0 [ 1767.396556][T18879] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1767.402464][T18879] do_syscall_64+0x35/0xb0 [ 1767.406893][T18879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1767.412798][T18879] RIP: 0033:0x7ff509e890e9 [ 1767.417226][T18879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1767.436934][T18879] RSP: 002b:00007ff50b0ba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1767.445357][T18879] RAX: ffffffffffffffda RBX: 00007ff509f9bf60 RCX: 00007ff509e890e9 [ 1767.453335][T18879] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1767.461303][T18879] RBP: 00007ff509ee308d R08: 0000000000000000 R09: 0000000000000000 [ 1767.469276][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1767.477251][T18879] R13: 00007fff95b7265f R14: 00007ff50b0ba300 R15: 0000000000022000 [ 1767.485246][T18879] [ 1767.501118][T15874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1767.508847][T15874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1767.516117][T15874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1767.525519][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.541719][T18879] memory: usage 732kB, limit 0kB, failcnt 154 [ 1767.546901][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1767.554687][T18879] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1767.564470][T18879] Memory cgroup stats for /syz5: [ 1767.568321][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.571536][T18879] anon 114688 [ 1767.571536][T18879] file 282624 [ 1767.571536][T18879] kernel 352256 [ 1767.571536][T18879] kernel_stack 65536 [ 1767.571536][T18879] pagetables 81920 [ 1767.571536][T18879] percpu 0 [ 1767.571536][T18879] sock 0 [ 1767.571536][T18879] vmalloc 0 [ 1767.571536][T18879] shmem 282624 [ 1767.571536][T18879] file_mapped 282624 [ 1767.571536][T18879] file_dirty 0 [ 1767.571536][T18879] file_writeback 0 [ 1767.571536][T18879] swapcached 0 [ 1767.571536][T18879] anon_thp 0 [ 1767.571536][T18879] file_thp 0 [ 1767.571536][T18879] shmem_thp 0 [ 1767.571536][T18879] inactive_anon 131072 [ 1767.571536][T18879] active_anon 266240 [ 1767.571536][T18879] inactive_file 0 [ 1767.571536][T18879] active_file 0 [ 1767.571536][T18879] unevictable 0 [ 1767.571536][T18879] slab_reclaimable 51488 [ 1767.571536][T18879] slab_unreclaimable 126776 [ 1767.571536][T18879] slab 178264 [ 1767.571536][T18879] workingset_refault_anon 0 [ 1767.571536][T18879] workingset_refault_file 15 [ 1767.573304][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.682399][ T11] device bridge_slave_1 left promiscuous mode [ 1767.684061][T18879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18795,uid=0 [ 1767.699453][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.704163][T18879] Memory cgroup out of memory: Killed process 18795 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1767.735858][ T28] oom_reaper: reaped process 18795 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1767.751062][ T11] device bridge_slave_0 left promiscuous mode [ 1767.762017][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.797005][ T11] device veth1_macvtap left promiscuous mode [ 1767.803061][ T11] device veth0_macvtap left promiscuous mode [ 1767.810061][ T11] device veth1_vlan left promiscuous mode [ 1767.815886][ T11] device veth0_vlan left promiscuous mode [ 1767.982400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1767.996487][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1768.009692][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.026536][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.076933][T17389] Bluetooth: hci4: command 0x040f tx timeout [ 1768.094454][ T11] bond0 (unregistering): Released all slaves 14:32:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:03 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000ebff00000000000095100000060000001810eeff", @ANYRES32=r0, @ANYBLOB="00000000000000001408000000000000180000000000000000000000000000009500c813d8eb537700000000000095a10d55a5649dacc2fc5c402e0a1de4046083de9acd970700000000000000c4e8036c15ba1c972c2aecdbda38aa976fc7544cd2fe364fde731a20fe9ee6b8757a80472dfef2701bdca53fb18bc4a31438c95075a354f3302fde53838c376eb40e6eb713cd78a93c0831b5cefb654ebbb06a2eb27420960eef031a81faa962b378860dc045ffa101254d45c15b9225929a646492367fb2aecc98de830da29124b8d5f36f8caf3902b2860d"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x7fffffff, 0x3, 0x8001, 0x10, r3, 0x4, '\x00', r4, r5, 0x0, 0x5}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x1, 0x8, 0x9, 0x1282, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x4, 0x1200, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:32:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xb00}, @call={0x85, 0x0, 0x0, 0x3c}, @call={0x85, 0x0, 0x0, 0x3d}], &(0x7f00000000c0)='GPL\x00', 0x33df, 0x0, 0x0, 0x41100, 0x9, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r4, r5, r0, r2, r6, r2]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:32:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1768.243333][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1768.277995][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1768.352383][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1768.374322][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1768.395028][T18824] device veth0_vlan entered promiscuous mode [ 1768.412918][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1768.425067][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1768.464642][T18824] device veth1_vlan entered promiscuous mode [ 1768.532279][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1768.540835][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1768.550015][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1768.559442][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1768.574835][T18877] chnl_net:caif_netlink_parms(): no params data found [ 1768.589282][T18824] device veth0_macvtap entered promiscuous mode [ 1768.609467][T18824] device veth1_macvtap entered promiscuous mode [ 1768.664527][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1768.696162][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.725178][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1768.739786][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.749771][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1768.760822][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.772350][T18824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.784314][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1768.792709][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1768.801053][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1768.809881][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1768.833970][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1768.844842][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.855000][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1768.866300][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.876298][T18824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1768.888261][T18824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.899951][T18824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.922288][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1768.931340][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1768.960990][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.972113][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.980086][T18877] device bridge_slave_0 entered promiscuous mode [ 1769.014456][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.025247][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.035318][T18877] device bridge_slave_1 entered promiscuous mode [ 1769.078689][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.090340][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.145115][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.159906][T18877] team0: Port device team_slave_0 added [ 1769.166424][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.176318][T18877] team0: Port device team_slave_1 added [ 1769.195728][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1769.219580][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.228912][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.242408][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1769.251517][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.259039][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.288123][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.308737][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.315706][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.344771][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.413561][T18877] device hsr_slave_0 entered promiscuous mode [ 1769.425292][T18877] device hsr_slave_1 entered promiscuous mode [ 1769.616759][T16991] Bluetooth: hci0: command 0x0409 tx timeout [ 1769.892565][T18877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.974703][T18877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.010887][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1770.029526][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1770.108146][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1770.123524][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1770.151924][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.159113][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.160431][T18907] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1770.178511][T18907] CPU: 1 PID: 18907 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1770.189049][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.199127][T18907] Call Trace: [ 1770.202421][T18907] [ 1770.203710][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1770.205360][T18907] dump_stack_lvl+0xcd/0x134 [ 1770.205403][T18907] dump_header+0x10b/0x7f9 [ 1770.215503][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1770.218033][T18907] oom_kill_process.cold+0x10/0x15 [ 1770.218077][T18907] out_of_memory+0x358/0x14b0 [ 1770.224069][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.230477][T18907] ? oom_killer_disable+0x270/0x270 [ 1770.230525][T18907] ? io_schedule_timeout+0x140/0x140 [ 1770.235656][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.240279][T18907] mem_cgroup_out_of_memory+0x206/0x270 [ 1770.240317][T18907] ? mem_cgroup_margin+0x130/0x130 [ 1770.255302][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1770.257819][T18907] memory_max_write+0x25c/0x3b0 [ 1770.257859][T18907] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1770.268820][T16991] Bluetooth: hci4: command 0x0419 tx timeout [ 1770.270583][T18907] ? lock_release+0x720/0x720 [ 1770.305052][T18907] cgroup_file_write+0x1de/0x770 [ 1770.310013][T18907] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1770.316095][T18907] ? kill_css+0x370/0x370 [ 1770.320434][T18907] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1770.326697][T18907] ? kill_css+0x370/0x370 [ 1770.331041][T18907] kernfs_fop_write_iter+0x3f8/0x610 [ 1770.336376][T18907] new_sync_write+0x38a/0x560 [ 1770.341075][T18907] ? new_sync_read+0x5f0/0x5f0 [ 1770.345855][T18907] ? lock_acquire+0x1ef/0x510 [ 1770.350560][T18907] ? lock_release+0x720/0x720 [ 1770.355288][T18907] vfs_write+0x7c0/0xac0 [ 1770.359559][T18907] ksys_write+0x127/0x250 [ 1770.363903][T18907] ? __ia32_sys_read+0xb0/0xb0 [ 1770.368682][T18907] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1770.374593][T18907] do_syscall_64+0x35/0xb0 [ 1770.379024][T18907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.384935][T18907] RIP: 0033:0x7f15392890e9 [ 1770.389361][T18907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1770.409101][T18907] RSP: 002b:00007f153a451168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1770.417524][T18907] RAX: ffffffffffffffda RBX: 00007f153939bf60 RCX: 00007f15392890e9 [ 1770.425508][T18907] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1770.433480][T18907] RBP: 00007f15392e308d R08: 0000000000000000 R09: 0000000000000000 [ 1770.441453][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.449424][T18907] R13: 00007ffd7005c9ef R14: 00007f153a451300 R15: 0000000000022000 [ 1770.457422][T18907] [ 1770.476077][T18907] memory: usage 540kB, limit 0kB, failcnt 180 [ 1770.496248][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1770.504910][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1770.508101][T18907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1770.515388][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1770.524555][T18907] Memory cgroup stats for /syz0: [ 1770.529730][T18907] anon 110592 [ 1770.529730][T18907] file 94208 [ 1770.529730][T18907] kernel 311296 [ 1770.529730][T18907] kernel_stack 32768 [ 1770.529730][T18907] pagetables 81920 [ 1770.529730][T18907] percpu 0 [ 1770.529730][T18907] sock 0 [ 1770.529730][T18907] vmalloc 0 [ 1770.529730][T18907] shmem 94208 [ 1770.529730][T18907] file_mapped 86016 [ 1770.529730][T18907] file_dirty 0 [ 1770.529730][T18907] file_writeback 0 [ 1770.529730][T18907] swapcached 0 [ 1770.529730][T18907] anon_thp 0 [ 1770.529730][T18907] file_thp 0 [ 1770.529730][T18907] shmem_thp 0 [ 1770.529730][T18907] inactive_anon 110592 [ 1770.529730][T18907] active_anon 94208 [ 1770.529730][T18907] inactive_file 0 [ 1770.529730][T18907] active_file 0 [ 1770.529730][T18907] unevictable 0 [ 1770.529730][T18907] slab_reclaimable 44384 [ 1770.529730][T18907] slab_unreclaimable 123704 [ 1770.529730][T18907] slab 168088 [ 1770.529730][T18907] workingset_refault_anon 0 [ 1770.529730][T18907] workingset_refault_file 8 [ 1770.530124][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1770.534754][T18907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1770.629113][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1770.651609][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1770.661579][T18907] ,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18824,uid=0 [ 1770.667863][T18877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1770.675162][T18907] Memory cgroup out of memory: Killed process 18824 (syz-executor.0) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1770.688970][T18877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1770.722317][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1770.730433][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1770.739640][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1770.748739][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1770.757522][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1770.766692][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1770.803085][ T8] device hsr_slave_0 left promiscuous mode [ 1770.810531][ T8] device hsr_slave_1 left promiscuous mode [ 1770.817400][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.824807][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.833615][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.841379][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.849959][ T8] device bridge_slave_1 left promiscuous mode [ 1770.856128][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.864706][ T8] device bridge_slave_0 left promiscuous mode [ 1770.872051][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.886086][ T8] device veth1_macvtap left promiscuous mode [ 1770.892353][ T8] device veth0_macvtap left promiscuous mode [ 1770.898780][ T8] device veth1_vlan left promiscuous mode [ 1770.904626][ T8] device veth0_vlan left promiscuous mode [ 1771.074302][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1771.088952][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1771.101693][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1771.123577][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1771.188729][ T8] bond0 (unregistering): Released all slaves [ 1771.273819][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.290160][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1771.298563][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1771.642071][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1771.651641][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1771.672882][T18877] device veth0_vlan entered promiscuous mode [ 1771.680136][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1771.686867][T16001] Bluetooth: hci0: command 0x041b tx timeout [ 1771.688924][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1771.703018][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1771.711729][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1771.724476][T18877] device veth1_vlan entered promiscuous mode [ 1771.754329][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1771.762982][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1771.772114][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1771.782004][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1771.794814][T18877] device veth0_macvtap entered promiscuous mode [ 1771.804557][T18877] device veth1_macvtap entered promiscuous mode [ 1771.835112][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1771.853948][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.863851][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1771.876845][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.886863][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1771.897460][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.908744][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.917809][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1771.927642][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1771.935792][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1771.944604][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1771.961363][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1771.972670][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.982909][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1771.996450][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.006941][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1772.017435][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.028256][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1772.037401][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1772.046882][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1772.107340][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.116215][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.133808][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1772.153612][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.163345][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.184654][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1772.394345][T18923] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1772.406028][T18923] CPU: 0 PID: 18923 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1772.416573][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1772.426623][T18923] Call Trace: [ 1772.429896][T18923] [ 1772.432845][T18923] dump_stack_lvl+0xcd/0x134 [ 1772.437444][T18923] dump_header+0x10b/0x7f9 [ 1772.441899][T18923] oom_kill_process.cold+0x10/0x15 [ 1772.447035][T18923] out_of_memory+0x358/0x14b0 [ 1772.451712][T18923] ? oom_killer_disable+0x270/0x270 [ 1772.456917][T18923] ? io_schedule_timeout+0x140/0x140 [ 1772.462260][T18923] mem_cgroup_out_of_memory+0x206/0x270 [ 1772.467818][T18923] ? mem_cgroup_margin+0x130/0x130 [ 1772.472946][T18923] memory_max_write+0x25c/0x3b0 [ 1772.477804][T18923] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1772.483906][T18923] ? lock_release+0x720/0x720 [ 1772.488588][T18923] cgroup_file_write+0x1de/0x770 [ 1772.493525][T18923] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1772.499682][T18923] ? kill_css+0x370/0x370 [ 1772.504031][T18923] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1772.510299][T18923] ? kill_css+0x370/0x370 [ 1772.514632][T18923] kernfs_fop_write_iter+0x3f8/0x610 [ 1772.519931][T18923] new_sync_write+0x38a/0x560 [ 1772.524629][T18923] ? new_sync_read+0x5f0/0x5f0 [ 1772.529390][T18923] ? lock_release+0x720/0x720 [ 1772.534078][T18923] vfs_write+0x7c0/0xac0 [ 1772.538327][T18923] ksys_write+0x127/0x250 [ 1772.542667][T18923] ? __ia32_sys_read+0xb0/0xb0 [ 1772.547428][T18923] ? syscall_enter_from_user_mode+0x21/0x70 [ 1772.553319][T18923] do_syscall_64+0x35/0xb0 [ 1772.557738][T18923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1772.563662][T18923] RIP: 0033:0x7f49c96890e9 [ 1772.568094][T18923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1772.587876][T18923] RSP: 002b:00007f49ca832168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1772.596319][T18923] RAX: ffffffffffffffda RBX: 00007f49c979bf60 RCX: 00007f49c96890e9 [ 1772.604331][T18923] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1772.612324][T18923] RBP: 00007f49c96e308d R08: 0000000000000000 R09: 0000000000000000 [ 1772.620296][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1772.628263][T18923] R13: 00007ffe173a852f R14: 00007f49ca832300 R15: 0000000000022000 [ 1772.636260][T18923] [ 1772.672791][T18923] memory: usage 656kB, limit 0kB, failcnt 288 [ 1772.679420][T18923] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1772.686441][T18923] Memory cgroup stats for /syz4: [ 1772.692333][T18923] anon 114688 [ 1772.692333][T18923] file 208896 [ 1772.692333][T18923] kernel 348160 [ 1772.692333][T18923] kernel_stack 65536 [ 1772.692333][T18923] pagetables 81920 [ 1772.692333][T18923] percpu 0 [ 1772.692333][T18923] sock 0 [ 1772.692333][T18923] vmalloc 0 [ 1772.692333][T18923] shmem 208896 [ 1772.692333][T18923] file_mapped 159744 [ 1772.692333][T18923] file_dirty 0 [ 1772.692333][T18923] file_writeback 0 [ 1772.692333][T18923] swapcached 0 [ 1772.692333][T18923] anon_thp 0 [ 1772.692333][T18923] file_thp 0 [ 1772.692333][T18923] shmem_thp 0 [ 1772.692333][T18923] inactive_anon 126976 [ 1772.692333][T18923] active_anon 159744 [ 1772.692333][T18923] inactive_file 0 [ 1772.692333][T18923] active_file 0 [ 1772.692333][T18923] unevictable 0 [ 1772.692333][T18923] slab_reclaimable 40912 [ 1772.692333][T18923] slab_unreclaimable 127736 [ 1772.692333][T18923] slab 168648 [ 1772.692333][T18923] workingset_refault_anon 0 [ 1772.692333][T18923] workingset_refault_file 8 [ 1772.803387][T18923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18877,uid=0 [ 1772.825499][T18923] Memory cgroup out of memory: Killed process 18877 (syz-executor.4) total-vm:50532kB, anon-rss:380kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1772.848601][ T28] oom_reaper: reaped process 18877 (syz-executor.4), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1773.064640][ T8] device hsr_slave_0 left promiscuous mode [ 1773.075280][ T8] device hsr_slave_1 left promiscuous mode [ 1773.088161][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.101842][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.115321][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1773.130236][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.151419][ T8] device bridge_slave_1 left promiscuous mode [ 1773.158008][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.167311][ T8] device bridge_slave_0 left promiscuous mode [ 1773.173478][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.184389][ T8] device veth1_macvtap left promiscuous mode [ 1773.192575][ T8] device veth0_macvtap left promiscuous mode [ 1773.199263][ T8] device veth1_vlan left promiscuous mode [ 1773.205054][ T8] device veth0_vlan left promiscuous mode [ 1773.277286][T15874] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1773.484912][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1773.519982][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1773.550415][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.584221][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.678650][ T8] bond0 (unregistering): Released all slaves 14:32:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000ebff00000000000095100000060000001810eeff", @ANYRES32=r0, @ANYBLOB="00000000000000001408000000000000180000000000000000000000000000009500c813d8eb537700000000000095a10d55a5649dacc2fc5c402e0a1de4046083de9acd970700000000000000c4e8036c15ba1c972c2aecdbda38aa976fc7544cd2fe364fde731a20fe9ee6b8757a80472dfef2701bdca53fb18bc4a31438c95075a354f3302fde53838c376eb40e6eb713cd78a93c0831b5cefb654ebbb06a2eb27420960eef031a81faa962b378860dc045ffa101254d45c15b9225929a646492367fb2aecc98de830da29124b8d5f36f8caf3902b2860d"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x7fffffff, 0x3, 0x8001, 0x10, r3, 0x4, '\x00', r4, r5, 0x0, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x1, 0x8, 0x9, 0x1282, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x4, 0x1200, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000ebff00000000000095100000060000001810eeff", @ANYRES32=r0, @ANYBLOB="00000000000000001408000000000000180000000000000000000000000000009500c813d8eb537700000000000095a10d55a5649dacc2fc5c402e0a1de4046083de9acd970700000000000000c4e8036c15ba1c972c2aecdbda38aa976fc7544cd2fe364fde731a20fe9ee6b8757a80472dfef2701bdca53fb18bc4a31438c95075a354f3302fde53838c376eb40e6eb713cd78a93c0831b5cefb654ebbb06a2eb27420960eef031a81faa962b378860dc045ffa101254d45c15b9225929a646492367fb2aecc98de830da29124b8d5f36f8caf3902b2860d"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x7fffffff, 0x3, 0x8001, 0x10, r3, 0x4, '\x00', r4, r5, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x1, 0x8, 0x9, 0x1282, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x4, 0x1200, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x9}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:32:09 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xb00}, @call={0x85, 0x0, 0x0, 0x3c}, @call={0x85, 0x0, 0x0, 0x3d}], &(0x7f00000000c0)='GPL\x00', 0x33df, 0x0, 0x0, 0x41100, 0x9, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r4, r5, r0, r2, r6, r2]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:32:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:09 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xb00}, @call={0x85, 0x0, 0x0, 0x3c}, @call={0x85, 0x0, 0x0, 0x3d}], &(0x7f00000000c0)='GPL\x00', 0x33df, 0x0, 0x0, 0x41100, 0x9, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r4, r5, r0, r2, r6, r2]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:32:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x84, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r5, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r6}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, 0xffffffffffffffff, 0x5cdbc59d2ae5e7e9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x6, &(0x7f0000000080)=@raw=[@exit, @generic={0xff, 0x7, 0x0, 0xbf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x77, &(0x7f00000002c0)=""/119, 0x40f00, 0x1d, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x7fff, 0x5}, 0x10, r4, r1}, 0x80) 14:32:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x84, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r5, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r6}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, 0xffffffffffffffff, 0x5cdbc59d2ae5e7e9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x6, &(0x7f0000000080)=@raw=[@exit, @generic={0xff, 0x7, 0x0, 0xbf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x77, &(0x7f00000002c0)=""/119, 0x40f00, 0x1d, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x7fff, 0x5}, 0x10, r4, r1}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x84, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r5, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r6}, 0x78) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, 0xffffffffffffffff, 0x5cdbc59d2ae5e7e9}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x6, &(0x7f0000000080)=@raw=[@exit, @generic={0xff, 0x7, 0x0, 0xbf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x77, &(0x7f00000002c0)=""/119, 0x40f00, 0x1d, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x7fff, 0x5}, 0x10, r4, r1}, 0x80) (async) 14:32:09 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a80)={&(0x7f0000000800)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x3}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000840)="e067220b4dae30b50cfc829c13a36be1dd420f52cb823dd9b7c21ab78b33c15100e30ddff0c821e2c6cd3959769596e9aa5b7b33add8c2ab40b44ca421ec3ef261efef2fccd764173faea4fabf2e86a1d066", 0x52}, {&(0x7f00000008c0)="d778e5bbf3b86f75fbd53acbf1f4dbc02a9dbef295b8f5fac1e360bf62b9e4bab89e7252e03c863dc5cb6f3f8547ebd83c752ccc51060209caee289b2ce8f7813818c41c34cc558776b397e8e178787c8a91d24241183408ac816686c8383ffb918b6acc85db55f0e70bcc1377bd44cb534cbb59e710bd54e73693ee1c4123f155fbb71e93054a89a0db9314b72b776e0de48559d18d11840f7021c6a1e7d10bd73711307a4b304b9efed6f806649661897543354612641b1faf0175b434ec3994699eef0adbfa13d059242d494c9755d367a1e83b4724bda57e73bf205e4bc491c65c01ea179f6dd8", 0xe9}], 0x2, &(0x7f0000000a00)="c6c59716bd35b09e6d03bd83110ddbebe34740d097b02e3c398a24a99095226155202244870824a3f1983e0ee99735be59b873ab56b947d66a59e15073a722530e33acab192599a0221e0de9", 0x4c, 0x24000884}, 0x8000) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3f, 0x0, 0x20000, 0x800, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2, r3, r1]}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000300)='GPL\x00', 0x8, 0xe4, &(0x7f0000000540)=""/228, 0x41100, 0x1, '\x00', 0x0, 0x29, r6, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0x7f, 0x40}, 0x10}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0xa, &(0x7f0000000ac0)=@framed={{}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7a6f8b74f506b95f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x0, 0x6, 0x1, 0x3, 0x20, 0xfffffffffffffff0}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}]}, &(0x7f0000000b40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xc, 0x5, 0xe065}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, r7]}, 0x80) 14:32:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x84, 0xee, &(0x7f00000001c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r5, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r4, r6}, 0x78) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, 0xffffffffffffffff, 0x5cdbc59d2ae5e7e9}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x6, &(0x7f0000000080)=@raw=[@exit, @generic={0xff, 0x7, 0x0, 0xbf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x77, &(0x7f00000002c0)=""/119, 0x40f00, 0x1d, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x7fff, 0x5}, 0x10, r4, r1}, 0x80) [ 1775.144464][ T8] device hsr_slave_0 left promiscuous mode [ 1775.150780][ T8] device hsr_slave_1 left promiscuous mode [ 1775.157357][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.164762][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1775.173761][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.181199][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1775.191703][ T8] device bridge_slave_1 left promiscuous mode [ 1775.198147][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.206369][ T8] device bridge_slave_0 left promiscuous mode [ 1775.214195][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.225816][ T8] device veth1_macvtap left promiscuous mode [ 1775.231934][ T8] device veth0_macvtap left promiscuous mode [ 1775.238191][ T8] device veth1_vlan left promiscuous mode [ 1775.243974][ T8] device veth0_vlan left promiscuous mode [ 1775.389900][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1775.403904][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1775.425350][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.446542][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.556062][ T8] bond0 (unregistering): Released all slaves [ 1775.844073][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1775.852709][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1775.860807][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1775.875978][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1775.890967][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1775.898299][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1775.979840][T18963] chnl_net:caif_netlink_parms(): no params data found [ 1776.128549][T18963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.144696][T18963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.154029][T18963] device bridge_slave_0 entered promiscuous mode [ 1776.172890][T18963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.181799][T18963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.193021][T18963] device bridge_slave_1 entered promiscuous mode [ 1776.228236][T18963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.246626][T18963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.291185][T18963] team0: Port device team_slave_0 added [ 1776.299530][T18963] team0: Port device team_slave_1 added [ 1776.329332][T18963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.342323][T18963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.377266][T18963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.393167][T18963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.401841][T18963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.432417][T18963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.473790][T18963] device hsr_slave_0 entered promiscuous mode [ 1776.487820][T18963] device hsr_slave_1 entered promiscuous mode [ 1776.579273][T18963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.586344][T18963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.593764][T18963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.600878][T18963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.641370][T18963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.654903][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.663323][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.672094][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1776.681776][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1776.690692][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1776.701257][T18963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.712921][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.721600][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.728751][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.740189][T15874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1776.749591][T15874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1776.751942][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1776.758791][T17007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1776.765104][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.774121][T17007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1776.778597][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.786336][T17007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1776.800468][T17007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1776.812028][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1776.826122][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1776.842044][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1776.865634][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1776.896686][T15874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1776.903998][T18963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1776.906021][T15874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1776.920655][T18963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1776.923093][ T7812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1776.933267][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1776.937476][T15874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1776.951414][T15874] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1776.958882][T15874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1777.000891][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1777.008995][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1777.021551][T18963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.082460][T18967] chnl_net:caif_netlink_parms(): no params data found [ 1777.174700][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.184683][T18967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.195636][T18967] device bridge_slave_0 entered promiscuous mode [ 1777.207214][T18967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.214297][T18967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.222760][T18967] device bridge_slave_1 entered promiscuous mode [ 1777.276685][T18967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.303030][T18967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.342541][T18969] chnl_net:caif_netlink_parms(): no params data found [ 1777.360359][T18967] team0: Port device team_slave_0 added [ 1777.383238][T18967] team0: Port device team_slave_1 added [ 1777.434374][T18967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.449516][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.478303][T18967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.494518][T18967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.501993][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.528772][T18967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.601841][T18967] device hsr_slave_0 entered promiscuous mode [ 1777.609036][T18967] device hsr_slave_1 entered promiscuous mode [ 1777.615433][T18967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1777.623573][T18967] Cannot create hsr debugfs directory [ 1777.629396][T18969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.636467][T18969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.645469][T18969] device bridge_slave_0 entered promiscuous mode [ 1777.654947][T18969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.662435][T18969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.671012][T18969] device bridge_slave_1 entered promiscuous mode [ 1777.732590][T18969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.745730][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1777.758380][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1777.778568][T18969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.825309][T18969] team0: Port device team_slave_0 added [ 1777.835645][T18969] team0: Port device team_slave_1 added [ 1777.854280][T18963] device veth0_vlan entered promiscuous mode [ 1777.884843][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1777.896087][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1777.905579][T18969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.912621][T18969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.939022][T16989] Bluetooth: hci0: command 0x0409 tx timeout [ 1777.939852][T18969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.965976][T18963] device veth1_vlan entered promiscuous mode [ 1777.974457][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1777.983755][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1777.991667][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1778.008389][T18969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.015355][T18969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.041643][T18969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.104974][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1778.119049][T18969] device hsr_slave_0 entered promiscuous mode [ 1778.125752][T18969] device hsr_slave_1 entered promiscuous mode [ 1778.132636][T18969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1778.140858][T18969] Cannot create hsr debugfs directory [ 1778.148480][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1778.160773][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1778.172181][T18963] device veth0_macvtap entered promiscuous mode [ 1778.200031][T18963] device veth1_macvtap entered promiscuous mode [ 