][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3663.942009][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3664.074748][T22622] 8021q: adding VLAN 0 to HW filter on device team0 [ 3664.111200][T22758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22531,uid=0 [ 3664.151395][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3664.160258][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3664.161198][T22758] Memory cgroup out of memory: Killed process 22531 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3664.211395][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3664.211582][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 3664.227969][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3664.237238][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3664.245624][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3664.253764][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3664.262212][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3664.332846][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3664.371846][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3664.401490][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 3664.408768][ T6835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3664.540676][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3664.551833][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3664.564083][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3664.576371][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3664.604666][T27309] device hsr_slave_0 left promiscuous mode [ 3664.614368][T27309] device hsr_slave_1 left promiscuous mode [ 3664.621924][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3664.629398][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3664.641670][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 19:56:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:56:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3664.649159][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3664.673840][T27309] device bridge_slave_1 left promiscuous mode [ 3664.680143][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3664.730167][T27309] device bridge_slave_0 left promiscuous mode [ 3664.749194][T27309] bridge0: port 1(bridge_slave_0) entered disabled state 19:56:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3664.854093][T27309] device hsr_slave_0 left promiscuous mode [ 3664.877480][T27309] device hsr_slave_1 left promiscuous mode [ 3664.901710][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3664.922158][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3664.945905][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3664.975482][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3664.998211][T27309] device bridge_slave_1 left promiscuous mode [ 3665.026433][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3665.054714][T27309] device bridge_slave_0 left promiscuous mode [ 3665.071358][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3665.094992][T27309] device hsr_slave_0 left promiscuous mode [ 3665.111711][T27309] device hsr_slave_1 left promiscuous mode [ 3665.118634][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3665.138326][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3665.158782][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3665.179042][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3665.193879][T27309] device bridge_slave_1 left promiscuous mode [ 3665.220620][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3665.252546][T27309] device bridge_slave_0 left promiscuous mode [ 3665.259331][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3665.314856][T27309] device hsr_slave_0 left promiscuous mode [ 3665.321776][T27309] device hsr_slave_1 left promiscuous mode [ 3665.328314][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3665.336727][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3665.345029][T31933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3665.355070][T31933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3665.364466][T31933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3665.371375][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3665.380680][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3665.388720][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3665.396620][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3665.407123][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3665.452568][T27309] device bridge_slave_1 left promiscuous mode [ 3665.458844][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3665.523697][T27309] device bridge_slave_0 left promiscuous mode [ 3665.551879][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3665.587665][T27309] device hsr_slave_0 left promiscuous mode [ 3665.601832][T27309] device hsr_slave_1 left promiscuous mode [ 3665.618718][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3665.631334][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3665.661841][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3665.679654][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3665.701384][T27309] device bridge_slave_1 left promiscuous mode [ 3665.707685][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3665.727362][T27309] device bridge_slave_0 left promiscuous mode [ 3665.746339][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3665.772264][T27309] device hsr_slave_0 left promiscuous mode [ 3665.789041][T27309] device hsr_slave_1 left promiscuous mode [ 3665.796163][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3665.804086][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3665.814904][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3665.822719][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3665.836241][T27309] device bridge_slave_1 left promiscuous mode [ 3665.843363][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3665.852666][T27309] device bridge_slave_0 left promiscuous mode [ 3665.858921][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3665.888163][T27309] device veth1_macvtap left promiscuous mode [ 3665.894400][T27309] device veth0_macvtap left promiscuous mode [ 3665.900502][T27309] device veth1_vlan left promiscuous mode [ 3665.906767][T27309] device veth0_vlan left promiscuous mode [ 3665.921159][T27309] device veth1_macvtap left promiscuous mode [ 3665.927229][T27309] device veth0_macvtap left promiscuous mode [ 3665.933786][T27309] device veth1_vlan left promiscuous mode [ 3665.939665][T27309] device veth0_vlan left promiscuous mode [ 3665.948416][T27309] device veth1_macvtap left promiscuous mode [ 3665.955241][T27309] device veth0_macvtap left promiscuous mode [ 3665.961486][T27309] device veth1_vlan left promiscuous mode [ 3665.967362][T27309] device veth0_vlan left promiscuous mode [ 3665.975483][T27309] device veth1_macvtap left promiscuous mode [ 3665.982261][T27309] device veth0_macvtap left promiscuous mode [ 3665.988446][T27309] device veth1_vlan left promiscuous mode [ 3666.001442][T27309] device veth0_vlan left promiscuous mode [ 3666.008330][T27309] device veth1_macvtap left promiscuous mode [ 3666.014483][T27309] device veth0_macvtap left promiscuous mode [ 3666.020567][T27309] device veth1_vlan left promiscuous mode [ 3666.026727][T27309] device veth0_vlan left promiscuous mode [ 3666.035238][T27309] device veth1_macvtap left promiscuous mode [ 3666.041464][T27309] device veth0_macvtap left promiscuous mode [ 3666.048233][T27309] device veth1_vlan left promiscuous mode [ 3666.054378][T27309] device veth0_vlan left promiscuous mode [ 3666.351445][T10157] Bluetooth: hci1: command 0x0409 tx timeout [ 3666.568442][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3666.579185][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3666.588605][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3666.596838][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3666.605162][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3666.614475][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3667.019537][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3667.035192][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3667.066159][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3667.086378][T10157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3667.100215][T10157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3667.107999][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3667.109246][T10157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3667.127033][T10157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3667.134735][T10157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3667.142984][T10157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3667.220267][T27309] bond0 (unregistering): Released all slaves [ 3667.387216][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3667.400306][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3667.420127][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3667.435275][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3667.471110][T10157] Bluetooth: hci2: command 0x0409 tx timeout [ 3667.518432][T27309] bond0 (unregistering): Released all slaves [ 3667.671691][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3667.686031][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3667.698434][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3667.717273][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3667.800434][T27309] bond0 (unregistering): Released all slaves [ 3667.940408][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3667.954295][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3667.978315][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3667.992158][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3668.076281][T27309] bond0 (unregistering): Released all slaves [ 3668.216847][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3668.233285][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3668.249527][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3668.268361][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3668.343815][T27309] bond0 (unregistering): Released all slaves [ 3668.431102][T10157] Bluetooth: hci1: command 0x041b tx timeout [ 3668.483597][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3668.499670][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3668.519822][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3668.533493][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3668.616656][T27309] bond0 (unregistering): Released all slaves [ 3668.671868][ T5105] Bluetooth: hci4: command 0x0409 tx timeout [ 3668.696851][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3668.705842][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3668.745090][T22622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3668.771896][T22622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3668.809610][T22596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3668.818164][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3668.828634][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3668.852052][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3668.859610][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3668.896222][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3668.921686][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3668.930773][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3669.231098][ T5105] Bluetooth: hci5: command 0x0409 tx timeout [ 3669.551520][ T5105] Bluetooth: hci2: command 0x041b tx timeout [ 3669.695441][T22770] chnl_net:caif_netlink_parms(): no params data found [ 3669.874556][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3669.882341][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3669.907048][T22622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3669.988881][T22783] chnl_net:caif_netlink_parms(): no params data found [ 3670.046044][T22780] chnl_net:caif_netlink_parms(): no params data found [ 3670.068962][T22770] bridge0: port 1(bridge_slave_0) entered blocking state [ 3670.081180][T22770] bridge0: port 1(bridge_slave_0) entered disabled state [ 3670.092721][T22770] device bridge_slave_0 entered promiscuous mode [ 3670.146347][T22770] bridge0: port 2(bridge_slave_1) entered blocking state [ 3670.159893][T22770] bridge0: port 2(bridge_slave_1) entered disabled state [ 3670.192509][T22770] device bridge_slave_1 entered promiscuous mode [ 3670.203681][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3670.222235][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3670.239837][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3670.251893][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3670.285295][T22777] chnl_net:caif_netlink_parms(): no params data found [ 3670.413683][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3670.432386][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3670.453502][T22622] device veth0_vlan entered promiscuous mode [ 3670.477706][T22596] device veth0_vlan entered promiscuous mode [ 3670.507341][T22770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3670.511280][ T5105] Bluetooth: hci1: command 0x040f tx timeout [ 3670.525466][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3670.541631][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3670.571306][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3670.591537][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3670.644429][T22770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3670.658190][T22622] device veth1_vlan entered promiscuous mode [ 3670.694047][T22596] device veth1_vlan entered promiscuous mode [ 3670.711124][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3670.720578][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3670.729198][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3670.740715][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3670.751256][ T5105] Bluetooth: hci4: command 0x041b tx timeout [ 3670.921282][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3670.929595][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3670.944739][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3670.954578][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3670.979738][T22770] team0: Port device team_slave_0 added [ 3670.996257][T22770] team0: Port device team_slave_1 added [ 3671.003591][T22783] bridge0: port 1(bridge_slave_0) entered blocking state [ 3671.010723][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 3671.019534][T22783] device bridge_slave_0 entered promiscuous mode [ 3671.028503][T22783] bridge0: port 2(bridge_slave_1) entered blocking state [ 3671.038546][T22783] bridge0: port 2(bridge_slave_1) entered disabled state [ 3671.060584][T22783] device bridge_slave_1 entered promiscuous mode [ 3671.096854][T22780] bridge0: port 1(bridge_slave_0) entered blocking state [ 3671.104198][T22780] bridge0: port 1(bridge_slave_0) entered disabled state [ 3671.112599][T22780] device bridge_slave_0 entered promiscuous mode [ 3671.120701][T22622] device veth0_macvtap entered promiscuous mode [ 3671.128209][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3671.198148][T22777] bridge0: port 1(bridge_slave_0) entered blocking state [ 3671.206105][T22777] bridge0: port 1(bridge_slave_0) entered disabled state [ 3671.215036][T22777] device bridge_slave_0 entered promiscuous mode [ 3671.224191][T22780] bridge0: port 2(bridge_slave_1) entered blocking state [ 3671.233122][T22780] bridge0: port 2(bridge_slave_1) entered disabled state [ 3671.242258][T22780] device bridge_slave_1 entered promiscuous mode [ 3671.267232][T22596] device veth0_macvtap entered promiscuous mode [ 3671.281646][T22770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3671.288726][T22770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3671.311429][ T5105] Bluetooth: hci5: command 0x041b tx timeout [ 3671.317430][T22770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3671.350563][T22777] bridge0: port 2(bridge_slave_1) entered blocking state [ 3671.358137][T22777] bridge0: port 2(bridge_slave_1) entered disabled state [ 3671.366616][T22777] device bridge_slave_1 entered promiscuous mode [ 3671.394728][T22622] device veth1_macvtap entered promiscuous mode [ 3671.412939][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3671.422895][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3671.434401][T22596] device veth1_macvtap entered promiscuous mode [ 3671.446907][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3671.455725][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3671.464955][T22770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3671.473770][T22770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3671.499991][T22770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3671.521368][T22783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3671.541293][T22780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3671.559972][T22780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3671.580519][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.591899][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.603242][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.613869][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.625198][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.635997][ T5105] Bluetooth: hci2: command 0x040f tx timeout [ 3671.642291][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.654404][T22596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3671.667763][T22783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3671.750472][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3671.759337][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3671.771982][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3671.783479][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.794284][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3671.806801][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.817023][T22596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3671.829035][T22596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.842183][T22596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3671.879933][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.891452][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.901366][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.911872][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.921802][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.933790][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.943736][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3671.954647][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3671.966769][T22622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3671.976579][T22777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3671.990044][T22777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3672.011477][T22780] team0: Port device team_slave_0 added [ 3672.021493][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3672.030307][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3672.040393][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3672.051749][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3672.063375][T22596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.074550][T22596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.084267][T22596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.093448][T22596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.138320][T22783] team0: Port device team_slave_0 added [ 3672.146727][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3672.158025][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3672.168066][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3672.178852][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3672.189688][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3672.201602][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3672.211801][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3672.222382][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3672.233948][T22622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3672.252345][T22780] team0: Port device team_slave_1 added [ 3672.270167][T22770] device hsr_slave_0 entered promiscuous mode [ 3672.277898][T22770] device hsr_slave_1 entered promiscuous mode [ 3672.285205][T22770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3672.293147][T22770] Cannot create hsr debugfs directory [ 3672.301090][T22783] team0: Port device team_slave_1 added [ 3672.307106][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3672.316137][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3672.327917][T22622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.337275][T22622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.346243][T22622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.356314][T22622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.436826][T22777] team0: Port device team_slave_0 added [ 3672.499120][T22783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3672.507286][T22783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3672.536184][T22783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3672.570064][T22777] team0: Port device team_slave_1 added [ 3672.586156][T22780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3672.591334][ T5105] Bluetooth: hci1: command 0x0419 tx timeout [ 3672.597622][T22780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3672.627943][T22780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3672.660525][T22783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3672.675917][T22783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3672.702515][T22783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3672.760256][T22780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3672.768730][T22780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3672.795565][T22780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3672.831283][ T5105] Bluetooth: hci4: command 0x040f tx timeout [ 3672.859108][T22783] device hsr_slave_0 entered promiscuous mode [ 3672.866563][T22783] device hsr_slave_1 entered promiscuous mode [ 3672.875202][T22783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3672.883904][T22783] Cannot create hsr debugfs directory [ 3672.889769][T22777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3672.896790][T22777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3672.923831][T22777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3673.008754][T22777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3673.016443][T22777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3673.042911][T22777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3673.092669][T22780] device hsr_slave_0 entered promiscuous mode [ 3673.099708][T22780] device hsr_slave_1 entered promiscuous mode [ 3673.106898][T22780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3673.115037][T22780] Cannot create hsr debugfs directory [ 3673.129473][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3673.155007][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3673.198020][T22777] device hsr_slave_0 entered promiscuous mode [ 3673.205653][T22777] device hsr_slave_1 entered promiscuous mode [ 3673.213848][T22777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3673.222052][T22777] Cannot create hsr debugfs directory [ 3673.265729][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3673.317714][T22448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3673.334443][T22448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3673.379690][T22448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3673.389894][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3673.397410][ T5105] Bluetooth: hci5: command 0x040f tx timeout [ 3673.399032][T22448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3673.450028][T22770] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3673.487004][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3673.711196][ T5105] Bluetooth: hci2: command 0x0419 tx timeout [ 3673.807254][T22851] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3673.831446][T22851] CPU: 1 PID: 22851 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3673.841949][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3673.852043][T22851] Call Trace: [ 3673.852040][T22770] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3673.855332][T22851] [ 3673.868569][T22851] dump_stack_lvl+0xd1/0x138 [ 3673.873213][T22851] dump_header+0x10b/0x85f [ 3673.877693][T22851] oom_kill_process.cold+0x10/0x15 [ 3673.882861][T22851] out_of_memory+0x35c/0x14a0 [ 3673.887611][T22851] ? oom_killer_disable+0x280/0x280 [ 3673.892862][T22851] ? mark_held_locks+0x9f/0xe0 [ 3673.897654][T22851] mem_cgroup_out_of_memory+0x206/0x270 [ 3673.903236][T22851] ? mem_cgroup_margin+0x130/0x130 [ 3673.908400][T22851] memory_max_write+0x2f9/0x3c0 [ 3673.913272][T22851] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3673.919358][T22851] ? lock_release+0x810/0x810 [ 3673.924051][T22851] cgroup_file_write+0x1e2/0x770 [ 3673.929007][T22851] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3673.935088][T22851] ? kill_css+0x370/0x370 [ 3673.939434][T22851] ? __virt_addr_valid+0x61/0x2e0 [ 3673.944487][T22851] ? kill_css+0x370/0x370 [ 3673.948856][T22851] kernfs_fop_write_iter+0x3f1/0x600 [ 3673.954203][T22851] vfs_write+0x9ed/0xdd0 [ 3673.958483][T22851] ? kernel_write+0x630/0x630 [ 3673.963186][T22851] ? __fget_files+0x26a/0x440 [ 3673.967893][T22851] ksys_write+0x12b/0x250 [ 3673.972264][T22851] ? __ia32_sys_read+0xb0/0xb0 [ 3673.977041][T22851] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3673.982957][T22851] do_syscall_64+0x39/0xb0 [ 3673.987395][T22851] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3673.993326][T22851] RIP: 0033:0x7faffe28c0c9 [ 3673.997754][T22851] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3674.017370][T22851] RSP: 002b:00007faffef42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3674.025795][T22851] RAX: ffffffffffffffda RBX: 00007faffe3abf80 RCX: 00007faffe28c0c9 [ 3674.033772][T22851] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3674.041749][T22851] RBP: 00007faffe2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3674.049725][T22851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3674.057701][T22851] R13: 00007fff194f5a9f R14: 00007faffef42300 R15: 0000000000022000 [ 3674.065695][T22851] [ 3674.119051][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3674.128176][T22851] memory: usage 8584kB, limit 0kB, failcnt 1803 [ 3674.141195][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3674.153816][T22851] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3674.194131][T22851] Memory cgroup stats for /syz5: [ 3674.198435][T22851] anon 110592 [ 3674.198435][T22851] file 8355840 [ 3674.198435][T22851] kernel 311296 [ 3674.198435][T22851] kernel_stack 65536 [ 3674.198435][T22851] pagetables 77824 [ 3674.198435][T22851] sec_pagetables 0 [ 3674.198435][T22851] percpu 64 [ 3674.198435][T22851] sock 0 [ 3674.198435][T22851] vmalloc 0 [ 3674.198435][T22851] shmem 8355840 [ 3674.198435][T22851] zswap 0 [ 3674.198435][T22851] zswapped 0 [ 3674.198435][T22851] file_mapped 241664 [ 3674.198435][T22851] file_dirty 0 [ 3674.198435][T22851] file_writeback 0 [ 3674.198435][T22851] swapcached 0 [ 3674.198435][T22851] anon_thp 0 [ 3674.198435][T22851] file_thp 0 [ 3674.198435][T22851] shmem_thp 0 [ 3674.198435][T22851] inactive_anon 61440 [ 3674.198435][T22851] active_anon 8355840 [ 3674.198435][T22851] inactive_file 0 [ 3674.198435][T22851] active_file 0 [ 3674.198435][T22851] unevictable 0 [ 3674.198435][T22851] slab_reclaimable 43008 [ 3674.198435][T22851] slab_unreclaimable 100464 [ 3674.198435][T22851] slab 143472 [ 3674.351532][T22851] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22596,uid=0 [ 3674.370260][T22770] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3674.401633][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3674.525609][T22851] Memory cgroup out of memory: Killed process 22596 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3674.602038][T22770] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3674.911512][ T5105] Bluetooth: hci4: command 0x0419 tx timeout [ 3674.932352][T22855] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3674.972053][T22855] CPU: 1 PID: 22855 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3674.982541][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3674.992621][T22855] Call Trace: [ 3674.996006][T22855] [ 3674.998994][T22855] dump_stack_lvl+0xd1/0x138 [ 3675.003633][T22855] dump_header+0x10b/0x85f [ 3675.008098][T22855] oom_kill_process.cold+0x10/0x15 [ 3675.013254][T22855] out_of_memory+0x35c/0x14a0 [ 3675.017983][T22855] ? oom_killer_disable+0x280/0x280 [ 3675.023227][T22855] ? mark_held_locks+0x9f/0xe0 [ 3675.028030][T22855] mem_cgroup_out_of_memory+0x206/0x270 [ 3675.033617][T22855] ? mem_cgroup_margin+0x130/0x130 [ 3675.038784][T22855] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3675.044636][T22855] memory_max_write+0x2f9/0x3c0 [ 3675.049541][T22855] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3675.055656][T22855] ? lock_release+0x810/0x810 [ 3675.060380][T22855] cgroup_file_write+0x1e2/0x770 [ 3675.065363][T22855] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3675.071467][T22855] ? kill_css+0x370/0x370 [ 3675.075835][T22855] ? __virt_addr_valid+0x61/0x2e0 [ 3675.080908][T22855] ? kill_css+0x370/0x370 [ 3675.085260][T22855] kernfs_fop_write_iter+0x3f1/0x600 [ 3675.090605][T22855] vfs_write+0x9ed/0xdd0 [ 3675.094882][T22855] ? kernel_write+0x630/0x630 [ 3675.099596][T22855] ? __fget_files+0x26a/0x440 [ 3675.104320][T22855] ksys_write+0x12b/0x250 [ 3675.108679][T22855] ? __ia32_sys_read+0xb0/0xb0 [ 3675.113488][T22855] do_syscall_64+0x39/0xb0 [ 3675.117946][T22855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3675.123872][T22855] RIP: 0033:0x7f80dc08c0c9 [ 3675.128311][T22855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3675.148047][T22855] RSP: 002b:00007f80dcdca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3675.156596][T22855] RAX: ffffffffffffffda RBX: 00007f80dc1abf80 RCX: 00007f80dc08c0c9 [ 3675.164612][T22855] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 19:56:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3675.172615][T22855] RBP: 00007f80dc0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3675.180623][T22855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3675.188620][T22855] R13: 00007ffd86efdc2f R14: 00007f80dcdca300 R15: 0000000000022000 [ 3675.196643][T22855] [ 3675.351871][T22770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3675.448647][T22783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3675.471032][ T5105] Bluetooth: hci5: command 0x0419 tx timeout 19:56:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3675.504050][T22770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3675.525177][T22770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3675.607806][T22783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3675.646243][T22770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3675.714660][T22783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3675.728531][T22855] memory: usage 8604kB, limit 0kB, failcnt 2146 [ 3675.751035][T22855] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3675.776457][T22855] Memory cgroup stats for /syz0: [ 3675.776687][T22855] anon 114688 [ 3675.776687][T22855] file 8347648 [ 3675.776687][T22855] kernel 270336 [ 3675.776687][T22855] kernel_stack 32768 [ 3675.776687][T22855] pagetables 77824 [ 3675.776687][T22855] sec_pagetables 0 [ 3675.776687][T22855] percpu 64 [ 3675.776687][T22855] sock 0 [ 3675.776687][T22855] vmalloc 0 [ 3675.776687][T22855] shmem 8347648 [ 3675.776687][T22855] zswap 0 [ 3675.776687][T22855] zswapped 0 [ 3675.776687][T22855] file_mapped 192512 [ 3675.776687][T22855] file_dirty 0 [ 3675.776687][T22855] file_writeback 0 [ 3675.776687][T22855] swapcached 0 [ 3675.776687][T22855] anon_thp 0 [ 3675.776687][T22855] file_thp 0 [ 3675.776687][T22855] shmem_thp 0 [ 3675.776687][T22855] inactive_anon 114688 [ 3675.776687][T22855] active_anon 8347648 [ 3675.776687][T22855] inactive_file 0 [ 3675.776687][T22855] active_file 0 [ 3675.776687][T22855] unevictable 0 [ 3675.776687][T22855] slab_reclaimable 35424 [ 3675.776687][T22855] slab_unreclaimable 98736 [ 3675.776687][T22855] slab 134160 [ 3675.961780][T22855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22854,uid=0 [ 3676.038838][T22855] Memory cgroup out of memory: Killed process 22855 (syz-executor.0) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3676.083256][T22783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:56:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3676.311437][T22770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3676.387622][T22780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3676.454252][T22872] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3676.480985][T22872] CPU: 0 PID: 22872 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3676.491468][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3676.501555][T22872] Call Trace: [ 3676.504856][T22872] [ 3676.507803][T22872] dump_stack_lvl+0xd1/0x138 [ 3676.512465][T22872] dump_header+0x10b/0x85f [ 3676.516939][T22872] oom_kill_process.cold+0x10/0x15 [ 3676.522105][T22872] out_of_memory+0x35c/0x14a0 [ 3676.526843][T22872] ? find_held_lock+0x2d/0x110 [ 3676.531684][T22872] ? oom_killer_disable+0x280/0x280 [ 3676.536933][T22872] ? find_held_lock+0x2d/0x110 [ 3676.541740][T22872] mem_cgroup_out_of_memory+0x206/0x270 [ 3676.547324][T22872] ? mem_cgroup_margin+0x130/0x130 [ 3676.552472][T22872] ? lock_downgrade+0x6e0/0x6e0 [ 3676.557367][T22872] try_charge_memcg+0xefb/0x12f0 [ 3676.562341][T22872] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3676.568382][T22872] ? lock_downgrade+0x6e0/0x6e0 [ 3676.573275][T22872] charge_memcg+0x90/0x3b0 [ 3676.577729][T22872] __mem_cgroup_charge+0x2b/0x90 [ 3676.582704][T22872] ? copy_mc_to_kernel+0x3e/0x90 [ 3676.587675][T22872] do_wp_page+0x7ec/0x3370 [ 3676.592139][T22872] ? lock_release+0x810/0x810 [ 3676.596855][T22872] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3676.602270][T22872] ? do_raw_spin_lock+0x124/0x2b0 [ 3676.607319][T22872] ? rwlock_bug.part.0+0x90/0x90 [ 3676.612319][T22872] ? lock_chain_count+0x20/0x20 [ 3676.617228][T22872] __handle_mm_fault+0x1f58/0x3c90 [ 3676.622391][T22872] ? vm_iomap_memory+0x190/0x190 [ 3676.627393][T22872] handle_mm_fault+0x1b6/0x850 [ 3676.632200][T22872] do_user_addr_fault+0x475/0x1210 [ 3676.637354][T22872] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3676.642970][T22872] exc_page_fault+0x98/0x170 [ 3676.647697][T22872] asm_exc_page_fault+0x26/0x30 [ 3676.652586][T22872] RIP: 0010:__put_user_4+0x16/0x20 [ 3676.657737][T22872] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3676.677643][T22872] RSP: 0018:ffffc9000334ff38 EFLAGS: 00050293 [ 3676.683747][T22872] RAX: 0000000000000006 RBX: 00007fffffffeffd RCX: 00005555568bc6d0 [ 3676.691797][T22872] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88801d02de38 [ 3676.699793][T22872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3676.707809][T22872] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 3676.715842][T22872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3676.723878][T22872] schedule_tail+0xa8/0xe0 [ 3676.728330][T22872] ret_from_fork+0x8/0x30 [ 3676.732716][T22872] [ 3676.758480][T22770] 8021q: adding VLAN 0 to HW filter on device team0 [ 3676.793059][T22872] memory: usage 8444kB, limit 0kB, failcnt 2184 [ 3676.796942][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3676.800128][T22872] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3676.814896][T22872] Memory cgroup stats for /syz0: [ 3676.815090][T22872] anon 53248 [ 3676.815090][T22872] file 8347648 [ 3676.815090][T22872] kernel 245760 [ 3676.815090][T22872] kernel_stack 32768 [ 3676.815090][T22872] pagetables 57344 [ 3676.815090][T22872] sec_pagetables 0 [ 3676.815090][T22872] percpu 128 [ 3676.815090][T22872] sock 0 [ 3676.815090][T22872] vmalloc 0 [ 3676.815090][T22872] shmem 8347648 [ 3676.815090][T22872] zswap 0 [ 3676.815090][T22872] zswapped 0 [ 3676.815090][T22872] file_mapped 172032 [ 3676.815090][T22872] file_dirty 0 [ 3676.815090][T22872] file_writeback 0 [ 3676.815090][T22872] swapcached 0 [ 3676.815090][T22872] anon_thp 0 [ 3676.815090][T22872] file_thp 0 [ 3676.815090][T22872] shmem_thp 0 [ 3676.815090][T22872] inactive_anon 53248 [ 3676.815090][T22872] active_anon 8347648 [ 3676.815090][T22872] inactive_file 0 [ 3676.815090][T22872] active_file 0 [ 3676.815090][T22872] unevictable 0 [ 3676.815090][T22872] slab_reclaimable 31904 [ 3676.815090][T22872] slab_unreclaimable 99480 [ 3676.815090][T22872] slab 131384 [ 3676.822225][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3677.018181][T22872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22622,uid=0 [ 3677.050099][T22872] Memory cgroup out of memory: Killed process 22622 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3677.147698][T22780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3677.248950][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3677.261938][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3677.270503][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 3677.277674][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3677.287450][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3677.308235][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3677.319179][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 3677.326377][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3677.334491][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3677.366861][T22780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3677.397048][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:56:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3677.411787][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3677.452151][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3677.555698][T22780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3677.606063][T22770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3677.638456][T22770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 19:56:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3677.708994][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3677.722177][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3677.772560][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3677.784379][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3677.802928][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3677.818067][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3677.841281][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3678.251278][T27309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3678.491955][T27309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3678.707730][T10157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3678.717225][T10157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3678.738571][T10157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3678.747398][T10157] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3678.755551][T10157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3678.802520][T22780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3678.882908][T27309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3678.925557][T22770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3678.955120][T22780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3678.982069][T22780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3679.213103][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3679.220681][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3679.241899][T27309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3679.313523][T22780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3679.450545][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3679.472805][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3679.588486][T22770] device veth0_vlan entered promiscuous mode [ 3679.622626][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3679.632787][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3679.680831][T22770] device veth1_vlan entered promiscuous mode [ 3679.706915][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3679.715149][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3679.725932][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3679.850409][T22770] device veth0_macvtap entered promiscuous mode [ 3679.880982][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3679.890142][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3679.911984][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3679.928221][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3679.969045][T22770] device veth1_macvtap entered promiscuous mode [ 