1778.240104][T18963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1778.251335][T18963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.261212][T18963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1778.272329][T18963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.283626][T18963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.295030][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1778.303419][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1778.314254][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1778.323965][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1778.342481][T18963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1778.354999][T18963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.365204][T18963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1778.376835][T18963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.388085][T18963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.407109][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1778.415611][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1778.462342][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.538661][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.552239][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1778.555997][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.572098][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1778.581549][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1778.591778][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1778.621952][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1778.630985][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1778.640078][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.647215][T17412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.670370][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.679076][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.679160][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1778.694636][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1778.703305][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1778.712101][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1778.720578][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.727699][T17402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.735255][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1778.743982][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1778.763547][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1778.778028][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1778.796260][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1778.805655][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1778.817031][T18998] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1778.821303][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1778.827768][T18998] CPU: 0 PID: 18998 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1778.845096][T18998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1778.855160][T18998] Call Trace: [ 1778.858433][T18998] [ 1778.861353][T18998] dump_stack_lvl+0xcd/0x134 [ 1778.865943][T18998] dump_header+0x10b/0x7f9 [ 1778.870356][T18998] oom_kill_process.cold+0x10/0x15 [ 1778.875464][T18998] out_of_memory+0x358/0x14b0 [ 1778.880140][T18998] ? oom_killer_disable+0x270/0x270 [ 1778.885330][T18998] ? io_schedule_timeout+0x140/0x140 [ 1778.887901][T17389] Bluetooth: hci2: command 0x0409 tx timeout [ 1778.890621][T18998] mem_cgroup_out_of_memory+0x206/0x270 [ 1778.902117][T18998] ? mem_cgroup_margin+0x130/0x130 [ 1778.907383][T18998] memory_max_write+0x25c/0x3b0 [ 1778.912231][T18998] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1778.918291][T18998] ? lock_release+0x720/0x720 [ 1778.922962][T18998] cgroup_file_write+0x1de/0x770 [ 1778.927898][T18998] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1778.933954][T18998] ? kill_css+0x370/0x370 [ 1778.938282][T18998] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1778.944548][T18998] ? kill_css+0x370/0x370 [ 1778.948906][T18998] kernfs_fop_write_iter+0x3f8/0x610 [ 1778.954193][T18998] new_sync_write+0x38a/0x560 [ 1778.958859][T18998] ? new_sync_read+0x5f0/0x5f0 [ 1778.963618][T18998] ? lock_release+0x720/0x720 [ 1778.968315][T18998] vfs_write+0x7c0/0xac0 [ 1778.972555][T18998] ksys_write+0x127/0x250 [ 1778.976882][T18998] ? __ia32_sys_read+0xb0/0xb0 [ 1778.981655][T18998] ? syscall_enter_from_user_mode+0x21/0x70 [ 1778.987190][T13551] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 1778.987565][T18998] do_syscall_64+0x35/0xb0 [ 1778.998286][T18998] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1779.004209][T18998] RIP: 0033:0x7f3fb9a890e9 [ 1779.008648][T18998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1779.028284][T18998] RSP: 002b:00007f3fbab88168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1779.036725][T18998] RAX: ffffffffffffffda RBX: 00007f3fb9b9bf60 RCX: 00007f3fb9a890e9 [ 1779.037727][T17403] Bluetooth: hci5: command 0x0409 tx timeout [ 1779.044709][T18998] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1779.058643][T18998] RBP: 00007f3fb9ae308d R08: 0000000000000000 R09: 0000000000000000 [ 1779.066631][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1779.074618][T18998] R13: 00007ffc5eeb6baf R14: 00007f3fbab88300 R15: 0000000000022000 [ 1779.082631][T18998] [ 1779.107046][T18998] memory: usage 580kB, limit 0kB, failcnt 180 [ 1779.113292][T18998] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1779.120931][T18998] Memory cgroup stats for /syz1: [ 1779.121133][T18998] anon 110592 [ 1779.121133][T18998] file 139264 [ 1779.121133][T18998] kernel 344064 [ 1779.121133][T18998] kernel_stack 65536 [ 1779.121133][T18998] pagetables 77824 [ 1779.121133][T18998] percpu 0 [ 1779.121133][T18998] sock 0 [ 1779.121133][T18998] vmalloc 0 [ 1779.121133][T18998] shmem 139264 [ 1779.121133][T18998] file_mapped 135168 [ 1779.121133][T18998] file_dirty 0 [ 1779.121133][T18998] file_writeback 0 [ 1779.121133][T18998] swapcached 0 [ 1779.121133][T18998] anon_thp 0 [ 1779.121133][T18998] file_thp 0 [ 1779.121133][T18998] shmem_thp 0 [ 1779.121133][T18998] inactive_anon 110592 [ 1779.121133][T18998] active_anon 135168 [ 1779.121133][T18998] inactive_file 0 [ 1779.121133][T18998] active_file 0 [ 1779.121133][T18998] unevictable 0 [ 1779.121133][T18998] slab_reclaimable 50784 [ 1779.121133][T18998] slab_unreclaimable 119328 [ 1779.121133][T18998] slab 170112 [ 1779.121133][T18998] workingset_refault_anon 0 [ 1779.121133][T18998] workingset_refault_file 4 [ 1779.143206][T18967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1779.226601][T18998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18963,uid=0 [ 1779.243597][T18998] Memory cgroup out of memory: Killed process 18963 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1779.274621][T18967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.326305][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1779.341675][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1779.351796][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1779.365823][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1779.375038][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1779.382733][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1779.394352][T18967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.435578][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:32:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:14 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1c, 0x16, 0x80008, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) [ 1779.543687][T18969] 8021q: adding VLAN 0 to HW filter on device bond0 14:32:14 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a80)={&(0x7f0000000800)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x3}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000840)="e067220b4dae30b50cfc829c13a36be1dd420f52cb823dd9b7c21ab78b33c15100e30ddff0c821e2c6cd3959769596e9aa5b7b33add8c2ab40b44ca421ec3ef261efef2fccd764173faea4fabf2e86a1d066", 0x52}, {&(0x7f00000008c0)="d778e5bbf3b86f75fbd53acbf1f4dbc02a9dbef295b8f5fac1e360bf62b9e4bab89e7252e03c863dc5cb6f3f8547ebd83c752ccc51060209caee289b2ce8f7813818c41c34cc558776b397e8e178787c8a91d24241183408ac816686c8383ffb918b6acc85db55f0e70bcc1377bd44cb534cbb59e710bd54e73693ee1c4123f155fbb71e93054a89a0db9314b72b776e0de48559d18d11840f7021c6a1e7d10bd73711307a4b304b9efed6f806649661897543354612641b1faf0175b434ec3994699eef0adbfa13d059242d494c9755d367a1e83b4724bda57e73bf205e4bc491c65c01ea179f6dd8", 0xe9}], 0x2, &(0x7f0000000a00)="c6c59716bd35b09e6d03bd83110ddbebe34740d097b02e3c398a24a99095226155202244870824a3f1983e0ee99735be59b873ab56b947d66a59e15073a722530e33acab192599a0221e0de9", 0x4c, 0x24000884}, 0x8000) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3f, 0x0, 0x20000, 0x800, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2, r3, r1]}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000300)='GPL\x00', 0x8, 0xe4, &(0x7f0000000540)=""/228, 0x41100, 0x1, '\x00', 0x0, 0x29, r6, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0x7f, 0x40}, 0x10}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0xa, &(0x7f0000000ac0)=@framed={{}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7a6f8b74f506b95f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x0, 0x6, 0x1, 0x3, 0x20, 0xfffffffffffffff0}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}]}, &(0x7f0000000b40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xc, 0x5, 0xe065}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, r7]}, 0x80) 14:32:14 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1c, 0x16, 0x80008, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1c, 0x16, 0x80008, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 1779.629128][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1779.647410][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1779.681487][T18969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.703560][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1779.725058][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1779.750227][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.757417][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.786402][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1779.823170][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1779.855657][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1779.910901][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.918157][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.933868][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1779.985693][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1780.001481][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1780.013798][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1780.031418][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1780.043370][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1780.055975][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1780.071730][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1780.105934][T18969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1780.144064][T18969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1780.154239][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1780.171782][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1780.181325][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1780.220218][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1780.235979][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1780.247525][T18969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.389965][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1780.400594][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1780.442833][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1780.456190][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1780.484107][T18967] device veth0_vlan entered promiscuous mode [ 1780.492816][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1780.501091][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1780.516285][T18967] device veth1_vlan entered promiscuous mode [ 1780.548226][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1780.556372][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1780.565515][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1780.574535][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1780.590037][T18967] device veth0_macvtap entered promiscuous mode [ 1780.604958][T18967] device veth1_macvtap entered promiscuous mode [ 1780.655193][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1780.668127][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.678478][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1780.689184][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.699197][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1780.710190][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.721713][T18967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1780.736568][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1780.745696][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1780.760997][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1780.772944][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1780.791815][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1780.803330][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.813769][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1780.827677][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.838295][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1780.849012][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.861003][T18967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1780.887687][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1780.896369][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1780.943863][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1780.953963][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1780.965696][ T3601] Bluetooth: hci2: command 0x041b tx timeout [ 1780.981198][T18969] device veth0_vlan entered promiscuous mode [ 1781.009642][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1781.020306][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1781.052077][ T90] device hsr_slave_0 left promiscuous mode [ 1781.066038][ T90] device hsr_slave_1 left promiscuous mode [ 1781.072661][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.091091][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.106605][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.115414][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.127489][T17412] Bluetooth: hci5: command 0x041b tx timeout [ 1781.129280][ T90] device bridge_slave_1 left promiscuous mode [ 1781.139790][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.152567][ T90] device bridge_slave_0 left promiscuous mode [ 1781.159113][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.172810][ T90] device veth1_macvtap left promiscuous mode [ 1781.178915][ T90] device veth0_macvtap left promiscuous mode [ 1781.185141][ T90] device veth1_vlan left promiscuous mode [ 1781.191052][ T90] device veth0_vlan left promiscuous mode [ 1781.469372][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1781.484712][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1781.496502][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.512984][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.581183][ T90] bond0 (unregistering): Released all slaves [ 1781.627178][T18969] device veth1_vlan entered promiscuous mode [ 1781.633852][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1781.641871][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1781.649976][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1781.688350][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.696454][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.755686][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1781.764203][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1781.773592][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1781.786751][T18969] device veth0_macvtap entered promiscuous mode [ 1781.787863][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.801756][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.806025][T18969] device veth1_macvtap entered promiscuous mode [ 1781.835273][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1781.849272][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1781.862732][T17389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1781.879896][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1781.893176][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.903395][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1781.913899][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.924499][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1781.934985][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.947151][T18969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.958714][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1781.969072][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1781.979908][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1781.993510][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.005461][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1782.016302][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.026390][T18969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1782.037481][T18969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.074994][T18969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.093316][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1782.106635][T17412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1782.326536][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.365325][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.416912][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1782.443453][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.469065][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.492450][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1782.535409][T19042] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1782.546338][T19042] CPU: 1 PID: 19042 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1782.556881][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.566953][T19042] Call Trace: [ 1782.570241][T19042] [ 1782.573175][T19042] dump_stack_lvl+0xcd/0x134 [ 1782.577805][T19042] dump_header+0x10b/0x7f9 [ 1782.582259][T19042] oom_kill_process.cold+0x10/0x15 [ 1782.587390][T19042] out_of_memory+0x358/0x14b0 [ 1782.592091][T19042] ? oom_killer_disable+0x270/0x270 [ 1782.597301][T19042] ? mark_held_locks+0x9f/0xe0 [ 1782.602086][T19042] mem_cgroup_out_of_memory+0x206/0x270 [ 1782.607656][T19042] ? mem_cgroup_margin+0x130/0x130 [ 1782.612797][T19042] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1782.618619][T19042] memory_max_write+0x25c/0x3b0 [ 1782.623480][T19042] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1782.629562][T19042] ? lock_release+0x720/0x720 [ 1782.634255][T19042] cgroup_file_write+0x1de/0x770 [ 1782.639205][T19042] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1782.645279][T19042] ? kill_css+0x370/0x370 [ 1782.649618][T19042] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.655890][T19042] ? kill_css+0x370/0x370 [ 1782.660239][T19042] kernfs_fop_write_iter+0x3f8/0x610 [ 1782.665554][T19042] new_sync_write+0x38a/0x560 [ 1782.670252][T19042] ? new_sync_read+0x5f0/0x5f0 [ 1782.675030][T19042] ? lock_acquire+0x1ef/0x510 [ 1782.679732][T19042] ? lock_release+0x720/0x720 [ 1782.684446][T19042] vfs_write+0x7c0/0xac0 [ 1782.688702][T19042] ksys_write+0x127/0x250 [ 1782.693037][T19042] ? __ia32_sys_read+0xb0/0xb0 [ 1782.697813][T19042] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1782.703729][T19042] do_syscall_64+0x35/0xb0 [ 1782.708154][T19042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.714056][T19042] RIP: 0033:0x7f8b0fa890e9 [ 1782.718475][T19042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1782.738088][T19042] RSP: 002b:00007f8b10b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1782.746508][T19042] RAX: ffffffffffffffda RBX: 00007f8b0fb9bf60 RCX: 00007f8b0fa890e9 [ 1782.754484][T19042] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1782.762455][T19042] RBP: 00007f8b0fae308d R08: 0000000000000000 R09: 0000000000000000 [ 1782.770428][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.778400][T19042] R13: 00007ffdf6183d0f R14: 00007f8b10b68300 R15: 0000000000022000 [ 1782.786486][T19042] [ 1782.842516][T19042] memory: usage 544kB, limit 0kB, failcnt 180 [ 1782.850886][T19042] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1782.863675][T19042] Memory cgroup stats for /syz0: [ 1782.863886][T19042] anon 114688 [ 1782.863886][T19042] file 94208 [ 1782.863886][T19042] kernel 315392 [ 1782.863886][T19042] kernel_stack 32768 [ 1782.863886][T19042] pagetables 77824 [ 1782.863886][T19042] percpu 0 [ 1782.863886][T19042] sock 0 [ 1782.863886][T19042] vmalloc 0 [ 1782.863886][T19042] shmem 94208 [ 1782.863886][T19042] file_mapped 86016 [ 1782.863886][T19042] file_dirty 0 [ 1782.863886][T19042] file_writeback 0 [ 1782.863886][T19042] swapcached 0 [ 1782.863886][T19042] anon_thp 0 [ 1782.863886][T19042] file_thp 0 [ 1782.863886][T19042] shmem_thp 0 [ 1782.863886][T19042] inactive_anon 114688 [ 1782.863886][T19042] active_anon 94208 [ 1782.863886][T19042] inactive_file 0 [ 1782.863886][T19042] active_file 0 [ 1782.863886][T19042] unevictable 0 [ 1782.863886][T19042] slab_reclaimable 49920 [ 1782.863886][T19042] slab_unreclaimable 129288 [ 1782.863886][T19042] slab 179208 [ 1782.863886][T19042] workingset_refault_anon 0 [ 1782.863886][T19042] workingset_refault_file 8 [ 1782.970424][T19042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18967,uid=0 [ 1782.986496][T19042] Memory cgroup out of memory: Killed process 18967 (syz-executor.0) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1783.197648][T17402] Bluetooth: hci5: command 0x040f tx timeout [ 1783.395548][T19044] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1783.412828][T19044] CPU: 0 PID: 19044 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1783.423375][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.433445][T19044] Call Trace: [ 1783.436723][T19044] [ 1783.439663][T19044] dump_stack_lvl+0xcd/0x134 [ 1783.444263][T19044] dump_header+0x10b/0x7f9 [ 1783.448704][T19044] oom_kill_process.cold+0x10/0x15 [ 1783.453826][T19044] out_of_memory+0x358/0x14b0 [ 1783.458682][T19044] ? oom_killer_disable+0x270/0x270 [ 1783.463913][T19044] ? io_schedule_timeout+0x140/0x140 [ 1783.469231][T19044] mem_cgroup_out_of_memory+0x206/0x270 [ 1783.474806][T19044] ? mem_cgroup_margin+0x130/0x130 [ 1783.479959][T19044] memory_max_write+0x25c/0x3b0 [ 1783.484829][T19044] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1783.490906][T19044] ? cgroup_file_write+0x17d/0x770 [ 1783.496035][T19044] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1783.502208][T19044] cgroup_file_write+0x1de/0x770 [ 1783.507168][T19044] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1783.513253][T19044] ? kill_css+0x370/0x370 [ 1783.517602][T19044] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1783.523980][T19044] ? kill_css+0x370/0x370 [ 1783.528335][T19044] kernfs_fop_write_iter+0x3f8/0x610 [ 1783.533646][T19044] new_sync_write+0x38a/0x560 [ 1783.538333][T19044] ? new_sync_read+0x5f0/0x5f0 [ 1783.543115][T19044] ? lock_acquire+0x1ef/0x510 [ 1783.547827][T19044] ? lock_release+0x720/0x720 [ 1783.552541][T19044] vfs_write+0x7c0/0xac0 [ 1783.556806][T19044] ksys_write+0x127/0x250 [ 1783.561147][T19044] ? __ia32_sys_read+0xb0/0xb0 [ 1783.565927][T19044] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1783.571837][T19044] do_syscall_64+0x35/0xb0 [ 1783.576266][T19044] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1783.582170][T19044] RIP: 0033:0x7f32ec8890e9 [ 1783.586592][T19044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1783.606203][T19044] RSP: 002b:00007f32eda8e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1783.614621][T19044] RAX: ffffffffffffffda RBX: 00007f32ec99bf60 RCX: 00007f32ec8890e9 [ 1783.622601][T19044] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1783.630579][T19044] RBP: 00007f32ec8e308d R08: 0000000000000000 R09: 0000000000000000 [ 1783.638553][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.646524][T19044] R13: 00007ffef192d82f R14: 00007f32eda8e300 R15: 0000000000022000 [ 1783.654519][T19044] [ 1783.684295][T19044] memory: usage 724kB, limit 0kB, failcnt 154 [ 1783.690494][T19044] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1783.697992][T19044] Memory cgroup stats for /syz5: [ 1783.698174][T19044] anon 114688 [ 1783.698174][T19044] file 282624 [ 1783.698174][T19044] kernel 344064 [ 1783.698174][T19044] kernel_stack 65536 [ 1783.698174][T19044] pagetables 81920 [ 1783.698174][T19044] percpu 0 [ 1783.698174][T19044] sock 0 [ 1783.698174][T19044] vmalloc 0 [ 1783.698174][T19044] shmem 282624 [ 1783.698174][T19044] file_mapped 282624 [ 1783.698174][T19044] file_dirty 0 [ 1783.698174][T19044] file_writeback 0 [ 1783.698174][T19044] swapcached 0 [ 1783.698174][T19044] anon_thp 0 [ 1783.698174][T19044] file_thp 0 [ 1783.698174][T19044] shmem_thp 0 [ 1783.698174][T19044] inactive_anon 131072 [ 1783.698174][T19044] active_anon 266240 [ 1783.698174][T19044] inactive_file 0 [ 1783.698174][T19044] active_file 0 [ 1783.698174][T19044] unevictable 0 [ 1783.698174][T19044] slab_reclaimable 48912 [ 1783.698174][T19044] slab_unreclaimable 115032 [ 1783.698174][T19044] slab 163944 [ 1783.698174][T19044] workingset_refault_anon 0 [ 1783.698174][T19044] workingset_refault_file 15 [ 1783.803702][T19044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18969,uid=0 [ 1783.821492][T19044] Memory cgroup out of memory: Killed process 18969 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1783.841502][ T28] oom_reaper: reaped process 18969 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB 14:32:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:19 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a80)={&(0x7f0000000800)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x3}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000840)="e067220b4dae30b50cfc829c13a36be1dd420f52cb823dd9b7c21ab78b33c15100e30ddff0c821e2c6cd3959769596e9aa5b7b33add8c2ab40b44ca421ec3ef261efef2fccd764173faea4fabf2e86a1d066", 0x52}, {&(0x7f00000008c0)="d778e5bbf3b86f75fbd53acbf1f4dbc02a9dbef295b8f5fac1e360bf62b9e4bab89e7252e03c863dc5cb6f3f8547ebd83c752ccc51060209caee289b2ce8f7813818c41c34cc558776b397e8e178787c8a91d24241183408ac816686c8383ffb918b6acc85db55f0e70bcc1377bd44cb534cbb59e710bd54e73693ee1c4123f155fbb71e93054a89a0db9314b72b776e0de48559d18d11840f7021c6a1e7d10bd73711307a4b304b9efed6f806649661897543354612641b1faf0175b434ec3994699eef0adbfa13d059242d494c9755d367a1e83b4724bda57e73bf205e4bc491c65c01ea179f6dd8", 0xe9}], 0x2, &(0x7f0000000a00)="c6c59716bd35b09e6d03bd83110ddbebe34740d097b02e3c398a24a99095226155202244870824a3f1983e0ee99735be59b873ab56b947d66a59e15073a722530e33acab192599a0221e0de9", 0x4c, 0x24000884}, 0x8000) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3f, 0x0, 0x20000, 0x800, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2, r3, r1]}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r5}, 0xc) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (rerun: 64) openat$cgroup_ro(r6, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000000)=0xc9ab) (rerun: 64) write$cgroup_pid(r6, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000300)='GPL\x00', 0x8, 0xe4, &(0x7f0000000540)=""/228, 0x41100, 0x1, '\x00', 0x0, 0x29, r6, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0x7f, 0x40}, 0x10}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xc9ab) (async, rerun: 32) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0xa, &(0x7f0000000ac0)=@framed={{}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7a6f8b74f506b95f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x0, 0x6, 0x1, 0x3, 0x20, 0xfffffffffffffff0}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}]}, &(0x7f0000000b40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xc, 0x5, 0xe065}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, r7]}, 0x80) (rerun: 32) 14:32:19 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1c, 0x16, 0x80008, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:32:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1784.247607][T13551] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1784.486907][T17007] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 1784.510022][ T8] device hsr_slave_0 left promiscuous mode [ 1784.531382][ T8] device hsr_slave_1 left promiscuous mode [ 1784.554316][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.562317][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.571988][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.580333][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.591687][ T8] device bridge_slave_1 left promiscuous mode [ 1784.606941][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.615744][ T8] device bridge_slave_0 left promiscuous mode [ 1784.630029][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.651746][ T8] device veth1_macvtap left promiscuous mode [ 1784.660693][ T8] device veth0_macvtap left promiscuous mode [ 1784.669650][ T8] device veth1_vlan left promiscuous mode [ 1784.675495][ T8] device veth0_vlan left promiscuous mode [ 1784.986260][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1785.003709][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1785.016079][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.031703][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.092108][ T8] bond0 (unregistering): Released all slaves [ 1786.222695][ T8] device hsr_slave_0 left promiscuous mode [ 1786.229148][ T8] device hsr_slave_1 left promiscuous mode [ 1786.235309][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1786.243505][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.253701][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1786.262788][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.271602][ T8] device bridge_slave_1 left promiscuous mode [ 1786.278180][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.286407][ T8] device bridge_slave_0 left promiscuous mode [ 1786.292653][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.305511][ T8] device veth1_macvtap left promiscuous mode [ 1786.311628][ T8] device veth0_macvtap left promiscuous mode [ 1786.318189][ T8] device veth1_vlan left promiscuous mode [ 1786.324045][ T8] device veth0_vlan left promiscuous mode [ 1786.475785][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1786.490490][T13551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1786.502010][T13551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1786.510337][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1786.510492][T13551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1786.525383][T13551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1786.534078][T13551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1786.541473][T13551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1786.541720][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1786.573815][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1786.632470][ T8] bond0 (unregistering): Released all slaves [ 1786.754319][T19055] chnl_net:caif_netlink_parms(): no params data found [ 1786.795665][T19055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.814591][T17007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1786.818506][T19055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.823083][T17007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1786.832337][T19055] device bridge_slave_0 entered promiscuous mode [ 1786.837477][T17007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1786.846576][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.850124][T17007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1786.861885][T19055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.863868][T17007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1786.871680][T19055] device bridge_slave_1 entered promiscuous mode [ 1786.877676][T17007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1786.928861][T19055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.940625][T19055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.975745][T19055] team0: Port device team_slave_0 added [ 1786.988410][T19055] team0: Port device team_slave_1 added [ 1787.036118][T19055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.043172][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.072113][T19055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.084418][T19055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.092049][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.118119][T19055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.154847][T19055] device hsr_slave_0 entered promiscuous mode [ 1787.161699][T19055] device hsr_slave_1 entered promiscuous mode [ 1787.241151][T19057] chnl_net:caif_netlink_parms(): no params data found [ 1787.334984][T19057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.342357][T19057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.350643][T19057] device bridge_slave_0 entered promiscuous mode [ 1787.359234][T19057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.366414][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.374712][T19057] device bridge_slave_1 entered promiscuous mode [ 1787.406985][T19057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.425186][T19057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.450210][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.457335][T19055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.464617][T19055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.471747][T19055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.483800][T19057] team0: Port device team_slave_0 added [ 1787.496291][T19057] team0: Port device team_slave_1 added [ 1787.521717][T19057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.529609][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.556910][T19057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.570024][T19057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.577025][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.603064][T19057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.643023][T19057] device hsr_slave_0 entered promiscuous mode [ 1787.650038][T19057] device hsr_slave_1 entered promiscuous mode [ 1787.656507][T19057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1787.664136][T19057] Cannot create hsr debugfs directory [ 1787.739652][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1787.758152][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.765746][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.792937][T19055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.801074][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1787.809043][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1787.826612][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1787.835290][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1787.845000][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.852205][T17407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.876974][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1787.885446][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1787.894525][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.901643][T17407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.909260][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1787.931429][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1787.950635][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1787.959967][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1787.969050][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1787.978213][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1787.986658][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1788.003641][T19055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1788.014585][T19055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1788.028994][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1788.037505][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1788.045702][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1788.054981][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1788.063693][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1788.093781][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1788.101286][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1788.117062][T19057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.128951][T19055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.143835][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1788.152301][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1788.163563][T19057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.175983][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1788.185748][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1788.194442][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.201912][T17407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.216836][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1788.224908][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1788.233817][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1788.242386][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.249511][T17407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1788.257752][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1788.280350][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1788.288918][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1788.298768][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1788.307965][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1788.317879][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1788.326583][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1788.335134][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1788.344111][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1788.356925][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1788.365355][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1788.376480][T19057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1788.405514][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1788.418071][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1788.438566][T19057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.644641][T16991] Bluetooth: hci0: command 0x0409 tx timeout [ 1788.655320][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1788.665619][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1788.682145][T19055] device veth0_vlan entered promiscuous mode [ 1788.693793][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1788.702413][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1788.713402][T19055] device veth1_vlan entered promiscuous mode [ 1788.722175][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1788.736319][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1788.744278][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1788.776272][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1788.789474][T19055] device veth0_macvtap entered promiscuous mode [ 1788.803362][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1788.812254][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1788.821572][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1788.835699][T19055] device veth1_macvtap entered promiscuous mode [ 1788.847054][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1788.854891][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1788.867211][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1788.885107][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1788.900286][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.910759][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1788.921535][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.933105][T19055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.946371][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1788.955126][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1788.957125][T17390] Bluetooth: hci2: command 0x0409 tx timeout [ 1788.972320][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1788.984512][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.994509][T19055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1789.005212][T19055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.017625][T19055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.031506][T19057] device veth0_vlan entered promiscuous mode [ 1789.040883][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1789.049878][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1789.059083][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1789.068326][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1789.079006][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1789.086688][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1789.099268][T19057] device veth1_vlan entered promiscuous mode [ 1789.146318][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1789.155228][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1789.163831][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1789.172630][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1789.189262][T19057] device