3680.036410][T27309] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3680.092076][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3680.190460][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3680.221078][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.240925][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3680.260954][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.270825][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3680.295930][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.296003][T10157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3680.306287][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3680.324700][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.334840][T10157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3680.335468][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3680.354318][T10157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3680.360065][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.373343][T10157] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3680.380751][T10157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3680.386125][T22770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3680.445909][T27309] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3680.505148][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3680.532756][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3680.563196][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3680.583303][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.610917][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3680.638899][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.654470][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3680.677874][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.701045][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3680.720929][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.740920][T22770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3680.770911][T22770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3680.793875][T22770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3680.817483][T22780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3680.840982][T10157] Bluetooth: hci0: command 0x0409 tx timeout [ 3680.892156][T27309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3680.905796][T22777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3680.921001][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3680.930077][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3680.944466][T22770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3680.971127][T22770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3680.979900][T22770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3681.060925][T22770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3681.134539][T22777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3681.215356][T27309] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3681.322879][T22777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3681.377180][T22777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3681.458165][T22780] 8021q: adding VLAN 0 to HW filter on device team0 [ 3681.489710][T22894] chnl_net:caif_netlink_parms(): no params data found [ 3681.615234][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3681.632150][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3681.645563][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3681.665786][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3681.674731][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 3681.681927][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3681.689830][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3681.698830][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3681.707583][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 3681.714948][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3681.724398][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3681.733876][T22783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3681.758992][T22783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3681.784476][T22783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3681.804192][T22783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3681.861347][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3681.974737][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3682.072753][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3682.078317][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3682.083310][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3682.104586][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3682.180177][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3682.213125][T22894] bridge0: port 1(bridge_slave_0) entered blocking state [ 3682.220286][T22894] bridge0: port 1(bridge_slave_0) entered disabled state [ 3682.247322][T22894] device bridge_slave_0 entered promiscuous mode [ 3682.332236][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3682.340424][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3682.350741][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3682.369853][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3682.392067][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3682.427915][T22894] bridge0: port 2(bridge_slave_1) entered blocking state [ 3682.435212][T10157] Bluetooth: hci3: command 0x0409 tx timeout [ 3682.450097][T22894] bridge0: port 2(bridge_slave_1) entered disabled state [ 3682.473191][T22894] device bridge_slave_1 entered promiscuous mode [ 3682.483438][T22780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3682.628919][T22894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3682.649787][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3682.685522][T22894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3682.701471][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3682.795406][T22777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3682.867172][T22894] team0: Port device team_slave_0 added [ 3682.911094][ T5105] Bluetooth: hci0: command 0x041b tx timeout [ 3682.911900][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3683.039882][T22894] team0: Port device team_slave_1 added [ 3683.055709][T22911] chnl_net:caif_netlink_parms(): no params data found [ 3683.095975][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3683.121887][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3683.144639][T22777] 8021q: adding VLAN 0 to HW filter on device team0 [ 3683.524721][T22954] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3683.537186][T22954] CPU: 1 PID: 22954 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3683.547658][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3683.557756][T22954] Call Trace: [ 3683.561093][T22954] [ 3683.564061][T22954] dump_stack_lvl+0xd1/0x138 [ 3683.568718][T22954] dump_header+0x10b/0x85f [ 3683.573198][T22954] oom_kill_process.cold+0x10/0x15 [ 3683.580319][T22954] out_of_memory+0x35c/0x14a0 [ 3683.585060][T22954] ? lockdep_hardirqs_on+0x7d/0x100 [ 3683.590388][T22954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3683.596586][T22954] ? oom_killer_disable+0x280/0x280 [ 3683.601832][T22954] mem_cgroup_out_of_memory+0x206/0x270 [ 3683.607412][T22954] ? mem_cgroup_margin+0x130/0x130 [ 3683.612564][T22954] memory_max_write+0x2f9/0x3c0 [ 3683.617436][T22954] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3683.623518][T22954] ? lock_release+0x810/0x810 [ 3683.628214][T22954] cgroup_file_write+0x1e2/0x770 [ 3683.633178][T22954] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3683.639268][T22954] ? kill_css+0x370/0x370 [ 3683.643619][T22954] ? __virt_addr_valid+0x61/0x2e0 [ 3683.648690][T22954] ? kill_css+0x370/0x370 [ 3683.653039][T22954] kernfs_fop_write_iter+0x3f1/0x600 [ 3683.658355][T22954] vfs_write+0x9ed/0xdd0 [ 3683.662617][T22954] ? kernel_write+0x630/0x630 [ 3683.667323][T22954] ? __fget_files+0x26a/0x440 [ 3683.672206][T22954] ksys_write+0x12b/0x250 [ 3683.676640][T22954] ? __ia32_sys_read+0xb0/0xb0 [ 3683.681451][T22954] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3683.687496][T22954] do_syscall_64+0x39/0xb0 [ 3683.692212][T22954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3683.698138][T22954] RIP: 0033:0x7f011768c0c9 [ 3683.702666][T22954] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3683.722554][T22954] RSP: 002b:00007f0118420168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3683.731014][T22954] RAX: ffffffffffffffda RBX: 00007f01177abf80 RCX: 00007f011768c0c9 [ 3683.739033][T22954] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3683.747037][T22954] RBP: 00007f01176e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3683.755038][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3683.763033][T22954] R13: 00007ffc85250c1f R14: 00007f0118420300 R15: 0000000000022000 [ 3683.771132][T22954] [ 3683.808589][T22954] memory: usage 560kB, limit 0kB, failcnt 4590 [ 3683.817317][T22954] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3683.840056][T22954] Memory cgroup stats for /syz2: [ 3683.856330][T22954] anon 110592 [ 3683.856330][T22954] file 155648 [ 3683.856330][T22954] kernel 290816 [ 3683.856330][T22954] kernel_stack 65536 [ 3683.856330][T22954] pagetables 81920 [ 3683.856330][T22954] sec_pagetables 0 [ 3683.856330][T22954] percpu 64 [ 3683.856330][T22954] sock 0 [ 3683.856330][T22954] vmalloc 0 [ 3683.856330][T22954] shmem 151552 [ 3683.856330][T22954] zswap 0 [ 3683.856330][T22954] zswapped 0 [ 3683.856330][T22954] file_mapped 139264 [ 3683.856330][T22954] file_dirty 0 [ 3683.856330][T22954] file_writeback 0 [ 3683.856330][T22954] swapcached 0 [ 3683.856330][T22954] anon_thp 0 [ 3683.856330][T22954] file_thp 0 [ 3683.856330][T22954] shmem_thp 0 [ 3683.856330][T22954] inactive_anon 167936 [ 3683.856330][T22954] active_anon 94208 [ 3683.856330][T22954] inactive_file 4096 [ 3683.856330][T22954] active_file 0 [ 3683.856330][T22954] unevictable 0 [ 3683.856330][T22954] slab_reclaimable 13592 [ 3683.856330][T22954] slab_unreclaimable 99168 [ 3683.856330][T22954] slab 112760 [ 3683.958703][T22894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3683.966208][T22894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3684.008158][T22954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22953,uid=0 [ 3684.041046][T22894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3684.051110][T22954] Memory cgroup out of memory: Killed process 22954 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3684.086627][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3684.095889][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3684.104956][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 3684.112151][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3684.120602][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3684.129704][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3684.139098][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 3684.146313][ T6259] bridge0: port 2(bridge_slave_1) entered forwarding state 19:56:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3684.154699][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3684.198910][T22770] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 3684.221135][T22770] CPU: 1 PID: 22770 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3684.232883][T22770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3684.243152][T22770] Call Trace: [ 3684.246469][T22770] [ 3684.249437][T22770] dump_stack_lvl+0xd1/0x138 [ 3684.254079][T22770] dump_header+0x10b/0x85f [ 3684.258565][T22770] oom_kill_process.cold+0x10/0x15 [ 3684.264549][T22770] out_of_memory+0x35c/0x14a0 [ 3684.269378][T22770] ? find_held_lock+0x2d/0x110 [ 3684.274373][T22770] ? oom_killer_disable+0x280/0x280 [ 3684.279663][T22770] ? find_held_lock+0x2d/0x110 [ 3684.284490][T22770] mem_cgroup_out_of_memory+0x206/0x270 [ 3684.290091][T22770] ? mem_cgroup_margin+0x130/0x130 [ 3684.295240][T22770] ? lock_downgrade+0x6e0/0x6e0 [ 3684.300122][T22770] try_charge_memcg+0xefb/0x12f0 [ 3684.305110][T22770] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3684.311116][T22770] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3684.317217][T22770] ? lock_downgrade+0x6e0/0x6e0 [ 3684.322126][T22770] obj_cgroup_charge+0x2af/0x5e0 [ 3684.327117][T22770] kmem_cache_alloc_lru+0x145/0x760 [ 3684.332392][T22770] ? ext4_alloc_inode+0x28/0x680 [ 3684.337391][T22770] ? ext4_free_in_core_inode+0x70/0x70 [ 3684.342946][T22770] ext4_alloc_inode+0x28/0x680 [ 3684.347862][T22770] ? ext4_free_in_core_inode+0x70/0x70 [ 3684.353353][T22770] alloc_inode+0x61/0x230 [ 3684.357971][T22770] iget_locked+0x1bb/0x700 [ 3684.362432][T22770] __ext4_iget+0x3af/0x4230 [ 3684.367002][T22770] ? ext4_get_projid+0x190/0x190 [ 3684.372744][T22770] ? ext4_fname_prepare_lookup+0x163/0x200 [ 3684.378582][T22770] ? ext4_fname_setup_filename+0x110/0x110 [ 3684.384426][T22770] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3684.390035][T22770] ext4_lookup+0x387/0x700 [ 3684.394493][T22770] ? ext4_resetent+0x2d0/0x2d0 [ 3684.399306][T22770] __lookup_slow+0x24c/0x460 [ 3684.403944][T22770] ? __lookup_hash+0x180/0x180 [ 3684.408732][T22770] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3684.414221][T22770] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3684.419710][T22770] ? lookup_fast+0x14e/0x520 [ 3684.424335][T22770] walk_component+0x33f/0x5a0 [ 3684.429031][T22770] path_lookupat+0x1ba/0x840 [ 3684.437552][T22770] filename_lookup+0x1d2/0x590 [ 3684.442537][T22770] ? may_linkat+0x500/0x500 [ 3684.447051][T22770] ? __might_fault+0xd9/0x180 [ 3684.451840][T22770] ? __phys_addr_symbol+0x30/0x70 [ 3684.457149][T22770] ? __check_object_size+0x2e2/0x5a0 [ 3684.462643][T22770] ? strncpy_from_user+0x28b/0x3c0 [ 3684.467785][T22770] ? getname_flags.part.0+0x1dd/0x4f0 [ 3684.473187][T22770] user_path_at_empty+0x46/0x60 [ 3684.478060][T22770] __x64_sys_umount+0xfc/0x190 [ 3684.483188][T22770] ? path_umount+0x10b0/0x10b0 [ 3684.487980][T22770] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3684.493900][T22770] do_syscall_64+0x39/0xb0 [ 3684.498349][T22770] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3684.504249][T22770] RIP: 0033:0x7f011768d537 [ 3684.508672][T22770] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3684.528309][T22770] RSP: 002b:00007ffc8524fd78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3684.536735][T22770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f011768d537 [ 3684.544714][T22770] RDX: 00007ffc8524fe4e RSI: 000000000000000a RDI: 00007ffc8524fe40 [ 3684.552699][T22770] RBP: 00007ffc8524fe40 R08: 00000000ffffffff R09: 00007ffc8524fc10 [ 3684.560681][T22770] R10: 00005555566738e3 R11: 0000000000000246 R12: 00007f01176e6b24 [ 3684.568777][T22770] R13: 00007ffc85250f00 R14: 0000555556673810 R15: 00007ffc85250f40 [ 3684.576770][T22770] [ 3684.591473][ T5105] Bluetooth: hci3: command 0x041b tx timeout [ 3684.601069][T22770] memory: usage 316kB, limit 0kB, failcnt 4609 [ 3684.612234][T22770] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3684.619161][T22770] Memory cgroup stats for /syz2: [ 3684.619354][T22770] anon 40960 [ 3684.619354][T22770] file 155648 [ 3684.619354][T22770] kernel 106496 [ 3684.619354][T22770] kernel_stack 0 [ 3684.619354][T22770] pagetables 8192 [ 3684.619354][T22770] sec_pagetables 0 [ 3684.619354][T22770] percpu 64 [ 3684.619354][T22770] sock 0 [ 3684.619354][T22770] vmalloc 0 [ 3684.619354][T22770] shmem 151552 [ 3684.619354][T22770] zswap 0 [ 3684.619354][T22770] zswapped 0 [ 3684.619354][T22770] file_mapped 139264 [ 3684.619354][T22770] file_dirty 0 [ 3684.619354][T22770] file_writeback 0 [ 3684.619354][T22770] swapcached 0 [ 3684.619354][T22770] anon_thp 0 [ 3684.619354][T22770] file_thp 0 [ 3684.619354][T22770] shmem_thp 0 [ 3684.619354][T22770] inactive_anon 98304 [ 3684.619354][T22770] active_anon 94208 [ 3684.619354][T22770] inactive_file 4096 [ 3684.619354][T22770] active_file 0 [ 3684.619354][T22770] unevictable 0 [ 3684.619354][T22770] slab_reclaimable 11224 [ 3684.619354][T22770] slab_unreclaimable 71440 [ 3684.619354][T22770] slab 82664 [ 3684.625537][T22894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3684.722626][T22770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22770,uid=0 [ 3684.761375][T22770] Memory cgroup out of memory: Killed process 22770 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3684.770031][T22894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3684.806978][T22894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3684.835265][T22783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3684.849584][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3684.859150][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3684.868385][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3684.876418][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3684.959335][T22780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3684.972622][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3684.989478][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3684.992070][ T5105] Bluetooth: hci0: command 0x040f tx timeout [ 3685.000202][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 19:56:46 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3685.166303][T22894] device hsr_slave_0 entered promiscuous mode [ 3685.181752][T22894] device hsr_slave_1 entered promiscuous mode [ 3685.191627][T22894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3685.222318][T22894] Cannot create hsr debugfs directory [ 3685.228615][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3685.243554][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3685.274466][T22777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3685.302568][T22777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3685.326500][T22911] bridge0: port 1(bridge_slave_0) entered blocking state [ 3685.335489][T22911] bridge0: port 1(bridge_slave_0) entered disabled state [ 3685.360055][T22911] device bridge_slave_0 entered promiscuous mode [ 3685.390634][T22783] 8021q: adding VLAN 0 to HW filter on device team0 [ 3685.480121][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3685.489746][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3685.498939][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3685.509605][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3685.569023][T22911] bridge0: port 2(bridge_slave_1) entered blocking state [ 3685.578261][T22911] bridge0: port 2(bridge_slave_1) entered disabled state [ 3685.587340][T22911] device bridge_slave_1 entered promiscuous mode [ 3685.665052][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3685.682198][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3685.702618][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3685.717325][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3685.742322][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 3685.749483][T18925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3685.782945][T22780] device veth0_vlan entered promiscuous mode [ 3685.896971][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3685.906697][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3685.917858][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3685.927279][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3685.941590][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3685.950125][T18925] bridge0: port 2(bridge_slave_1) entered blocking state [ 3685.957295][T18925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3685.992466][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3686.000490][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3686.027308][T22911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3686.138714][T22780] device veth1_vlan entered promiscuous mode [ 3686.171305][T22911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3686.287094][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3686.297027][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3686.440281][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3686.450391][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3686.495242][T22911] team0: Port device team_slave_0 added [ 3686.513401][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3686.524130][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3686.533985][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3686.543088][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3686.552081][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3686.563601][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3686.572558][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3686.580107][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3686.617101][T22780] device veth0_macvtap entered promiscuous mode [ 3686.632768][T22777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3686.644091][T22911] team0: Port device team_slave_1 added [ 3686.655131][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3686.671679][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3686.679563][ T5105] Bluetooth: hci3: command 0x040f tx timeout [ 3686.680579][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3686.712679][T22783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3686.723142][T22780] device veth1_macvtap entered promiscuous mode [ 3686.967021][T22911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3686.986126][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3687.040757][T22911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3687.071252][ T5105] Bluetooth: hci0: command 0x0419 tx timeout [ 