veth0_macvtap entered promiscuous mode [ 1789.197034][T13551] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 1789.242557][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.259834][T19057] device veth1_macvtap entered promiscuous mode [ 1789.263165][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.286698][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1789.287893][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.294927][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1789.304281][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.337809][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1789.351043][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1789.373279][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1789.391394][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.402812][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1789.413952][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.446766][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1789.467670][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.488099][T19057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1789.495599][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1789.517701][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1789.529655][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1789.554936][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.575404][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1789.598549][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.609148][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1789.619847][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1789.631016][T19057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.647868][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1789.656659][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1789.760298][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.800069][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.822689][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.840339][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.857663][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1789.882477][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1790.415998][T19096] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1790.436297][T19096] CPU: 1 PID: 19096 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1790.446837][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.456914][T19096] Call Trace: [ 1790.460203][T19096] [ 1790.463139][T19096] dump_stack_lvl+0xcd/0x134 [ 1790.467758][T19096] dump_header+0x10b/0x7f9 [ 1790.472463][T19096] oom_kill_process.cold+0x10/0x15 [ 1790.477600][T19096] out_of_memory+0x358/0x14b0 [ 1790.482304][T19096] ? oom_killer_disable+0x270/0x270 [ 1790.487525][T19096] ? find_held_lock+0x2d/0x110 [ 1790.492312][T19096] mem_cgroup_out_of_memory+0x206/0x270 [ 1790.497883][T19096] ? mem_cgroup_margin+0x130/0x130 [ 1790.503033][T19096] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1790.508864][T19096] memory_max_write+0x25c/0x3b0 [ 1790.513734][T19096] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1790.519817][T19096] ? lock_release+0x720/0x720 [ 1790.524503][T19096] cgroup_file_write+0x1de/0x770 [ 1790.529447][T19096] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1790.535515][T19096] ? kill_css+0x370/0x370 [ 1790.539847][T19096] ? __phys_addr_symbol+0x45/0x70 [ 1790.544886][T19096] ? kill_css+0x370/0x370 [ 1790.549218][T19096] kernfs_fop_write_iter+0x3f8/0x610 [ 1790.554512][T19096] new_sync_write+0x38a/0x560 [ 1790.559330][T19096] ? new_sync_read+0x5f0/0x5f0 [ 1790.564108][T19096] ? lock_acquire+0x1ef/0x510 [ 1790.568811][T19096] ? lock_release+0x720/0x720 [ 1790.573530][T19096] vfs_write+0x7c0/0xac0 [ 1790.577790][T19096] ksys_write+0x127/0x250 [ 1790.582124][T19096] ? __ia32_sys_read+0xb0/0xb0 [ 1790.586902][T19096] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1790.592896][T19096] do_syscall_64+0x35/0xb0 [ 1790.597320][T19096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1790.603219][T19096] RIP: 0033:0x7f9dbc6890e9 [ 1790.607633][T19096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1790.627242][T19096] RSP: 002b:00007f9dbd7cd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1790.635654][T19096] RAX: ffffffffffffffda RBX: 00007f9dbc79bf60 RCX: 00007f9dbc6890e9 [ 1790.643623][T19096] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1790.651591][T19096] RBP: 00007f9dbc6e308d R08: 0000000000000000 R09: 0000000000000000 [ 1790.659557][T19096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.667524][T19096] R13: 00007fffd3b25ddf R14: 00007f9dbd7cd300 R15: 0000000000022000 [ 1790.675508][T19096] [ 1790.719412][T17407] Bluetooth: hci0: command 0x041b tx timeout 14:32:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) 14:32:26 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) openat$cgroup_devices(r4, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x5, 0x3}, {0x5, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x57}, @fwd={0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x29, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000280)=""/83, 0x8a, 0x53, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xf, 0xffff6761, 0x0, 0x2, 0x55, r3, 0x80, '\x00', r6, r5, 0x4, 0x15, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) 14:32:26 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000097184af5c79ccd21000000000000180000000000000000fa86c43cf42d8a187a26861c6ca00500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe4f}, 0x80) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x3, &(0x7f0000000440)=""/2, 0x2}, 0x102) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000001c0)="313c62b3833ace63e179a4611dda0385f9dfb4ff97eebf9b9060054154090495c747f52bcbf0b8519989819aa936702915739532e3a27177062832e40c6d634d1557a0dbd7694e7a215061deebd320be2fa9986775b2014cfb96defd19aae9e9ae92f31424e7d88ef40c4076f4eac0e38e73a5439d444eba92b8ac370cfce9b35e757499301414562e3b42c10b95fbde691c737410c38027652e80e038", &(0x7f0000000740)=""/4096}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r5, &(0x7f0000002b00)={&(0x7f0000000580)=@xdp={0x2c, 0x3, r6, 0xd}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000600)="f04631501d6954323df40dfb8b182fbee68901e1cd5bcd307b067c72a629782401ba9dd7f851259c1ecfb3bbeb33d25bc27e7a2de76758118b96b5eeb3c16ed324890ef427fc75c0017890d72a3aec158aef1f342d87ae29e07bf269b9926dadfe23ba7caf9e65da699a5e8680fb", 0x6e}, {&(0x7f0000000680)="a651a63d833fa077a021890ccb5a785a215c0447523d", 0x16}, {&(0x7f0000002740)="906797013cdfb0e6c802efc0b8f36ec64ea23fe8d8d00655195bfdf9d02be49fbf5bd4e4243f30379807a3d30d9605737971439612", 0x35}, {&(0x7f0000002780)="ad422c068ae27f8a34fca58a8aea76b4314078611845248f8f500969c926b6991ab39d37b0609c9df244df0d78271156b9fa641d4a0895f49f9c689d3fb579647fbe16130cbdcf76c21ba6f9fe4604fa22f4d67cd4457d708e1def38b68bcc7151252d600ec9f0f65b0e1294f0d24c2a38f1a551db10c402b99acf2acbf8a070adf175858e431fdf0c0ed9aac5c20d1156cacaca9d8c79a7021d999d18aaf835a528fa11630090e7c84ecf269ae4c93c5b13d56aa2fe8ac8596e2f46564d", 0xbe}, {&(0x7f0000002840)="5cec75f4bfe7bc4934c0f0ac4e8be2f0d45c5168f66c72c26167f67706bad922ece41f255972e0300159f29f8ca27ebfbeb492550dd864929fce836f28d481ee28b00a4457e75ac322c719a9f86ee9ea5eed282125cecc57663a8a8fe82f72aaf826df563dc28d7b47fe853cddbc65dccc4a43959d78eae3cb5f281973c7f64722470460c9ac4eb9f7279d2d4fdd9c4cf27715197ef783b347a6e890a7d5c5852815ec52ffa3413007cd60489bff6656366d38fd5e", 0xb5}], 0x5, &(0x7f0000002980)=[{0x78, 0x0, 0x651cff3c, "6d4c2d646b300a983023e1eeb6c6c4e09e7bd426db19b5083e6273331efddb8187a38e36c85bff33fa167283c742de070c596e77474a9c9f67135464fa06c0ce3d8344a202a118cc73999cc344867f559dabfcf52ec4d0d89ad618d0d211696efc4aed9b"}, {0x58, 0x10d, 0x5, "06d5644ae993c69f9eb05dfa6e5d1a6dbfa737eb129b373585ce26282cacefaabcf708e4cfee2192031acaee32b02bd6fa5a5f33ef6777693fcff8749ab8dfd2c5041030bb30d755"}, {0x50, 0x11, 0x8, "3845b7b0846849aa60fdebf5549a663c25c0fd8d3aa6710e8bde79f902f799092c8058d231d3075c0705fd892e31768e339239709686ff35191af36e1e"}, {0x50, 0x6, 0x400, "778d120fc350fb040ab5cba320aa6e18ee3af4fa74953aa2ba21ce24221eb02b3338f008647a4c0fa492c7ec542870841f43d3929032d5621b6c03681997"}], 0x170}, 0x20004080) 14:32:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1790.832558][T19096] memory: usage 648kB, limit 0kB, failcnt 180 [ 1790.844760][T19096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1790.852079][T19096] Memory cgroup stats for /syz0: [ 1790.852287][T19096] anon 114688 [ 1790.852287][T19096] file 94208 [ 1790.852287][T19096] kernel 413696 [ 1790.852287][T19096] kernel_stack 32768 [ 1790.852287][T19096] pagetables 77824 [ 1790.852287][T19096] percpu 0 [ 1790.852287][T19096] sock 0 [ 1790.852287][T19096] vmalloc 0 [ 1790.852287][T19096] shmem 94208 [ 1790.852287][T19096] file_mapped 86016 [ 1790.852287][T19096] file_dirty 0 [ 1790.852287][T19096] file_writeback 0 [ 1790.852287][T19096] swapcached 0 [ 1790.852287][T19096] anon_thp 0 [ 1790.852287][T19096] file_thp 0 [ 1790.852287][T19096] shmem_thp 0 [ 1790.852287][T19096] inactive_anon 114688 [ 1790.852287][T19096] active_anon 94208 [ 1790.852287][T19096] inactive_file 0 [ 1790.852287][T19096] active_file 0 [ 1790.852287][T19096] unevictable 0 [ 1790.852287][T19096] slab_reclaimable 84680 [ 1790.852287][T19096] slab_unreclaimable 196424 [ 1790.852287][T19096] slab 281104 [ 1790.852287][T19096] workingset_refault_anon 0 [ 1790.852287][T19096] workingset_refault_file 8 [ 1790.976143][T19096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19055,uid=0 [ 1790.998214][T19096] Memory cgroup out of memory: Killed process 19055 (syz-executor.0) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1791.028354][ T28] oom_reaper: reaped process 19055 (syz-executor.0), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1791.037736][T17407] Bluetooth: hci2: command 0x041b tx timeout [ 1791.039498][T19057] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1791.091168][T19057] CPU: 0 PID: 19057 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1791.101703][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.111770][T19057] Call Trace: [ 1791.115052][T19057] [ 1791.117994][T19057] dump_stack_lvl+0xcd/0x134 [ 1791.122611][T19057] dump_header+0x10b/0x7f9 [ 1791.127050][T19057] oom_kill_process.cold+0x10/0x15 [ 1791.132191][T19057] out_of_memory+0x358/0x14b0 [ 1791.136894][T19057] ? find_held_lock+0x2d/0x110 [ 1791.141677][T19057] ? oom_killer_disable+0x270/0x270 [ 1791.146901][T19057] ? find_held_lock+0x2d/0x110 [ 1791.151694][T19057] mem_cgroup_out_of_memory+0x206/0x270 [ 1791.157252][T19057] ? mem_cgroup_margin+0x130/0x130 [ 1791.162381][T19057] ? lock_downgrade+0x6e0/0x6e0 [ 1791.167271][T19057] try_charge_memcg+0xef9/0x1380 [ 1791.172229][T19057] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1791.178218][T19057] ? rcu_read_unlock+0x9/0x60 [ 1791.182903][T19057] ? lock_downgrade+0x6e0/0x6e0 [ 1791.187776][T19057] obj_cgroup_charge+0x334/0x700 [ 1791.192726][T19057] kmem_cache_alloc_lru+0x143/0x720 [ 1791.197926][T19057] ? ext4_alloc_inode+0x24/0x650 [ 1791.202871][T19057] ? ext4_free_in_core_inode+0x70/0x70 [ 1791.208339][T19057] ext4_alloc_inode+0x24/0x650 [ 1791.213108][T19057] ? ext4_free_in_core_inode+0x70/0x70 [ 1791.218573][T19057] alloc_inode+0x61/0x230 [ 1791.222912][T19057] iget_locked+0x1cc/0x740 [ 1791.227335][T19057] __ext4_iget+0x3a1/0x4160 [ 1791.231854][T19057] ? ext4_get_projid+0x190/0x190 [ 1791.236798][T19057] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1791.242348][T19057] ? kfree+0x1ed/0x4d0 [ 1791.246421][T19057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1791.252662][T19057] ? d_alloc_parallel+0x9af/0x1af0 [ 1791.257784][T19057] ext4_lookup+0x383/0x730 [ 1791.262210][T19057] ? ext4_resetent+0x2d0/0x2d0 [ 1791.266978][T19057] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1791.272963][T19057] ? find_held_lock+0x2d/0x110 [ 1791.277743][T19057] ? lockdep_init_map_type+0x21a/0x7f0 [ 1791.283218][T19057] __lookup_slow+0x24c/0x480 [ 1791.287813][T19057] ? page_get_link+0x7b0/0x7b0 [ 1791.292583][T19057] ? batadv_iv_gw_dump+0x140/0xd50 [ 1791.297712][T19057] ? batadv_iv_gw_dump+0x140/0xd50 [ 1791.302859][T19057] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1791.309103][T19057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1791.315343][T19057] ? link_path_walk.part.0+0x154/0xf70 [ 1791.320812][T19057] walk_component+0x40f/0x6a0 [ 1791.325507][T19057] ? handle_dots.part.0+0x15e0/0x15e0 [ 1791.330901][T19057] ? walk_component+0x6a0/0x6a0 [ 1791.335786][T19057] path_lookupat+0x1bb/0x860 [ 1791.340410][T19057] filename_lookup+0x1c6/0x590 [ 1791.345188][T19057] ? may_linkat+0x500/0x500 [ 1791.349712][T19057] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1791.355981][T19057] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1791.361710][T19057] ? __check_object_size+0x16c/0x4f0 [ 1791.367006][T19057] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1791.373253][T19057] ? strncpy_from_user+0x287/0x3c0 [ 1791.378384][T19057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1791.384633][T19057] ? getname_flags.part.0+0x1dd/0x4f0 [ 1791.390037][T19057] user_path_at_empty+0x42/0x60 [ 1791.394910][T19057] __x64_sys_umount+0xf8/0x180 [ 1791.399694][T19057] ? path_umount+0x1260/0x1260 [ 1791.404476][T19057] ? syscall_enter_from_user_mode+0x21/0x70 [ 1791.410415][T19057] do_syscall_64+0x35/0xb0 [ 1791.414856][T19057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1791.420764][T19057] RIP: 0033:0x7fea7808a557 [ 1791.425180][T19057] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1791.444799][T19057] RSP: 002b:00007ffdd76adc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1791.453229][T19057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fea7808a557 [ 1791.461208][T19057] RDX: 00007ffdd76adcdc RSI: 000000000000000a RDI: 00007ffdd76adcd0 [ 1791.469183][T19057] RBP: 00007ffdd76adcd0 R08: 00000000ffffffff R09: 00007ffdd76adaa0 [ 1791.477163][T19057] R10: 0000555556fa1853 R11: 0000000000000246 R12: 00007fea780e21f8 [ 1791.485138][T19057] R13: 00007ffdd76aed90 R14: 0000555556fa1810 R15: 00007ffdd76aedd0 [ 1791.493300][T19057] [ 1791.511089][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.513165][T19057] memory: usage 392kB, limit 0kB, failcnt 307 [ 1791.517921][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.533257][T19057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1791.597011][T19057] Memory cgroup stats for /syz4: [ 1791.597225][T19057] anon 36864 [ 1791.597225][T19057] file 208896 [ 1791.597225][T19057] kernel 155648 [ 1791.597225][T19057] kernel_stack 0 [ 1791.597225][T19057] pagetables 8192 [ 1791.597225][T19057] percpu 0 [ 1791.597225][T19057] sock 0 [ 1791.597225][T19057] vmalloc 0 [ 1791.597225][T19057] shmem 208896 [ 1791.597225][T19057] file_mapped 159744 [ 1791.597225][T19057] file_dirty 0 [ 1791.597225][T19057] file_writeback 0 [ 1791.597225][T19057] swapcached 0 [ 1791.597225][T19057] anon_thp 0 [ 1791.597225][T19057] file_thp 0 [ 1791.597225][T19057] shmem_thp 0 [ 1791.597225][T19057] inactive_anon 86016 [ 1791.597225][T19057] active_anon 159744 [ 1791.597225][T19057] inactive_file 0 [ 1791.597225][T19057] active_file 0 [ 1791.597225][T19057] unevictable 0 [ 1791.597225][T19057] slab_reclaimable 41296 [ 1791.597225][T19057] slab_unreclaimable 96920 [ 1791.597225][T19057] slab 138216 [ 1791.597225][T19057] workingset_refault_anon 0 [ 1791.597225][T19057] workingset_refault_file 8 [ 1791.707454][T19057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19057,uid=0 [ 1791.723402][T19057] Memory cgroup out of memory: Killed process 19057 (syz-executor.4) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1791.742136][ T28] oom_reaper: reaped process 19057 (syz-executor.4), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1792.498092][ T976] device hsr_slave_0 left promiscuous mode [ 1792.504384][ T976] device hsr_slave_1 left promiscuous mode [ 1792.510667][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.518226][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1792.526620][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1792.534154][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1792.542930][ T976] device bridge_slave_1 left promiscuous mode [ 1792.549323][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.558829][ T976] device bridge_slave_0 left promiscuous mode [ 1792.564993][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.575864][ T976] device veth1_macvtap left promiscuous mode [ 1792.582083][ T976] device veth0_macvtap left promiscuous mode [ 1792.588471][ T976] device veth1_vlan left promiscuous mode [ 1792.594284][ T976] device veth0_vlan left promiscuous mode [ 1792.794856][ T976] team0 (unregistering): Port device team_slave_1 removed [ 1792.814531][ T976] team0 (unregistering): Port device team_slave_0 removed [ 1792.833071][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.854397][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.955058][ T976] bond0 (unregistering): Released all slaves [ 1794.002030][T17007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1794.016668][T17007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1794.029683][T17007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1794.039010][T17007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1794.047076][ T976] device hsr_slave_0 left promiscuous mode [ 1794.047202][T17007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1794.053348][ T7812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1794.068484][ T976] device hsr_slave_1 left promiscuous mode [ 1794.074988][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.087763][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.097554][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.104953][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.117640][ T976] device bridge_slave_1 left promiscuous mode [ 1794.123790][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.132279][ T976] device bridge_slave_0 left promiscuous mode [ 1794.138924][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.152477][ T976] device veth1_macvtap left promiscuous mode [ 1794.159398][ T976] device veth0_macvtap left promiscuous mode [ 1794.165519][ T976] device veth1_vlan left promiscuous mode [ 1794.171523][ T976] device veth0_vlan left promiscuous mode [ 1794.315423][ T976] team0 (unregistering): Port device team_slave_1 removed [ 1794.335606][ T976] team0 (unregistering): Port device team_slave_0 removed [ 1794.349863][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.363423][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.421248][ T976] bond0 (unregistering): Released all slaves [ 1794.544131][T19108] chnl_net:caif_netlink_parms(): no params data found [ 1794.601289][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.608630][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.616272][T19108] device bridge_slave_0 entered promiscuous mode [ 1794.624897][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.632119][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.641918][T19108] device bridge_slave_1 entered promiscuous mode [ 1794.679906][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.693526][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.718625][T19108] team0: Port device team_slave_0 added [ 1794.725665][T19108] team0: Port device team_slave_1 added [ 1794.745565][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.752631][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.779759][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.793743][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.800880][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.827095][T13551] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1794.841938][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1794.921012][T19108] device hsr_slave_0 entered promiscuous mode [ 1794.930600][T19108] device hsr_slave_1 entered promiscuous mode [ 1795.137709][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.144824][T19108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.152236][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.159376][T19108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.206245][T19108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.219043][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1795.227474][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.234973][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.251026][T19108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.261524][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1795.270075][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.277208][T17407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.298080][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1795.306448][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.313541][T17407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.322242][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1795.331771][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1795.344441][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1795.352417][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1795.363758][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1795.374676][T19108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1795.394002][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1795.401676][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1795.413041][T19108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1795.627656][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1795.636407][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1795.646550][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1795.654924][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1795.664128][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1795.672001][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1795.681401][T19108] device veth0_vlan entered promiscuous mode [ 1795.695995][T19108] device veth1_vlan entered promiscuous mode [ 1795.714089][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1795.722408][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1795.730822][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1795.739492][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1795.749476][T19108] device veth0_macvtap entered promiscuous mode [ 1795.762339][T19108] device veth1_macvtap entered promiscuous mode [ 1795.775055][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1795.786039][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.796548][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1795.810432][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.821383][T19108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.832197][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1795.840645][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1795.849055][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1795.858128][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1795.869924][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1795.880642][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.890513][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1795.901230][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.912039][T19108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.920782][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1795.929829][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1795.983747][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.003849][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.013744][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.015157][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1796.022308][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.040800][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1796.077208][T16989] Bluetooth: hci2: command 0x0409 tx timeout [ 1796.344170][T19127] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1796.356155][T19127] CPU: 0 PID: 19127 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1796.366679][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.376744][T19127] Call Trace: [ 1796.380039][T19127] [ 1796.382987][T19127] dump_stack_lvl+0xcd/0x134 [ 1796.387610][T19127] dump_header+0x10b/0x7f9 [ 1796.392057][T19127] oom_kill_process.cold+0x10/0x15 [ 1796.397204][T19127] out_of_memory+0x358/0x14b0 [ 1796.401919][T19127] ? oom_killer_disable+0x270/0x270 [ 1796.407492][T19127] ? mark_held_locks+0x9f/0xe0 [ 1796.412288][T19127] mem_cgroup_out_of_memory+0x206/0x270 [ 1796.417858][T19127] ? mem_cgroup_margin+0x130/0x130 [ 1796.422986][T19127] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1796.429173][T19127] memory_max_write+0x25c/0x3b0 [ 1796.434036][T19127] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1796.440119][T19127] ? lock_release+0x720/0x720 [ 1796.444812][T19127] cgroup_file_write+0x1de/0x770 [ 1796.449762][T19127] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1796.455838][T19127] ? kill_css+0x370/0x370 [ 1796.460173][T19127] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1796.466432][T19127] ? kill_css+0x370/0x370 [ 1796.470768][T19127] kernfs_fop_write_iter+0x3f8/0x610 [ 1796.476064][T19127] new_sync_write+0x38a/0x560 [ 1796.480747][T19127] ? new_sync_read+0x5f0/0x5f0 [ 1796.485520][T19127] ? lock_release+0x720/0x720 [ 1796.490225][T19127] vfs_write+0x7c0/0xac0 [ 1796.494478][T19127] ksys_write+0x127/0x250 [ 1796.498815][T19127] ? __ia32_sys_read+0xb0/0xb0 [ 1796.503587][T19127] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1796.509502][T19127] do_syscall_64+0x35/0xb0 [ 1796.513948][T19127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1796.519865][T19127] RIP: 0033:0x7f716c2890e9 [ 1796.524381][T19127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1796.543998][T19127] RSP: 002b:00007f716d420168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1796.552418][T19127] RAX: ffffffffffffffda RBX: 00007f716c39bf60 RCX: 00007f716c2890e9 [ 1796.560391][T19127] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1796.568360][T19127] RBP: 00007f716c2e308d R08: 0000000000000000 R09: 0000000000000000 [ 1796.576340][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.584320][T19127] R13: 00007ffee0b8c54f R14: 00007f716d420300 R15: 0000000000022000 [ 1796.592322][T19127] [ 1796.634195][T19127] memory: usage 748kB, limit 0kB, failcnt 154 [ 1796.644844][T19127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1796.654147][T19127] Memory cgroup stats for /syz5: [ 1796.655604][T19127] anon 114688 [ 1796.655604][T19127] file 282624 [ 1796.655604][T19127] kernel 368640 [ 1796.655604][T19127] kernel_stack 65536 [ 1796.655604][T19127] pagetables 81920 [ 1796.655604][T19127] percpu 0 [ 1796.655604][T19127] sock 0 [ 1796.655604][T19127] vmalloc 0 [ 1796.655604][T19127] shmem 282624 [ 1796.655604][T19127] file_mapped 282624 [ 1796.655604][T19127] file_dirty 0 [ 1796.655604][T19127] file_writeback 0 [ 1796.655604][T19127] swapcached 0 [ 1796.655604][T19127] anon_thp 0 [ 1796.655604][T19127] file_thp 0 [ 1796.655604][T19127] shmem_thp 0 [ 1796.655604][T19127] inactive_anon 131072 [ 1796.655604][T19127] active_anon 266240 [ 1796.655604][T19127] inactive_file 0 [ 1796.655604][T19127] active_file 0 [ 1796.655604][T19127] unevictable 0 [ 1796.655604][T19127] slab_reclaimable 48912 [ 1796.655604][T19127] slab_unreclaimable 137048 [ 1796.655604][T19127] slab 185960 [ 1796.655604][T19127] workingset_refault_anon 0 [ 1796.655604][T19127] workingset_refault_file 15 [ 1796.755273][T19127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19108,uid=0 [ 1796.780224][T19127] Memory cgroup out of memory: Killed process 19108 (syz-executor.5) total-vm:50532kB, anon-rss:376kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1796.803928][ T28] oom_reaper: reaped process 19108 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1796.805181][T19127] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1796.833926][T19127] CPU: 1 PID: 19127 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1796.844417][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.854460][T19127] Call Trace: [ 1796.857724][T19127] [ 1796.860641][T19127] dump_stack_lvl+0xcd/0x134 [ 1796.865225][T19127] dump_header+0x10b/0x7f9 [ 1796.869638][T19127] oom_kill_process.cold+0x10/0x15 [ 1796.874739][T19127] out_of_memory+0x358/0x14b0 [ 1796.879420][T19127] ? oom_killer_disable+0x270/0x270 [ 1796.884612][T19127] ? io_schedule_timeout+0x140/0x140 [ 1796.889899][T19127] mem_cgroup_out_of_memory+0x206/0x270 [ 1796.895466][T19127] ? mem_cgroup_margin+0x130/0x130 [ 1796.900580][T19127] memory_max_write+0x25c/0x3b0 [ 1796.905417][T19127] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1796.911476][T19127] ? lock_release+0x720/0x720 [ 1796.916152][T19127] cgroup_file_write+0x1de/0x770 [ 1796.921096][T19127] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1796.927153][T19127] ? kill_css+0x370/0x370 [ 1796.931474][T19127] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1796.937718][T19127] ? kill_css+0x370/0x370 [ 1796.942147][T19127] kernfs_fop_write_iter+0x3f8/0x610 [ 1796.947428][T19127] new_sync_write+0x38a/0x560 [ 1796.952091][T19127] ? new_sync_read+0x5f0/0x5f0 [ 1796.956844][T19127] ? lock_release+0x720/0x720 [ 1796.961520][T19127] vfs_write+0x7c0/0xac0 [ 1796.965753][T19127] ksys_write+0x127/0x250 [ 1796.970068][T19127] ? __ia32_sys_read+0xb0/0xb0 [ 1796.974871][T19127] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1796.980753][T19127] do_syscall_64+0x35/0xb0 [ 1796.985157][T19127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1796.991130][T19127] RIP: 0033:0x7f716c2890e9 [ 1796.995552][T19127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1797.015495][T19127] RSP: 002b:00007f716d420168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1797.023895][T19127] RAX: ffffffffffffffda RBX: 00007f716c39bf60 RCX: 00007f716c2890e9 [ 1797.031854][T19127] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1797.039816][T19127] RBP: 00007f716c2e308d R08: 0000000000000000 R09: 0000000000000000 [ 1797.047793][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.055749][T19127] R13: 00007ffee0b8c54f R14: 00007f716d420300 R15: 0000000000022000 [ 1797.063727][T19127] [ 1797.077162][T19127] memory: usage 720kB, limit 0kB, failcnt 154 [ 1797.084192][T19127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1797.092260][T19127] Memory cgroup stats for /syz5: [ 1797.093429][T19127] anon 98304 [ 1797.093429][T19127] file 282624 [ 1797.093429][T19127] kernel 323584 [ 1797.093429][T19127] kernel_stack 32768 [ 1797.093429][T19127] pagetables 73728 [ 1797.093429][T19127] percpu 0 [ 1797.093429][T19127] sock 0 [ 1797.093429][T19127] vmalloc 0 [ 1797.093429][T19127] shmem 282624 [ 1797.093429][T19127] file_mapped 282624 [ 1797.093429][T19127] file_dirty 0 [ 1797.093429][T19127] file_writeback 0 [ 1797.093429][T19127] swapcached 0 [ 1797.093429][T19127] anon_thp 0 [ 1797.093429][T19127] file_thp 0 [ 1797.093429][T19127] shmem_thp 0 [ 1797.093429][T19127] inactive_anon 114688 [ 1797.093429][T19127] active_anon 266240 [ 1797.093429][T19127] inactive_file 0 [ 1797.093429][T19127] active_file 0 [ 1797.093429][T19127] unevictable 0 [ 1797.093429][T19127] slab_reclaimable 48912 [ 1797.093429][T19127] slab_unreclaimable 137048 [ 1797.093429][T19127] slab 185960 [ 1797.093429][T19127] workingset_refault_anon 0 [ 1797.093429][T19127] workingset_refault_file 15 [ 1797.199908][T19127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19126,uid=0 [ 1797.223484][T19127] Memory cgroup out of memory: Killed process 19127 (syz-executor.5) total-vm:54504kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:72kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1797.246103][ T28] oom_reaper: reaped process 19127 (syz-executor.5), now anon-rss:0kB, file-rss:8192kB, shmem-rss:16kB [ 1797.686619][ T7812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1797.697308][ T7812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1797.705559][ T7812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1797.715015][ T7812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1797.722669][ T7812] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1797.730093][ T7812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1797.822284][T19129] chnl_net:caif_netlink_parms(): no params data found [ 1797.875356][T19129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.882676][T19129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.890608][T19129] device bridge_slave_0 entered promiscuous mode [ 1797.905482][T19129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.912676][T19129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.921193][T19129] device bridge_slave_1 entered promiscuous mode [ 1797.953014][T19129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.963803][T19129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.995035][T19129] team0: Port device team_slave_0 added [ 1798.002418][T19129] team0: Port device team_slave_1 added [ 1798.021277][T19129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.028338][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.054689][T19129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.070859][T19129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.078250][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.105131][T19129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.137832][T19129] device hsr_slave_0 entered promiscuous mode [ 1798.144563][T19129] device hsr_slave_1 entered promiscuous mode [ 1798.151613][T19129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1798.159430][T19129] Cannot create hsr debugfs directory [ 1798.229515][T19129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.236610][T19129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.243996][T19129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.251131][T19129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.305160][T19129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.332686][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1798.342115][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.350398][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.374308][T19129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.387832][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1798.396273][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.403360][T17390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.415414][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1798.424230][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.431404][T16989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.468361][ T9330] device hsr_slave_0 left promiscuous mode [ 1798.474678][ T9330] device hsr_slave_1 left promiscuous mode [ 1798.482078][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1798.490297][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.499103][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.506509][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.515268][ T9330] device bridge_slave_1 left promiscuous mode [ 1798.524281][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.532806][ T9330] device bridge_slave_0 left promiscuous mode [ 1798.541913][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.554342][ T9330] device veth1_macvtap left promiscuous mode [ 1798.560816][ T9330] device veth0_macvtap left promiscuous mode [ 1798.567439][ T9330] device veth1_vlan left promiscuous mode [ 1798.573226][ T9330] device veth0_vlan left promiscuous mode [ 1798.729572][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1798.742588][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1798.758842][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.776091][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.837549][ T9330] bond0 (unregistering): Released all slaves [ 1798.901871][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1798.910835][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1798.919978][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1798.933122][T19129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1798.945797][T19129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1798.954417][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1798.963183][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1798.972247][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1798.998267][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1799.005792][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1799.014775][T19129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1799.312332][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1799.321923][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1799.333739][T19129] device veth0_vlan entered promiscuous mode [ 1799.341165][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1799.349635][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1799.358893][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1799.366482][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1799.380983][T19129] device veth1_vlan entered promiscuous mode [ 1799.397382][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1799.405273][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1799.413390][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1799.422192][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1799.434805][T19129] device veth0_macvtap entered promiscuous mode [ 1799.446322][T19129] device veth1_macvtap entered promiscuous mode [ 1799.462109][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1799.472886][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.483679][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1799.494209][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.505326][T19129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1799.513281][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1799.521451][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1799.529584][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1799.538172][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1799.550898][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1799.561531][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.571479][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1799.582334][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.593122][T19129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1799.600886][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1799.609651][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1799.664511][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.675419][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.693426][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.701763][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1799.702564][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.719548][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1799.758863][T19148] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1799.769439][T17390] Bluetooth: hci0: command 0x0409 tx timeout [ 1799.778466][T19148] CPU: 1 PID: 19148 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1799.788987][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.799036][T19148] Call Trace: [ 1799.802299][T19148] [ 1799.805216][T19148] dump_stack_lvl+0xcd/0x134 [ 1799.809805][T19148] dump_header+0x10b/0x7f9 [ 1799.814222][T19148] oom_kill_process.cold+0x10/0x15 [ 1799.819331][T19148] out_of_memory+0x358/0x14b0 [ 1799.824020][T19148] ? oom_killer_disable+0x270/0x270 [ 1799.829212][T19148] ? io_schedule_timeout+0x140/0x140 [ 1799.834498][T19148] mem_cgroup_out_of_memory+0x206/0x270 [ 1799.840043][T19148] ? mem_cgroup_margin+0x130/0x130 [ 1799.845160][T19148] memory_max_write+0x25c/0x3b0 [ 1799.850004][T19148] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1799.856070][T19148] ? lock_release+0x720/0x720 [ 1799.860748][T19148] cgroup_file_write+0x1de/0x770 [ 1799.865681][T19148] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1799.871743][T19148] ? kill_css+0x370/0x370 [ 1799.876075][T19148] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1799.882327][T19148] ? kill_css+0x370/0x370 [ 1799.886673][T19148] kernfs_fop_write_iter+0x3f8/0x610 [ 1799.891988][T19148] new_sync_write+0x38a/0x560 [ 1799.896688][T19148] ? new_sync_read+0x5f0/0x5f0 [ 1799.901479][T19148] ? lock_release+0x720/0x720 [ 1799.906537][T19148] vfs_write+0x7c0/0xac0 [ 1799.910806][T19148] ksys_write+0x127/0x250 [ 1799.915156][T19148] ? __ia32_sys_read+0xb0/0xb0 [ 