3687.153421][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.190928][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.200784][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.250968][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.260851][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.306279][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.350924][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.380980][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.390854][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.441032][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.458180][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3687.469137][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.484454][T22780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3687.511634][T22911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3687.518639][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3687.567333][T22911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3687.661486][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3687.691678][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3687.708316][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3687.775997][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3687.803054][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.813422][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3687.841051][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.859652][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3687.883702][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.900951][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3687.920204][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.930593][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3687.970929][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3687.981819][T22780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3688.010958][T22780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3688.032544][T22780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3688.052318][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3688.071706][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3688.211667][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3688.219332][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3688.251370][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3688.260264][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3688.314650][T22780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3688.340968][T22780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3688.349731][T22780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3688.386399][T22780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3688.415359][T22783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3688.475762][T22911] device hsr_slave_0 entered promiscuous mode [ 3688.498888][T22911] device hsr_slave_1 entered promiscuous mode [ 3688.510426][T22911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3688.540145][T22911] Cannot create hsr debugfs directory [ 3688.653825][T22777] device veth0_vlan entered promiscuous mode [ 3688.662686][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3688.679197][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3688.695657][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3688.707472][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3688.760043][ T5105] Bluetooth: hci3: command 0x0419 tx timeout [ 3688.861547][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3688.870629][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3688.899925][T22777] device veth1_vlan entered promiscuous mode [ 3689.043212][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3689.061876][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3689.092691][T22783] device veth0_vlan entered promiscuous mode [ 3689.145480][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3689.161902][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3689.181507][T22448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3689.207488][T22783] device veth1_vlan entered promiscuous mode [ 3689.213673][T22448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3689.401801][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3689.431555][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3689.439856][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3689.470408][T22777] device veth0_macvtap entered promiscuous mode [ 3689.553411][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3689.562571][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3689.572216][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3689.581363][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3689.592665][T22777] device veth1_macvtap entered promiscuous mode [ 3689.604094][T22448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3689.612611][T22894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3689.627504][T22448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3689.646072][T22783] device veth0_macvtap entered promiscuous mode [ 3689.656607][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3689.665627][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3689.678473][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3689.689677][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3689.707296][T22894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3689.816823][T22783] device veth1_macvtap entered promiscuous mode [ 3689.841592][T22894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3689.861564][T22894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3689.885318][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3689.911013][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3689.931717][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3689.951037][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.004239][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.063259][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.098595][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.114163][T23045] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3690.134121][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.142101][T23045] CPU: 0 PID: 23045 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3690.154422][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3690.164554][T23045] Call Trace: [ 3690.165431][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.167841][T23045] [ 3690.167854][T23045] dump_stack_lvl+0xd1/0x138 [ 3690.167894][T23045] dump_header+0x10b/0x85f [ 3690.190436][T23045] oom_kill_process.cold+0x10/0x15 [ 3690.195642][T23045] out_of_memory+0x35c/0x14a0 [ 3690.200385][T23045] ? oom_killer_disable+0x280/0x280 [ 3690.205669][T23045] ? mark_held_locks+0x9f/0xe0 [ 3690.210544][T23045] mem_cgroup_out_of_memory+0x206/0x270 [ 3690.216198][T23045] ? mem_cgroup_margin+0x130/0x130 [ 3690.221355][T23045] memory_max_write+0x2f9/0x3c0 [ 3690.226225][T23045] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3690.232311][T23045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3690.238487][T23045] ? lockdep_hardirqs_on+0x7d/0x100 [ 3690.243729][T23045] cgroup_file_write+0x1e2/0x770 [ 3690.248710][T23045] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3690.255832][T23045] ? kill_css+0x370/0x370 [ 3690.260192][T23045] ? kill_css+0x370/0x370 [ 3690.264714][T23045] kernfs_fop_write_iter+0x3f1/0x600 [ 3690.270119][T23045] vfs_write+0x9ed/0xdd0 [ 3690.274470][T23045] ? kernel_write+0x630/0x630 [ 3690.279177][T23045] ? lockdep_hardirqs_on+0x7d/0x100 [ 3690.284433][T23045] ksys_write+0x12b/0x250 [ 3690.288779][T23045] ? __ia32_sys_read+0xb0/0xb0 [ 3690.293686][T23045] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3690.299605][T23045] do_syscall_64+0x39/0xb0 [ 3690.304657][T23045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3690.310700][T23045] RIP: 0033:0x7f6edba8c0c9 [ 3690.315126][T23045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3690.334835][T23045] RSP: 002b:00007f6edc858168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3690.343268][T23045] RAX: ffffffffffffffda RBX: 00007f6edbbabf80 RCX: 00007f6edba8c0c9 [ 3690.351270][T23045] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3690.359253][T23045] RBP: 00007f6edbae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3690.367234][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3690.375592][T23045] R13: 00007ffc89c2033f R14: 00007f6edc858300 R15: 0000000000022000 [ 3690.383614][T23045] [ 3690.400052][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.411473][T23045] memory: usage 8556kB, limit 0kB, failcnt 1585 [ 3690.420510][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.442413][T23045] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3690.451080][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.470969][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.481100][T23045] Memory cgroup stats for /syz1: [ 3690.487591][T23045] anon 114688 [ 3690.487591][T23045] file 8318976 [ 3690.487591][T23045] kernel 327680 [ 3690.487591][T23045] kernel_stack 65536 [ 3690.487591][T23045] pagetables 81920 [ 3690.487591][T23045] sec_pagetables 0 [ 3690.487591][T23045] percpu 64 [ 3690.487591][T23045] sock 0 [ 3690.487591][T23045] vmalloc 0 [ 3690.487591][T23045] shmem 8318976 [ 3690.487591][T23045] zswap 0 [ 3690.487591][T23045] zswapped 0 [ 3690.487591][T23045] file_mapped 131072 [ 3690.487591][T23045] file_dirty 0 [ 3690.487591][T23045] file_writeback 0 [ 3690.487591][T23045] swapcached 0 [ 3690.487591][T23045] anon_thp 0 [ 3690.487591][T23045] file_thp 0 [ 3690.487591][T23045] shmem_thp 0 [ 3690.487591][T23045] inactive_anon 114688 [ 3690.487591][T23045] active_anon 8318976 [ 3690.487591][T23045] inactive_file 0 [ 3690.487591][T23045] active_file 0 [ 3690.487591][T23045] unevictable 0 [ 3690.487591][T23045] slab_reclaimable 48920 [ 3690.487591][T23045] slab_unreclaimable 100464 [ 3690.487591][T23045] slab 149384 [ 3690.490962][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.521124][T23045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3690.616786][T22777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3690.658017][T23045] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23044,uid=0 [ 3690.673189][T23045] Memory cgroup out of memory: Killed process 23045 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3690.840108][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3690.872044][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3690.896485][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.912924][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.940845][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3690.961037][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3690.980964][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.011055][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.031055][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.053257][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.063597][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.082924][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.100962][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.132585][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.151044][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.175187][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.198914][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3691.218367][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.236303][T22783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3691.263127][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.301307][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.320935][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.361152][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.380958][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.400910][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.410778][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.440929][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.460948][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.490962][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.510920][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.530909][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.540773][T22777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.590991][T22777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.612612][T22777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3691.647787][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3691.663364][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3691.704215][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3691.751847][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3691.763187][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.787979][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.811085][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.831091][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.850965][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.870836][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.901897][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.912807][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.923139][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.933983][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.944183][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3691.955980][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3691.981037][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3692.002416][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3692.041142][T22783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3692.064155][T22783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3692.098625][T22783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3692.129215][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3692.142809][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3692.167204][T22777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3692.196017][T22777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3692.209644][T22777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3692.218967][T22777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3692.281105][T27309] device hsr_slave_0 left promiscuous mode [ 3692.301153][T27309] device hsr_slave_1 left promiscuous mode [ 3692.311522][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3692.319027][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3692.343347][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3692.350843][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3692.405763][T27309] device bridge_slave_1 left promiscuous mode [ 3692.430326][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3692.445300][T27309] device bridge_slave_0 left promiscuous mode [ 3692.463000][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3692.487266][T27309] device hsr_slave_0 left promiscuous mode [ 3692.501826][T27309] device hsr_slave_1 left promiscuous mode [ 3692.521355][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3692.528914][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3692.558928][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3692.581061][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3692.603188][T27309] device bridge_slave_1 left promiscuous mode [ 3692.609486][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3692.633891][T27309] device bridge_slave_0 left promiscuous mode [ 3692.651181][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3692.675630][T27309] device hsr_slave_0 left promiscuous mode [ 3692.692526][T27309] device hsr_slave_1 left promiscuous mode [ 3692.711474][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3692.718987][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3692.742997][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3692.750506][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3692.776706][T27309] device bridge_slave_1 left promiscuous mode [ 3692.792555][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3692.812464][T27309] device bridge_slave_0 left promiscuous mode [ 3692.818752][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3692.854347][T27309] device hsr_slave_0 left promiscuous mode [ 3692.871388][T27309] device hsr_slave_1 left promiscuous mode [ 3692.881895][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3692.889393][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3692.933417][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3692.941255][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3692.964437][T27309] device bridge_slave_1 left promiscuous mode [ 3692.970717][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3693.008318][T27309] device bridge_slave_0 left promiscuous mode [ 3693.016103][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3693.049194][T27309] device hsr_slave_0 left promiscuous mode [ 3693.061095][T27309] device hsr_slave_1 left promiscuous mode [ 3693.086781][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3693.111134][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3693.134336][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3693.151255][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3693.161217][T27309] device bridge_slave_1 left promiscuous mode [ 3693.167508][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3693.192513][T27309] device bridge_slave_0 left promiscuous mode [ 3693.198792][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3693.265238][T27309] device veth1_macvtap left promiscuous mode [ 3693.281017][T27309] device veth0_macvtap left promiscuous mode [ 3693.291206][T27309] device veth1_vlan left promiscuous mode [ 3693.297095][T27309] device veth0_vlan left promiscuous mode [ 3693.320267][T27309] device veth1_macvtap left promiscuous mode [ 3693.331096][T27309] device veth0_macvtap left promiscuous mode [ 3693.337274][T27309] device veth1_vlan left promiscuous mode [ 3693.358917][T27309] device veth0_vlan left promiscuous mode [ 3693.381617][T27309] device veth1_macvtap left promiscuous mode [ 3693.387733][T27309] device veth0_macvtap left promiscuous mode [ 3693.411259][T27309] device veth1_vlan left promiscuous mode [ 3693.417284][T27309] device veth0_vlan left promiscuous mode [ 3693.433210][T27309] device veth1_macvtap left promiscuous mode [ 3693.439316][T27309] device veth0_macvtap left promiscuous mode [ 3693.461936][T27309] device veth1_vlan left promiscuous mode [ 3693.467820][T27309] device veth0_vlan left promiscuous mode [ 3693.489603][T27309] device veth1_macvtap left promiscuous mode [ 3693.496732][T27309] device veth0_macvtap left promiscuous mode [ 3693.503166][T27309] device veth1_vlan left promiscuous mode [ 3693.509024][T27309] device veth0_vlan left promiscuous mode [ 3694.773344][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3694.804670][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3694.844208][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3694.862081][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3695.065009][T27309] bond0 (unregistering): Released all slaves [ 3695.376013][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3695.406527][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3695.439862][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3695.457546][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3695.584190][T27309] bond0 (unregistering): Released all slaves [ 3695.929011][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3695.969192][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3696.001757][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3696.053181][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3696.192293][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3696.198757][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3696.254456][T27309] bond0 (unregistering): Released all slaves [ 3696.524718][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3696.572654][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3696.612056][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3696.643504][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3696.819026][T27309] bond0 (unregistering): Released all slaves [ 3697.055773][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3697.104590][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3697.141392][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3697.180495][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3697.312117][T27309] bond0 (unregistering): Released all slaves [ 3697.385463][T22783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3697.397072][T22783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3697.411453][T22783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3697.420219][T22783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3697.727586][T22894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3697.765160][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3697.782255][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3697.842089][T22894] 8021q: adding VLAN 0 to HW filter on device team0 [ 3697.855372][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3697.871986][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3697.879885][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3697.959266][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3697.982580][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3697.993917][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 3698.001285][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3698.009769][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3698.036878][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3698.058688][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 3698.066287][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3698.074506][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3698.098090][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3698.109385][T22911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3698.123293][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3698.142246][T22911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3698.156859][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3698.181400][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3698.189625][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3698.210983][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3698.222823][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3698.233515][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3698.242954][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3698.251346][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3698.260479][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3698.270812][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3698.293688][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3698.311861][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3698.320631][T22911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3698.357800][T22911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3698.392266][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3698.409688][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3698.411629][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3698.425822][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3698.475145][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3698.909891][T23103] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3698.927265][T22911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3698.944689][T23103] CPU: 1 PID: 23103 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3698.955464][T23103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3698.965651][T23103] Call Trace: [ 3698.968961][T23103] [ 3698.971922][T23103] dump_stack_lvl+0xd1/0x138 [ 3698.976567][T23103] dump_header+0x10b/0x85f [ 3698.981091][T23103] oom_kill_process.cold+0x10/0x15 [ 3698.986460][T23103] out_of_memory+0x35c/0x14a0 [ 3698.991336][T23103] ? oom_killer_disable+0x280/0x280 [ 3698.996594][T23103] ? find_held_lock+0x2d/0x110 [ 3699.001593][T23103] mem_cgroup_out_of_memory+0x206/0x270 [ 3699.007272][T23103] ? mem_cgroup_margin+0x130/0x130 [ 3699.012442][T23103] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3699.018293][T23103] memory_max_write+0x2f9/0x3c0 [ 3699.023431][T23103] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3699.029551][T23103] ? lock_release+0x810/0x810 [ 3699.034279][T23103] cgroup_file_write+0x1e2/0x770 [ 3699.039257][T23103] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3699.045340][T23103] ? kill_css+0x370/0x370 [ 3699.049715][T23103] ? __virt_addr_valid+0x61/0x2e0 [ 3699.054858][T23103] ? kill_css+0x370/0x370 [ 3699.059207][T23103] kernfs_fop_write_iter+0x3f1/0x600 [ 3699.064524][T23103] vfs_write+0x9ed/0xdd0 [ 3699.068786][T23103] ? kernel_write+0x630/0x630 [ 3699.073482][T23103] ? __fget_files+0x26a/0x440 [ 3699.078203][T23103] ksys_write+0x12b/0x250 [ 3699.082548][T23103] ? __ia32_sys_read+0xb0/0xb0 [ 3699.087345][T23103] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3699.093260][T23103] do_syscall_64+0x39/0xb0 [ 3699.097696][T23103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3699.103779][T23103] RIP: 0033:0x7f6f6368c0c9 [ 3699.108239][T23103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3699.130031][T23103] RSP: 002b:00007f6f64317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3699.138459][T23103] RAX: ffffffffffffffda RBX: 00007f6f637abf80 RCX: 00007f6f6368c0c9 [ 3699.146442][T23103] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3699.154420][T23103] RBP: 00007f6f636e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3699.162399][T23103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3699.170377][T23103] R13: 00007ffc97b4eaaf R14: 00007f6f64317300 R15: 0000000000022000 [ 3699.179949][T23103] [ 3699.261653][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3699.269924][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3699.318925][T23103] memory: usage 8560kB, limit 0kB, failcnt 2336 [ 3699.330599][T22911] 8021q: adding VLAN 0 to HW filter on device team0 [ 3699.332266][T23103] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3699.344647][T23103] Memory cgroup stats for /syz4: [ 3699.351618][T23103] anon 110592 [ 3699.351618][T23103] file 8359936 [ 3699.351618][T23103] kernel 282624 [ 3699.351618][T23103] kernel_stack 65536 [ 3699.351618][T23103] pagetables 77824 [ 3699.351618][T23103] sec_pagetables 0 [ 3699.351618][T23103] percpu 64 [ 3699.351618][T23103] sock 0 [ 3699.351618][T23103] vmalloc 0 [ 3699.351618][T23103] shmem 8359936 [ 3699.351618][T23103] zswap 0 [ 3699.351618][T23103] zswapped 0 [ 3699.351618][T23103] file_mapped 176128 [ 3699.351618][T23103] file_dirty 0 [ 3699.351618][T23103] file_writeback 0 [ 3699.351618][T23103] swapcached 0 [ 3699.351618][T23103] anon_thp 0 [ 3699.351618][T23103] file_thp 0 [ 3699.351618][T23103] shmem_thp 0 [ 3699.351618][T23103] inactive_anon 110592 [ 3699.351618][T23103] active_anon 8359936 [ 3699.351618][T23103] inactive_file 0 [ 3699.351618][T23103] active_file 0 [ 3699.351618][T23103] unevictable 0 [ 3699.351618][T23103] slab_reclaimable 33736 [ 3699.351618][T23103] slab_unreclaimable 72456 [ 3699.351618][T23103] slab 106192 [ 3699.472826][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3699.531701][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3699.534977][T23103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23101,uid=0 [ 3699.540704][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 3699.556408][T23103] Memory cgroup out of memory: Killed process 23103 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:57:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:57:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3699.563065][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3699.621773][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 19:57:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3699.630671][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3699.632087][T22777] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 19:57:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3699.685766][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 3699.692974][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3699.711349][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3699.737609][T22777] CPU: 0 PID: 22777 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3699.738284][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3699.748088][T22777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3699.748103][T22777] Call Trace: [ 3699.748111][T22777] [ 3699.748121][T22777] dump_stack_lvl+0xd1/0x138 [ 3699.748157][T22777] dump_header+0x10b/0x85f [ 3699.748195][T22777] oom_kill_process.cold+0x10/0x15 [ 3699.748235][T22777] out_of_memory+0x35c/0x14a0 [ 3699.748279][T22777] ? find_held_lock+0x2d/0x110 [ 3699.748314][T22777] ? oom_killer_disable+0x280/0x280 [ 3699.801422][T22777] ? find_held_lock+0x2d/0x110 [ 3699.801997][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3699.806241][T22777] mem_cgroup_out_of_memory+0x206/0x270 [ 3699.819742][T22777] ? mem_cgroup_margin+0x130/0x130 [ 3699.824916][T22777] ? lock_downgrade+0x6e0/0x6e0 [ 3699.829829][T22777] try_charge_memcg+0xefb/0x12f0 [ 3699.834918][T22777] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3699.840956][T22777] ? lock_downgrade+0x6e0/0x6e0 [ 3699.845859][T22777] charge_memcg+0x90/0x3b0 [ 3699.850308][T22777] __mem_cgroup_charge+0x2b/0x90 [ 3699.855352][T22777] ? _compound_head+0x5d/0x150 [ 3699.860132][T22777] __handle_mm_fault+0x187d/0x3c90 [ 3699.865270][T22777] ? vm_iomap_memory+0x190/0x190 [ 3699.870254][T22777] handle_mm_fault+0x1b6/0x850 [ 3699.875040][T22777] do_user_addr_fault+0x475/0x1210 [ 3699.880178][T22777] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3699.885771][T22777] exc_page_fault+0x98/0x170 [ 3699.890383][T22777] asm_exc_page_fault+0x26/0x30 [ 3699.895250][T22777] RIP: 0033:0x7f6f6365a7d5 [ 3699.899764][T22777] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 3699.919598][T22777] RSP: 002b:00007ffc97b4da50 EFLAGS: 00010206 [ 3699.925690][T22777] RAX: 00000000000187c1 RBX: 00007f6f637885e0 RCX: 000055555655f840 [ 3699.933849][T22777] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 3699.941879][T22777] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f6f63788640 [ 3699.949868][T22777] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 3699.957941][T22777] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556557800 [ 3699.965948][T22777] [ 3699.970442][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3700.002369][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3700.032338][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3700.054502][T22911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3700.132545][T22911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3700.169324][T22894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3700.221249][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3700.229446][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3700.272443][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3700.311322][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3700.353017][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3700.391347][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3700.403396][T22777] memory: usage 8296kB, limit 0kB, failcnt 2355 [ 3700.409737][T22777] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3700.480536][T22777] Memory cgroup stats for /syz4: [ 3700.480791][T22777] anon 36864 [ 3700.480791][T22777] file 8359936 [ 3700.480791][T22777] kernel 98304 [ 3700.480791][T22777] kernel_stack 0 [ 3700.480791][T22777] pagetables 8192 [ 3700.480791][T22777] sec_pagetables 0 [ 3700.480791][T22777] percpu 64 [ 3700.480791][T22777] sock 0 [ 3700.480791][T22777] vmalloc 0 [ 3700.480791][T22777] shmem 8359936 [ 3700.480791][T22777] zswap 0 [ 3700.480791][T22777] zswapped 0 [ 3700.480791][T22777] file_mapped 163840 [ 3700.480791][T22777] file_dirty 0 [ 3700.480791][T22777] file_writeback 0 [ 3700.480791][T22777] swapcached 0 [ 3700.480791][T22777] anon_thp 0 [ 3700.480791][T22777] file_thp 0 [ 3700.480791][T22777] shmem_thp 0 [ 3700.480791][T22777] inactive_anon 36864 [ 3700.480791][T22777] active_anon 8359936 [ 3700.480791][T22777] inactive_file 0 [ 3700.480791][T22777] active_file 0 [ 3700.480791][T22777] unevictable 0 [ 3700.480791][T22777] slab_reclaimable 29832 [ 3700.480791][T22777] slab_unreclaimable 44728 [ 3700.480791][T22777] slab 74560 [ 3700.710983][T22777] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22777,uid=0 [ 3700.762178][T22777] Memory cgroup out of memory: Killed process 22777 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3700.799322][T22780] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3700.817791][T22780] CPU: 1 PID: 22780 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3700.828465][T22780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3700.838613][T22780] Call Trace: [ 3700.842015][T22780] [ 3700.844994][T22780] dump_stack_lvl+0xd1/0x138 [ 3700.849635][T22780] dump_header+0x10b/0x85f [ 3700.854111][T22780] oom_kill_process.cold+0x10/0x15 [ 3700.859277][T22780] out_of_memory+0x35c/0x14a0 [ 3700.864014][T22780] ? oom_killer_disable+0x280/0x280 [ 3700.869354][T22780] ? find_held_lock+0x2d/0x110 [ 3700.874173][T22780] mem_cgroup_out_of_memory+0x206/0x270 [ 3700.879766][T22780] ? mem_cgroup_margin+0x130/0x130 [ 3700.884924][T22780] ? lock_downgrade+0x6e0/0x6e0 [ 3700.889832][T22780] try_charge_memcg+0xefb/0x12f0 [ 3700.894815][T22780] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3700.900827][T22780] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3700.906606][T22780] ? lock_downgrade+0x6e0/0x6e0 [ 3700.911511][T22780] ? lock_downgrade+0x6e0/0x6e0 [ 3700.916380][T22780] ? rcu_read_unlock+0x9/0x60 [ 3700.921088][T22780] obj_cgroup_charge+0x2af/0x5e0 [ 3700.926046][T22780] ? copy_process+0x3aa/0x7520 [ 3700.930823][T22780] kmem_cache_alloc_node+0xb7/0x460 [ 3700.936130][T22780] copy_process+0x3aa/0x7520 [ 3700.940830][T22780] ? _raw_spin_unlock+0x28/0x40 [ 3700.945700][T22780] ? wp_page_reuse+0x197/0x570 [ 3700.950491][T22780] ? do_wp_page+0x844/0x3370 [ 3700.955194][T22780] ? __cleanup_sighand+0xb0/0xb0 [ 3700.960195][T22780] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3700.965618][T22780] ? rwlock_bug.part.0+0x90/0x90 [ 3700.970605][T22780] ? lock_chain_count+0x20/0x20 [ 3700.975494][T22780] kernel_clone+0xeb/0x990 [ 3700.980022][T22780] ? create_io_thread+0xf0/0xf0 [ 3700.984895][T22780] ? find_held_lock+0x2d/0x110 [ 3700.989775][T22780] __do_sys_clone+0xba/0x100 [ 3700.994555][T22780] ? kernel_clone+0x990/0x990 [ 3700.999272][T22780] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3701.005238][T22780] do_syscall_64+0x39/0xb0 [ 3701.009678][T22780] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3701.015672][T22780] RIP: 0033:0x7f6edba89dfb [ 3701.020098][T22780] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3701.039805][T22780] RSP: 002b:00007ffc89c20580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3701.048289][T22780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6edba89dfb [ 3701.056570][T22780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3701.064551][T22780] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556f23400 [ 3701.072535][T22780] R10: 0000555556f236d0 R11: 0000000000000246 R12: 0000000000000001 [ 3701.080521][T22780] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc89c20660 [ 3701.088540][T22780] [ 3701.204181][T22780] memory: usage 8272kB, limit 0kB, failcnt 1604 [ 3701.210595][T22780] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3701.220252][T22780] Memory cgroup stats for /syz1: [ 3701.220450][T22780] anon 45056 [ 3701.220450][T22780] file 8318976 [ 3701.220450][T22780] kernel 102400 [ 3701.220450][T22780] kernel_stack 0 [ 3701.220450][T22780] pagetables 8192 [ 3701.220450][T22780] sec_pagetables 0 [ 3701.220450][T22780] percpu 0 [ 3701.220450][T22780] sock 0 [ 3701.220450][T22780] vmalloc 0 [ 3701.220450][T22780] shmem 8318976 [ 3701.220450][T22780] zswap 0 [ 3701.220450][T22780] zswapped 0 [ 3701.220450][T22780] file_mapped 131072 [ 3701.220450][T22780] file_dirty 0 [ 3701.220450][T22780] file_writeback 0 [ 3701.220450][T22780] swapcached 0 [ 3701.220450][T22780] anon_thp 0 [ 3701.220450][T22780] file_thp 0 [ 3701.220450][T22780] shmem_thp 0 [ 3701.220450][T22780] inactive_anon 45056 [ 3701.220450][T22780] active_anon 8318976 [ 3701.220450][T22780] inactive_file 0 [ 3701.220450][T22780] active_file 0 [ 3701.220450][T22780] unevictable 0 [ 3701.220450][T22780] slab_reclaimable 26872 [ 3701.220450][T22780] slab_unreclaimable 59008 [ 3701.220450][T22780] slab 85880 [ 3701.350015][T22780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22780,uid=0 [ 3701.391802][T22780] Memory cgroup out of memory: Killed process 22780 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3701.429230][T22783] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3701.471834][T22783] CPU: 0 PID: 22783 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3701.482359][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3701.492462][T22783] Call Trace: [ 3701.495774][T22783] [ 3701.498745][T22783] dump_stack_lvl+0xd1/0x138 [ 3701.503490][T22783] dump_header+0x10b/0x85f [ 3701.507968][T22783] oom_kill_process.cold+0x10/0x15 [ 3701.513284][T22783] out_of_memory+0x35c/0x14a0 [ 3701.518029][T22783] ? oom_killer_disable+0x280/0x280 [ 3701.523314][T22783] ? find_held_lock+0x2d/0x110 [ 3701.528292][T22783] mem_cgroup_out_of_memory+0x206/0x270 [ 3701.533903][T22783] ? mem_cgroup_margin+0x130/0x130 [ 3701.539132][T22783] ? lock_downgrade+0x6e0/0x6e0 [ 3701.544047][T22783] try_charge_memcg+0xefb/0x12f0 [ 3701.549090][T22783] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3701.555116][T22783] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3701.560893][T22783] ? lock_downgrade+0x6e0/0x6e0 [ 3701.565797][T22783] ? lock_downgrade+0x6e0/0x6e0 [ 3701.570692][T22783] ? rcu_read_unlock+0x9/0x60 [ 3701.575455][T22783] obj_cgroup_charge+0x2af/0x5e0 [ 3701.580441][T22783] ? copy_process+0x3aa/0x7520 [ 3701.585247][T22783] kmem_cache_alloc_node+0xb7/0x460 [ 3701.590505][T22783] copy_process+0x3aa/0x7520 [ 3701.595142][T22783] ? _raw_spin_unlock+0x28/0x40 [ 3701.600041][T22783] ? wp_page_reuse+0x197/0x570 [ 3701.604882][T22783] ? do_wp_page+0x844/0x3370 [ 3701.609802][T22783] ? __cleanup_sighand+0xb0/0xb0 [ 3701.614789][T22783] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3701.620278][T22783] ? rwlock_bug.part.0+0x90/0x90 [ 3701.625278][T22783] ? lock_chain_count+0x20/0x20 [ 3701.630174][T22783] kernel_clone+0xeb/0x990 [ 3701.636464][T22783] ? create_io_thread+0xf0/0xf0 [ 3701.641370][T22783] ? find_held_lock+0x2d/0x110 [ 3701.646197][T22783] __do_sys_clone+0xba/0x100 [ 3701.650925][T22783] ? kernel_clone+0x990/0x990 [ 3701.655655][T22783] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3701.661598][T22783] do_syscall_64+0x39/0xb0 [ 3701.666068][T22783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3701.672126][T22783] RIP: 0033:0x7fd09c089dfb [ 3701.676596][T22783] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3701.696424][T22783] RSP: 002b:00007ffc5b6c98c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3701.704895][T22783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd09c089dfb [ 3701.713000][T22783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3701.721008][T22783] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557091400 [ 3701.729020][T22783] R10: 00005555570916d0 R11: 0000000000000246 R12: 0000000000000001 [ 3701.737033][T22783] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc5b6c99a0 [ 3701.745065][T22783] [ 3701.761612][T22783] memory: usage 8316kB, limit 0kB, failcnt 2198 [ 3701.768009][T22783] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3701.779001][T22783] Memory cgroup stats for /syz3: [ 3701.779224][T22783] anon 45056 [ 3701.779224][T22783] file 8359936 [ 3701.779224][T22783] kernel 110592 [ 3701.779224][T22783] kernel_stack 0 [ 3701.779224][T22783] pagetables 8192 [ 3701.779224][T22783] sec_pagetables 0 [ 3701.779224][T22783] percpu 0 [ 3701.779224][T22783] sock 0 [ 3701.779224][T22783] vmalloc 0 [ 3701.779224][T22783] shmem 8359936 [ 3701.779224][T22783] zswap 0 [ 3701.779224][T22783] zswapped 0 [ 3701.779224][T22783] file_mapped 147456 [ 3701.779224][T22783] file_dirty 0 [ 3701.779224][T22783] file_writeback 0 [ 3701.779224][T22783] swapcached 0 [ 3701.779224][T22783] anon_thp 0 [ 3701.779224][T22783] file_thp 0 [ 3701.779224][T22783] shmem_thp 0 [ 3701.779224][T22783] inactive_anon 3977216 [ 3701.779224][T22783] active_anon 4427776 [ 3701.779224][T22783] inactive_file 0 [ 3701.779224][T22783] active_file 0 [ 3701.779224][T22783] unevictable 0 [ 3701.779224][T22783] slab_reclaimable 29448 [ 3701.779224][T22783] slab_unreclaimable 59008 [ 3701.779224][T22783] slab 88456 [ 3702.001349][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3702.009206][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:57:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3702.090272][T22783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22783,uid=0 [ 3702.118416][T22783] Memory cgroup out of memory: Killed process 22783 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3702.234321][T22911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3702.301191][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3702.331548][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 