1799.919934][T19148] ? syscall_enter_from_user_mode+0x21/0x70 [ 1799.925854][T19148] do_syscall_64+0x35/0xb0 [ 1799.930297][T19148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1799.936208][T19148] RIP: 0033:0x7f6d7aa890e9 [ 1799.940632][T19148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1799.960253][T19148] RSP: 002b:00007f6d7bbb0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1799.968685][T19148] RAX: ffffffffffffffda RBX: 00007f6d7ab9bf60 RCX: 00007f6d7aa890e9 [ 1799.976681][T19148] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1799.984663][T19148] RBP: 00007f6d7aae308d R08: 0000000000000000 R09: 0000000000000000 [ 1799.992650][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1800.000640][T19148] R13: 00007ffe552d4faf R14: 00007f6d7bbb0300 R15: 0000000000022000 [ 1800.008657][T19148] [ 1800.021831][T19148] memory: usage 568kB, limit 0kB, failcnt 180 [ 1800.028095][T19148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1800.034966][T19148] Memory cgroup stats for /syz1: [ 1800.035158][T19148] anon 114688 [ 1800.035158][T19148] file 139264 [ 1800.035158][T19148] kernel 327680 [ 1800.035158][T19148] kernel_stack 65536 [ 1800.035158][T19148] pagetables 77824 [ 1800.035158][T19148] percpu 0 [ 1800.035158][T19148] sock 0 [ 1800.035158][T19148] vmalloc 0 [ 1800.035158][T19148] shmem 139264 [ 1800.035158][T19148] file_mapped 135168 [ 1800.035158][T19148] file_dirty 0 [ 1800.035158][T19148] file_writeback 0 [ 1800.035158][T19148] swapcached 0 [ 1800.035158][T19148] anon_thp 0 [ 1800.035158][T19148] file_thp 0 [ 1800.035158][T19148] shmem_thp 0 [ 1800.035158][T19148] inactive_anon 94208 [ 1800.035158][T19148] active_anon 135168 [ 1800.035158][T19148] inactive_file 0 [ 1800.035158][T19148] active_file 0 [ 1800.035158][T19148] unevictable 0 [ 1800.035158][T19148] slab_reclaimable 45632 [ 1800.035158][T19148] slab_unreclaimable 103536 [ 1800.035158][T19148] slab 149168 [ 1800.035158][T19148] workingset_refault_anon 0 [ 1800.035158][T19148] workingset_refault_file 4 [ 1800.133769][T19148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19129,uid=0 [ 1800.152133][T19148] Memory cgroup out of memory: Killed process 19129 (syz-executor.1) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1800.173647][ T28] oom_reaper: reaped process 19129 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1800.185235][T19148] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1800.196433][T19148] CPU: 0 PID: 19148 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1800.206947][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.217003][T19148] Call Trace: [ 1800.220267][T19148] [ 1800.223184][T19148] dump_stack_lvl+0xcd/0x134 [ 1800.227767][T19148] dump_header+0x10b/0x7f9 [ 1800.232175][T19148] oom_kill_process.cold+0x10/0x15 [ 1800.237279][T19148] out_of_memory+0x358/0x14b0 [ 1800.241967][T19148] ? oom_killer_disable+0x270/0x270 [ 1800.247163][T19148] ? io_schedule_timeout+0x140/0x140 [ 1800.252466][T19148] mem_cgroup_out_of_memory+0x206/0x270 [ 1800.258037][T19148] ? mem_cgroup_margin+0x130/0x130 [ 1800.263151][T19148] memory_max_write+0x25c/0x3b0 [ 1800.267990][T19148] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1800.274050][T19148] ? lock_release+0x720/0x720 [ 1800.278739][T19148] cgroup_file_write+0x1de/0x770 [ 1800.283724][T19148] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1800.289779][T19148] ? kill_css+0x370/0x370 [ 1800.294094][T19148] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1800.300338][T19148] ? kill_css+0x370/0x370 [ 1800.304679][T19148] kernfs_fop_write_iter+0x3f8/0x610 [ 1800.309991][T19148] new_sync_write+0x38a/0x560 [ 1800.314674][T19148] ? new_sync_read+0x5f0/0x5f0 [ 1800.319450][T19148] ? lock_release+0x720/0x720 [ 1800.324155][T19148] vfs_write+0x7c0/0xac0 [ 1800.328407][T19148] ksys_write+0x127/0x250 [ 1800.332742][T19148] ? __ia32_sys_read+0xb0/0xb0 [ 1800.337510][T19148] ? syscall_enter_from_user_mode+0x21/0x70 [ 1800.343415][T19148] do_syscall_64+0x35/0xb0 [ 1800.347843][T19148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1800.353747][T19148] RIP: 0033:0x7f6d7aa890e9 [ 1800.358169][T19148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1800.377777][T19148] RSP: 002b:00007f6d7bbb0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1800.386194][T19148] RAX: ffffffffffffffda RBX: 00007f6d7ab9bf60 RCX: 00007f6d7aa890e9 [ 1800.394164][T19148] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1800.402138][T19148] RBP: 00007f6d7aae308d R08: 0000000000000000 R09: 0000000000000000 [ 1800.410823][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1800.419187][T19148] R13: 00007ffe552d4faf R14: 00007f6d7bbb0300 R15: 0000000000022000 [ 1800.427180][T19148] [ 1800.443644][T19148] memory: usage 540kB, limit 0kB, failcnt 180 [ 1800.449895][T19148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1800.456979][T19148] Memory cgroup stats for /syz1: [ 1800.457145][T19148] anon 98304 [ 1800.457145][T19148] file 139264 [ 1800.457145][T19148] kernel 282624 [ 1800.457145][T19148] kernel_stack 32768 [ 1800.457145][T19148] pagetables 69632 [ 1800.457145][T19148] percpu 0 [ 1800.457145][T19148] sock 0 [ 1800.457145][T19148] vmalloc 0 [ 1800.457145][T19148] shmem 139264 [ 1800.457145][T19148] file_mapped 135168 [ 1800.457145][T19148] file_dirty 0 [ 1800.457145][T19148] file_writeback 0 [ 1800.457145][T19148] swapcached 0 [ 1800.457145][T19148] anon_thp 0 [ 1800.457145][T19148] file_thp 0 [ 1800.457145][T19148] shmem_thp 0 [ 1800.457145][T19148] inactive_anon 102400 [ 1800.457145][T19148] active_anon 135168 [ 1800.457145][T19148] inactive_file 0 [ 1800.457145][T19148] active_file 0 [ 1800.457145][T19148] unevictable 0 [ 1800.457145][T19148] slab_reclaimable 45632 [ 1800.457145][T19148] slab_unreclaimable 103536 [ 1800.457145][T19148] slab 149168 [ 1800.457145][T19148] workingset_refault_anon 0 [ 1800.457145][T19148] workingset_refault_file 4 [ 1800.556472][T19148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19147,uid=0 [ 1800.573706][T19148] Memory cgroup out of memory: Killed process 19148 (syz-executor.1) total-vm:54504kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1800.592599][ T28] oom_reaper: reaped process 19148 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:20kB 14:32:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) openat$cgroup_devices(r4, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async, rerun: 32) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x5, 0x3}, {0x5, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x57}, @fwd={0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x29, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000280)=""/83, 0x8a, 0x53, 0x1}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xf, 0xffff6761, 0x0, 0x2, 0x55, r3, 0x80, '\x00', r6, r5, 0x4, 0x15, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) 14:32:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:35 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000097184af5c79ccd21000000000000180000000000000000fa86c43cf42d8a187a26861c6ca00500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe4f}, 0x80) (async) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async, rerun: 64) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x3, &(0x7f0000000440)=""/2, 0x2}, 0x102) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000001c0)="313c62b3833ace63e179a4611dda0385f9dfb4ff97eebf9b9060054154090495c747f52bcbf0b8519989819aa936702915739532e3a27177062832e40c6d634d1557a0dbd7694e7a215061deebd320be2fa9986775b2014cfb96defd19aae9e9ae92f31424e7d88ef40c4076f4eac0e38e73a5439d444eba92b8ac370cfce9b35e757499301414562e3b42c10b95fbde691c737410c38027652e80e038", &(0x7f0000000740)=""/4096}, 0x20) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r5, &(0x7f0000002b00)={&(0x7f0000000580)=@xdp={0x2c, 0x3, r6, 0xd}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000600)="f04631501d6954323df40dfb8b182fbee68901e1cd5bcd307b067c72a629782401ba9dd7f851259c1ecfb3bbeb33d25bc27e7a2de76758118b96b5eeb3c16ed324890ef427fc75c0017890d72a3aec158aef1f342d87ae29e07bf269b9926dadfe23ba7caf9e65da699a5e8680fb", 0x6e}, {&(0x7f0000000680)="a651a63d833fa077a021890ccb5a785a215c0447523d", 0x16}, {&(0x7f0000002740)="906797013cdfb0e6c802efc0b8f36ec64ea23fe8d8d00655195bfdf9d02be49fbf5bd4e4243f30379807a3d30d9605737971439612", 0x35}, {&(0x7f0000002780)="ad422c068ae27f8a34fca58a8aea76b4314078611845248f8f500969c926b6991ab39d37b0609c9df244df0d78271156b9fa641d4a0895f49f9c689d3fb579647fbe16130cbdcf76c21ba6f9fe4604fa22f4d67cd4457d708e1def38b68bcc7151252d600ec9f0f65b0e1294f0d24c2a38f1a551db10c402b99acf2acbf8a070adf175858e431fdf0c0ed9aac5c20d1156cacaca9d8c79a7021d999d18aaf835a528fa11630090e7c84ecf269ae4c93c5b13d56aa2fe8ac8596e2f46564d", 0xbe}, {&(0x7f0000002840)="5cec75f4bfe7bc4934c0f0ac4e8be2f0d45c5168f66c72c26167f67706bad922ece41f255972e0300159f29f8ca27ebfbeb492550dd864929fce836f28d481ee28b00a4457e75ac322c719a9f86ee9ea5eed282125cecc57663a8a8fe82f72aaf826df563dc28d7b47fe853cddbc65dccc4a43959d78eae3cb5f281973c7f64722470460c9ac4eb9f7279d2d4fdd9c4cf27715197ef783b347a6e890a7d5c5852815ec52ffa3413007cd60489bff6656366d38fd5e", 0xb5}], 0x5, &(0x7f0000002980)=[{0x78, 0x0, 0x651cff3c, "6d4c2d646b300a983023e1eeb6c6c4e09e7bd426db19b5083e6273331efddb8187a38e36c85bff33fa167283c742de070c596e77474a9c9f67135464fa06c0ce3d8344a202a118cc73999cc344867f559dabfcf52ec4d0d89ad618d0d211696efc4aed9b"}, {0x58, 0x10d, 0x5, "06d5644ae993c69f9eb05dfa6e5d1a6dbfa737eb129b373585ce26282cacefaabcf708e4cfee2192031acaee32b02bd6fa5a5f33ef6777693fcff8749ab8dfd2c5041030bb30d755"}, {0x50, 0x11, 0x8, "3845b7b0846849aa60fdebf5549a663c25c0fd8d3aa6710e8bde79f902f799092c8058d231d3075c0705fd892e31768e339239709686ff35191af36e1e"}, {0x50, 0x6, 0x400, "778d120fc350fb040ab5cba320aa6e18ee3af4fa74953aa2ba21ce24221eb02b3338f008647a4c0fa492c7ec542870841f43d3929032d5621b6c03681997"}], 0x170}, 0x20004080) 14:32:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) 14:32:36 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000097184af5c79ccd21000000000000180000000000000000fa86c43cf42d8a187a26861c6ca00500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe4f}, 0x80) (async) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x3, &(0x7f0000000440)=""/2, 0x2}, 0x102) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000001c0)="313c62b3833ace63e179a4611dda0385f9dfb4ff97eebf9b9060054154090495c747f52bcbf0b8519989819aa936702915739532e3a27177062832e40c6d634d1557a0dbd7694e7a215061deebd320be2fa9986775b2014cfb96defd19aae9e9ae92f31424e7d88ef40c4076f4eac0e38e73a5439d444eba92b8ac370cfce9b35e757499301414562e3b42c10b95fbde691c737410c38027652e80e038", &(0x7f0000000740)=""/4096}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r5, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r5, &(0x7f0000002b00)={&(0x7f0000000580)=@xdp={0x2c, 0x3, r6, 0xd}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000600)="f04631501d6954323df40dfb8b182fbee68901e1cd5bcd307b067c72a629782401ba9dd7f851259c1ecfb3bbeb33d25bc27e7a2de76758118b96b5eeb3c16ed324890ef427fc75c0017890d72a3aec158aef1f342d87ae29e07bf269b9926dadfe23ba7caf9e65da699a5e8680fb", 0x6e}, {&(0x7f0000000680)="a651a63d833fa077a021890ccb5a785a215c0447523d", 0x16}, {&(0x7f0000002740)="906797013cdfb0e6c802efc0b8f36ec64ea23fe8d8d00655195bfdf9d02be49fbf5bd4e4243f30379807a3d30d9605737971439612", 0x35}, {&(0x7f0000002780)="ad422c068ae27f8a34fca58a8aea76b4314078611845248f8f500969c926b6991ab39d37b0609c9df244df0d78271156b9fa641d4a0895f49f9c689d3fb579647fbe16130cbdcf76c21ba6f9fe4604fa22f4d67cd4457d708e1def38b68bcc7151252d600ec9f0f65b0e1294f0d24c2a38f1a551db10c402b99acf2acbf8a070adf175858e431fdf0c0ed9aac5c20d1156cacaca9d8c79a7021d999d18aaf835a528fa11630090e7c84ecf269ae4c93c5b13d56aa2fe8ac8596e2f46564d", 0xbe}, {&(0x7f0000002840)="5cec75f4bfe7bc4934c0f0ac4e8be2f0d45c5168f66c72c26167f67706bad922ece41f255972e0300159f29f8ca27ebfbeb492550dd864929fce836f28d481ee28b00a4457e75ac322c719a9f86ee9ea5eed282125cecc57663a8a8fe82f72aaf826df563dc28d7b47fe853cddbc65dccc4a43959d78eae3cb5f281973c7f64722470460c9ac4eb9f7279d2d4fdd9c4cf27715197ef783b347a6e890a7d5c5852815ec52ffa3413007cd60489bff6656366d38fd5e", 0xb5}], 0x5, &(0x7f0000002980)=[{0x78, 0x0, 0x651cff3c, "6d4c2d646b300a983023e1eeb6c6c4e09e7bd426db19b5083e6273331efddb8187a38e36c85bff33fa167283c742de070c596e77474a9c9f67135464fa06c0ce3d8344a202a118cc73999cc344867f559dabfcf52ec4d0d89ad618d0d211696efc4aed9b"}, {0x58, 0x10d, 0x5, "06d5644ae993c69f9eb05dfa6e5d1a6dbfa737eb129b373585ce26282cacefaabcf708e4cfee2192031acaee32b02bd6fa5a5f33ef6777693fcff8749ab8dfd2c5041030bb30d755"}, {0x50, 0x11, 0x8, "3845b7b0846849aa60fdebf5549a663c25c0fd8d3aa6710e8bde79f902f799092c8058d231d3075c0705fd892e31768e339239709686ff35191af36e1e"}, {0x50, 0x6, 0x400, "778d120fc350fb040ab5cba320aa6e18ee3af4fa74953aa2ba21ce24221eb02b3338f008647a4c0fa492c7ec542870841f43d3929032d5621b6c03681997"}], 0x170}, 0x20004080) 14:32:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r2, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) (async, rerun: 32) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async, rerun: 32) openat$cgroup_devices(r4, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async, rerun: 64) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x5, 0x3}, {0x5, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x57}, @fwd={0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x29, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000280)=""/83, 0x8a, 0x53, 0x1}, 0x20) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (rerun: 64) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xf, 0xffff6761, 0x0, 0x2, 0x55, r3, 0x80, '\x00', r6, r5, 0x4, 0x15, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) 14:32:36 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x41000, 0x10, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x8, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) 14:32:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000009153ef5dcd8b0000e8391c18d6b192a34ca8060c93a52283343b4739fc", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r3, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r2, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x0, 0x9, 0x4, 0xfffffffffffffffc, 0x1}, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @generic={0x9, 0xa, 0x5, 0xc3, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xe25, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x19, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0xd454, 0x6}, 0x10, r2, r5}, 0x80) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) 14:32:36 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x41000, 0x10, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x8, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x41000, 0x10, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x8, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) (async) 14:32:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000009153ef5dcd8b0000e8391c18d6b192a34ca8060c93a52283343b4739fc", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r3, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r2, r4}, 0x78) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x0, 0x9, 0x4, 0xfffffffffffffffc, 0x1}, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @generic={0x9, 0xa, 0x5, 0xc3, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xe25, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x19, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0xd454, 0x6}, 0x10, r2, r5}, 0x80) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) [ 1801.555443][ T6993] device hsr_slave_0 left promiscuous mode [ 1801.561852][ T6993] device hsr_slave_1 left promiscuous mode [ 1801.570349][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1801.577904][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.586391][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1801.594149][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.603365][ T6993] device bridge_slave_1 left promiscuous mode [ 1801.609703][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.618820][ T6993] device bridge_slave_0 left promiscuous mode [ 1801.624974][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.639158][ T6993] device veth1_macvtap left promiscuous mode [ 1801.645165][ T6993] device veth0_macvtap left promiscuous mode [ 1801.651696][ T6993] device veth1_vlan left promiscuous mode [ 1801.659612][ T6993] device veth0_vlan left promiscuous mode [ 1801.808378][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 1801.822500][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 1801.834765][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.851777][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.913096][ T6993] bond0 (unregistering): Released all slaves [ 1803.682142][T15874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1803.694907][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1803.695514][T15874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1803.703380][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1803.713465][T15874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1803.718078][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1803.724674][T15874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1803.731430][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1803.741056][T15874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1803.752370][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1803.756117][T15874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1803.775481][T15874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1803.784842][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1803.784945][T15874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1803.800264][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1803.808841][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1803.818142][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1803.831332][T19196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1803.972367][T19192] chnl_net:caif_netlink_parms(): no params data found [ 1804.020528][T19190] chnl_net:caif_netlink_parms(): no params data found [ 1804.091725][T19191] chnl_net:caif_netlink_parms(): no params data found [ 1804.127162][T19192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.134245][T19192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.142351][T19192] device bridge_slave_0 entered promiscuous mode [ 1804.165811][T19192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.174485][T19192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.184642][T19192] device bridge_slave_1 entered promiscuous mode [ 1804.216298][T19190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.223509][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.232466][T19190] device bridge_slave_0 entered promiscuous mode [ 1804.254206][T19190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.261368][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.269815][T19190] device bridge_slave_1 entered promiscuous mode [ 1804.279237][T19192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.307709][T19192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.317134][T19191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.324179][T19191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.333124][T19191] device bridge_slave_0 entered promiscuous mode [ 1804.357856][T19190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.367102][T19191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.374255][T19191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.383175][T19191] device bridge_slave_1 entered promiscuous mode [ 1804.398504][T19190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.430411][T19192] team0: Port device team_slave_0 added [ 1804.455421][T19191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.467658][T19191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.478969][T19192] team0: Port device team_slave_1 added [ 1804.489223][T19190] team0: Port device team_slave_0 added [ 1804.511506][T19190] team0: Port device team_slave_1 added [ 1804.547737][T19190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.554704][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.580838][T19190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.600606][T19191] team0: Port device team_slave_0 added [ 1804.606951][T19192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.613891][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.646917][T19192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.662570][T19190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.669832][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.696142][T19190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.709351][T19191] team0: Port device team_slave_1 added [ 1804.715342][T19192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.723122][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.749398][T19192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.805999][T19190] device hsr_slave_0 entered promiscuous mode [ 1804.812873][T19190] device hsr_slave_1 entered promiscuous mode [ 1804.826124][T19191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.834303][T19191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.860361][T19191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.875156][T19192] device hsr_slave_0 entered promiscuous mode [ 1804.882278][T19192] device hsr_slave_1 entered promiscuous mode [ 1804.889370][T19192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1804.897235][T19192] Cannot create hsr debugfs directory [ 1804.907445][T19191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.914396][T19191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.941540][T19191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.025547][T19191] device hsr_slave_0 entered promiscuous mode [ 1805.032931][T19191] device hsr_slave_1 entered promiscuous mode [ 1805.040144][T19191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1805.047971][T19191] Cannot create hsr debugfs directory [ 1805.299132][T19190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.321997][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.335926][T19190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.348409][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.356097][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.367056][ T7812] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1805.425506][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.432635][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1805.441646][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.458340][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.465447][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.479976][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.491634][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.510526][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.517662][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.557198][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1805.566072][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.597911][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.605743][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.637870][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1805.653466][T19191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.736532][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.746625][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.761856][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1805.771000][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.783100][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1805.791847][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.800705][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.807887][T17390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.815702][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.824300][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.832914][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.836961][T16993] Bluetooth: hci4: command 0x0409 tx timeout [ 1805.840009][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.854009][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1805.862643][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1805.872365][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.880782][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1805.889559][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.902861][T19190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1805.911129][T17407] Bluetooth: hci2: command 0x0409 tx timeout [ 1805.917020][T16993] Bluetooth: hci5: command 0x0409 tx timeout [ 1805.925675][T19191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.937200][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1805.944943][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1805.953735][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.961991][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.970135][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.979326][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.988686][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.998106][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1806.015638][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1806.024115][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1806.032579][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1806.041154][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.050088][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1806.058851][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.073301][T19192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1806.100566][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1806.109411][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1806.118587][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.125624][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.134660][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1806.143266][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1806.152136][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.159252][T16993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.167335][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1806.183882][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1806.191950][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1806.199447][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1806.214208][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1806.222980][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1806.232418][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1806.244160][T19190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.251624][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1806.284622][T19192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.297048][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1806.314754][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1806.325637][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1806.342396][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.354172][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1806.362070][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1806.377803][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1806.397430][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.407823][T19191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1806.448805][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1806.456280][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1806.471763][T19191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.874986][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1806.897633][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.944552][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1806.960493][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.988650][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1806.996806][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1807.006262][T19190] device veth0_vlan entered promiscuous mode [ 1807.025431][T19190] device veth1_vlan entered promiscuous mode [ 1807.052830][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1807.066086][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1807.151044][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1807.165319][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1807.187925][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1807.196026][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1807.205025][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1807.213813][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1807.227451][T19190] device veth0_macvtap entered promiscuous mode [ 1807.234768][T19192] device veth0_vlan entered promiscuous mode [ 1807.242625][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1807.253843][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1807.261737][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1807.272977][T19190] device veth1_macvtap entered promiscuous mode [ 1807.286620][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1807.298625][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1807.307579][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1807.316441][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1807.324972][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1807.333602][T19191] device veth0_vlan entered promiscuous mode [ 1807.349099][T19191] device veth1_vlan entered promiscuous mode [ 1807.360067][T19192] device veth1_vlan entered promiscuous mode [ 1807.373440][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.384483][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.395461][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.406238][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.418987][T19190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.434162][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1807.445110][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.455379][T19190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1807.466968][T19190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.481857][T19190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.490510][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1807.498865][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1807.507347][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1807.515278][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1807.524211][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1807.533662][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1807.542710][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1807.578855][T19191] device veth0_macvtap entered promiscuous mode [ 1807.586017][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1807.594148][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1807.606551][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1807.616247][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1807.641519][T19191] device veth1_macvtap entered promiscuous mode [ 1807.653697][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1807.662222][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1807.672868][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1807.682958][T19192] device veth0_macvtap entered promiscuous mode [ 1807.716546][T19192] device veth1_macvtap entered promiscuous mode [ 1807.748977][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.760015][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.770517][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.781561][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.791805][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.802657][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.815646][T19191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.835078][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1807.843619][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1807.852479][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1807.861593][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1807.872683][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1807.884363][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.894239][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1807.904916][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.914770][T19191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1807.917273][ T3710] Bluetooth: hci4: command 0x041b tx timeout [ 1807.925633][T19191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.942517][T19191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.961154][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.972019][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.982311][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1807.993056][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.996974][ T3710] Bluetooth: hci5: command 0x041b tx timeout [ 1808.004620][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1808.009373][ T3710] Bluetooth: hci2: command 0x041b tx timeout [ 1808.026513][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.036645][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1808.050227][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.061352][T19192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.068923][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1808.082538][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1808.091749][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1808.101167][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1808.116414][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1808.121902][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.133413][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.134994][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.146075][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1808.164616][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.176885][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1808.188013][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.197958][T19192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1808.208971][T19192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.220249][T19192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.240297][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1808.253647][T19196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1808.262417][T19196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1808.270577][T19196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1808.278488][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1808.278943][T19196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1808.287980][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1808.294822][T19196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1808.309886][T19196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1808.356247][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.374525][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.429556][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1808.506255][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.531228][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.574002][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1808.667940][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.676122][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.694126][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.721618][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.775177][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1808.819079][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1808.837141][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.845266][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.863758][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1808.889387][T19246] chnl_net:caif_netlink_parms(): no params data found [ 1808.991915][T19254] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1809.002765][T19254] CPU: 1 PID: 19254 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1809.013287][T19254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.023353][T19254] Call Trace: [ 1809.026640][T19254] [ 1809.029579][T19254] dump_stack_lvl+0xcd/0x134 [ 1809.034208][T19254] dump_header+0x10b/0x7f9 [ 1809.038654][T19254] oom_kill_process.cold+0x10/0x15 [ 1809.043798][T19254] out_of_memory+0x358/0x14b0 [ 1809.048504][T19254] ? oom_killer_disable+0x270/0x270 [ 1809.053728][T19254] ? find_held_lock+0x2d/0x110 [ 1809.058507][T19254] mem_cgroup_out_of_memory+0x206/0x270 [ 1809.064066][T19254] ? mem_cgroup_margin+0x130/0x130 [ 1809.069205][T19254] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1809.075028][T19254] memory_max_write+0x25c/0x3b0 [ 1809.079978][T19254] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1809.086073][T19254] ? lock_release+0x720/0x720 [ 1809.090855][T19254] cgroup_file_write+0x1de/0x770 [ 1809.095802][T19254] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1809.101884][T19254] ? kill_css+0x370/0x370 [ 1809.106219][T19254] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1809.112487][T19254] ? kill_css+0x370/0x370 [ 1809.116827][T19254] kernfs_fop_write_iter+0x3f8/0x610 [ 1809.122134][T19254] new_sync_write+0x38a/0x560 [ 1809.126903][T19254] ? new_sync_read+0x5f0/0x5f0 [ 1809.131694][T19254] ? lock_release+0x720/0x720 [ 1809.136424][T19254] vfs_write+0x7c0/0xac0 [ 1809.140692][T19254] ksys_write+0x127/0x250 [ 1809.145029][T19254] ? __ia32_sys_read+0xb0/0xb0 [ 1809.149817][T19254] ? syscall_enter_from_user_mode+0x21/0x70 [ 1809.155742][T19254] do_syscall_64+0x35/0xb0 [ 1809.160186][T19254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1809.166112][T19254] RIP: 0033:0x7f03f14890e9 [ 1809.170548][T19254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1809.190170][T19254] RSP: 002b:00007f03f253a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1809.198596][T19254] RAX: ffffffffffffffda RBX: 00007f03f159bf60 RCX: 00007f03f14890e9 [ 1809.206569][T19254] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1809.214539][T19254] RBP: 00007f03f14e308d R08: 0000000000000000 R09: 0000000000000000 [ 1809.222509][T19254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1809.230476][T19254] R13: 00007fffb689473f R14: 00007f03f253a300 R15: 0000000000022000 [ 1809.238467][T19254] [ 1809.303192][T19254] memory: usage 688kB, limit 0kB, failcnt 180 [ 1809.313305][T19254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1809.324696][T19254] Memory cgroup stats for /syz1: [ 1809.329373][T19254] anon 114688 [ 1809.329373][T19254] file 139264 [ 1809.329373][T19254] kernel 450560 [ 1809.329373][T19254] kernel_stack 65536 [ 1809.329373][T19254] pagetables 77824 [ 1809.329373][T19254] percpu 0 [ 1809.329373][T19254] sock 0 [ 1809.329373][T19254] vmalloc 0 [ 1809.329373][T19254] shmem 139264 [ 1809.329373][T19254] file_mapped 135168 [ 1809.329373][T19254] file_dirty 0 [ 1809.329373][T19254] file_writeback 0 [ 1809.329373][T19254] swapcached 0 [ 1809.329373][T19254] anon_thp 0 [ 1809.329373][T19254] file_thp 0 [ 1809.329373][T19254] shmem_thp 0 [ 1809.329373][T19254] inactive_anon 53248 [ 1809.329373][T19254] active_anon 135168 [ 1809.329373][T19254] inactive_file 0 [ 1809.329373][T19254] active_file 0 [ 1809.329373][T19254] unevictable 0 [ 1809.329373][T19254] slab_reclaimable 83616 [ 1809.329373][T19254] slab_unreclaimable 192048 [ 1809.329373][T19254] slab 275664 [ 1809.329373][T19254] workingset_refault_anon 0 [ 1809.329373][T19254] workingset_refault_file 4 [ 1809.444003][T19254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19192,uid=0 [ 1809.461074][T19254] Memory cgroup out of memory: Killed process 19192 (syz-executor.1) total-vm:50532kB, anon-rss:372kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1809.483957][ T28] oom_reaper: reaped process 19192 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1809.487468][T19254] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1809.506086][T19254] CPU: 0 PID: 19254 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1809.516617][T19254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.526807][T19254] Call Trace: [ 1809.530089][T19254] [ 1809.533006][T19254] dump_stack_lvl+0xcd/0x134 [ 1809.537592][T19254] dump_header+0x10b/0x7f9 [ 1809.542004][T19254] oom_kill_process.cold+0x10/0x15 [ 1809.547120][T19254] out_of_memory+0x358/0x14b0 [ 1809.551824][T19254] ? oom_killer_disable+0x270/0x270 [ 1809.557042][T19254] ? io_schedule_timeout+0x140/0x140 [ 1809.562359][T19254] mem_cgroup_out_of_memory+0x206/0x270 [ 