19:57:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3702.396375][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3702.435850][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3702.477863][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3702.492760][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3702.504128][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3702.531847][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3702.551820][T10157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3702.562433][T10157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3702.570770][T10157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3702.579614][T10157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3702.587344][T10157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3702.596647][T10157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3702.749293][T22911] device veth0_vlan entered promiscuous mode [ 3702.767791][T22911] device veth1_vlan entered promiscuous mode [ 3702.859796][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3702.874730][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3702.893609][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3702.913733][T22894] device veth0_vlan entered promiscuous mode [ 3702.981552][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3702.995858][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3703.021923][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3703.078263][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3703.101687][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3703.186796][T22894] device veth1_vlan entered promiscuous mode [ 3703.239066][T22911] device veth0_macvtap entered promiscuous mode [ 3703.256955][T22911] device veth1_macvtap entered promiscuous mode [ 3703.359243][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3703.389335][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.421412][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3703.450381][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.474025][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3703.497060][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.510499][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3703.533927][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.581832][T22911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3703.597199][T23148] chnl_net:caif_netlink_parms(): no params data found [ 3703.614632][T22894] device veth0_macvtap entered promiscuous mode [ 3703.623949][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3703.634366][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3703.643556][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3703.662049][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3703.671504][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3703.680265][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3703.695379][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3703.717963][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.728169][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3703.740317][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.750506][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3703.768849][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.779068][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3703.797495][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3703.822583][T22911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3703.837587][T22894] device veth1_macvtap entered promiscuous mode [ 3703.847214][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3703.856538][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3703.865630][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3703.878020][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3703.903479][T22911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3703.913150][T22911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3703.936316][T22911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3703.947718][T22911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3703.996749][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3704.022398][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.051059][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3704.094958][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.132298][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3704.160953][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.170838][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3704.181981][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.211040][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3704.231356][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.249771][T22894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3704.294880][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3704.311873][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3704.352068][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3704.392688][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.420993][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3704.440580][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.462864][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3704.480482][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.494452][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3704.514607][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.536096][T22894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3704.559982][T22894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3704.581972][T22894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3704.600407][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3704.622178][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3704.682190][ T5105] Bluetooth: hci1: command 0x0409 tx timeout [ 3704.743802][T22894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3704.770130][T22894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3704.792223][T22894] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3704.832010][T22894] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3704.861341][T23148] bridge0: port 1(bridge_slave_0) entered blocking state [ 3704.868511][T23148] bridge0: port 1(bridge_slave_0) entered disabled state [ 3704.912004][T23148] device bridge_slave_0 entered promiscuous mode [ 3704.965375][T23148] bridge0: port 2(bridge_slave_1) entered blocking state [ 3704.991331][T23148] bridge0: port 2(bridge_slave_1) entered disabled state [ 3704.999640][T23148] device bridge_slave_1 entered promiscuous mode [ 3705.044597][T22448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3705.088916][T22448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3705.108777][T23148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3705.149729][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3705.174418][T22448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3705.175038][T23148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3705.201143][T22448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3705.253761][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3705.301570][T11011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3705.310696][T11011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3705.338135][T23148] team0: Port device team_slave_0 added [ 3705.394126][T23148] team0: Port device team_slave_1 added [ 3705.424713][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3705.477407][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3705.484714][T23198] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3705.511484][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3705.519386][T23198] CPU: 1 PID: 23198 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3705.529895][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3705.540080][T23198] Call Trace: [ 3705.543376][T23198] [ 3705.546322][T23198] dump_stack_lvl+0xd1/0x138 [ 3705.550941][T23198] dump_header+0x10b/0x85f [ 3705.555422][T23198] oom_kill_process.cold+0x10/0x15 [ 3705.560561][T23198] out_of_memory+0x35c/0x14a0 [ 3705.565297][T23198] ? oom_killer_disable+0x280/0x280 [ 3705.570526][T23198] mem_cgroup_out_of_memory+0x206/0x270 [ 3705.576102][T23198] ? mem_cgroup_margin+0x130/0x130 [ 3705.581268][T23198] memory_max_write+0x2f9/0x3c0 [ 3705.586142][T23198] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3705.592245][T23198] ? lock_release+0x810/0x810 [ 3705.596938][T23198] cgroup_file_write+0x1e2/0x770 [ 3705.601895][T23198] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3705.607974][T23198] ? kill_css+0x370/0x370 [ 3705.612320][T23198] ? __virt_addr_valid+0x61/0x2e0 [ 3705.617373][T23198] ? kill_css+0x370/0x370 [ 3705.621721][T23198] kernfs_fop_write_iter+0x3f1/0x600 [ 3705.627030][T23198] vfs_write+0x9ed/0xdd0 [ 3705.631288][T23198] ? kernel_write+0x630/0x630 [ 3705.635990][T23198] ? __fget_files+0x26a/0x440 [ 3705.640697][T23198] ksys_write+0x12b/0x250 [ 3705.645039][T23198] ? __ia32_sys_read+0xb0/0xb0 [ 3705.649819][T23198] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3705.655730][T23198] do_syscall_64+0x39/0xb0 [ 3705.660167][T23198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3705.666070][T23198] RIP: 0033:0x7efc1068c0c9 [ 3705.670494][T23198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3705.690107][T23198] RSP: 002b:00007efc11308168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3705.698532][T23198] RAX: ffffffffffffffda RBX: 00007efc107ac050 RCX: 00007efc1068c0c9 [ 3705.706512][T23198] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3705.714492][T23198] RBP: 00007efc106e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3705.722469][T23198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3705.730445][T23198] R13: 00007ffdd1f651cf R14: 00007efc11308300 R15: 0000000000022000 [ 3705.738444][T23198] [ 3705.746412][T23198] memory: usage 8632kB, limit 0kB, failcnt 2201 [ 3705.754656][T23148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3705.781059][T23198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3705.795176][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3705.836218][T23148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3705.864314][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3705.889445][T23148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3705.919571][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3706.072114][T23148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3706.223213][T23148] device hsr_slave_0 entered promiscuous mode [ 3706.262849][T23148] device hsr_slave_1 entered promiscuous mode [ 3706.349348][T23198] Memory cgroup stats for /syz0: [ 3706.349540][T23198] anon 118784 [ 3706.349540][T23198] file 8347648 [ 3706.349540][T23198] kernel 356352 [ 3706.349540][T23198] kernel_stack 98304 [ 3706.349540][T23198] pagetables 77824 [ 3706.349540][T23198] sec_pagetables 0 [ 3706.349540][T23198] percpu 64 [ 3706.349540][T23198] sock 0 [ 3706.349540][T23198] vmalloc 0 [ 3706.349540][T23198] shmem 8347648 [ 3706.349540][T23198] zswap 0 [ 3706.349540][T23198] zswapped 0 [ 3706.349540][T23198] file_mapped 192512 [ 3706.349540][T23198] file_dirty 0 [ 3706.349540][T23198] file_writeback 0 [ 3706.349540][T23198] swapcached 0 [ 3706.349540][T23198] anon_thp 0 [ 3706.349540][T23198] file_thp 0 [ 3706.349540][T23198] shmem_thp 0 [ 3706.349540][T23198] inactive_anon 118784 [ 3706.349540][T23198] active_anon 8347648 [ 3706.349540][T23198] inactive_file 0 [ 3706.349540][T23198] active_file 0 [ 3706.349540][T23198] unevictable 0 [ 3706.349540][T23198] slab_reclaimable 40960 [ 3706.349540][T23198] slab_unreclaimable 110448 [ 3706.349540][T23198] slab 151408 [ 3706.492523][T23198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22911,uid=0 [ 3706.531654][T23198] Memory cgroup out of memory: Killed process 22911 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3706.568254][T23201] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3706.598909][T23201] CPU: 0 PID: 23201 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3706.609432][T23201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3706.619516][T23201] Call Trace: [ 3706.622816][T23201] [ 3706.625769][T23201] dump_stack_lvl+0xd1/0x138 [ 3706.630405][T23201] dump_header+0x10b/0x85f [ 3706.634873][T23201] oom_kill_process.cold+0x10/0x15 [ 3706.640034][T23201] out_of_memory+0x35c/0x14a0 [ 3706.644786][T23201] ? oom_killer_disable+0x280/0x280 [ 3706.650040][T23201] ? mark_held_locks+0x9f/0xe0 [ 3706.654856][T23201] mem_cgroup_out_of_memory+0x206/0x270 [ 3706.660470][T23201] ? mem_cgroup_margin+0x130/0x130 [ 3706.665658][T23201] memory_max_write+0x2f9/0x3c0 [ 3706.670563][T23201] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3706.676695][T23201] cgroup_file_write+0x1e2/0x770 [ 3706.681687][T23201] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3706.688150][T23201] ? kill_css+0x370/0x370 [ 3706.692557][T23201] ? kill_css+0x370/0x370 [ 3706.696944][T23201] kernfs_fop_write_iter+0x3f1/0x600 [ 3706.702290][T23201] vfs_write+0x9ed/0xdd0 [ 3706.706587][T23201] ? kernel_write+0x630/0x630 [ 3706.711314][T23201] ? __fget_files+0x26a/0x440 [ 3706.716059][T23201] ksys_write+0x12b/0x250 [ 3706.720441][T23201] ? __ia32_sys_read+0xb0/0xb0 [ 3706.725253][T23201] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3706.731215][T23201] do_syscall_64+0x39/0xb0 [ 3706.735685][T23201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3706.741620][T23201] RIP: 0033:0x7f92cce8c0c9 [ 3706.746075][T23201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3706.754526][ T5105] Bluetooth: hci1: command 0x041b tx timeout [ 3706.765694][T23201] RSP: 002b:00007f92cb9fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3706.765724][T23201] RAX: ffffffffffffffda RBX: 00007f92ccfabf80 RCX: 00007f92cce8c0c9 [ 3706.765741][T23201] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3706.796220][T23201] RBP: 00007f92ccee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3706.804231][T23201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3706.812239][T23201] R13: 00007ffcfcd014ff R14: 00007f92cb9fe300 R15: 0000000000022000 [ 3706.820361][T23201] [ 3706.851425][T23201] memory: usage 8592kB, limit 0kB, failcnt 1803 [ 3706.873269][T23201] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3706.899385][T23201] Memory cgroup stats for /syz5: [ 3706.899615][T23201] anon 114688 [ 3706.899615][T23201] file 8355840 [ 3706.899615][T23201] kernel 262144 [ 3706.899615][T23201] kernel_stack 32768 [ 3706.899615][T23201] pagetables 81920 [ 3706.899615][T23201] sec_pagetables 0 [ 3706.899615][T23201] percpu 64 [ 3706.899615][T23201] sock 0 [ 3706.899615][T23201] vmalloc 0 [ 3706.899615][T23201] shmem 8355840 [ 3706.899615][T23201] zswap 0 [ 3706.899615][T23201] zswapped 0 [ 3706.899615][T23201] file_mapped 241664 [ 3706.899615][T23201] file_dirty 0 [ 3706.899615][T23201] file_writeback 0 [ 3706.899615][T23201] swapcached 0 [ 3706.899615][T23201] anon_thp 0 [ 3706.899615][T23201] file_thp 0 [ 3706.899615][T23201] shmem_thp 0 [ 3706.899615][T23201] inactive_anon 114688 [ 3706.899615][T23201] active_anon 8355840 [ 3706.899615][T23201] inactive_file 0 [ 3706.899615][T23201] active_file 0 [ 3706.899615][T23201] unevictable 0 [ 3706.899615][T23201] slab_reclaimable 37712 [ 3706.899615][T23201] slab_unreclaimable 85440 [ 3706.899615][T23201] slab 123152 [ 3707.065604][T23148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3707.206062][T23148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3707.230201][T23201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23200,uid=0 [ 3707.299840][T23201] Memory cgroup out of memory: Killed process 23201 (syz-executor.5) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:57:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:57:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:57:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3707.411999][T23148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3707.479374][T22894] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3707.530965][T22894] CPU: 1 PID: 22894 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3707.541460][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3707.551547][T22894] Call Trace: [ 3707.554834][T22894] [ 3707.557769][T22894] dump_stack_lvl+0xd1/0x138 [ 3707.562380][T22894] dump_header+0x10b/0x85f [ 3707.566819][T22894] oom_kill_process.cold+0x10/0x15 [ 3707.571956][T22894] out_of_memory+0x35c/0x14a0 [ 3707.576660][T22894] ? find_held_lock+0x2d/0x110 [ 3707.581440][T22894] ? oom_killer_disable+0x280/0x280 [ 3707.586659][T22894] ? find_held_lock+0x2d/0x110 [ 3707.591442][T22894] mem_cgroup_out_of_memory+0x206/0x270 [ 3707.597006][T22894] ? mem_cgroup_margin+0x130/0x130 [ 3707.602147][T22894] ? lock_downgrade+0x6e0/0x6e0 [ 3707.607022][T22894] try_charge_memcg+0xefb/0x12f0 [ 3707.611981][T22894] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3707.617989][T22894] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3707.623767][T22894] ? lock_downgrade+0x6e0/0x6e0 [ 3707.628663][T22894] ? lock_downgrade+0x6e0/0x6e0 [ 3707.633729][T22894] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3707.639306][T22894] __alloc_pages+0x1f3/0x5b0 [ 3707.643925][T22894] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3707.650720][T22894] ? copy_page_range+0x1ff7/0x3b40 [ 3707.655864][T22894] alloc_pages+0x1aa/0x270 [ 3707.660300][T22894] get_zeroed_page+0x14/0x40 [ 3707.664907][T22894] __pud_alloc+0x3b/0x180 [ 3707.669258][T22894] copy_page_range+0x246b/0x3b40 [ 3707.674221][T22894] ? mas_wr_modify+0x999/0x16d0 [ 3707.679114][T22894] ? mas_store+0x206/0x2e0 [ 3707.683587][T22894] ? handle_mm_fault+0x850/0x850 [ 3707.688576][T22894] ? anon_vma_fork+0xba/0x630 [ 3707.693456][T22894] dup_mmap+0xc10/0x10b0 [ 3707.697736][T22894] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3707.703034][T22894] ? lock_downgrade+0x6e0/0x6e0 [ 3707.707903][T22894] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3707.713740][T22894] ? mm_init+0x8e0/0xc10 [ 3707.717997][T22894] copy_process+0x440f/0x7520 [ 3707.722687][T22894] ? _raw_spin_unlock+0x28/0x40 [ 3707.727552][T22894] ? wp_page_reuse+0x197/0x570 [ 3707.732348][T22894] ? __cleanup_sighand+0xb0/0xb0 [ 3707.738691][T22894] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3707.744108][T22894] ? rwlock_bug.part.0+0x90/0x90 [ 3707.749089][T22894] ? lock_chain_count+0x20/0x20 [ 3707.753972][T22894] kernel_clone+0xeb/0x990 [ 3707.758408][T22894] ? create_io_thread+0xf0/0xf0 [ 3707.763278][T22894] ? find_held_lock+0x2d/0x110 [ 3707.768071][T22894] __do_sys_clone+0xba/0x100 [ 3707.772761][T22894] ? kernel_clone+0x990/0x990 [ 3707.777462][T22894] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3707.783376][T22894] do_syscall_64+0x39/0xb0 [ 3707.787810][T22894] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3707.793720][T22894] RIP: 0033:0x7f92cce89dfb [ 3707.798159][T22894] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3707.817904][T22894] RSP: 002b:00007ffcfcd01740 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3707.826355][T22894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92cce89dfb [ 3707.834726][T22894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3707.842705][T22894] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555650400 [ 3707.850697][T22894] R10: 00005555556506d0 R11: 0000000000000246 R12: 0000000000000001 [ 3707.858723][T22894] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcfcd01820 [ 3707.866731][T22894] [ 3707.907228][T23148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3707.931086][T22894] memory: usage 8368kB, limit 0kB, failcnt 1822 [ 3707.937414][T22894] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3707.983450][T22894] Memory cgroup stats for /syz5: [ 3707.983672][T22894] anon 45056 [ 3707.983672][T22894] file 8355840 [ 3707.983672][T22894] kernel 167936 [ 3707.983672][T22894] kernel_stack 32768 [ 3707.983672][T22894] pagetables 16384 [ 3707.983672][T22894] sec_pagetables 0 [ 3707.983672][T22894] percpu 128 [ 3707.983672][T22894] sock 0 [ 3707.983672][T22894] vmalloc 0 [ 3707.983672][T22894] shmem 8355840 [ 3707.983672][T22894] zswap 0 [ 3707.983672][T22894] zswapped 0 [ 3707.983672][T22894] file_mapped 221184 [ 3707.983672][T22894] file_dirty 0 [ 3707.983672][T22894] file_writeback 0 [ 3707.983672][T22894] swapcached 0 [ 3707.983672][T22894] anon_thp 0 [ 3707.983672][T22894] file_thp 0 [ 3707.983672][T22894] shmem_thp 0 [ 3707.983672][T22894] inactive_anon 45056 [ 3707.983672][T22894] active_anon 8355840 [ 3707.983672][T22894] inactive_file 0 [ 3707.983672][T22894] active_file 0 [ 3707.983672][T22894] unevictable 0 [ 3707.983672][T22894] slab_reclaimable 31376 [ 3707.983672][T22894] slab_unreclaimable 66632 [ 3707.983672][T22894] slab 98008 [ 3708.121508][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22894,uid=0 [ 3708.189456][T22894] Memory cgroup out of memory: Killed process 22894 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3708.215583][T27309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3708.462151][T27309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:57:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3708.831004][T10157] Bluetooth: hci1: command 0x040f tx timeout [ 3709.052229][T27309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:57:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3709.152114][T23148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3709.291767][T27309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3709.341389][T23148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3709.366061][T23148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3709.432430][T23148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3709.639571][T27309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3709.813068][T27309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3709.886147][T23148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3710.032060][T27309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3710.101403][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3710.110624][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3710.221824][T27309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3710.261837][T23148] 8021q: adding VLAN 0 to HW filter on device team0 [ 3710.303737][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3710.314453][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3710.331945][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3710.335554][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3710.349256][T31933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3710.358095][T31933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3710.399064][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3710.411616][T22308] bridge0: port 1(bridge_slave_0) entered blocking state [ 3710.418837][T22308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3710.452666][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3710.473410][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3710.482687][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3710.493006][T22308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3710.500224][T22308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3710.521112][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3710.609214][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3710.629080][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3710.670620][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3710.768197][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3710.777796][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3710.827264][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3710.856743][T23148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3710.901932][T23148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3710.914620][T31933] Bluetooth: hci1: command 0x0419 tx timeout [ 3711.007796][T27309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3711.058538][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3711.083658][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3711.212960][T27309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3711.411427][T10157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3711.424715][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3711.431486][T18067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3711.441580][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3711.441614][T18067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3711.457306][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3711.466418][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3711.475027][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3711.482545][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3711.490668][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3711.502352][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3711.511264][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3711.547311][T27309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3711.601826][T10157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3711.623453][T10157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3711.632157][T10157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3711.643108][T10157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3711.655989][T10157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3711.663692][T10157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3711.747827][T27309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3712.003154][T23238] chnl_net:caif_netlink_parms(): no params data found [ 3712.142580][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3712.157547][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3712.203801][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3712.212388][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3712.220266][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3712.226477][T23148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3712.245105][T10157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3712.252673][T10157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3712.431069][ T5854] Bluetooth: hci0: command 0x0409 tx timeout [ 3712.443413][T27309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3712.599553][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3712.611777][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3712.648616][T27309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3712.739440][T27309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3712.759523][T23238] bridge0: port 1(bridge_slave_0) entered blocking state [ 3712.768911][T23238] bridge0: port 1(bridge_slave_0) entered disabled state [ 3712.782695][T23238] device bridge_slave_0 entered promiscuous mode [ 3712.796617][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3712.806233][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3712.816514][T23148] device veth0_vlan entered promiscuous mode [ 3712.845113][T23253] chnl_net:caif_netlink_parms(): no params data found [ 3712.878686][T27309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3712.893405][T23238] bridge0: port 2(bridge_slave_1) entered blocking state [ 3712.900567][T23238] bridge0: port 2(bridge_slave_1) entered disabled state [ 3712.924971][T23238] device bridge_slave_1 entered promiscuous mode [ 3712.942868][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3712.962540][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3712.977281][T23148] device veth1_vlan entered promiscuous mode [ 3713.088633][T23238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3713.171580][T23238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3713.230514][T23148] device veth0_macvtap entered promiscuous mode [ 3713.314501][T23148] device veth1_macvtap entered promiscuous mode [ 3713.335871][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3713.347600][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3713.391720][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3713.400551][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3713.409433][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3713.453388][T23254] chnl_net:caif_netlink_parms(): no params data found [ 3713.490427][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.501945][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.513130][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.524026][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.534755][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.545688][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.561873][ T5854] Bluetooth: hci3: command 0x0409 tx timeout [ 3713.562169][T10157] Bluetooth: hci2: command 0x0409 tx timeout [ 3713.576990][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.592883][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.603312][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.614456][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.624849][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3713.635752][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.647622][T23148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3713.700679][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3713.709425][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3713.717696][T10157] Bluetooth: hci4: command 0x0409 tx timeout [ 3713.725943][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3713.853987][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.877987][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.888304][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.899307][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.909768][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.920578][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.930670][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.941419][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.951964][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.962956][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.973925][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3713.984538][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3713.996913][T23148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3714.014271][T23238] team0: Port device team_slave_0 added [ 3714.048581][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3714.057284][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3714.098518][T23238] team0: Port device team_slave_1 added [ 3714.133768][T23253] bridge0: port 1(bridge_slave_0) entered blocking state [ 3714.151604][T23253] bridge0: port 1(bridge_slave_0) entered disabled state [ 3714.171435][T23253] device bridge_slave_0 entered promiscuous mode [ 3714.242538][T23258] chnl_net:caif_netlink_parms(): no params data found [ 3714.266874][T23253] bridge0: port 2(bridge_slave_1) entered blocking state [ 3714.281629][ T5854] Bluetooth: hci5: command 0x0409 tx timeout [ 3714.299349][T23253] bridge0: port 2(bridge_slave_1) entered disabled state [ 3714.319622][T23253] device bridge_slave_1 entered promiscuous mode [ 3714.334218][T23148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3714.360669][T23148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3714.380921][T23148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3714.389824][T23148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3714.511509][ T5854] Bluetooth: hci0: command 0x041b tx timeout [ 3714.526220][T23238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3714.541769][T23238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3714.595774][T23238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3714.695883][T23272] chnl_net:caif_netlink_parms(): no params data found [ 3714.714395][T23238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3714.731191][T23238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3714.759051][T23238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3714.906938][T23253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3714.934690][T23254] bridge0: port 1(bridge_slave_0) entered blocking state [ 3714.949828][T23254] bridge0: port 1(bridge_slave_0) entered disabled state [ 3714.966096][T23254] device bridge_slave_0 entered promiscuous mode [ 3715.022487][T23253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3715.094133][T23254] bridge0: port 2(bridge_slave_1) entered blocking state [ 3715.103730][T23254] bridge0: port 2(bridge_slave_1) entered disabled state [ 3715.122395][T23254] device bridge_slave_1 entered promiscuous mode [ 3715.274552][T23238] device hsr_slave_0 entered promiscuous mode [ 3715.282467][T23238] device hsr_slave_1 entered promiscuous mode [ 3715.295385][T23238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3715.304673][T23238] Cannot create hsr debugfs directory [ 3715.375522][T23254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3715.495474][T23253] team0: Port device team_slave_0 added [ 3715.511165][T23253] team0: Port device team_slave_1 added [ 3715.517248][T23258] bridge0: port 1(bridge_slave_0) entered blocking state [ 3715.542498][T23258] bridge0: port 1(bridge_slave_0) entered disabled state [ 3715.562351][T23258] device bridge_slave_0 entered promiscuous mode [ 3715.573901][T23254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3715.631488][ T5854] Bluetooth: hci2: command 0x041b tx timeout [ 3715.637590][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 3715.735274][T23258] bridge0: port 2(bridge_slave_1) entered blocking state [ 3715.748642][T23258] bridge0: port 2(bridge_slave_1) entered disabled state [ 3715.757502][T23258] device bridge_slave_1 entered promiscuous mode [ 3715.791037][ T5854] Bluetooth: hci4: command 0x041b tx timeout [ 3715.792011][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3715.826154][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3715.851394][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 3715.858624][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 3715.882279][T23272] device bridge_slave_0 entered promiscuous mode [ 3716.015501][T23254] team0: Port device team_slave_0 added [ 3716.062592][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3716.075137][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 3716.091130][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 3716.102761][T23272] device bridge_slave_1 entered promiscuous mode [ 3716.119630][T23253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3716.139977][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3716.171102][T23253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3716.229405][T23254] team0: Port device team_slave_1 added [ 3716.255800][T23258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3716.265764][T23253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3716.275699][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3716.303969][T23253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3716.327826][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3716.351037][ T5854] Bluetooth: hci5: command 0x041b tx timeout [ 3716.352783][T23258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3716.357430][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3716.430985][T23272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3716.443815][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3716.534072][T23254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3716.551814][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3716.599416][T23254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3716.601210][ T5854] Bluetooth: hci0: command 0x040f tx timeout [ 3716.638466][T23272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3716.770363][T23253] device hsr_slave_0 entered promiscuous mode [ 3716.787029][T23253] device hsr_slave_1 entered promiscuous mode [ 3716.803253][T23253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3716.820124][T23253] Cannot create hsr debugfs directory [ 3716.833265][T23254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3716.845234][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3716.888855][T23352] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3716.889758][T23254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3716.899525][T23352] CPU: 1 PID: 23352 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3716.921217][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3716.931304][T23352] Call Trace: [ 3716.934612][T23352] [ 3716.937572][T23352] dump_stack_lvl+0xd1/0x138 [ 3716.942223][T23352] dump_header+0x10b/0x85f [ 3716.946710][T23352] oom_kill_process.cold+0x10/0x15 [ 3716.951884][T23352] out_of_memory+0x35c/0x14a0 [ 3716.956629][T23352] ? oom_killer_disable+0x280/0x280 [ 3716.961891][T23352] ? mark_held_locks+0x9f/0xe0 [ 3716.966713][T23352] mem_cgroup_out_of_memory+0x206/0x270 [ 3716.972323][T23352] ? mem_cgroup_margin+0x130/0x130 [ 3716.977517][T23352] memory_max_write+0x2f9/0x3c0 [ 3716.982415][T23352] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3716.988516][T23352] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3716.994694][T23352] cgroup_file_write+0x1e2/0x770 [ 3716.999660][T23352] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3717.005743][T23352] ? kill_css+0x370/0x370 [ 3717.010102][T23352] ? kill_css+0x370/0x370 [ 3717.014447][T23352] kernfs_fop_write_iter+0x3f1/0x600 [ 3717.019762][T23352] vfs_write+0x9ed/0xdd0 [ 3717.024039][T23352] ? kernel_write+0x630/0x630 [ 3717.028743][T23352] ? __fget_files+0x26a/0x440 [ 3717.033482][T23352] ksys_write+0x12b/0x250 [ 3717.037827][T23352] ? __ia32_sys_read+0xb0/0xb0 [ 3717.042610][T23352] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3717.048545][T23352] do_syscall_64+0x39/0xb0 [ 3717.053055][T23352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3717.058969][T23352] RIP: 0033:0x7fb3e8c8c0c9 [ 3717.063414][T23352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3717.083291][T23352] RSP: 002b:00007fb3e9a84168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3717.091893][T23352] RAX: ffffffffffffffda RBX: 00007fb3e8dabf80 RCX: 00007fb3e8c8c0c9 [ 3717.099873][T23352] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3717.107852][T23352] RBP: 00007fb3e8ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3717.115832][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3717.123810][T23352] R13: 00007ffe96e0b29f R14: 00007fb3e9a84300 R15: 0000000000022000 [ 3717.131809][T23352] [ 3717.141552][T23352] memory: usage 568kB, limit 0kB, failcnt 4626 [ 3717.160976][T23272] team0: Port device team_slave_0 added [ 3717.171653][T23272] team0: Port device team_slave_1 added [ 3717.182958][T23258] team0: Port device team_slave_0 added [ 3717.190998][T23352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3717.198682][T23352] Memory cgroup stats for /syz2: [ 3717.204005][T23352] anon 114688 [ 3717.204005][T23352] file 159744 [ 3717.204005][T23352] kernel 290816 [ 3717.204005][T23352] kernel_stack 65536 [ 3717.204005][T23352] pagetables 81920 [ 3717.204005][T23352] sec_pagetables 0 [ 3717.204005][T23352] percpu 64 [ 3717.204005][T23352] sock 0 [ 3717.204005][T23352] vmalloc 0 [ 3717.204005][T23352] shmem 151552 [ 3717.204005][T23352] zswap 0 [ 3717.204005][T23352] zswapped 0 [ 3717.204005][T23352] file_mapped 139264 [ 3717.204005][T23352] file_dirty 0 [ 3717.204005][T23352] file_writeback 0 [ 3717.204005][T23352] swapcached 0 [ 3717.204005][T23352] anon_thp 0 [ 3717.204005][T23352] file_thp 0 [ 3717.204005][T23352] shmem_thp 0 [ 3717.204005][T23352] inactive_anon 172032 [ 3717.204005][T23352] active_anon 94208 [ 3717.204005][T23352] inactive_file 0 [ 3717.204005][T23352] active_file 8192 [ 3717.204005][T23352] unevictable 0 [ 3717.204005][T23352] slab_reclaimable 18984 [ 3717.204005][T23352] slab_unreclaimable 100464 [ 3717.204005][T23352] slab 119448 19:57:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3717.308694][T23352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23351,uid=0 [ 3717.335333][T23352] Memory cgroup out of memory: Killed process 23351 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3717.417659][T23258] team0: Port device team_slave_1 added [ 3717.469404][T23148] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3717.515692][T23148] CPU: 1 PID: 23148 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3717.526183][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3717.536281][T23148] Call Trace: [ 3717.539583][T23148] [ 3717.542542][T23148] dump_stack_lvl+0xd1/0x138 [ 3717.547177][T23148] dump_header+0x10b/0x85f [ 3717.551647][T23148] oom_kill_process.cold+0x10/0x15 [ 3717.556812][T23148] out_of_memory+0x35c/0x14a0 [ 3717.561567][T23148] ? find_held_lock+0x2d/0x110 [ 3717.566425][T23148] ? oom_killer_disable+0x280/0x280 [ 3717.571683][T23148] ? find_held_lock+0x2d/0x110 [ 3717.576499][T23148] mem_cgroup_out_of_memory+0x206/0x270 [ 3717.582125][T23148] ? mem_cgroup_margin+0x130/0x130 [ 3717.587283][T23148] ? lock_downgrade+0x6e0/0x6e0 [ 3717.592570][T23148] try_charge_memcg+0xefb/0x12f0 [ 3717.597550][T23148] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3717.603563][T23148] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3717.609335][T23148] ? lock_downgrade+0x6e0/0x6e0 [ 3717.614224][T23148] ? lock_downgrade+0x6e0/0x6e0 [ 3717.619122][T23148] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3717.624709][T23148] __alloc_pages+0x1f3/0x5b0 [ 3717.629347][T23148] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3717.636330][T23148] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3717.642386][T23148] alloc_pages+0x1aa/0x270 [ 3717.646849][T23148] pte_alloc_one+0x1a/0x230 [ 3717.651396][T23148] __pte_alloc+0x6d/0x260 [ 3717.655764][T23148] ? pmd_install+0x160/0x160 [ 3717.660404][T23148] copy_page_range+0x17a8/0x3b40 [ 3717.665429][T23148] ? mas_store+0x206/0x2e0 [ 3717.669885][T23148] ? handle_mm_fault+0x850/0x850 [ 