1809.567934][T19254] ? mem_cgroup_margin+0x130/0x130 [ 1809.573100][T19254] memory_max_write+0x25c/0x3b0 [ 1809.577976][T19254] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1809.584063][T19254] ? lock_release+0x720/0x720 [ 1809.588764][T19254] cgroup_file_write+0x1de/0x770 [ 1809.593712][T19254] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1809.599789][T19254] ? kill_css+0x370/0x370 [ 1809.604136][T19254] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1809.610395][T19254] ? kill_css+0x370/0x370 [ 1809.614731][T19254] kernfs_fop_write_iter+0x3f8/0x610 [ 1809.620031][T19254] new_sync_write+0x38a/0x560 [ 1809.624718][T19254] ? new_sync_read+0x5f0/0x5f0 [ 1809.629495][T19254] ? lock_release+0x720/0x720 [ 1809.634201][T19254] vfs_write+0x7c0/0xac0 [ 1809.638456][T19254] ksys_write+0x127/0x250 [ 1809.642786][T19254] ? __ia32_sys_read+0xb0/0xb0 [ 1809.647558][T19254] ? syscall_enter_from_user_mode+0x21/0x70 [ 1809.653464][T19254] do_syscall_64+0x35/0xb0 [ 1809.657886][T19254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1809.663787][T19254] RIP: 0033:0x7f03f14890e9 [ 1809.668202][T19254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1809.687812][T19254] RSP: 002b:00007f03f253a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1809.696230][T19254] RAX: ffffffffffffffda RBX: 00007f03f159bf60 RCX: 00007f03f14890e9 [ 1809.704200][T19254] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1809.712175][T19254] RBP: 00007f03f14e308d R08: 0000000000000000 R09: 0000000000000000 [ 1809.720142][T19254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1809.728108][T19254] R13: 00007fffb689473f R14: 00007f03f253a300 R15: 0000000000022000 [ 1809.736101][T19254] [ 1809.752359][T19254] memory: usage 656kB, limit 0kB, failcnt 180 [ 1809.757661][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.758713][T19246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.766851][T19254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1809.785366][T19246] device bridge_slave_0 entered promiscuous mode [ 1809.789915][T19254] Memory cgroup stats for /syz1: [ 1809.791918][T19254] anon 94208 [ 1809.791918][T19254] file 139264 [ 1809.791918][T19254] kernel 405504 [ 1809.791918][T19254] kernel_stack 32768 [ 1809.791918][T19254] pagetables 69632 [ 1809.791918][T19254] percpu 0 [ 1809.791918][T19254] sock 0 [ 1809.791918][T19254] vmalloc 0 [ 1809.791918][T19254] shmem 139264 [ 1809.791918][T19254] file_mapped 135168 [ 1809.791918][T19254] file_dirty 0 [ 1809.791918][T19254] file_writeback 0 [ 1809.791918][T19254] swapcached 0 [ 1809.791918][T19254] anon_thp 0 [ 1809.791918][T19254] file_thp 0 [ 1809.791918][T19254] shmem_thp 0 [ 1809.791918][T19254] inactive_anon 81920 [ 1809.791918][T19254] active_anon 135168 [ 1809.791918][T19254] inactive_file 0 [ 1809.791918][T19254] active_file 0 [ 1809.791918][T19254] unevictable 0 [ 1809.791918][T19254] slab_reclaimable 83616 [ 1809.791918][T19254] slab_unreclaimable 192048 [ 1809.791918][T19254] slab 275664 [ 1809.791918][T19254] workingset_refault_anon 0 [ 1809.791918][T19254] workingset_refault_file 4 [ 1809.812147][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.899561][T19254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19253,uid=0 [ 1809.909286][T19246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.915856][T19254] Memory cgroup out of memory: Killed process 19254 (syz-executor.1) total-vm:54504kB, anon-rss:424kB, file-rss:8888kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1809.939014][T19246] device bridge_slave_1 entered promiscuous mode [ 1809.942473][ T28] oom_reaper: reaped process 19254 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:20kB [ 1809.960153][T19190] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 1809.971398][T19190] CPU: 0 PID: 19190 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1809.981915][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.991967][T19190] Call Trace: [ 1809.995239][T19190] [ 1809.998167][T19190] dump_stack_lvl+0xcd/0x134 [ 1810.002771][T19190] dump_header+0x10b/0x7f9 [ 1810.007197][T19190] oom_kill_process.cold+0x10/0x15 [ 1810.012316][T19190] out_of_memory+0x358/0x14b0 [ 1810.017001][T19190] ? find_held_lock+0x2d/0x110 [ 1810.021771][T19190] ? oom_killer_disable+0x270/0x270 [ 1810.026980][T19190] ? find_held_lock+0x2d/0x110 [ 1810.031756][T19190] mem_cgroup_out_of_memory+0x206/0x270 [ 1810.037309][T19190] ? mem_cgroup_margin+0x130/0x130 [ 1810.042426][T19190] ? lock_downgrade+0x6e0/0x6e0 [ 1810.047301][T19190] try_charge_memcg+0xef9/0x1380 [ 1810.052247][T19190] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1810.058232][T19190] ? rcu_read_unlock+0x9/0x60 [ 1810.062915][T19190] ? lock_downgrade+0x6e0/0x6e0 [ 1810.067786][T19190] obj_cgroup_charge+0x334/0x700 [ 1810.072732][T19190] ? kvmalloc_node+0x3e/0x130 [ 1810.077411][T19190] __kmalloc_node+0xa7/0x390 [ 1810.082113][T19190] kvmalloc_node+0x3e/0x130 [ 1810.086616][T19190] xt_alloc_table_info+0x3c/0xa0 [ 1810.091565][T19190] do_ip6t_set_ctl+0x500/0xb90 [ 1810.096338][T19190] ? __mutex_lock+0x21a/0x12f0 [ 1810.101113][T19190] ? compat_do_replace.constprop.0+0x470/0x470 [ 1810.107279][T19190] ? __lock_acquire+0x163e/0x56c0 [ 1810.112309][T19190] ? wait_for_completion_io_timeout+0x20/0x20 [ 1810.118400][T19190] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1810.124388][T19190] nf_setsockopt+0x83/0xe0 [ 1810.128811][T19190] ipv6_setsockopt+0x122/0x180 [ 1810.133587][T19190] tcp_setsockopt+0x136/0x2520 [ 1810.138362][T19190] ? tcp_sock_set_keepidle+0x40/0x40 [ 1810.143659][T19190] ? aa_sk_perm+0x30f/0xaa0 [ 1810.148163][T19190] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1810.154238][T19190] ? aa_af_perm+0x230/0x230 [ 1810.158752][T19190] ? sock_common_setsockopt+0x2b/0x100 [ 1810.164218][T19190] __sys_setsockopt+0x2db/0x6a0 [ 1810.169070][T19190] ? sock_common_recvmsg+0x1a0/0x1a0 [ 1810.174359][T19190] ? __ia32_sys_recv+0x100/0x100 [ 1810.179320][T19190] __x64_sys_setsockopt+0xba/0x150 [ 1810.184429][T19190] ? syscall_enter_from_user_mode+0x21/0x70 [ 1810.190324][T19190] do_syscall_64+0x35/0xb0 [ 1810.194744][T19190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1810.200638][T19190] RIP: 0033:0x7f77d0a8a73a [ 1810.205051][T19190] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1810.224656][T19190] RSP: 002b:00007ffc4f1d72b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1810.233066][T19190] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f77d0a8a73a [ 1810.241035][T19190] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1810.249003][T19190] RBP: 00007ffc4f1d72e0 R08: 00000000000003b8 R09: ff00000000000000 [ 1810.256970][T19190] R10: 00007f77d0b69bc0 R11: 0000000000000206 R12: 00007ffc4f1d7340 [ 1810.264941][T19190] R13: 0000000000000003 R14: 00007ffc4f1d72dc R15: 00007f77d0b69b60 [ 1810.272931][T19190] [ 1810.278405][T16001] Bluetooth: hci4: command 0x040f tx timeout [ 1810.297671][T16001] Bluetooth: hci2: command 0x040f tx timeout [ 1810.303986][T16001] Bluetooth: hci5: command 0x040f tx timeout [ 1810.309932][T19190] memory: usage 528kB, limit 0kB, failcnt 173 [ 1810.324682][T19246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.337013][T19190] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1810.345052][T19190] Memory cgroup stats for /syz5: [ 1810.345253][T19190] anon 40960 [ 1810.345253][T19190] file 282624 [ 1810.345253][T19190] kernel 217088 [ 1810.345253][T19190] kernel_stack 0 [ 1810.345253][T19190] pagetables 8192 [ 1810.345253][T19190] percpu 0 [ 1810.345253][T19190] sock 0 [ 1810.345253][T19190] vmalloc 0 [ 1810.345253][T19190] shmem 282624 [ 1810.345253][T19190] file_mapped 282624 [ 1810.345253][T19190] file_dirty 0 [ 1810.345253][T19190] file_writeback 0 [ 1810.345253][T19190] swapcached 0 [ 1810.345253][T19190] anon_thp 0 [ 1810.345253][T19190] file_thp 0 [ 1810.345253][T19190] shmem_thp 0 [ 1810.345253][T19190] inactive_anon 57344 [ 1810.345253][T19190] active_anon 266240 [ 1810.345253][T19190] inactive_file 0 [ 1810.345253][T19190] active_file 0 [ 1810.345253][T19190] unevictable 0 [ 1810.345253][T19190] slab_reclaimable 68848 [ 1810.345253][T19190] slab_unreclaimable 130800 [ 1810.345253][T19190] slab 199648 [ 1810.345253][T19190] workingset_refault_anon 0 [ 1810.345253][T19190] workingset_refault_file 15 [ 1810.397302][ T3710] Bluetooth: hci0: command 0x0409 tx timeout [ 1810.442273][T19190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19190,uid=0 [ 1810.463056][T19190] Memory cgroup out of memory: Killed process 19190 (syz-executor.5) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1810.482318][T19191] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 1810.483541][ T28] oom_reaper: reaped process 19190 (syz-executor.5), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1810.499428][T19191] CPU: 1 PID: 19191 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1810.514633][T19191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.524700][T19191] Call Trace: [ 1810.527981][T19191] [ 1810.530921][T19191] dump_stack_lvl+0xcd/0x134 [ 1810.535556][T19191] dump_header+0x10b/0x7f9 [ 1810.539998][T19191] oom_kill_process.cold+0x10/0x15 [ 1810.545129][T19191] out_of_memory+0x358/0x14b0 [ 1810.549819][T19191] ? find_held_lock+0x2d/0x110 [ 1810.554597][T19191] ? oom_killer_disable+0x270/0x270 [ 1810.559809][T19191] ? find_held_lock+0x2d/0x110 [ 1810.564589][T19191] mem_cgroup_out_of_memory+0x206/0x270 [ 1810.570144][T19191] ? mem_cgroup_margin+0x130/0x130 [ 1810.575261][T19191] ? lock_downgrade+0x6e0/0x6e0 [ 1810.580131][T19191] try_charge_memcg+0xef9/0x1380 [ 1810.585079][T19191] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1810.591069][T19191] ? rcu_read_unlock+0x9/0x60 [ 1810.595751][T19191] ? lock_downgrade+0x6e0/0x6e0 [ 1810.600619][T19191] obj_cgroup_charge+0x334/0x700 [ 1810.605576][T19191] ? kvmalloc_node+0x3e/0x130 [ 1810.610266][T19191] __kmalloc_node+0xa7/0x390 [ 1810.614885][T19191] kvmalloc_node+0x3e/0x130 [ 1810.619413][T19191] xt_alloc_table_info+0x3c/0xa0 [ 1810.624379][T19191] do_ipt_set_ctl+0x500/0xb80 [ 1810.629080][T19191] ? __mutex_lock+0x21a/0x12f0 [ 1810.633868][T19191] ? compat_do_replace.constprop.0+0x470/0x470 [ 1810.640041][T19191] ? wait_for_completion_io_timeout+0x20/0x20 [ 1810.646135][T19191] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1810.652124][T19191] nf_setsockopt+0x83/0xe0 [ 1810.656548][T19191] ip_setsockopt+0x3c3/0x3ab0 [ 1810.661235][T19191] ? ip_sock_set_tos+0x30/0x30 [ 1810.666001][T19191] ? lock_chain_count+0x20/0x20 [ 1810.670859][T19191] ? aa_profile_af_perm+0x2e0/0x2e0 [ 1810.676082][T19191] ? find_held_lock+0x2d/0x110 [ 1810.680855][T19191] ? do_wp_page+0xbcb/0x2030 [ 1810.685451][T19191] ? tcp_setsockopt+0x136/0x2520 [ 1810.690392][T19191] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1810.696634][T19191] tcp_setsockopt+0x136/0x2520 [ 1810.701412][T19191] ? tcp_sock_set_keepidle+0x40/0x40 [ 1810.706716][T19191] ? aa_sk_perm+0x30f/0xaa0 [ 1810.711226][T19191] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1810.717224][T19191] ? aa_af_perm+0x230/0x230 [ 1810.721739][T19191] ? sock_common_setsockopt+0x2b/0x100 [ 1810.727224][T19191] __sys_setsockopt+0x2db/0x6a0 [ 1810.732088][T19191] ? sock_common_recvmsg+0x1a0/0x1a0 [ 1810.737378][T19191] ? __ia32_sys_recv+0x100/0x100 [ 1810.742339][T19191] __x64_sys_setsockopt+0xba/0x150 [ 1810.747456][T19191] ? syscall_enter_from_user_mode+0x21/0x70 [ 1810.753352][T19191] do_syscall_64+0x35/0xb0 [ 1810.757773][T19191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1810.763680][T19191] RIP: 0033:0x7f315ae8a73a [ 1810.768099][T19191] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1810.787707][T19191] RSP: 002b:00007fff226932f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1810.796124][T19191] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f315ae8a73a [ 1810.804093][T19191] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1810.812061][T19191] RBP: 00007fff22693320 R08: 0000000000000240 R09: fefefeff646b666d [ 1810.820054][T19191] R10: 00007f315af6d1c0 R11: 0000000000000202 R12: 00007fff22693380 [ 1810.828041][T19191] R13: 0000000000000003 R14: 00007fff2269331c R15: 00007f315af6d160 [ 1810.836029][T19191] [ 1810.875389][T19191] memory: usage 336kB, limit 0kB, failcnt 199 [ 1810.882017][T19191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1810.900083][T19191] Memory cgroup stats for /syz0: [ 1810.900249][T19191] anon 40960 [ 1810.900249][T19191] file 94208 [ 1810.900249][T19191] kernel 208896 [ 1810.900249][T19191] kernel_stack 0 [ 1810.900249][T19191] pagetables 8192 [ 1810.900249][T19191] percpu 0 [ 1810.900249][T19191] sock 0 [ 1810.900249][T19191] vmalloc 0 [ 1810.900249][T19191] shmem 94208 [ 1810.900249][T19191] file_mapped 86016 [ 1810.900249][T19191] file_dirty 0 [ 1810.900249][T19191] file_writeback 0 [ 1810.900249][T19191] swapcached 0 [ 1810.900249][T19191] anon_thp 0 [ 1810.900249][T19191] file_thp 0 [ 1810.900249][T19191] shmem_thp 0 [ 1810.900249][T19191] inactive_anon 36864 [ 1810.900249][T19191] active_anon 94208 [ 1810.900249][T19191] inactive_file 0 [ 1810.900249][T19191] active_file 0 [ 1810.900249][T19191] unevictable 0 [ 1810.900249][T19191] slab_reclaimable 68312 [ 1810.900249][T19191] slab_unreclaimable 120344 [ 1810.900249][T19191] slab 188656 [ 1810.900249][T19191] workingset_refault_anon 0 [ 1810.900249][T19191] workingset_refault_file 8 [ 1810.907331][T19246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.004171][T19191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19191,uid=0 14:32:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:46 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x41000, 0x10, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x8, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x41000, 0x10, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x9, 0x8, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) (async) 14:32:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000009153ef5dcd8b0000e8391c18d6b192a34ca8060c93a52283343b4739fc", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can={0x1d, 0x0}, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r3, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r2, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x0, 0x9, 0x4, 0xfffffffffffffffc, 0x1}, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @generic={0x9, 0xa, 0x5, 0xc3, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xe25, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x19, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0xd454, 0x6}, 0x10, r2, r5}, 0x80) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000009153ef5dcd8b0000e8391c18d6b192a34ca8060c93a52283343b4739fc", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f000000be00)={&(0x7f000000a940)=@can, 0x80, &(0x7f000000bd40)=[{0x0}, {&(0x7f000000aa40)=""/34, 0x22}, {0x0}], 0x3, &(0x7f000000bdc0)=""/26, 0x1a}, 0x2000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000c040)=@bpf_lsm={0x1d, 0x3, &(0x7f000000bec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x631}}, &(0x7f000000bf00)='syzkaller\x00', 0x8001, 0x55, &(0x7f0000001540)=""/85, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f000000bfc0), 0x8, 0x10, &(0x7f000000c000)={0x0, 0x7, 0x0, 0x81}, 0x10, r2}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f000000c0c0)={0x1e, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f00000013c0)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x1a, '\x00', r3, 0x21, 0xffffffffffffffff, 0x8, &(0x7f000000be40)={0x2, 0x3}, 0x8, 0x10, &(0x7f000000be80)={0x0, 0x4, 0x0, 0xf0d2}, 0x10, r2, r4}, 0x78) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x9, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x0, 0x9, 0x4, 0xfffffffffffffffc, 0x1}, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @generic={0x9, 0xa, 0x5, 0xc3, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xe25, 0xa1, &(0x7f00000001c0)=""/161, 0x41100, 0x19, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0xd454, 0x6}, 0x10, r2, r5}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r7}, 0xc) (async) 14:32:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1811.004458][T19191] Memory cgroup out of memory: Killed process 19191 (syz-executor.0) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1811.057110][ T28] oom_reaper: reaped process 19191 (syz-executor.0), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1811.321572][T19246] team0: Port device team_slave_0 added [ 1811.396840][T19246] team0: Port device team_slave_1 added [ 1811.433736][T19246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.442050][T19246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.469746][T19246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.490123][T19246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.497177][T19246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.524190][T19246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.564043][T19246] device hsr_slave_0 entered promiscuous mode [ 1811.571287][T19246] device hsr_slave_1 entered promiscuous mode [ 1811.578023][T19246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1811.586297][T19246] Cannot create hsr debugfs directory [ 1811.711176][T19246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.725901][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1811.734752][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1811.753451][T19246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.775804][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1811.785043][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1811.794078][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.801249][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.809259][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1811.818452][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1811.826893][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.833959][T16993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.841841][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1811.851519][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1811.877294][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1811.887593][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1811.896494][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1811.906159][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1811.925853][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1811.939687][T19246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1811.952041][T19246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1811.960630][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1811.993028][T19246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.003487][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1812.011491][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1812.132333][ T8] device hsr_slave_0 left promiscuous mode [ 1812.139276][ T8] device hsr_slave_1 left promiscuous mode [ 1812.145783][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1812.155330][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1812.166614][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1812.176052][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1812.185907][ T8] device bridge_slave_1 left promiscuous mode [ 1812.192739][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.202895][ T8] device bridge_slave_0 left promiscuous mode [ 1812.209520][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.222992][ T8] device veth1_macvtap left promiscuous mode [ 1812.229351][ T8] device veth0_macvtap left promiscuous mode [ 1812.235600][ T8] device veth1_vlan left promiscuous mode [ 1812.242009][ T8] device veth0_vlan left promiscuous mode [ 1812.429882][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1812.446168][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1812.459326][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1812.473521][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1812.547338][ T8] bond0 (unregistering): Released all slaves [ 1812.761252][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1812.770843][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1812.779870][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1812.788544][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1812.798489][T19246] device veth0_vlan entered promiscuous mode [ 1812.811692][T19246] device veth1_vlan entered promiscuous mode [ 1812.825648][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1812.833789][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1812.842245][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1812.864312][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1812.872858][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1812.877723][T16001] Bluetooth: hci0: command 0x041b tx timeout [ 1812.882319][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1812.899436][T19246] device veth0_macvtap entered promiscuous mode [ 1812.910230][T19246] device veth1_macvtap entered promiscuous mode [ 1812.929077][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1812.939850][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.950250][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1812.962227][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.973061][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1812.983829][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.993848][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.004724][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.015926][T19246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.025139][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1813.033236][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1813.041926][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1813.050550][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1813.068974][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1813.079622][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.091265][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1813.103463][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.114895][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1813.126308][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.136289][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1813.147023][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.158836][T19246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.169881][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1813.178811][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1813.256636][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.278742][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.287730][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.295901][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.309866][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1813.322458][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:32:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) 14:32:48 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="60476f380fb53bbe9f779472ac5c52c6e7156845da36d25fc071f91044a397c0e04ae012b40050ade6b432fe4d0d84d0a4b69be6470c2a615ac94ad0ef60d5cadec0e7350b45471dfb0a51a18b20465928200430243c32d3856b48b8bb22701d9582903eb80a5cf0f1e073fc274159ec02e40e", &(0x7f0000000040)=""/30, &(0x7f00000001c0)="6e1356bc60f38fdadbcf7ecae3724b70a47b64f3c5349da0f6a289a6cf37a9a93a4cdf492b9bf7781582259850f9314ba1e9fbeea1b80bafa5700434c6ab6814efa71a25ecac7fa57dfa49ca97", &(0x7f0000000240)="fdcdccb67456122bda15955fb28a6bf969028a2534046747a783989946bc91dd6528fee933dc7756ba963a4eb588087a10be6ea9bb29ac156aed94c24c89028f7594dd8b7ddf2c37b0427442c581dfdf49e5ac61e6514d3b7d500bfffc04f681df2125447c93a0245a96efb747c83d010f24b71e90e11661d68bfe02b30f937bf1902228a80616d5a8836f0c5fb4b5193c93cc069b4198e1cf7f65dca8e3edc4574d771c5d05de7c219302599c9510eff5170efd30a33080dcd2ab5c", 0x8000, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x3, 0xfffffff9, 0x2, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xd, 0x400, 0x4, 0x0, 0x4, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x9, 0xc, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x2, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000640)='GPL\x00', 0x8c, 0x49, &(0x7f0000000740)=""/73, 0x41000, 0x0, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0xcbc, 0x9}, 0x10, 0x0, r1, 0x0, &(0x7f0000000b80)=[r6]}, 0x80) 14:32:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffda, 0x7, 0x4, 0x4c0, r2, 0xe, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xe}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r4}, 0xc) 14:32:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, &(0x7f0000000240), 0x12) 14:32:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffda, 0x7, 0x4, 0x4c0, r2, 0xe, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xe}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r4}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffda, 0x7, 0x4, 0x4c0, r2, 0xe, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xe}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r4}, 0xc) (async) 14:32:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, &(0x7f0000000240), 0x12) 14:32:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffda, 0x7, 0x4, 0x4c0, r2, 0xe, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xe}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r4}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffda, 0x7, 0x4, 0x4c0, r2, 0xe, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xe}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r4}, 0xc) (async) 14:32:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, &(0x7f0000000240), 0x12) 14:32:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:49 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810000006e9deeb9f38d01b53c2acf90c6327714ba715697184372890f96260e4b137f2fa8d2476f600000120000000008571c16e3f88bf9795666aa1328657de1d4e65fb6f78db0d7e826ab84f50cc1fe6b57833b342af12075666b4850ca23cb32dcf15e388a875faca78a0c8a9be3ea5dd2f3b8fc35b17aeaf0e0313dc838814a73c3d00ec3acbdc03e8daaba760ef7afb5805d8337ffd5e23d6d740b95b3a95534031fe950af239c0f08824a0cb4c95bda6e5fff1f44517ed79ed2aa5f8", @ANYRES16=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000240)=""/21, 0x15, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2159760400000000009801fd1aca36c70c2662c5b7bd404b00"/46], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x1e, r5, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8000, 0x1}, 0x10, r3, r6}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x9, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x3c, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x8}, 0x10, r3, r4, 0x0, &(0x7f0000000580)=[r8]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:32:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:49 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="60476f380fb53bbe9f779472ac5c52c6e7156845da36d25fc071f91044a397c0e04ae012b40050ade6b432fe4d0d84d0a4b69be6470c2a615ac94ad0ef60d5cadec0e7350b45471dfb0a51a18b20465928200430243c32d3856b48b8bb22701d9582903eb80a5cf0f1e073fc274159ec02e40e", &(0x7f0000000040)=""/30, &(0x7f00000001c0)="6e1356bc60f38fdadbcf7ecae3724b70a47b64f3c5349da0f6a289a6cf37a9a93a4cdf492b9bf7781582259850f9314ba1e9fbeea1b80bafa5700434c6ab6814efa71a25ecac7fa57dfa49ca97", &(0x7f0000000240)="fdcdccb67456122bda15955fb28a6bf969028a2534046747a783989946bc91dd6528fee933dc7756ba963a4eb588087a10be6ea9bb29ac156aed94c24c89028f7594dd8b7ddf2c37b0427442c581dfdf49e5ac61e6514d3b7d500bfffc04f681df2125447c93a0245a96efb747c83d010f24b71e90e11661d68bfe02b30f937bf1902228a80616d5a8836f0c5fb4b5193c93cc069b4198e1cf7f65dca8e3edc4574d771c5d05de7c219302599c9510eff5170efd30a33080dcd2ab5c", 0x8000, r0}, 0x38) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x3, 0xfffffff9, 0x2, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xd, 0x400, 0x4, 0x0, 0x4, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x9, 0xc, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x2, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000640)='GPL\x00', 0x8c, 0x49, &(0x7f0000000740)=""/73, 0x41000, 0x0, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0xcbc, 0x9}, 0x10, 0x0, r1, 0x0, &(0x7f0000000b80)=[r6]}, 0x80) [ 1814.956854][T16989] Bluetooth: hci0: command 0x040f tx timeout [ 1815.156467][ T8] device hsr_slave_0 left promiscuous mode [ 1815.163488][ T8] device hsr_slave_1 left promiscuous mode [ 1815.170779][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.178613][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1815.187597][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.194982][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.205746][ T8] device bridge_slave_1 left promiscuous mode [ 1815.212041][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.220362][ T8] device bridge_slave_0 left promiscuous mode [ 1815.226638][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.241945][ T8] device hsr_slave_0 left promiscuous mode [ 1815.249074][ T8] device hsr_slave_1 left promiscuous mode [ 1815.255400][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.264300][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1815.274172][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.281773][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.292319][ T8] device bridge_slave_1 left promiscuous mode [ 1815.298868][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.310302][ T8] device bridge_slave_0 left promiscuous mode [ 1815.316470][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.332155][ T8] device veth1_macvtap left promiscuous mode [ 1815.338289][ T8] device veth0_macvtap left promiscuous mode [ 1815.344372][ T8] device veth1_vlan left promiscuous mode [ 1815.350663][ T8] device veth0_vlan left promiscuous mode [ 1815.358019][ T8] device veth1_macvtap left promiscuous mode [ 1815.364071][ T8] device veth0_macvtap left promiscuous mode [ 1815.370387][ T8] device veth1_vlan left promiscuous mode [ 1815.376168][ T8] device veth0_vlan left promiscuous mode [ 1815.849551][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1815.869302][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1815.885490][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.902154][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.965610][ T8] bond0 (unregistering): Released all slaves [ 1816.114787][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1816.128736][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1816.141336][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1816.158231][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.239782][ T8] bond0 (unregistering): Released all slaves [ 1816.897517][T15874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1816.897654][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1816.912418][T15874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1816.921317][T15874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1816.921393][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1816.930106][T15874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1816.939787][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1816.943209][T15874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1816.949917][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1816.956775][T15874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1816.968898][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1816.983547][T15874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1817.046895][T16989] Bluetooth: hci0: command 0x0419 tx timeout [ 1817.104823][T19336] chnl_net:caif_netlink_parms(): no params data found [ 1817.182342][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.189888][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.199047][T19336] device bridge_slave_0 entered promiscuous mode [ 1817.208075][T19337] chnl_net:caif_netlink_parms(): no params data found [ 1817.224996][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.232864][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.241408][T19336] device bridge_slave_1 entered promiscuous mode [ 1817.275463][T19336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.294895][T19336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.343500][T19336] team0: Port device team_slave_0 added [ 1817.351504][T19336] team0: Port device team_slave_1 added [ 1817.357955][T19337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.365031][T19337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.373061][T19337] device bridge_slave_0 entered promiscuous mode [ 1817.388919][T19337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.396049][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.405766][T19337] device bridge_slave_1 entered promiscuous mode [ 1817.434736][T19336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.441962][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.467992][T19336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.485504][T19337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.495392][T19336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.502798][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.529191][T19336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.545370][T19337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.583695][T19336] device hsr_slave_0 entered promiscuous mode [ 1817.595075][T19336] device hsr_slave_1 entered promiscuous mode [ 1817.616408][T19337] team0: Port device team_slave_0 added [ 1817.626128][T19337] team0: Port device team_slave_1 added [ 1817.664319][T19337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.671355][T19337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.698035][T19337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.711172][T19337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.718189][T19337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.744379][T19337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.787958][T19337] device hsr_slave_0 entered promiscuous mode [ 1817.794570][T19337] device hsr_slave_1 entered promiscuous mode [ 1817.801389][T19337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1817.809410][T19337] Cannot create hsr debugfs directory [ 1817.935736][T19337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.942832][T19337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.992365][T19336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.017357][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.029020][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1818.036665][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1818.046674][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.061725][T19337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.082634][T19337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.090303][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1818.102267][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1818.110938][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1818.119710][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.126854][T17401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.134499][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1818.142577][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1818.153169][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1818.161874][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1818.170549][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1818.179340][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.186403][T17401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.206100][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1818.214842][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1818.224619][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1818.234525][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1818.242790][T19196] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1818.253065][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1818.261923][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1818.270393][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.277525][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.285709][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1818.308158][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1818.327573][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1818.342773][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1818.353548][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.360699][T17401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.404053][T19336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1818.425695][T19336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.453377][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1818.469290][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1818.482011][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1818.504274][T19337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1818.523383][T19337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.547466][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1818.555245][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1818.570689][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1818.583480][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1818.594717][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1818.609555][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1818.622247][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1818.631120][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1818.664349][T19336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.674878][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1818.683195][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1818.690994][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1818.705011][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1818.722229][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1818.737885][T19337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.041544][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1819.047310][T16989] Bluetooth: hci5: command 0x0409 tx timeout [ 1819.052384][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1819.055738][T16989] Bluetooth: hci4: command 0x0409 tx timeout [ 1819.076123][T19336] device veth0_vlan entered promiscuous mode [ 1819.086372][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1819.102417][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1819.117552][T19336] device veth1_vlan entered promiscuous mode [ 1819.130908][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1819.139967][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1819.148237][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1819.156331][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1819.177371][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1819.185981][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1819.199359][T19336] device veth0_macvtap entered promiscuous mode [ 1819.210280][T19336] device veth1_macvtap entered promiscuous mode [ 1819.231325][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.242072][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.255919][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.266660][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.276581][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.287207][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.298744][T19336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.306303][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1819.315299][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1819.323440][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1819.332409][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1819.341239][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1819.351538][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1819.370426][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.381376][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.391659][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.402747][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.413035][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.424021][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.435112][T19336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.446568][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1819.456127][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1819.471210][T19337] device veth0_vlan entered promiscuous mode [ 1819.481093][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1819.489847][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1819.499139][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1819.507359][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1819.521430][T19337] device veth1_vlan entered promiscuous mode [ 1819.593042][T19337] device veth0_macvtap entered promiscuous mode [ 1819.608594][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1819.616507][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1819.628573][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1819.637751][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1819.648859][T19337] device veth1_macvtap entered promiscuous mode [ 1819.660658][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.669634][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1819.678503][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1819.696228][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.711264][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.722687][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.736554][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.753470][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.763484][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.774059][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.783992][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1819.794506][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.805987][T19337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.823596][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1819.834858][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1819.844203][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1819.864011][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.880272][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.890890][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.901397][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.911590][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.922266][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.932216][T19337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1819.942651][T19337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.953642][T19337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.968105][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1819.976602][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1819.996124][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.007195][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.026503][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1820.100481][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.113056][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.135181][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1820.153345][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.163052][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.176480][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1820.747253][T19375] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1820.761780][T19375] CPU: 1 PID: 19375 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1820.772323][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.782395][T19375] Call Trace: [ 1820.785680][T19375] [ 1820.788617][T19375] dump_stack_lvl+0xcd/0x134 [ 1820.793236][T19375] dump_header+0x10b/0x7f9 [ 1820.797682][T19375] oom_kill_process.cold+0x10/0x15 [ 1820.802835][T19375] out_of_memory+0x358/0x14b0 [ 1820.807543][T19375] ? oom_killer_disable+0x270/0x270 [ 1820.812772][T19375] ? mark_held_locks+0x9f/0xe0 [ 1820.817570][T19375] mem_cgroup_out_of_memory+0x206/0x270 [ 1820.823143][T19375] ? mem_cgroup_margin+0x130/0x130 [ 1820.828293][T19375] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1820.834120][T19375] memory_max_write+0x25c/0x3b0 [ 1820.839012][T19375] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1820.845092][T19375] ? lock_release+0x720/0x720 [ 1820.849800][T19375] cgroup_file_write+0x1de/0x770 [ 1820.854753][T19375] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1820.860827][T19375] ? kill_css+0x370/0x370 [ 1820.865164][T19375] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1820.871461][T19375] ? kill_css+0x370/0x370 [ 1820.875799][T19375] kernfs_fop_write_iter+0x3f8/0x610 [ 1820.881100][T19375] new_sync_write+0x38a/0x560 [ 1820.885793][T19375] ? new_sync_read+0x5f0/0x5f0 [ 1820.890569][T19375] ? lock_release+0x720/0x720 [ 1820.895282][T19375] vfs_write+0x7c0/0xac0 [ 1820.899536][T19375] ksys_write+0x127/0x250 [ 1820.903873][T19375] ? __ia32_sys_read+0xb0/0xb0 [ 1820.908648][T19375] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1820.914554][T19375] do_syscall_64+0x35/0xb0 [ 1820.918978][T19375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1820.924884][T19375] RIP: 0033:0x7f5c276890e9 [ 1820.929326][T19375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1820.948938][T19375] RSP: 002b:00007f5c288b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1820.957358][T19375] RAX: ffffffffffffffda RBX: 00007f5c2779bf60 RCX: 00007f5c276890e9 [ 1820.965332][T19375] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1820.973303][T19375] RBP: 00007f5c276e308d R08: 0000000000000000 R09: 0000000000000000 [ 1820.981275][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.989766][T19375] R13: 00007ffd6d2d117f R14: 00007f5c288b6300 R15: 0000000000022000 [ 1820.997769][T19375] [ 1821.022141][T19375] memory: usage 652kB, limit 0kB, failcnt 180 [ 1821.031194][T19375] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1821.046971][T19375] Memory cgroup stats for /syz1: [ 1821.047159][T19375] anon 114688 [ 1821.047159][T19375] file 139264 [ 1821.047159][T19375] kernel 413696 [ 1821.047159][T19375] kernel_stack 65536 [ 1821.047159][T19375] pagetables 81920 [ 1821.047159][T19375] percpu 0 [ 1821.047159][T19375] sock 0 [ 1821.047159][T19375] vmalloc 0 [ 1821.047159][T19375] shmem 139264 [ 1821.047159][T19375] file_mapped 135168 [ 1821.047159][T19375] file_dirty 0 [ 1821.047159][T19375] file_writeback 0 [ 1821.047159][T19375] swapcached 0 [ 1821.047159][T19375] anon_thp 0 [ 1821.047159][T19375] file_thp 0 [ 1821.047159][T19375] shmem_thp 0 [ 1821.047159][T19375] inactive_anon 118784 [ 1821.047159][T19375] active_anon 135168 [ 1821.047159][T19375] inactive_file 0 [ 1821.047159][T19375] active_file 0 [ 1821.047159][T19375] unevictable 0 [ 1821.047159][T19375] slab_reclaimable 56352 [ 1821.047159][T19375] slab_unreclaimable 177568 [ 1821.047159][T19375] slab 233920 [ 1821.047159][T19375] workingset_refault_anon 0 [ 1821.047159][T19375] workingset_refault_file 4 [ 1821.145626][T16989] Bluetooth: hci4: command 0x041b tx timeout [ 1821.152081][T19375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19336,uid=0 [ 1821.153192][T16989] Bluetooth: hci5: command 0x041b tx timeout [ 1821.175085][T19375] Memory cgroup out of memory: Killed process 19336 (syz-executor.1) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1821.194398][ T28] oom_reaper: reaped process 19336 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1821.205797][T19337] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1821.216251][T19337] CPU: 1 PID: 19337 Comm: syz-executor.5 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1821.226780][T19337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1821.236833][T19337] Call Trace: [ 1821.240099][T19337] [ 1821.243180][T19337] dump_stack_lvl+0xcd/0x134 [ 1821.247937][T19337] dump_header+0x10b/0x7f9 [ 1821.252355][T19337] oom_kill_process.cold+0x10/0x15 [ 1821.257461][T19337] out_of_memory+0x358/0x14b0 [ 1821.262135][T19337] ? find_held_lock+0x2d/0x110 [ 1821.267080][T19337] ? oom_killer_disable+0x270/0x270 [ 1821.272313][T19337] ? find_held_lock+0x2d/0x110 [ 1821.277098][T19337] mem_cgroup_out_of_memory+0x206/0x270 [ 1821.282664][T19337] ? mem_cgroup_margin+0x130/0x130 [ 1821.287794][T19337] ? lock_downgrade+0x6e0/0x6e0 [ 1821.292651][T19337] try_charge_memcg+0xef9/0x1380 [ 1821.297711][T19337] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1821.303694][T19337] ? rcu_read_unlock+0x9/0x60 [ 1821.308365][T19337] ? lock_downgrade+0x6e0/0x6e0 [ 1821.313214][T19337] obj_cgroup_charge+0x334/0x700 [ 1821.318290][T19337] kmem_cache_alloc_lru+0x143/0x720 [ 1821.323518][T19337] ? ext4_alloc_inode+0x24/0x650 [ 1821.328497][T19337] ? ext4_free_in_core_inode+0x70/0x70 [ 1821.333978][T19337] ext4_alloc_inode+0x24/0x650 [ 1821.338773][T19337] ? ext4_free_in_core_inode+0x70/0x70 [ 1821.344224][T19337] alloc_inode+0x61/0x230 [ 1821.348548][T19337] iget_locked+0x1cc/0x740 [ 1821.352956][T19337] __ext4_iget+0x3a1/0x4160 [ 1821.357455][T19337] ? ext4_get_projid+0x190/0x190 [ 1821.362381][T19337] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1821.367939][T19337] ? kfree+0x1ed/0x4d0 [ 1821.372030][T19337] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.378288][T19337] ? d_alloc_parallel+0x9af/0x1af0 [ 1821.383411][T19337] ext4_lookup+0x383/0x730 [ 1821.387826][T19337] ? ext4_resetent+0x2d0/0x2d0 [ 1821.392589][T19337] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1821.398589][T19337] ? find_held_lock+0x2d/0x110 [ 1821.403381][T19337] ? lockdep_init_map_type+0x21a/0x7f0 [ 1821.408840][T19337] __lookup_slow+0x24c/0x480 [ 1821.413420][T19337] ? page_get_link+0x7b0/0x7b0 [ 1821.418191][T19337] ? batadv_iv_gw_dump+0x140/0xd50 [ 1821.423330][T19337] ? batadv_iv_gw_dump+0x140/0xd50 [ 1821.428433][T19337] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1821.434671][T19337] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.440897][T19337] ? link_path_walk.part.0+0x154/0xf70 [ 1821.446346][T19337] walk_component+0x40f/0x6a0 [ 1821.451013][T19337] ? handle_dots.part.0+0x15e0/0x15e0 [ 1821.456375][T19337] ? debug_check_no_obj_freed+0x20c/0x420 [ 1821.462109][T19337] ? walk_component+0x6a0/0x6a0 [ 1821.466966][T19337] path_lookupat+0x1bb/0x860 [ 1821.471579][T19337] filename_lookup+0x1c6/0x590 [ 1821.476362][T19337] ? may_linkat+0x500/0x500 [ 1821.480877][T19337] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1821.487108][T19337] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1821.492818][T19337] ? __check_object_size+0x16c/0x4f0 [ 1821.498098][T19337] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1821.504325][T19337] ? strncpy_from_user+0x287/0x3c0 [ 1821.509429][T19337] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.515664][T19337] ? getname_flags.part.0+0x1dd/0x4f0 [ 1821.521051][T19337] user_path_at_empty+0x42/0x60 [ 1821.525964][T19337] __x64_sys_umount+0xf8/0x180 [ 1821.530745][T19337] ? path_umount+0x1260/0x1260 [ 1821.535505][T19337] ? syscall_enter_from_user_mode+0x21/0x70 [ 1821.541394][T19337] do_syscall_64+0x35/0xb0 [ 1821.545904][T19337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1821.551792][T19337] RIP: 0033:0x7ff62248a557 [ 1821.556197][T19337] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1821.575797][T19337] RSP: 002b:00007ffede1ac718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1821.584197][T19337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff62248a557 [ 1821.592154][T19337] RDX: 00007ffede1ac7ee RSI: 000000000000000a RDI: 00007ffede1ac7e0 [ 1821.600405][T19337] RBP: 00007ffede1ac7e0 R08: 00000000ffffffff R09: 00007ffede1ac5b0 [ 1821.608429][T19337] R10: 0000555555c1a8e3 R11: 0000000000000246 R12: 00007ff6224e21f8 [ 1821.616385][T19337] R13: 00007ffede1ad8a0 R14: 0000555555c1a810 R15: 00007ffede1ad8e0 [ 1821.624372][T19337] [ 1821.635290][T19337] memory: usage 508kB, limit 0kB, failcnt 209 [ 1821.645210][T19337] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1821.652174][T19337] Memory cgroup stats for /syz5: [ 1821.652371][T19337] anon 40960 [ 1821.652371][T19337] file 282624 [ 1821.652371][T19337] kernel 196608 [ 1821.652371][T19337] kernel_stack 0 [ 1821.652371][T19337] pagetables 8192 [ 1821.652371][T19337] percpu 0 [ 1821.652371][T19337] sock 0 [ 1821.652371][T19337] vmalloc 0 [ 1821.652371][T19337] shmem 282624 [ 1821.652371][T19337] file_mapped 282624 [ 1821.652371][T19337] file_dirty 0 [ 1821.652371][T19337] file_writeback 0 [ 1821.652371][T19337] swapcached 0 [ 1821.652371][T19337] anon_thp 0 [ 1821.652371][T19337] file_thp 0 [ 1821.652371][T19337] shmem_thp 0 [ 1821.652371][T19337] inactive_anon 57344 [ 1821.652371][T19337] active_anon 266240 [ 1821.652371][T19337] inactive_file 0 [ 1821.652371][T19337] active_file 0 [ 1821.652371][T19337] unevictable 0 [ 1821.652371][T19337] slab_reclaimable 57144 [ 1821.652371][T19337] slab_unreclaimable 120240 [ 1821.652371][T19337] slab 177384 [ 1821.652371][T19337] workingset_refault_anon 0 [ 1821.652371][T19337] workingset_refault_file 15 [ 1821.748276][T19337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19337,uid=0 [ 1821.774628][T19337] Memory cgroup out of memory: Killed process 19337 (syz-executor.5) total-vm:50532kB, anon-rss:372kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1821.793606][ T28] oom_reaper: reaped process 19337 (syz-executor.5), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB 14:32:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:32:57 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810000006e9deeb9f38d01b53c2acf90c6327714ba715697184372890f96260e4b137f2fa8d2476f600000120000000008571c16e3f88bf9795666aa1328657de1d4e65fb6f78db0d7e826ab84f50cc1fe6b57833b342af12075666b4850ca23cb32dcf15e388a875faca78a0c8a9be3ea5dd2f3b8fc35b17aeaf0e0313dc838814a73c3d00ec3acbdc03e8daaba760ef7afb5805d8337ffd5e23d6d740b95b3a95534031fe950af239c0f08824a0cb4c95bda6e5fff1f44517ed79ed2aa5f8", @ANYRES16=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000240)=""/21, 0x15, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2159760400000000009801fd1aca36c70c2662c5b7bd404b00"/46], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x1e, r5, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8000, 0x1}, 0x10, r3, r6}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x9, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x3c, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x8}, 0x10, r3, r4, 0x0, &(0x7f0000000580)=[r8]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810000006e9deeb9f38d01b53c2acf90c6327714ba715697184372890f96260e4b137f2fa8d2476f600000120000000008571c16e3f88bf9795666aa1328657de1d4e65fb6f78db0d7e826ab84f50cc1fe6b57833b342af12075666b4850ca23cb32dcf15e388a875faca78a0c8a9be3ea5dd2f3b8fc35b17aeaf0e0313dc838814a73c3d00ec3acbdc03e8daaba760ef7afb5805d8337ffd5e23d6d740b95b3a95534031fe950af239c0f08824a0cb4c95bda6e5fff1f44517ed79ed2aa5f8", @ANYRES16=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000240)=""/21, 0x15, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2159760400000000009801fd1aca36c70c2662c5b7bd404b00"/46], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x1e, r5, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8000, 0x1}, 0x10, r3, r6}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r7}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x9, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x3c, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x8}, 0x10, r3, r4, 0x0, &(0x7f0000000580)=[r8]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 1822.595906][T14066] device hsr_slave_0 left promiscuous mode [ 1822.602500][T14066] device hsr_slave_1 left promiscuous mode [ 1822.609073][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.616454][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.626547][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.634725][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.646248][T14066] device bridge_slave_1 left promiscuous mode [ 1822.652611][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.661645][T14066] device bridge_slave_0 left promiscuous mode [ 1822.668116][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.681277][T14066] device veth1_macvtap left promiscuous mode [ 1822.687487][T14066] device veth0_macvtap left promiscuous mode [ 1822.693593][T14066] device veth1_vlan left promiscuous mode [ 1822.700886][T14066] device veth0_vlan left promiscuous mode [ 1822.873230][T14066] team0 (unregistering): Port device team_slave_1 removed [ 1822.886675][T14066] team0 (unregistering): Port device team_slave_0 removed [ 1822.902146][T14066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.915991][T14066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.981690][T14066] bond0 (unregistering): Released all slaves [ 1823.046999][T19196] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1824.104416][T14066] device hsr_slave_0 left promiscuous mode [ 1824.110771][T14066] device hsr_slave_1 left promiscuous mode [ 1824.120101][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.127605][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.136096][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.144068][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.154559][T14066] device bridge_slave_1 left promiscuous mode [ 1824.161722][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.170185][T14066] device bridge_slave_0 left promiscuous mode [ 1824.176344][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.189796][T14066] device veth1_macvtap left promiscuous mode [ 1824.195887][T14066] device veth0_macvtap left promiscuous mode [ 1824.202108][T14066] device veth1_vlan left promiscuous mode [ 1824.208101][T14066] device veth0_vlan left promiscuous mode [ 1824.400928][T14066] team0 (unregistering): Port device team_slave_1 removed [ 1824.423713][T14066] team0 (unregistering): Port device team_slave_0 removed [ 1824.445692][T14066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.475764][T14066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.558930][T14066] bond0 (unregistering): Released all slaves [ 1827.677037][T19196] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1830.098449][T15874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1830.108294][T15874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1830.116136][T15874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1830.124267][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1830.131933][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1830.139277][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1830.221064][T19394] chnl_net:caif_netlink_parms(): no params data found [ 1830.262476][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.269743][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.278631][T19394] device bridge_slave_0 entered promiscuous mode [ 1830.286612][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.293833][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.302014][T19394] device bridge_slave_1 entered promiscuous mode [ 1830.323809][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.334941][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.361466][T19394] team0: Port device team_slave_0 added [ 1830.368991][T19394] team0: Port device team_slave_1 added [ 1830.389477][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.396432][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.423898][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.436397][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.443579][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.472051][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.500704][T19394] device hsr_slave_0 entered promiscuous mode [ 1830.507748][T19394] device hsr_slave_1 entered promiscuous mode [ 1830.572285][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.579513][T19394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.587049][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.594203][T19394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.638987][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.654590][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1830.663479][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.671515][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.680860][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1830.693993][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.708389][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1830.717261][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.724354][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.737953][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1830.746306][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.753403][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.778141][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1830.787593][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1830.795951][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1830.805335][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1830.817276][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1830.829410][T19394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1830.848800][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1830.856215][T17390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1830.871359][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.097137][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1831.106005][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1831.115234][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1831.124167][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1831.134751][T19394] device veth0_vlan entered promiscuous mode [ 1831.146339][T19394] device veth1_vlan entered promiscuous mode [ 1831.170058][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1831.178396][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1831.186434][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1831.198197][T19394] device veth0_macvtap entered promiscuous mode [ 1831.207979][T19394] device veth1_macvtap entered promiscuous mode [ 1831.217715][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1831.233070][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1831.244614][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.254845][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1831.267575][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.277951][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1831.288451][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.300075][T19394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.309505][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1831.318768][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1831.331218][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1831.341899][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.352168][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1831.362840][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.372828][T19394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1831.383593][T19394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.397988][T19394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.406376][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1831.418632][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1831.484729][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.498984][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.510661][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1831.530361][T14066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.539709][T14066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.550808][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1831.708958][T19413] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1831.720218][T19413] CPU: 1 PID: 19413 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1831.730846][T19413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.740910][T19413] Call Trace: [ 1831.744184][T19413] [ 1831.747124][T19413] dump_stack_lvl+0xcd/0x134 [ 1831.751743][T19413] dump_header+0x10b/0x7f9 [ 1831.756169][T19413] oom_kill_process.cold+0x10/0x15 [ 1831.761278][T19413] out_of_memory+0x358/0x14b0 [ 1831.765956][T19413] ? oom_killer_disable+0x270/0x270 [ 1831.771163][T19413] ? mark_held_locks+0x9f/0xe0 [ 1831.775965][T19413] mem_cgroup_out_of_memory+0x206/0x270 [ 1831.782663][T19413] ? mem_cgroup_margin+0x130/0x130 [ 1831.787777][T19413] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 1831.793579][T19413] memory_max_write+0x25c/0x3b0 [ 1831.798427][T19413] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1831.804485][T19413] ? lock_release+0x720/0x720 [ 1831.809159][T19413] cgroup_file_write+0x1de/0x770 [ 1831.814091][T19413] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1831.820158][T19413] ? kill_css+0x370/0x370 [ 1831.824512][T19413] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1831.830795][T19413] ? kill_css+0x370/0x370 [ 1831.835132][T19413] kernfs_fop_write_iter+0x3f8/0x610 [ 1831.840436][T19413] new_sync_write+0x38a/0x560 [ 1831.845123][T19413] ? new_sync_read+0x5f0/0x5f0 [ 1831.849896][T19413] ? batadv_v_hardif_init+0x40/0x2f0 [ 1831.855226][T19413] vfs_write+0x7c0/0xac0 [ 1831.859479][T19413] ksys_write+0x127/0x250 [ 1831.863813][T19413] ? __ia32_sys_read+0xb0/0xb0 [ 1831.868588][T19413] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1831.874500][T19413] do_syscall_64+0x35/0xb0 [ 1831.878923][T19413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1831.884822][T19413] RIP: 0033:0x7f4792e890e9 [ 1831.889241][T19413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1831.908851][T19413] RSP: 002b:00007f4794062168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1831.917270][T19413] RAX: ffffffffffffffda RBX: 00007f4792f9bf60 RCX: 00007f4792e890e9 [ 1831.925241][T19413] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1831.933211][T19413] RBP: 00007f4792ee308d R08: 0000000000000000 R09: 0000000000000000 [ 1831.941183][T19413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1831.949153][T19413] R13: 00007fff3c49fd8f R14: 00007f4794062300 R15: 0000000000022000 [ 1831.957155][T19413] [ 1831.980403][T19413] memory: usage 520kB, limit 0kB, failcnt 216 [ 1831.988233][T19413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1831.995280][T19413] Memory cgroup stats for /syz0: [ 1831.996452][T19413] anon 114688 [ 1831.996452][T19413] file 94208 [ 1831.996452][T19413] kernel 323584 [ 1831.996452][T19413] kernel_stack 65536 [ 1831.996452][T19413] pagetables 81920 [ 1831.996452][T19413] percpu 0 [ 1831.996452][T19413] sock 0 [ 1831.996452][T19413] vmalloc 0 [ 1831.996452][T19413] shmem 94208 [ 1831.996452][T19413] file_mapped 86016 [ 1831.996452][T19413] file_dirty 0 [ 1831.996452][T19413] file_writeback 0 [ 1831.996452][T19413] swapcached 0 [ 1831.996452][T19413] anon_thp 0 [ 1831.996452][T19413] file_thp 0 [ 1831.996452][T19413] shmem_thp 0 [ 1831.996452][T19413] inactive_anon 69632 [ 1831.996452][T19413] active_anon 94208 [ 1831.996452][T19413] inactive_file 0 [ 1831.996452][T19413] active_file 0 [ 1831.996452][T19413] unevictable 0 [ 1831.996452][T19413] slab_reclaimable 44768 [ 1831.996452][T19413] slab_unreclaimable 96992 [ 1831.996452][T19413] slab 141760 [ 1831.996452][T19413] workingset_refault_anon 0 [ 1831.996452][T19413] workingset_refault_file 8 [ 1832.100531][T19413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19394,uid=0 [ 1832.122308][T19413] Memory cgroup out of memory: Killed process 19394 (syz-executor.0) total-vm:50532kB, anon-rss:380kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1832.149379][ T28] oom_reaper: reaped process 19394 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1832.150622][T19413] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1832.161290][T17401] Bluetooth: hci2: command 0x0409 tx timeout [ 1832.183095][T19413] CPU: 1 PID: 19413 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1832.193625][T19413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.203796][T19413] Call Trace: [ 1832.207068][T19413] [ 1832.210167][T19413] dump_stack_lvl+0xcd/0x134 [ 1832.214771][T19413] dump_header+0x10b/0x7f9 [ 1832.219198][T19413] oom_kill_process.cold+0x10/0x15 [ 1832.224312][T19413] out_of_memory+0x358/0x14b0 [ 1832.229007][T19413] ? oom_killer_disable+0x270/0x270 [ 1832.234230][T19413] ? mark_held_locks+0x9f/0xe0 [ 1832.239022][T19413] mem_cgroup_out_of_memory+0x206/0x270 [ 1832.244592][T19413] ? mem_cgroup_margin+0x130/0x130 [ 1832.249720][T19413] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1832.255909][T19413] memory_max_write+0x25c/0x3b0 [ 1832.260771][T19413] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1832.266848][T19413] ? lock_release+0x720/0x720 [ 1832.271540][T19413] cgroup_file_write+0x1de/0x770 [ 1832.276492][T19413] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1832.282566][T19413] ? kill_css+0x370/0x370 [ 1832.286909][T19413] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1832.293165][T19413] ? kill_css+0x370/0x370 [ 1832.297505][T19413] kernfs_fop_write_iter+0x3f8/0x610 [ 1832.302804][T19413] new_sync_write+0x38a/0x560 [ 1832.307489][T19413] ? new_sync_read+0x5f0/0x5f0 [ 1832.312259][T19413] ? batadv_v_hardif_init+0x40/0x2f0 [ 1832.317587][T19413] vfs_write+0x7c0/0xac0 [ 1832.321842][T19413] ksys_write+0x127/0x250 [ 1832.326177][T19413] ? __ia32_sys_read+0xb0/0xb0 [ 1832.330984][T19413] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1832.336887][T19413] do_syscall_64+0x35/0xb0 [ 1832.341314][T19413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1832.347221][T19413] RIP: 0033:0x7f4792e890e9 [ 1832.351648][T19413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1832.371276][T19413] RSP: 002b:00007f4794062168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1832.379702][T19413] RAX: ffffffffffffffda RBX: 00007f4792f9bf60 RCX: 00007f4792e890e9 [ 1832.387685][T19413] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1832.395674][T19413] RBP: 00007f4792ee308d R08: 0000000000000000 R09: 0000000000000000 [ 1832.403658][T19413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.411638][T19413] R13: 00007fff3c49fd8f R14: 00007f4794062300 R15: 0000000000022000 [ 1832.419640][T19413] [ 1832.454020][T19413] memory: usage 488kB, limit 0kB, failcnt 216 [ 1832.461523][T19413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1832.471800][T19413] Memory cgroup stats for /syz0: [ 1832.472997][T19413] anon 114688 [ 1832.472997][T19413] file 94208 [ 1832.472997][T19413] kernel 323584 [ 1832.472997][T19413] kernel_stack 65536 [ 1832.472997][T19413] pagetables 81920 [ 1832.472997][T19413] percpu 0 [ 1832.472997][T19413] sock 0 [ 1832.472997][T19413] vmalloc 0 [ 1832.472997][T19413] shmem 94208 [ 1832.472997][T19413] file_mapped 86016 [ 1832.472997][T19413] file_dirty 0 [ 1832.472997][T19413] file_writeback 0 [ 1832.472997][T19413] swapcached 0 [ 1832.472997][T19413] anon_thp 0 [ 1832.472997][T19413] file_thp 0 [ 1832.472997][T19413] shmem_thp 0 [ 1832.472997][T19413] inactive_anon 69632 [ 1832.472997][T19413] active_anon 94208 [ 1832.472997][T19413] inactive_file 0 [ 1832.472997][T19413] active_file 0 [ 1832.472997][T19413] unevictable 0 [ 1832.472997][T19413] slab_reclaimable 44768 [ 1832.472997][T19413] slab_unreclaimable 96992 [ 1832.472997][T19413] slab 141760 [ 1832.472997][T19413] workingset_refault_anon 0 [ 1832.472997][T19413] workingset_refault_file 8 [ 1832.580060][T19413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19412,uid=0 [ 1832.603044][T19413] Memory cgroup out of memory: Killed process 19413 (syz-executor.0) total-vm:54504kB, anon-rss:424kB, file-rss:8888kB, shmem-rss:76kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1832.624634][ T28] oom_reaper: reaped process 19413 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:24kB 14:33:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:08 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="60476f380fb53bbe9f779472ac5c52c6e7156845da36d25fc071f91044a397c0e04ae012b40050ade6b432fe4d0d84d0a4b69be6470c2a615ac94ad0ef60d5cadec0e7350b45471dfb0a51a18b20465928200430243c32d3856b48b8bb22701d9582903eb80a5cf0f1e073fc274159ec02e40e", &(0x7f0000000040)=""/30, &(0x7f00000001c0)="6e1356bc60f38fdadbcf7ecae3724b70a47b64f3c5349da0f6a289a6cf37a9a93a4cdf492b9bf7781582259850f9314ba1e9fbeea1b80bafa5700434c6ab6814efa71a25ecac7fa57dfa49ca97", &(0x7f0000000240)="fdcdccb67456122bda15955fb28a6bf969028a2534046747a783989946bc91dd6528fee933dc7756ba963a4eb588087a10be6ea9bb29ac156aed94c24c89028f7594dd8b7ddf2c37b0427442c581dfdf49e5ac61e6514d3b7d500bfffc04f681df2125447c93a0245a96efb747c83d010f24b71e90e11661d68bfe02b30f937bf1902228a80616d5a8836f0c5fb4b5193c93cc069b4198e1cf7f65dca8e3edc4574d771c5d05de7c219302599c9510eff5170efd30a33080dcd2ab5c", 0x8000, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x3, 0xfffffff9, 0x2, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xd, 0x400, 0x4, 0x0, 0x4, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x9, 0xc, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x2, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000640)='GPL\x00', 0x8c, 0x49, &(0x7f0000000740)=""/73, 0x41000, 0x0, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0xcbc, 0x9}, 0x10, 0x0, r1, 0x0, &(0x7f0000000b80)=[r6]}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="60476f380fb53bbe9f779472ac5c52c6e7156845da36d25fc071f91044a397c0e04ae012b40050ade6b432fe4d0d84d0a4b69be6470c2a615ac94ad0ef60d5cadec0e7350b45471dfb0a51a18b20465928200430243c32d3856b48b8bb22701d9582903eb80a5cf0f1e073fc274159ec02e40e", &(0x7f0000000040)=""/30, &(0x7f00000001c0)="6e1356bc60f38fdadbcf7ecae3724b70a47b64f3c5349da0f6a289a6cf37a9a93a4cdf492b9bf7781582259850f9314ba1e9fbeea1b80bafa5700434c6ab6814efa71a25ecac7fa57dfa49ca97", &(0x7f0000000240)="fdcdccb67456122bda15955fb28a6bf969028a2534046747a783989946bc91dd6528fee933dc7756ba963a4eb588087a10be6ea9bb29ac156aed94c24c89028f7594dd8b7ddf2c37b0427442c581dfdf49e5ac61e6514d3b7d500bfffc04f681df2125447c93a0245a96efb747c83d010f24b71e90e11661d68bfe02b30f937bf1902228a80616d5a8836f0c5fb4b5193c93cc069b4198e1cf7f65dca8e3edc4574d771c5d05de7c219302599c9510eff5170efd30a33080dcd2ab5c", 0x8000, r0}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r2}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x3, 0xfffffff9, 0x2, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xd, 0x400, 0x4, 0x0, 0x4, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x9, 0xc, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x2, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000640)='GPL\x00', 0x8c, 0x49, &(0x7f0000000740)=""/73, 0x41000, 0x0, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0xcbc, 0x9}, 0x10, 0x0, r1, 0x0, &(0x7f0000000b80)=[r6]}, 0x80) (async) 14:33:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:08 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810000006e9deeb9f38d01b53c2acf90c6327714ba715697184372890f96260e4b137f2fa8d2476f600000120000000008571c16e3f88bf9795666aa1328657de1d4e65fb6f78db0d7e826ab84f50cc1fe6b57833b342af12075666b4850ca23cb32dcf15e388a875faca78a0c8a9be3ea5dd2f3b8fc35b17aeaf0e0313dc838814a73c3d00ec3acbdc03e8daaba760ef7afb5805d8337ffd5e23d6d740b95b3a95534031fe950af239c0f08824a0cb4c95bda6e5fff1f44517ed79ed2aa5f8", @ANYRES16=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000240)=""/21, 0x15, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2159760400000000009801fd1aca36c70c2662c5b7bd404b00"/46], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x1e, r5, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8000, 0x1}, 0x10, r3, r6}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x9, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x3c, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x8}, 0x10, r3, r4, 0x0, &(0x7f0000000580)=[r8]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810000006e9deeb9f38d01b53c2acf90c6327714ba715697184372890f96260e4b137f2fa8d2476f600000120000000008571c16e3f88bf9795666aa1328657de1d4e65fb6f78db0d7e826ab84f50cc1fe6b57833b342af12075666b4850ca23cb32dcf15e388a875faca78a0c8a9be3ea5dd2f3b8fc35b17aeaf0e0313dc838814a73c3d00ec3acbdc03e8daaba760ef7afb5805d8337ffd5e23d6d740b95b3a95534031fe950af239c0f08824a0cb4c95bda6e5fff1f44517ed79ed2aa5f8", @ANYRES16=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000240)=""/21, 0x15, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2159760400000000009801fd1aca36c70c2662c5b7bd404b00"/46], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x1e, r5, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8000, 0x1}, 0x10, r3, r6}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r7, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x1) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r7}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x9, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x3c, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x8}, 0x10, r3, r4, 0x0, &(0x7f0000000580)=[r8]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:33:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:08 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:08 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008d1000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) [ 1833.266173][T19448] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1833.303407][T19448] CPU: 0 PID: 19448 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 14:33:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1833.313962][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.324033][T19448] Call Trace: [ 1833.327328][T19448] [ 1833.330272][T19448] dump_stack_lvl+0xcd/0x134 [ 1833.334881][T19448] dump_header+0x10b/0x7f9 [ 1833.339337][T19448] oom_kill_process.cold+0x10/0x15 [ 1833.344499][T19448] out_of_memory+0x358/0x14b0 [ 1833.349214][T19448] ? oom_killer_disable+0x270/0x270 [ 1833.354450][T19448] ? io_schedule_timeout+0x140/0x140 [ 1833.359773][T19448] mem_cgroup_out_of_memory+0x206/0x270 [ 1833.365346][T19448] ? mem_cgroup_margin+0x130/0x130 [ 1833.370502][T19448] memory_max_write+0x25c/0x3b0 [ 1833.375373][T19448] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1833.381463][T19448] ? lock_release+0x720/0x720 [ 1833.386167][T19448] cgroup_file_write+0x1de/0x770 [ 1833.391121][T19448] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1833.397213][T19448] ? kill_css+0x370/0x370 [ 1833.401650][T19448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1833.407915][T19448] ? kill_css+0x370/0x370 [ 1833.412437][T19448] kernfs_fop_write_iter+0x3f8/0x610 [ 1833.417744][T19448] new_sync_write+0x38a/0x560 [ 1833.422431][T19448] ? new_sync_read+0x5f0/0x5f0 [ 1833.427209][T19448] ? lock_release+0x720/0x720 [ 1833.431919][T19448] vfs_write+0x7c0/0xac0 [ 1833.436181][T19448] ksys_write+0x127/0x250 [ 1833.440518][T19448] ? __ia32_sys_read+0xb0/0xb0 [ 1833.445291][T19448] ? syscall_enter_from_user_mode+0x21/0x70 [ 1833.451199][T19448] do_syscall_64+0x35/0xb0 [ 1833.455626][T19448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.461526][T19448] RIP: 0033:0x7f68674890e9 [ 1833.465946][T19448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1833.485556][T19448] RSP: 002b:00007f686863a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1833.494066][T19448] RAX: ffffffffffffffda RBX: 00007f686759bf60 RCX: 00007f68674890e9 [ 1833.502038][T19448] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1833.510009][T19448] RBP: 00007f68674e308d R08: 0000000000000000 R09: 0000000000000000 [ 1833.517976][T19448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1833.525944][T19448] R13: 00007ffe394c19ef R14: 00007f686863a300 R15: 0000000000022000 [ 1833.533943][T19448] 14:33:08 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008d1000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008d1000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:33:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008d1000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008d1000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:33:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000200004000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x1022, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0xf}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:33:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000200004000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x1022, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0xf}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000200004000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x1022, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0xf}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 1833.974254][T19448] memory: usage 700kB, limit 0kB, failcnt 324 [ 1833.980546][T19448] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1834.005545][T19448] Memory cgroup stats for /syz4: [ 1834.005767][T19448] anon 131072 [ 1834.005767][T19448] file 208896 [ 1834.005767][T19448] kernel 376832 [ 1834.005767][T19448] kernel_stack 65536 [ 1834.005767][T19448] pagetables 81920 [ 1834.005767][T19448] percpu 0 [ 1834.005767][T19448] sock 0 [ 1834.005767][T19448] vmalloc 0 [ 1834.005767][T19448] shmem 208896 [ 1834.005767][T19448] file_mapped 159744 [ 1834.005767][T19448] file_dirty 0 [ 1834.005767][T19448] file_writeback 0 [ 1834.005767][T19448] swapcached 0 [ 1834.005767][T19448] anon_thp 0 [ 1834.005767][T19448] file_thp 0 [ 1834.005767][T19448] shmem_thp 0 [ 1834.005767][T19448] inactive_anon 180224 [ 1834.005767][T19448] active_anon 159744 [ 1834.005767][T19448] inactive_file 0 [ 1834.005767][T19448] active_file 0 [ 1834.005767][T19448] unevictable 0 [ 1834.005767][T19448] slab_reclaimable 56520 [ 1834.005767][T19448] slab_unreclaimable 141688 [ 1834.005767][T19448] slab 198208 [ 1834.005767][T19448] workingset_refault_anon 0 [ 1834.005767][T19448] workingset_refault_file 8 14:33:09 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000200004000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x1022, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0xf}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000200004000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x4, 0x8, 0x6, 0x1022, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0xf}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:33:09 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0x1fc) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0xe, 0x3, r5}, 0x14) [ 1834.127895][T19448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19246,uid=0 [ 1834.154145][T19448] Memory cgroup out of memory: Killed process 19246 (syz-executor.4) total-vm:50532kB, anon-rss:380kB, file-rss:9072kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1834.360020][ T11] device hsr_slave_0 left promiscuous mode [ 1834.366507][ T11] device hsr_slave_1 left promiscuous mode [ 1834.382809][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1834.398048][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.409840][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1834.417335][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.444301][ T11] device bridge_slave_1 left promiscuous mode [ 1834.450721][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.459526][ T11] device bridge_slave_0 left promiscuous mode [ 1834.465682][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.480943][ T11] device veth1_macvtap left promiscuous mode [ 1834.489332][ T11] device veth0_macvtap left promiscuous mode [ 1834.495750][ T11] device veth1_vlan left promiscuous mode [ 1834.502126][ T11] device veth0_vlan left promiscuous mode [ 1834.671123][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1834.699662][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1834.722236][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.746119][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1834.849201][ T11] bond0 (unregistering): Released all slaves [ 1835.964146][ T11] device hsr_slave_0 left promiscuous mode [ 1835.970446][ T11] device hsr_slave_1 left promiscuous mode [ 1835.977049][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.984454][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.993434][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.001166][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.009767][ T11] device bridge_slave_1 left promiscuous mode [ 1836.015915][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.024260][ T11] device bridge_slave_0 left promiscuous mode [ 1836.030764][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.043462][ T11] device veth1_macvtap left promiscuous mode [ 1836.049614][ T11] device veth0_macvtap left promiscuous mode [ 1836.055677][ T11] device veth1_vlan left promiscuous mode [ 1836.061640][ T11] device veth0_vlan left promiscuous mode [ 1836.212420][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1836.227686][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1836.250597][ T7812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1836.252529][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1836.269889][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1836.270824][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1836.278641][ T7812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1836.287964][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1836.295363][ T7812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1836.305008][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1836.311383][ T7812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1836.314616][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1836.320831][ T7812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1836.334530][ T7812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1836.342396][ T7812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1836.355646][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1836.425391][ T11] bond0 (unregistering): Released all slaves [ 1836.644726][T19487] chnl_net:caif_netlink_parms(): no params data found [ 1836.671127][T19486] chnl_net:caif_netlink_parms(): no params data found [ 1836.761797][T19487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.769840][T19487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.777943][T19487] device bridge_slave_0 entered promiscuous mode [ 1836.785321][T19486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.792536][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.800596][T19486] device bridge_slave_0 entered promiscuous mode [ 1836.811980][T19487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.819554][T19487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.828090][T19487] device bridge_slave_1 entered promiscuous mode [ 1836.835229][T19486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.842872][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.851127][T19486] device bridge_slave_1 entered promiscuous mode [ 1836.889283][T19487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.907096][T19487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.918808][T19486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.938339][T19486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.974563][T19487] team0: Port device team_slave_0 added [ 1836.988730][T19486] team0: Port device team_slave_0 added [ 1836.996680][T19486] team0: Port device team_slave_1 added [ 1837.004308][T19487] team0: Port device team_slave_1 added [ 1837.052126][T19486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.059347][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.085325][T19486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.097559][T19487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.104526][T19487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.131127][T19487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.144673][T19486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.154800][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.181237][T19486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.192973][T19487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.200622][T19487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.227134][T19487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.274798][T19487] device hsr_slave_0 entered promiscuous mode [ 1837.281535][T19487] device hsr_slave_1 entered promiscuous mode [ 1837.293820][T19486] device hsr_slave_0 entered promiscuous mode [ 1837.300520][T19486] device hsr_slave_1 entered promiscuous mode [ 1837.308216][T19486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1837.315775][T19486] Cannot create hsr debugfs directory [ 1837.464320][T19487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.471519][T19487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.478970][T19487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.486101][T19487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.529079][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.544327][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.632591][T19487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.676239][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1837.691827][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1837.704726][T19487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.731618][T19486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.762562][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1837.776080][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1837.787088][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1837.795837][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1837.804531][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.811661][T17418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.836550][T19486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.844643][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1837.853875][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1837.862883][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.870017][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.878495][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1837.887481][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1837.919051][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1837.928795][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1837.938380][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1837.948415][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1837.957123][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1837.965561][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1837.973956][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1837.983177][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1837.991724][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.998967][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.007016][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1838.007632][ T3646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1838.015691][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1838.057399][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.064511][T16993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.091256][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1838.125382][T19487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.145753][T19487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1838.172542][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1838.198319][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1838.231521][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1838.244316][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1838.270966][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1838.289086][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1838.308085][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1838.316660][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1838.347619][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1838.356312][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1838.368570][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1838.381052][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1838.392912][T19486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.398016][T16989] Bluetooth: hci4: command 0x0409 tx timeout [ 1838.404253][T17392] Bluetooth: hci2: command 0x0409 tx timeout [ 1838.415587][T19486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1838.431953][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1838.440309][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1838.457254][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1838.464645][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1838.475606][T19487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.492591][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1838.501126][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1838.514576][T19486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.871956][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1838.881115][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1838.902097][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1838.910784][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1838.936498][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1838.946618][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1838.954862][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1838.963461][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1838.972487][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1838.980766][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1838.988815][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1838.996462][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1839.007051][T19486] device veth0_vlan entered promiscuous mode [ 1839.016394][T19486] device veth1_vlan entered promiscuous mode [ 1839.025586][T19487] device veth0_vlan entered promiscuous mode [ 1839.046655][T19487] device veth1_vlan entered promiscuous mode [ 1839.065648][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1839.073957][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1839.082323][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1839.090571][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1839.099812][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1839.108466][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1839.117454][T19486] device veth0_macvtap entered promiscuous mode [ 1839.130869][T19486] device veth1_macvtap entered promiscuous mode [ 1839.150333][T19486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1839.161731][T19486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.171998][T19486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1839.183496][T19486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.194558][T19486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1839.208052][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1839.216057][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1839.224199][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1839.232802][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1839.241412][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1839.250003][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1839.264314][T19487] device veth0_macvtap entered promiscuous mode [ 1839.273515][T19486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1839.284756][T19486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.294976][T19486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1839.305933][T19486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.317856][T19486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1839.327372][T19487] device veth1_macvtap entered promiscuous mode [ 1839.339638][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1839.347692][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1839.355545][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1839.364543][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1839.388356][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1839.400203][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.410489][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1839.431608][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.445756][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1839.462135][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.473889][T19487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1839.502397][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1839.513927][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1839.525726][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1839.536692][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.554211][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1839.570153][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.581380][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1839.595822][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.616338][T19487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1839.633340][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1839.648887][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1839.688038][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.698063][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.713260][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1839.749699][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.763939][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.779333][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1839.805262][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.820585][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.843040][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1839.860923][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.869950][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.884633][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:33:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:15 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (rerun: 32) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0x1fc) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0xe, 0x3, r5}, 0x14) [ 1840.275745][T19525] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1840.290206][T19525] CPU: 1 PID: 19525 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1840.300794][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.310846][T19525] Call Trace: [ 1840.314115][T19525] [ 1840.317040][T19525] dump_stack_lvl+0xcd/0x134 [ 1840.321653][T19525] dump_header+0x10b/0x7f9 [ 1840.326070][T19525] oom_kill_process.cold+0x10/0x15 [ 1840.331184][T19525] out_of_memory+0x358/0x14b0 [ 1840.335877][T19525] ? oom_killer_disable+0x270/0x270 [ 1840.341106][T19525] ? io_schedule_timeout+0x140/0x140 [ 1840.346528][T19525] mem_cgroup_out_of_memory+0x206/0x270 [ 1840.352109][T19525] ? mem_cgroup_margin+0x130/0x130 [ 1840.357260][T19525] memory_max_write+0x25c/0x3b0 [ 1840.362135][T19525] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1840.368222][T19525] ? lock_release+0x720/0x720 [ 1840.372925][T19525] cgroup_file_write+0x1de/0x770 [ 1840.377902][T19525] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1840.384174][T19525] ? kill_css+0x370/0x370 [ 1840.388514][T19525] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1840.394785][T19525] ? kill_css+0x370/0x370 [ 1840.399123][T19525] kernfs_fop_write_iter+0x3f8/0x610 [ 1840.404428][T19525] new_sync_write+0x38a/0x560 [ 1840.409117][T19525] ? new_sync_read+0x5f0/0x5f0 [ 1840.413896][T19525] ? lock_release+0x720/0x720 [ 1840.418604][T19525] vfs_write+0x7c0/0xac0 [ 1840.422860][T19525] ksys_write+0x127/0x250 [ 1840.427199][T19525] ? __ia32_sys_read+0xb0/0xb0 [ 1840.432008][T19525] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1840.438005][T19525] do_syscall_64+0x35/0xb0 [ 1840.442434][T19525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1840.448339][T19525] RIP: 0033:0x7efd942890e9 [ 1840.452762][T19525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1840.472381][T19525] RSP: 002b:00007efd9533f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1840.480803][T19525] RAX: ffffffffffffffda RBX: 00007efd9439bf60 RCX: 00007efd942890e9 [ 1840.488777][T19525] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1840.496748][T19525] RBP: 00007efd942e308d R08: 0000000000000000 R09: 0000000000000000 [ 1840.504982][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.512951][T19525] R13: 00007ffd50cbf19f R14: 00007efd9533f300 R15: 0000000000022000 [ 1840.520946][T19525] [ 1840.545753][T17408] Bluetooth: hci2: command 0x041b tx timeout [ 1840.552375][T17408] Bluetooth: hci4: command 0x041b tx timeout [ 1840.555749][T19525] memory: usage 640kB, limit 0kB, failcnt 216 [ 1840.575983][T19525] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1840.584492][T19525] Memory cgroup stats for /syz0: [ 1840.585937][T19525] anon 114688 [ 1840.585937][T19525] file 94208 [ 1840.585937][T19525] kernel 446464 [ 1840.585937][T19525] kernel_stack 65536 [ 1840.585937][T19525] pagetables 77824 [ 1840.585937][T19525] percpu 0 [ 1840.585937][T19525] sock 0 [ 1840.585937][T19525] vmalloc 0 [ 1840.585937][T19525] shmem 94208 [ 1840.585937][T19525] file_mapped 86016 [ 1840.585937][T19525] file_dirty 0 [ 1840.585937][T19525] file_writeback 0 [ 1840.585937][T19525] swapcached 0 [ 1840.585937][T19525] anon_thp 0 [ 1840.585937][T19525] file_thp 0 [ 1840.585937][T19525] shmem_thp 0 [ 1840.585937][T19525] inactive_anon 114688 [ 1840.585937][T19525] active_anon 94208 [ 1840.585937][T19525] inactive_file 0 [ 1840.585937][T19525] active_file 0 [ 1840.585937][T19525] unevictable 0 [ 1840.585937][T19525] slab_reclaimable 85064 [ 1840.585937][T19525] slab_unreclaimable 185848 [ 1840.585937][T19525] slab 270912 [ 1840.585937][T19525] workingset_refault_anon 0 [ 1840.585937][T19525] workingset_refault_file 8 [ 1840.700682][T19525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19486,uid=0 [ 1840.720726][T19525] Memory cgroup out of memory: Killed process 19486 (syz-executor.0) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1840.739782][ T28] oom_reaper: reaped process 19486 (syz-executor.0), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1841.464810][ T11] device hsr_slave_0 left promiscuous mode [ 1841.471550][ T11] device hsr_slave_1 left promiscuous mode [ 1841.478055][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1841.485438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1841.495466][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1841.503148][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1841.516576][ T11] device bridge_slave_1 left promiscuous mode [ 1841.524437][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.532958][ T11] device bridge_slave_0 left promiscuous mode [ 1841.539347][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.551520][ T11] device veth1_macvtap left promiscuous mode [ 1841.557819][ T11] device veth0_macvtap left promiscuous mode [ 1841.564115][ T11] device veth1_vlan left promiscuous mode [ 1841.570030][ T11] device veth0_vlan left promiscuous mode [ 1841.741175][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1841.755026][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1841.770830][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1841.783877][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.849981][ T11] bond0 (unregistering): Released all slaves [ 1842.557337][T17395] Bluetooth: hci2: command 0x040f tx timeout [ 1842.716933][ T3646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1844.637123][T17395] Bluetooth: hci2: command 0x0419 tx timeout [ 1847.196876][ T3646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1849.693272][T15874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1849.701868][T15874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1849.709811][T15874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1849.718859][T15874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1849.726376][T15874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1849.733820][T15874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1849.813098][T19539] chnl_net:caif_netlink_parms(): no params data found [ 1849.851759][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.859175][T19539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.867243][T19539] device bridge_slave_0 entered promiscuous mode [ 1849.875083][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.882651][T19539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.890502][T19539] device bridge_slave_1 entered promiscuous mode [ 1849.912291][T19539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1849.933347][T19539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.958837][T19539] team0: Port device team_slave_0 added [ 1849.966120][T19539] team0: Port device team_slave_1 added [ 1849.982503][T19539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.989640][T19539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.015657][T19539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.029329][T19539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.036290][T19539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.062533][T19539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1850.090296][T19539] device hsr_slave_0 entered promiscuous mode [ 1850.101140][T19539] device hsr_slave_1 entered promiscuous mode [ 1850.107710][T19539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1850.115250][T19539] Cannot create hsr debugfs directory [ 1850.179226][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.186289][T19539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.193603][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.200771][T19539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.245792][T19539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.259535][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1850.269200][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.276850][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.284907][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1850.298307][T19539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.308571][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1850.317563][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.324637][T16989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.338838][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1850.347221][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.354263][T17395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.379331][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1850.388220][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1850.396531][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1850.410207][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1850.418020][T16991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1850.429548][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1850.449503][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1850.457133][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1850.472224][T19539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1850.688702][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1850.708176][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1850.716498][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1850.725235][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1850.735655][T19539] device veth0_vlan entered promiscuous mode [ 1850.746320][T19539] device veth1_vlan entered promiscuous mode [ 1850.766618][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1850.775154][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1850.784388][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1850.794999][T19539] device veth0_macvtap entered promiscuous mode [ 1850.810172][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1850.819182][T19539] device veth1_macvtap entered promiscuous mode [ 1850.835765][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1850.846427][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.857480][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1850.868124][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.880034][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1850.891186][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.902238][T19539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1850.912352][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1850.921101][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1850.932735][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1850.943413][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.956529][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1850.972744][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.982889][T19539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1850.994390][T19539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.005593][T19539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.022052][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1851.030623][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1851.088283][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.096635][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.115618][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1851.131815][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.140204][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.150523][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1851.340731][T19561] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1851.351436][T19561] CPU: 1 PID: 19561 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1851.362150][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.372198][T19561] Call Trace: [ 1851.375465][T19561] [ 1851.378384][T19561] dump_stack_lvl+0xcd/0x134 [ 1851.383064][T19561] dump_header+0x10b/0x7f9 [ 1851.387492][T19561] oom_kill_process.cold+0x10/0x15 [ 1851.392638][T19561] out_of_memory+0x358/0x14b0 [ 1851.397343][T19561] ? oom_killer_disable+0x270/0x270 [ 1851.402562][T19561] ? mark_held_locks+0x9f/0xe0 [ 1851.407355][T19561] mem_cgroup_out_of_memory+0x206/0x270 [ 1851.413004][T19561] ? mem_cgroup_margin+0x130/0x130 [ 1851.418130][T19561] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1851.424314][T19561] memory_max_write+0x25c/0x3b0 [ 1851.429180][T19561] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1851.435260][T19561] ? lock_release+0x720/0x720 [ 1851.439952][T19561] cgroup_file_write+0x1de/0x770 [ 1851.444900][T19561] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1851.450974][T19561] ? kill_css+0x370/0x370 [ 1851.455325][T19561] ? kill_css+0x370/0x370 [ 1851.459658][T19561] kernfs_fop_write_iter+0x3f8/0x610 [ 1851.464956][T19561] new_sync_write+0x38a/0x560 [ 1851.469637][T19561] ? new_sync_read+0x5f0/0x5f0 [ 1851.474409][T19561] ? lock_release+0x720/0x720 [ 1851.479129][T19561] vfs_write+0x7c0/0xac0 [ 1851.483409][T19561] ksys_write+0x127/0x250 [ 1851.487768][T19561] ? __ia32_sys_read+0xb0/0xb0 [ 1851.492559][T19561] ? syscall_enter_from_user_mode+0x21/0x70 [ 1851.498484][T19561] do_syscall_64+0x35/0xb0 [ 1851.502915][T19561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1851.508817][T19561] RIP: 0033:0x7f01876890e9 [ 1851.513241][T19561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1851.532860][T19561] RSP: 002b:00007f0188889168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1851.541280][T19561] RAX: ffffffffffffffda RBX: 00007f018779bf60 RCX: 00007f01876890e9 [ 1851.549283][T19561] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1851.557266][T19561] RBP: 00007f01876e308d R08: 0000000000000000 R09: 0000000000000000 [ 1851.565260][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1851.573237][T19561] R13: 00007ffdd6d62e9f R14: 00007f0188889300 R15: 0000000000022000 [ 1851.581234][T19561] [ 1851.610637][T19561] memory: usage 560kB, limit 0kB, failcnt 180 [ 1851.618619][T19561] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1851.625737][T19561] Memory cgroup stats for /syz1: [ 1851.628095][T19561] anon 114688 [ 1851.628095][T19561] file 139264 [ 1851.628095][T19561] kernel 319488 [ 1851.628095][T19561] kernel_stack 65536 [ 1851.628095][T19561] pagetables 81920 [ 1851.628095][T19561] percpu 0 [ 1851.628095][T19561] sock 0 [ 1851.628095][T19561] vmalloc 0 [ 1851.628095][T19561] shmem 139264 [ 1851.628095][T19561] file_mapped 135168 [ 1851.628095][T19561] file_dirty 0 [ 1851.628095][T19561] file_writeback 0 [ 1851.628095][T19561] swapcached 0 [ 1851.628095][T19561] anon_thp 0 [ 1851.628095][T19561] file_thp 0 [ 1851.628095][T19561] shmem_thp 0 [ 1851.628095][T19561] inactive_anon 77824 [ 1851.628095][T19561] active_anon 135168 [ 1851.628095][T19561] inactive_file 0 [ 1851.628095][T19561] active_file 0 [ 1851.628095][T19561] unevictable 0 [ 1851.628095][T19561] slab_reclaimable 45632 [ 1851.628095][T19561] slab_unreclaimable 93264 [ 1851.628095][T19561] slab 138896 [ 1851.628095][T19561] workingset_refault_anon 0 [ 1851.628095][T19561] workingset_refault_file 4 [ 1851.735767][T19561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19539,uid=0 [ 1851.753498][T19561] Memory cgroup out of memory: Killed process 19539 (syz-executor.1) total-vm:50532kB, anon-rss:364kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1851.773582][T17418] Bluetooth: hci0: command 0x0409 tx timeout [ 1851.780887][ T28] oom_reaper: reaped process 19539 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:64kB [ 1851.791101][T19561] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1851.814440][T19561] CPU: 1 PID: 19561 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1851.825218][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.835269][T19561] Call Trace: [ 1851.838551][T19561] [ 1851.841484][T19561] dump_stack_lvl+0xcd/0x134 [ 1851.846101][T19561] dump_header+0x10b/0x7f9 [ 1851.850537][T19561] oom_kill_process.cold+0x10/0x15 [ 1851.855667][T19561] out_of_memory+0x358/0x14b0 [ 1851.860366][T19561] ? oom_killer_disable+0x270/0x270 [ 1851.865580][T19561] ? io_schedule_timeout+0x140/0x140 [ 1851.870882][T19561] mem_cgroup_out_of_memory+0x206/0x270 [ 1851.876439][T19561] ? mem_cgroup_margin+0x130/0x130 [ 1851.881582][T19561] memory_max_write+0x25c/0x3b0 [ 1851.886438][T19561] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1851.892518][T19561] ? lock_release+0x720/0x720 [ 1851.897205][T19561] cgroup_file_write+0x1de/0x770 [ 1851.902151][T19561] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1851.908223][T19561] ? kill_css+0x370/0x370 [ 1851.912574][T19561] ? kill_css+0x370/0x370 [ 1851.916910][T19561] kernfs_fop_write_iter+0x3f8/0x610 [ 1851.922214][T19561] new_sync_write+0x38a/0x560 [ 1851.926899][T19561] ? new_sync_read+0x5f0/0x5f0 [ 1851.931672][T19561] ? lock_release+0x720/0x720 [ 1851.936377][T19561] vfs_write+0x7c0/0xac0 [ 1851.940630][T19561] ksys_write+0x127/0x250 [ 1851.944960][T19561] ? __ia32_sys_read+0xb0/0xb0 [ 1851.949735][T19561] ? syscall_enter_from_user_mode+0x21/0x70 [ 1851.955642][T19561] do_syscall_64+0x35/0xb0 [ 1851.960068][T19561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1851.965964][T19561] RIP: 0033:0x7f01876890e9 [ 1851.970378][T19561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1851.990072][T19561] RSP: 002b:00007f0188889168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1851.998501][T19561] RAX: ffffffffffffffda RBX: 00007f018779bf60 RCX: 00007f01876890e9 [ 1852.006470][T19561] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1852.014441][T19561] RBP: 00007f01876e308d R08: 0000000000000000 R09: 0000000000000000 [ 1852.022408][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1852.030379][T19561] R13: 00007ffdd6d62e9f R14: 00007f0188889300 R15: 0000000000022000 [ 1852.038371][T19561] [ 1852.067137][T19561] memory: usage 548kB, limit 0kB, failcnt 180 [ 1852.074278][T19561] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1852.085255][T19561] Memory cgroup stats for /syz1: [ 1852.089310][T19561] anon 114688 [ 1852.089310][T19561] file 139264 [ 1852.089310][T19561] kernel 319488 [ 1852.089310][T19561] kernel_stack 65536 [ 1852.089310][T19561] pagetables 81920 [ 1852.089310][T19561] percpu 0 [ 1852.089310][T19561] sock 0 [ 1852.089310][T19561] vmalloc 0 [ 1852.089310][T19561] shmem 139264 [ 1852.089310][T19561] file_mapped 135168 [ 1852.089310][T19561] file_dirty 0 [ 1852.089310][T19561] file_writeback 0 [ 1852.089310][T19561] swapcached 0 [ 1852.089310][T19561] anon_thp 0 [ 1852.089310][T19561] file_thp 0 [ 1852.089310][T19561] shmem_thp 0 [ 1852.089310][T19561] inactive_anon 77824 [ 1852.089310][T19561] active_anon 135168 [ 1852.089310][T19561] inactive_file 0 [ 1852.089310][T19561] active_file 0 [ 1852.089310][T19561] unevictable 0 [ 1852.089310][T19561] slab_reclaimable 45632 [ 1852.089310][T19561] slab_unreclaimable 93264 [ 1852.089310][T19561] slab 138896 [ 1852.089310][T19561] workingset_refault_anon 0 [ 1852.089310][T19561] workingset_refault_file 4 [ 1852.205484][T19561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19560,uid=0 [ 1852.235131][T19561] Memory cgroup out of memory: Killed process 19561 (syz-executor.1) total-vm:54504kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:64kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1852.262804][ T28] oom_reaper: reaped process 19561 (syz-executor.1), now anon-rss:0kB, file-rss:8192kB, shmem-rss:24kB 14:33:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:27 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x7, 0xf5, 0xd, 0x0, 0xffffffff, 0x481, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x5104, 0x2, 0x7, 0x0, 0x3ff, 0x5, 0x40, 0x0, 0xfa, 0x0, 0x2e3d}, 0x0, 0xb, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r4, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r6}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000680)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r6, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095", @ANYRES16=r2, @ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESHEX=r5], &(0x7f0000000000)='GPL\x00', 0x4, 0xf6, &(0x7f00000001c0)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r8}, 0xc) 14:33:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:27 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) write$cgroup_pid(r4, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0x1fc) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x4b, 0xbe, 0x9, 0x85, 0x0, 0xba, 0x1a004, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cd8, 0xc, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x4, 0x7, 0x1, 0x4, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0xe, 0x3, r5}, 0x14) 14:33:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) 14:33:27 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:27 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x7, 0xf5, 0xd, 0x0, 0xffffffff, 0x481, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x5104, 0x2, 0x7, 0x0, 0x3ff, 0x5, 0x40, 0x0, 0xfa, 0x0, 0x2e3d}, 0x0, 0xb, 0xffffffffffffffff, 0xa) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (rerun: 64) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r4, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r6}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000680)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r6, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095", @ANYRES16=r2, @ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r6, @ANYBLOB="db693f187c8eee428ef2f71a841b2bd224defefdc9b6afe55f349b03514a39e0e7a8e0f46ccca0e2d47afb0268c8520debf243edc33cd86731b8917740aac22f822197ddc3ef598f67036de0747266384c2d4fd79d453520d7841781cf5c483a020a63d7418e1114cc7ba5142e558d9bd157ff2c3e86f2cf2467db146d87814cd7f7e59ca796c850a2552c062a5105ea2adf4d9d0f219080507bba6a6149a71e13c5099fdb0f38ad05b689ea20ee57349ea872866e74bde38ac90b89e159637c5a4bc9331faedc41cf58174abf9f03df456735b88554b14717ab99e73b946f19bca6d8797a2a02ed26e6e98199666d8e2b5a341c90dff31780ffbfb9821ce9", @ANYRESHEX=r5], &(0x7f0000000000)='GPL\x00', 0x4, 0xf6, &(0x7f00000001c0)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r8}, 0xc) 14:33:27 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x200, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f00000000c0)="3601d9af02947438eb9b42074ef0d275c788c3d77f116963a8c56437c66cdc179d192aba88738376494b9d69d9f2c54cbf14b2fc118688628067a8412507e1de364bf51e9d6148950a801bd669619e55ef237f0ce4e345045cd6681e37fca9f27df5361d4c5e8679f600a4aaafe4b62b340f", &(0x7f00000001c0)=""/226, &(0x7f00000004c0)="cf7d088e6693b09ff0572e79a81c6dca9d28c3c3b7e3475d8ea4504bc1a7580348b48200e1c062e5b02100e1ea1dae2ef819aa75319e93b44efc7eefe7da5682a57b1376e008fe64ae5ee823ae0b825d1d941b2616f2ffee91501d13f2773b26e3ee49389d8360e7185493ea52e1bad06e5f35faa75a73819026d2b177466b32168d2489dd9c6b0608ba108d44dd5b84311dcc879c40e888baac18554630313d5ee0b098c3e841a1927d36faba17e4c93e4b1a7eb0e6ba714c8f718f259e677a44d21e43fdf95ad65bf8014dbfceee8df1b147aa566629", &(0x7f00000005c0)="0d051bfd2c7ab8aac8af1c3ed893a91c39c533aa62a12cc0633332ec860da44d70e6109cba787527d18c8f38c2721beeab9cc326ef4cf12fca602e829aced21fe944854ebd163d0f7404aae1e00436890d24a025e893f71e6b71dd26bce25e9957059f7d5c16332b490458ae9c1f0fcdc19daef5a5b35da7f32cb460691c938664a7a529b808dfaa3f8c20ecc80dfd28b4df34e134ec598906b409c9c36ee7d474174aa2c9a6a256f1399a6988f0cf86189259fad98ebc52d91bd0718eff52ffc7c04e621cdb4da12edbdc2a507cc590610c300fb8dfd1fe8de33e088084217d7c29623c0ccceecc0a45c2320742", 0x5, r2}, 0x38) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) 14:33:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:28 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x7, 0xf5, 0xd, 0x0, 0xffffffff, 0x481, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x5104, 0x2, 0x7, 0x0, 0x3ff, 0x5, 0x40, 0x0, 0xfa, 0x0, 0x2e3d}, 0x0, 0xb, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r4}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r4, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={r6}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000680)=0x2c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x401, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x2}, 0x10, 0x0, r6, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095", @ANYRES16=r2, @ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESHEX=r5], &(0x7f0000000000)='GPL\x00', 0x4, 0xf6, &(0x7f00000001c0)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r8}, 0xc) 14:33:28 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x200, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f00000000c0)="3601d9af02947438eb9b42074ef0d275c788c3d77f116963a8c56437c66cdc179d192aba88738376494b9d69d9f2c54cbf14b2fc118688628067a8412507e1de364bf51e9d6148950a801bd669619e55ef237f0ce4e345045cd6681e37fca9f27df5361d4c5e8679f600a4aaafe4b62b340f", &(0x7f00000001c0)=""/226, &(0x7f00000004c0)="cf7d088e6693b09ff0572e79a81c6dca9d28c3c3b7e3475d8ea4504bc1a7580348b48200e1c062e5b02100e1ea1dae2ef819aa75319e93b44efc7eefe7da5682a57b1376e008fe64ae5ee823ae0b825d1d941b2616f2ffee91501d13f2773b26e3ee49389d8360e7185493ea52e1bad06e5f35faa75a73819026d2b177466b32168d2489dd9c6b0608ba108d44dd5b84311dcc879c40e888baac18554630313d5ee0b098c3e841a1927d36faba17e4c93e4b1a7eb0e6ba714c8f718f259e677a44d21e43fdf95ad65bf8014dbfceee8df1b147aa566629", &(0x7f00000005c0)="0d051bfd2c7ab8aac8af1c3ed893a91c39c533aa62a12cc0633332ec860da44d70e6109cba787527d18c8f38c2721beeab9cc326ef4cf12fca602e829aced21fe944854ebd163d0f7404aae1e00436890d24a025e893f71e6b71dd26bce25e9957059f7d5c16332b490458ae9c1f0fcdc19daef5a5b35da7f32cb460691c938664a7a529b808dfaa3f8c20ecc80dfd28b4df34e134ec598906b409c9c36ee7d474174aa2c9a6a256f1399a6988f0cf86189259fad98ebc52d91bd0718eff52ffc7c04e621cdb4da12edbdc2a507cc590610c300fb8dfd1fe8de33e088084217d7c29623c0ccceecc0a45c2320742", 0x5, r2}, 0x38) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) [ 1852.798885][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.805214][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 14:33:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1853.403946][ T9330] device hsr_slave_0 left promiscuous mode [ 1853.410324][ T9330] device hsr_slave_1 left promiscuous mode [ 1853.416549][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1853.424154][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1853.432950][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1853.440935][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.450403][ T9330] device bridge_slave_1 left promiscuous mode [ 1853.456553][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.465809][ T9330] device bridge_slave_0 left promiscuous mode [ 1853.472393][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.486185][ T9330] device veth1_macvtap left promiscuous mode [ 1853.492279][ T9330] device veth0_macvtap left promiscuous mode [ 1853.501779][ T9330] device veth1_vlan left promiscuous mode [ 1853.507825][ T9330] device veth0_vlan left promiscuous mode [ 1853.671058][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 1853.685498][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 1853.701371][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1853.716467][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1853.780099][ T9330] bond0 (unregistering): Released all slaves [ 1855.126238][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1855.135137][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1855.143377][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1855.151241][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1855.160133][ T3646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1855.167577][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1855.252445][T19593] chnl_net:caif_netlink_parms(): no params data found [ 1855.293141][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.300422][T19593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.309225][T19593] device bridge_slave_0 entered promiscuous mode [ 1855.317728][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.324858][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.334209][T19593] device bridge_slave_1 entered promiscuous mode [ 1855.355909][T19593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1855.368124][T19593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.380427][T17007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1855.390804][T17007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1855.404308][T17007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1855.413179][T17007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1855.424143][T17007] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1855.427887][T19593] team0: Port device team_slave_0 added [ 1855.434880][T17007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1855.448079][T19593] team0: Port device team_slave_1 added [ 1855.458276][T15874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1855.471892][T19196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1855.482082][T15874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1855.490895][T15874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1855.498967][T15874] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1855.500367][T19593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.506174][T15874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1855.516172][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.550040][T19593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.567447][T19593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.574405][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.601161][T19593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.669135][T19593] device hsr_slave_0 entered promiscuous mode [ 1855.675821][T19593] device hsr_slave_1 entered promiscuous mode [ 1855.682310][T19593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1855.690212][T19593] Cannot create hsr debugfs directory [ 1855.799304][T19596] chnl_net:caif_netlink_parms(): no params data found [ 1855.879917][T19597] chnl_net:caif_netlink_parms(): no params data found [ 1855.925724][T19596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.933191][T19596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.941738][T19596] device bridge_slave_0 entered promiscuous mode [ 1855.952495][T19596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.962856][T19596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.970689][T19596] device bridge_slave_1 entered promiscuous mode [ 1855.983295][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.990436][T19593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.997764][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.004822][T19593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.055099][T19596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.066411][T19596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1856.075886][T19597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.087339][T19597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.095093][T19597] device bridge_slave_0 entered promiscuous mode [ 1856.122404][T19597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.129701][T19597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.138495][T19597] device bridge_slave_1 entered promiscuous mode [ 1856.156639][T19596] team0: Port device team_slave_0 added [ 1856.179604][T19596] team0: Port device team_slave_1 added [ 1856.188608][T19597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.199989][T19597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1856.232076][T19596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1856.248263][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.274790][T19596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.304250][T19596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.311627][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.341375][T19596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.373700][T19597] team0: Port device team_slave_0 added [ 1856.380090][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.388887][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.414808][T19597] team0: Port device team_slave_1 added [ 1856.443361][T19596] device hsr_slave_0 entered promiscuous mode [ 1856.450594][T19596] device hsr_slave_1 entered promiscuous mode [ 1856.457689][T19596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1856.465248][T19596] Cannot create hsr debugfs directory [ 1856.483762][T19593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.493725][T19597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1856.500828][T19597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.528066][T19597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.565406][T19597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.572471][T19597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.598527][T19597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.619975][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1856.627992][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1856.646373][T19593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.676128][T19597] device hsr_slave_0 entered promiscuous mode [ 1856.683156][T19597] device hsr_slave_1 entered promiscuous mode [ 1856.691641][T19597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1856.699566][T19597] Cannot create hsr debugfs directory [ 1856.737688][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1856.746192][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1856.755740][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.762994][T17418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.771242][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1856.780244][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1856.789172][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.796243][T17418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.830193][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1856.872243][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1856.899791][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1856.909392][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1856.918525][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1856.927621][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1856.956232][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1856.964409][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1856.974001][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1856.990595][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1856.999408][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1857.011138][T19593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1857.049678][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1857.057303][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1857.086028][T19593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.149694][T19596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.197739][T16001] Bluetooth: hci0: command 0x0409 tx timeout [ 1857.197777][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1857.213574][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1857.229915][T19596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.250134][T19597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.268204][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.277684][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.286135][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.293262][T17395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.301831][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1857.311226][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1857.319927][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.327109][T17395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.335157][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1857.356201][T19597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.372559][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1857.380982][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1857.389950][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1857.398546][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1857.406348][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1857.416025][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1857.455844][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1857.465468][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1857.474267][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1857.483095][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1857.491349][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1857.500516][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.509334][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.517160][ T3710] Bluetooth: hci4: command 0x0409 tx timeout [ 1857.518046][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.530384][T17395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.538385][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1857.550219][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1857.558886][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.565947][T17395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.574432][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1857.585025][T19596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1857.607053][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1857.615960][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1857.633991][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1857.646364][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1857.655192][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1857.664651][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1857.673170][T17395] Bluetooth: hci5: command 0x0409 tx timeout [ 1857.696016][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1857.706049][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1857.721908][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1857.733748][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1857.741596][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1857.752391][T19597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1857.763905][T19597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1857.779409][T19596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.787596][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1857.796083][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1857.824917][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1857.834256][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1857.843565][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1857.851661][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1857.871019][T19597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.891709][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1857.901679][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1857.913234][T19593] device veth0_vlan entered promiscuous mode [ 1857.923034][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1857.931532][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1857.943632][T19593] device veth1_vlan entered promiscuous mode [ 1857.985966][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1858.004874][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1858.016213][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1858.025343][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1858.036973][T19593] device veth0_macvtap entered promiscuous mode [ 1858.046546][T19593] device veth1_macvtap entered promiscuous mode [ 1858.109359][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.121382][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.131304][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.141776][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.151698][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.163517][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.178775][T19593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.189405][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1858.198457][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1858.206542][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1858.215786][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1858.226867][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1858.237942][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.248418][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1858.260441][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.270348][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1858.282344][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.294435][T19593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.306074][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1858.316119][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1858.429255][T14066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.447236][T14066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.486433][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1858.513650][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.527305][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.554664][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1858.564543][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1858.587946][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1858.619365][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1858.633505][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1858.647604][T19596] device veth0_vlan entered promiscuous mode [ 1858.661981][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1858.672493][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1858.695682][T19596] device veth1_vlan entered promiscuous mode [ 1858.743980][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1858.758333][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1858.766306][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1858.776096][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1858.786612][T19596] device veth0_macvtap entered promiscuous mode [ 1858.797948][T19596] device veth1_macvtap entered promiscuous mode [ 1858.817098][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1858.825044][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1858.834005][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1858.842692][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1858.867824][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.879749][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.890144][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.904955][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.915849][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.926869][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.936685][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1858.948004][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.959826][T19596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.977491][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1858.985992][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1859.000957][T19597] device veth0_vlan entered promiscuous mode [ 1859.011378][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.022774][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.033180][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.043918][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.054350][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.065417][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.075771][T19596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.086387][T19596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.098085][T19596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.106454][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1859.114808][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1859.123073][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1859.131838][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1859.145450][T19597] device veth1_vlan entered promiscuous mode [ 1859.166454][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1859.174267][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1859.184135][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1859.232319][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1859.242034][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1859.251538][T17418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1859.274523][T19597] device veth0_macvtap entered promiscuous mode [ 1859.284315][T19446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.294095][T17403] Bluetooth: hci0: command 0x041b tx timeout [ 1859.313856][T19446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.314422][T19597] device veth1_macvtap entered promiscuous mode [ 1859.332608][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1859.344445][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1859.352745][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1859.375372][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.385933][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.400170][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1859.411462][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.424442][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.434554][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.445296][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.465873][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.476448][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.486633][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.497731][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.507949][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.519210][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.531784][T19597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.543198][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1859.552320][T17395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1859.568739][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.597128][T16001] Bluetooth: hci4: command 0x041b tx timeout [ 1859.605643][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.610095][T19652] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1859.625894][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.631874][T19652] CPU: 1 PID: 19652 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1859.646791][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.656854][T19652] Call Trace: [ 1859.660130][T19652] [ 1859.663066][T19652] dump_stack_lvl+0xcd/0x134 [ 1859.667674][T19652] dump_header+0x10b/0x7f9 [ 1859.672115][T19652] oom_kill_process.cold+0x10/0x15 [ 1859.677247][T19652] out_of_memory+0x358/0x14b0 [ 1859.681946][T19652] ? oom_killer_disable+0x270/0x270 [ 1859.687156][T19652] ? io_schedule_timeout+0x140/0x140 [ 1859.692473][T19652] mem_cgroup_out_of_memory+0x206/0x270 [ 1859.698043][T19652] ? mem_cgroup_margin+0x130/0x130 [ 1859.703206][T19652] memory_max_write+0x25c/0x3b0 [ 1859.708070][T19652] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1859.714149][T19652] ? lock_release+0x720/0x720 [ 1859.718852][T19652] cgroup_file_write+0x1de/0x770 [ 1859.723801][T19652] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1859.729896][T19652] ? kill_css+0x370/0x370 [ 1859.734243][T19652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1859.740502][T19652] ? kill_css+0x370/0x370 [ 1859.744838][T19652] kernfs_fop_write_iter+0x3f8/0x610 [ 1859.750143][T19652] new_sync_write+0x38a/0x560 [ 1859.754834][T19652] ? new_sync_read+0x5f0/0x5f0 [ 1859.759613][T19652] ? lock_release+0x720/0x720 [ 1859.764320][T19652] vfs_write+0x7c0/0xac0 [ 1859.768574][T19652] ksys_write+0x127/0x250 [ 1859.772913][T19652] ? __ia32_sys_read+0xb0/0xb0 [ 1859.777689][T19652] ? syscall_enter_from_user_mode+0x21/0x70 [ 1859.783598][T19652] do_syscall_64+0x35/0xb0 [ 1859.788030][T19652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1859.793933][T19652] RIP: 0033:0x7f6626e890e9 [ 1859.798358][T19652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1859.817969][T19652] RSP: 002b:00007f6627efc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1859.826388][T19652] RAX: ffffffffffffffda RBX: 00007f6626f9bf60 RCX: 00007f6626e890e9 [ 1859.834360][T19652] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1859.842330][T19652] RBP: 00007f6626ee308d R08: 0000000000000000 R09: 0000000000000000 [ 1859.850302][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.858271][T19652] R13: 00007fffad9996bf R14: 00007f6627efc300 R15: 0000000000022000 [ 1859.866352][T19652] [ 1859.878680][ T3710] Bluetooth: hci5: command 0x041b tx timeout [ 1859.886823][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.897863][T19652] memory: usage 632kB, limit 0kB, failcnt 324 [ 1859.904051][T19652] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1859.904259][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.911475][T19652] Memory cgroup stats for /syz4: [ 1859.922824][T19652] anon 114688 [ 1859.922824][T19652] file 208896 [ 1859.922824][T19652] kernel 323584 [ 1859.922824][T19652] kernel_stack 65536 [ 1859.922824][T19652] pagetables 77824 [ 1859.922824][T19652] percpu 0 [ 1859.922824][T19652] sock 0 [ 1859.922824][T19652] vmalloc 0 [ 1859.922824][T19652] shmem 208896 [ 1859.922824][T19652] file_mapped 159744 [ 1859.922824][T19652] file_dirty 0 [ 1859.922824][T19652] file_writeback 0 [ 1859.922824][T19652] swapcached 0 [ 1859.922824][T19652] anon_thp 0 [ 1859.922824][T19652] file_thp 0 [ 1859.922824][T19652] shmem_thp 0 [ 1859.922824][T19652] inactive_anon 122880 [ 1859.922824][T19652] active_anon 159744 [ 1859.922824][T19652] inactive_file 0 [ 1859.922824][T19652] active_file 0 [ 1859.922824][T19652] unevictable 0 [ 1859.922824][T19652] slab_reclaimable 43488 [ 1859.922824][T19652] slab_unreclaimable 99728 [ 1859.922824][T19652] slab 143216 [ 1859.922824][T19652] workingset_refault_anon 0 [ 1859.922824][T19652] workingset_refault_file 8 [ 1859.931058][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.031497][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1860.042642][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.052682][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1860.063362][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.063407][T19652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19596,uid=0 [ 1860.078562][T19597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1860.089612][T19652] Memory cgroup out of memory: Killed process 19596 (syz-executor.4) total-vm:50532kB, anon-rss:368kB, file-rss:8384kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1860.118242][ T28] oom_reaper: reaped process 19596 (syz-executor.4), now anon-rss:0kB, file-rss:7504kB, shmem-rss:0kB [ 1860.130650][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1860.139996][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1860.147143][T19652] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1860.166200][T19652] CPU: 0 PID: 19652 Comm: syz-executor.4 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1860.176733][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.186800][T19652] Call Trace: [ 1860.190069][T19652] [ 1860.192984][T19652] dump_stack_lvl+0xcd/0x134 [ 1860.197575][T19652] dump_header+0x10b/0x7f9 [ 1860.201989][T19652] oom_kill_process.cold+0x10/0x15 [ 1860.207099][T19652] out_of_memory+0x358/0x14b0 [ 1860.211769][T19652] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1860.217574][T19652] ? oom_killer_disable+0x270/0x270 [ 1860.222811][T19652] ? find_held_lock+0x2d/0x110 [ 1860.227595][T19652] mem_cgroup_out_of_memory+0x206/0x270 [ 1860.233140][T19652] ? mem_cgroup_margin+0x130/0x130 [ 1860.238245][T19652] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1860.244044][T19652] memory_max_write+0x25c/0x3b0 [ 1860.248884][T19652] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1860.254972][T19652] ? lock_release+0x720/0x720 [ 1860.259644][T19652] cgroup_file_write+0x1de/0x770 [ 1860.264659][T19652] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1860.270722][T19652] ? kill_css+0x370/0x370 [ 1860.275066][T19652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1860.281333][T19652] ? kill_css+0x370/0x370 [ 1860.285652][T19652] kernfs_fop_write_iter+0x3f8/0x610 [ 1860.290930][T19652] new_sync_write+0x38a/0x560 [ 1860.295595][T19652] ? new_sync_read+0x5f0/0x5f0 [ 1860.300356][T19652] ? lock_release+0x720/0x720 [ 1860.305039][T19652] vfs_write+0x7c0/0xac0 [ 1860.309287][T19652] ksys_write+0x127/0x250 [ 1860.313606][T19652] ? __ia32_sys_read+0xb0/0xb0 [ 1860.318373][T19652] ? syscall_enter_from_user_mode+0x21/0x70 [ 1860.324306][T19652] do_syscall_64+0x35/0xb0 [ 1860.328738][T19652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1860.334624][T19652] RIP: 0033:0x7f6626e890e9 [ 1860.339025][T19652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1860.358621][T19652] RSP: 002b:00007f6627efc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1860.367028][T19652] RAX: ffffffffffffffda RBX: 00007f6626f9bf60 RCX: 00007f6626e890e9 [ 1860.375028][T19652] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000004 [ 1860.382995][T19652] RBP: 00007f6626ee308d R08: 0000000000000000 R09: 0000000000000000 [ 1860.390973][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.398931][T19652] R13: 00007fffad9996bf R14: 00007f6627efc300 R15: 0000000000022000 [ 1860.406905][T19652] [ 1860.420256][T19652] memory: usage 600kB, limit 0kB, failcnt 324 [ 1860.427864][T19652] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1860.434734][T19652] Memory cgroup stats for /syz4: [ 1860.434911][T19652] anon 114688 [ 1860.434911][T19652] file 208896 [ 1860.434911][T19652] kernel 323584 [ 1860.434911][T19652] kernel_stack 65536 [ 1860.434911][T19652] pagetables 77824 [ 1860.434911][T19652] percpu 0 [ 1860.434911][T19652] sock 0 [ 1860.434911][T19652] vmalloc 0 [ 1860.434911][T19652] shmem 208896 [ 1860.434911][T19652] file_mapped 159744 [ 1860.434911][T19652] file_dirty 0 [ 1860.434911][T19652] file_writeback 0 [ 1860.434911][T19652] swapcached 0 [ 1860.434911][T19652] anon_thp 0 [ 1860.434911][T19652] file_thp 0 [ 1860.434911][T19652] shmem_thp 0 [ 1860.434911][T19652] inactive_anon 122880 [ 1860.434911][T19652] active_anon 159744 [ 1860.434911][T19652] inactive_file 0 [ 1860.434911][T19652] active_file 0 [ 1860.434911][T19652] unevictable 0 [ 1860.434911][T19652] slab_reclaimable 43488 [ 1860.434911][T19652] slab_unreclaimable 99728 [ 1860.434911][T19652] slab 143216 [ 1860.434911][T19652] workingset_refault_anon 0 [ 1860.434911][T19652] workingset_refault_file 8 [ 1860.544144][T19652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19651,uid=0 [ 1860.567939][T19652] Memory cgroup out of memory: Killed process 19652 (syz-executor.4) total-vm:54504kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1860.588648][ T28] oom_reaper: reaped process 19652 (syz-executor.4), now anon-rss:0kB, file-rss:8192kB, shmem-rss:12kB [ 1860.642519][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.661179][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.684109][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 14:33:36 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 14:33:36 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x200, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f00000000c0)="3601d9af02947438eb9b42074ef0d275c788c3d77f116963a8c56437c66cdc179d192aba88738376494b9d69d9f2c54cbf14b2fc118688628067a8412507e1de364bf51e9d6148950a801bd669619e55ef237f0ce4e345045cd6681e37fca9f27df5361d4c5e8679f600a4aaafe4b62b340f", &(0x7f00000001c0)=""/226, &(0x7f00000004c0)="cf7d088e6693b09ff0572e79a81c6dca9d28c3c3b7e3475d8ea4504bc1a7580348b48200e1c062e5b02100e1ea1dae2ef819aa75319e93b44efc7eefe7da5682a57b1376e008fe64ae5ee823ae0b825d1d941b2616f2ffee91501d13f2773b26e3ee49389d8360e7185493ea52e1bad06e5f35faa75a73819026d2b177466b32168d2489dd9c6b0608ba108d44dd5b84311dcc879c40e888baac18554630313d5ee0b098c3e841a1927d36faba17e4c93e4b1a7eb0e6ba714c8f718f259e677a44d21e43fdf95ad65bf8014dbfceee8df1b147aa566629", &(0x7f00000005c0)="0d051bfd2c7ab8aac8af1c3ed893a91c39c533aa62a12cc0633332ec860da44d70e6109cba787527d18c8f38c2721beeab9cc326ef4cf12fca602e829aced21fe944854ebd163d0f7404aae1e00436890d24a025e893f71e6b71dd26bce25e9957059f7d5c16332b490458ae9c1f0fcdc19daef5a5b35da7f32cb460691c938664a7a529b808dfaa3f8c20ecc80dfd28b4df34e134ec598906b409c9c36ee7d474174aa2c9a6a256f1399a6988f0cf86189259fad98ebc52d91bd0718eff52ffc7c04e621cdb4da12edbdc2a507cc590610c300fb8dfd1fe8de33e088084217d7c29623c0ccceecc0a45c2320742", 0x5, r2}, 0x38) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r3}, 0xc) 14:33:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 14:33:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) [ 1860.700610][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.744921][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:33:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1860.797453][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:33:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000140800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) 14:33:36 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000000)=0xc9ab) write$cgroup_pid(r3, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0xfff, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xa, 0xfffff000, 0x7fff}, 0x10}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 14:33:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}], 0x20}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) 14:33:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x12282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r1, &(0x7f0000000240), 0x12) [ 1861.356888][ T3710] Bluetooth: hci0: command 0x040f tx timeout [ 1861.438402][T16001] BUG: unable to handle page fault for address: fffffbfff40c0340 [ 1861.446158][T16001] #PF: supervisor read access in kernel mode [ 1861.452142][T16001] #PF: error_code(0x0000) - not-present page [ 1861.458122][T16001] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 1401d5067 PTE 0 [ 1861.461510][T19668] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1861.465797][T16001] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1861.465818][T16001] CPU: 0 PID: 16001 Comm: kworker/0:10 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1861.465844][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1861.465861][T16001] Workqueue: events bpf_prog_free_deferred [ 1861.465890][T16001] RIP: 0010:bpf_jit_free+0x106/0x2b0 [ 1861.476249][T19668] CPU: 1 PID: 19668 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-14466-g367590b7fccc #0 [ 1861.481386][T16001] Code: 60 ed f2 ff 45 84 ed 0f 84 fe 00 00 00 e8 72 e9 f2 ff 48 83 e3 c0 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 89 df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 5c 01 00 00 8b 1f e8 33 b2 ff [ 1861.491958][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1861.502005][T16001] RSP: 0018:ffffc9000304fc88 EFLAGS: 00010a02 [ 1861.507841][T19668] Call Trace: [ 1861.507854][T19668] [ 1861.513103][T16001] [ 1861.513111][T16001] RAX: dffffc0000000000 RBX: ffffffffa0601a00 RCX: 0000000000000000 [ 1861.523578][T19668] dump_stack_lvl+0xcd/0x134 [ 1861.543166][T16001] RDX: 1ffffffff40c0340 RSI: ffffffff8186488e RDI: ffffffffa0601a00 [ 1861.553564][T19668] dump_header+0x10b/0x7f9 [ 1861.559601][T16001] RBP: ffffc90002fe1000 R08: 0000000000000000 R09: 0000000000000001 [ 1861.562956][T19668] oom_kill_process.cold+0x10/0x15 [ 1861.565873][T16001] R10: ffffffff81864880 R11: 0000000000000000 R12: ffffc90002fe1038 [ 1861.568186][T19668] out_of_memory+0x358/0x14b0 [ 1861.576136][T16001] R13: 0000000000000001 R14: ffffed100b242124 R15: ffff888059210000 [ 1861.580708][T19668] ? oom_killer_disable+0x270/0x270 [ 1861.588659][T16001] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1861.593065][T19668] ? kernfs_notify+0x121/0x1f0 [ 1861.601042][T16001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1861.606139][T19668] ? io_schedule_timeout+0x140/0x140 [ 1861.614092][T16001] CR2: fffffbfff40c0340 CR3: 000000007b768000 CR4: 00000000003506f0 [ 1861.618750][T19668] mem_cgroup_out_of_memory+0x206/0x270 [ 1861.626706][T16001] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1861.631893][T19668] ? mem_cgroup_margin+0x130/0x130 [ 1861.640797][T16001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1861.645550][T19668] ? trace_hardirqs_on+0x38/0x1c0 [ 1861.652108][T16001] Call Trace: [ 1861.652119][T16001] [ 1861.657374][T19668] memory_max_write+0x25c/0x3b0 [ 1861.665325][T16001] bpf_prog_free_deferred+0x4e5/0x790 [ 1861.670849][T19668] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1861.678807][T16001] process_one_work+0x996/0x1610 [ 1861.683891][T19668] ? cgroup_file_write+0x7c/0x770 [ 1861.691847][T16001] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1861.696846][T19668] cgroup_file_write+0x1de/0x770 [ 1861.700110][T16001] ? rwlock_bug.part.0+0x90/0x90 [ 1861.703034][T19668] ? mem_cgroup_force_empty_write+0x150/0x150 [ 1861.707890][T16001] ? _raw_spin_lock_irq+0x41/0x50 [ 1861.713239][T19668] ? kill_css+0x370/0x370 [ 1861.719289][T16001] worker_thread+0x665/0x1080 [ 1861.724204][T19668] ? kill_css+0x370/0x370 [ 1861.729207][T16001] ? __kthread_parkme+0x15f/0x220 [ 1861.734547][T19668] kernfs_fop_write_iter+0x3f8/0x610 [ 1861.739473][T16001] ? process_one_work+0x1610/0x1610 [ 1861.744398][T19668] new_sync_write+0x38a/0x560 [ 1861.750463][T16001] kthread+0x2e9/0x3a0 [ 1861.755477][T19668] ? new_sync_read+0x5f0/0x5f0 [ 1861.759786][T16001] ? kthread_complete_and_exit+0x40/0x40 [ 1861.764443][T19668] ? lockdep_hardirqs_on+0x79/0x100 [ 1861.768759][T16001] ret_from_fork+0x1f/0x30 [ 1861.773764][T19668] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1861.779038][T16001] [ 1861.784243][T19668] vfs_write+0x7c0/0xac0 [ 1861.788890][T16001] Modules linked in: [ 1861.792942][T19668] ksys_write+0x127/0x250 [ 1861.797685][T16001] CR2: fffffbfff40c0340 [ 1861.803294][T19668] ? __ia32_sys_read+0xb0/0xb0 [ 1861.808473][T16001] ---[ end trace 0000000000000000 ]--- [ 1861.812865][T19668] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1861.819012][T16001] RIP: 0010:bpf_jit_free+0x106/0x2b0 [ 1861.822021][T19668] do_syscall_64+0x35/0xb0 [ 1861.826239][T16001] Code: 60 ed f2 ff 45 84 ed 0f 84 fe 00 00 00 e8 72 e9 f2 ff 48 83 e3 c0 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 89 df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 5c 01 00 00 8b 1f e8 33 b2 ff [ 1861.830111][T19668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1861.834414][T16001] RSP: 0018:ffffc9000304fc88 EFLAGS: 00010a02 [ 1861.838545][T19668] RIP: 0033:0x7f722d6890e9 [ 1861.843280][T16001] [ 1861.843287][T16001] RAX: dffffc0000000000 RBX: ffffffffa0601a00 RCX: 0000000000000000 [ 1861.848719][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1861.854584][T16001] RDX: 1ffffffff40c0340 RSI: ffffffff8186488e RDI: ffffffffa0601a00 [ 1861.859848][T19668] RSP: 002b:00007f722e705168 EFLAGS: 00000246 [ 1861.864238][T16001] RBP: ffffc90002fe1000 R08: 0000000000000000 R09: 0000000000000001 [ 1861.883822][T19668] ORIG_RAX: 0000000000000001 [ 1861.889694][T16001] R10: ffffffff81864880 R11: 0000000000000000 R12: ffffc90002fe1038 [ 1861.895739][T19668] RAX: ffffffffffffffda RBX: 00007f722d79bf60 RCX: 00007f722d6890e9 [ 1861.900131][T16001] R13: 0000000000000001 R14: ffffed100b242124 R15: ffff888059210000 [ 1861.902442][T19668] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1861.910409][T16001] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1861.929995][T19668] RBP: 00007f722d6e308d R08: 0000000000000000 R09: 0000000000000000 [ 1861.937950][T16001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1861.943991][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.951943][T16001] CR2: fffffbfff40c0340 CR3: 000000007b768000 CR4: 00000000003506f0 [ 1861.956593][T19668] R13: 00007ffecbddc3ef R14: 00007f722e705300 R15: 0000000000022000 [ 1861.964543][T16001] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1861.972513][T19668] [ 1861.980451][T16001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1861.990761][T19668] memory: usage 688kB, limit 0kB, failcnt 180 [ 1861.997311][T16001] Kernel panic - not syncing: Fatal exception [ 1861.997511][T16001] Kernel Offset: disabled [ 1862.071211][T16001] Rebooting in 86400 seconds..