3717.675063][T23148] ? anon_vma_fork+0xba/0x630 [ 3717.679791][T23148] dup_mmap+0xc10/0x10b0 [ 3717.684088][T23148] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3717.689408][T23148] ? lock_downgrade+0x6e0/0x6e0 [ 3717.694746][T23148] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3717.700701][T23148] ? mm_init+0x8e0/0xc10 [ 3717.704994][T23148] copy_process+0x440f/0x7520 [ 3717.709714][T23148] ? _raw_spin_unlock+0x28/0x40 [ 3717.714606][T23148] ? wp_page_reuse+0x197/0x570 [ 3717.719519][T23148] ? __cleanup_sighand+0xb0/0xb0 [ 3717.724501][T23148] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3717.731151][T23148] ? rwlock_bug.part.0+0x90/0x90 [ 3717.736128][T23148] ? lock_chain_count+0x20/0x20 [ 3717.741014][T23148] kernel_clone+0xeb/0x990 [ 3717.745472][T23148] ? create_io_thread+0xf0/0xf0 [ 3717.750378][T23148] ? find_held_lock+0x2d/0x110 [ 3717.755240][T23148] __do_sys_clone+0xba/0x100 [ 3717.759873][T23148] ? kernel_clone+0x990/0x990 [ 3717.764696][T23148] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3717.770639][T23148] do_syscall_64+0x39/0xb0 [ 3717.775116][T23148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3717.781039][T23148] RIP: 0033:0x7fb3e8c89dfb [ 3717.785487][T23148] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3717.805398][T23148] RSP: 002b:00007ffe96e0b4e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3717.813860][T23148] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb3e8c89dfb [ 3717.821863][T23148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3717.829989][T23148] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569a1400 [ 3717.837992][T23148] R10: 00005555569a16d0 R11: 0000000000000246 R12: 0000000000000001 [ 3717.846001][T23148] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe96e0b5c0 [ 3717.854040][T23148] [ 3717.861125][ T5854] Bluetooth: hci3: command 0x040f tx timeout [ 3717.861136][T10157] Bluetooth: hci2: command 0x040f tx timeout [ 3717.878573][T23148] memory: usage 404kB, limit 0kB, failcnt 4674 [ 3717.884975][ T5854] Bluetooth: hci4: command 0x040f tx timeout [ 3717.948930][T23148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3717.959283][T23148] Memory cgroup stats for /syz2: [ 3717.959496][T23148] anon 45056 [ 3717.959496][T23148] file 155648 [ 3717.959496][T23148] kernel 212992 [ 3717.959496][T23148] kernel_stack 32768 [ 3717.959496][T23148] pagetables 45056 [ 3717.959496][T23148] sec_pagetables 0 [ 3717.959496][T23148] percpu 128 [ 3717.959496][T23148] sock 0 [ 3717.959496][T23148] vmalloc 0 [ 3717.959496][T23148] shmem 151552 [ 3717.959496][T23148] zswap 0 [ 3717.959496][T23148] zswapped 0 [ 3717.959496][T23148] file_mapped 139264 [ 3717.959496][T23148] file_dirty 0 [ 3717.959496][T23148] file_writeback 0 [ 3717.959496][T23148] swapcached 0 [ 3717.959496][T23148] anon_thp 0 [ 3717.959496][T23148] file_thp 0 [ 3717.959496][T23148] shmem_thp 0 [ 3717.959496][T23148] inactive_anon 102400 [ 3717.959496][T23148] active_anon 94208 [ 3717.959496][T23148] inactive_file 4096 [ 3717.959496][T23148] active_file 0 [ 3717.959496][T23148] unevictable 0 [ 3717.959496][T23148] slab_reclaimable 9304 [ 3717.959496][T23148] slab_unreclaimable 97816 [ 3717.959496][T23148] slab 107120 [ 3718.099733][T23148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23148,uid=0 [ 3718.141058][T23148] Memory cgroup out of memory: Killed process 23148 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3718.144456][T23254] device hsr_slave_0 entered promiscuous mode [ 3718.231415][T23254] device hsr_slave_1 entered promiscuous mode [ 3718.260939][T23254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3718.268584][T23254] Cannot create hsr debugfs directory [ 3718.297522][T23272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3718.331032][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3718.411229][T23272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3718.441024][ T5854] Bluetooth: hci5: command 0x040f tx timeout [ 3718.472297][T23258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3718.480174][T23258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3718.571036][T23258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3718.681668][ T5854] Bluetooth: hci0: command 0x0419 tx timeout 19:57:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3718.773815][T23272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3718.780823][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3718.861155][T23272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 19:57:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3718.970986][T23258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3718.979838][T23258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3719.070992][T23258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3719.646261][T23272] device hsr_slave_0 entered promiscuous mode [ 3719.662762][T23272] device hsr_slave_1 entered promiscuous mode [ 3719.681108][T23272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3719.701015][T23272] Cannot create hsr debugfs directory [ 3719.741361][T23258] device hsr_slave_0 entered promiscuous mode [ 3719.750589][T23258] device hsr_slave_1 entered promiscuous mode [ 3719.772265][T23258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3719.779919][T23258] Cannot create hsr debugfs directory [ 3719.881681][ T5105] Bluetooth: hci2: command 0x0419 tx timeout [ 3719.951400][ T5854] Bluetooth: hci4: command 0x0419 tx timeout [ 3719.951407][ T5105] Bluetooth: hci3: command 0x0419 tx timeout [ 3720.227975][T23238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3720.316888][T23238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3720.420717][T23238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3720.496768][T23238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3720.511768][ T5854] Bluetooth: hci5: command 0x0419 tx timeout [ 3720.693325][T23238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3720.708397][T27309] device hsr_slave_0 left promiscuous mode [ 3720.722241][T27309] device hsr_slave_1 left promiscuous mode [ 3720.751043][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3720.758623][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3720.813652][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3720.841074][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3720.863240][T27309] device bridge_slave_1 left promiscuous mode [ 3720.869515][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3720.947801][T27309] device bridge_slave_0 left promiscuous mode [ 3720.961148][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3721.024191][T27309] device hsr_slave_0 left promiscuous mode [ 3721.061379][T27309] device hsr_slave_1 left promiscuous mode [ 3721.081828][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3721.089350][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3721.140097][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3721.171221][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3721.204332][T27309] device bridge_slave_1 left promiscuous mode [ 3721.210609][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3721.237723][T27309] device bridge_slave_0 left promiscuous mode [ 3721.271801][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3721.309932][T27309] device hsr_slave_0 left promiscuous mode [ 3721.332484][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3721.342783][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3721.351545][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3721.371628][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3721.378848][T27309] device hsr_slave_1 left promiscuous mode [ 3721.385863][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3721.401168][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3721.408872][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3721.429676][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3721.453559][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3721.471730][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3721.493707][T27309] device bridge_slave_1 left promiscuous mode [ 3721.499975][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3721.561665][T27309] device bridge_slave_0 left promiscuous mode [ 3721.567953][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3721.671647][T27309] device hsr_slave_0 left promiscuous mode [ 3721.701551][T27309] device hsr_slave_1 left promiscuous mode [ 3721.712143][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3721.719645][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3721.761235][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3721.768724][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3721.794347][T27309] device bridge_slave_1 left promiscuous mode [ 3721.800646][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3721.838078][T27309] device bridge_slave_0 left promiscuous mode [ 3721.855818][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3721.890669][T27309] device hsr_slave_0 left promiscuous mode [ 3721.911795][T27309] device hsr_slave_1 left promiscuous mode [ 3721.921684][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3721.929182][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3721.958307][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3721.972157][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3721.998164][T27309] device bridge_slave_1 left promiscuous mode [ 3722.011081][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3722.032918][T27309] device bridge_slave_0 left promiscuous mode [ 3722.039275][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3722.112038][T27309] device veth1_macvtap left promiscuous mode [ 3722.118154][T27309] device veth0_macvtap left promiscuous mode [ 3722.140287][T27309] device veth1_vlan left promiscuous mode [ 3722.146714][T27309] device veth0_vlan left promiscuous mode [ 3722.171355][T27309] device veth1_macvtap left promiscuous mode [ 3722.177475][T27309] device veth0_macvtap left promiscuous mode [ 3722.191341][T27309] device veth1_vlan left promiscuous mode [ 3722.197276][T27309] device veth0_vlan left promiscuous mode [ 3722.238333][T27309] device veth1_macvtap left promiscuous mode [ 3722.251051][T27309] device veth0_macvtap left promiscuous mode [ 3722.257226][T27309] device veth1_vlan left promiscuous mode [ 3722.281271][T27309] device veth0_vlan left promiscuous mode [ 3722.289328][T27309] device veth1_macvtap left promiscuous mode [ 3722.311584][T27309] device veth0_macvtap left promiscuous mode [ 3722.317867][T27309] device veth1_vlan left promiscuous mode [ 3722.331310][T27309] device veth0_vlan left promiscuous mode [ 3722.358368][T27309] device veth1_macvtap left promiscuous mode [ 3722.364866][T27309] device veth0_macvtap left promiscuous mode [ 3722.391306][T27309] device veth1_vlan left promiscuous mode [ 3722.397211][T27309] device veth0_vlan left promiscuous mode [ 3723.471038][ T5854] Bluetooth: hci1: command 0x0409 tx timeout [ 3723.824463][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3723.844206][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3723.859700][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3723.877163][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3724.052047][T27309] bond0 (unregistering): Released all slaves [ 3724.353193][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3724.377529][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3724.410114][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3724.449353][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3724.613031][T27309] bond0 (unregistering): Released all slaves [ 3724.932176][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3724.971726][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3725.012188][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3725.045719][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3725.252828][T27309] bond0 (unregistering): Released all slaves [ 3725.560936][ T5854] Bluetooth: hci1: command 0x041b tx timeout [ 3725.587851][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3725.633243][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3725.666899][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3725.702363][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3725.931850][T27309] bond0 (unregistering): Released all slaves [ 3726.292415][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3726.319585][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3726.361498][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3726.398584][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3726.608690][T27309] bond0 (unregistering): Released all slaves [ 3726.733972][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3726.742092][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3726.774151][T23238] 8021q: adding VLAN 0 to HW filter on device team0 [ 3726.891513][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3726.900383][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3726.928203][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 3726.935415][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3726.954167][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3726.962754][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3726.981816][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3727.001359][T32710] bridge0: port 2(bridge_slave_1) entered blocking state [ 3727.008587][T32710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3727.031485][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3727.117045][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3727.127912][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3727.139353][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3727.157268][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3727.276611][T23238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3727.289575][T23238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3727.310379][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3727.322466][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3727.330934][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3727.339292][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3727.366015][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3727.503899][T23272] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3727.630976][ T5854] Bluetooth: hci1: command 0x040f tx timeout [ 3727.723779][T23272] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3727.766766][T23389] chnl_net:caif_netlink_parms(): no params data found [ 3727.886399][T23272] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3727.926061][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3727.941475][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3727.974692][T23238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3728.014730][T23272] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3728.202793][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3728.212838][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3728.225372][T23389] bridge0: port 1(bridge_slave_0) entered blocking state [ 3728.241095][T23389] bridge0: port 1(bridge_slave_0) entered disabled state [ 3728.271909][T23389] device bridge_slave_0 entered promiscuous mode [ 3728.294833][T23389] bridge0: port 2(bridge_slave_1) entered blocking state [ 3728.340972][T23389] bridge0: port 2(bridge_slave_1) entered disabled state [ 3728.361134][T23389] device bridge_slave_1 entered promiscuous mode [ 3728.368816][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3728.377907][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3728.388308][T23238] device veth0_vlan entered promiscuous mode [ 3728.427025][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3728.435214][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3728.448976][T23238] device veth1_vlan entered promiscuous mode [ 3728.459176][T23389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3728.487513][T23389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3728.618317][T23238] device veth0_macvtap entered promiscuous mode [ 3728.632300][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3728.640572][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3728.664134][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3728.681776][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3728.694720][T23389] team0: Port device team_slave_0 added [ 3728.712208][T23238] device veth1_macvtap entered promiscuous mode [ 3728.813500][T23272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3728.844576][T23389] team0: Port device team_slave_1 added [ 3728.891977][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3728.900307][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3728.909604][T23272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3729.022530][T23238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3729.040937][T23238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3729.061076][T23238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3729.081005][T23238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3729.112657][T23238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3729.133316][T23272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3729.171102][T23389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3729.178103][T23389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3729.240940][T23389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3729.262029][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3729.271756][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3729.283010][T23238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3729.300947][T23238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3729.310820][T23238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3729.351033][T23238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3729.372566][T23238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3729.380105][T23272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3729.581918][T23389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3729.588935][T23389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3729.660920][T23389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3729.673359][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3729.682427][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3729.694990][T23238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3729.711312][ T5854] Bluetooth: hci1: command 0x0419 tx timeout [ 3729.731083][T23238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3729.750986][T23238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3729.759751][T23238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3730.266574][T23389] device hsr_slave_0 entered promiscuous mode [ 3730.301594][T23389] device hsr_slave_1 entered promiscuous mode [ 3730.311490][T23389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3730.319105][T23389] Cannot create hsr debugfs directory [ 3730.511792][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3730.533086][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3730.552687][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3730.603590][T23272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3730.640710][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3730.660723][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3730.697229][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3730.757510][T23272] 8021q: adding VLAN 0 to HW filter on device team0 [ 3730.813975][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3730.823847][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3730.869643][T23258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3730.901884][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3730.921550][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3730.933959][T26298] bridge0: port 1(bridge_slave_0) entered blocking state [ 3730.941191][T26298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3730.965720][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3730.987008][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3731.003608][T26298] bridge0: port 2(bridge_slave_1) entered blocking state [ 3731.010812][T26298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3731.120784][T26298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3731.190076][T23455] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3731.206724][T23258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3731.224690][T23258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3731.241561][T23455] CPU: 1 PID: 23455 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3731.252058][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3731.262140][T23455] Call Trace: [ 3731.265442][T23455] [ 3731.268393][T23455] dump_stack_lvl+0xd1/0x138 [ 3731.273076][T23455] dump_header+0x10b/0x85f [ 3731.277554][T23455] oom_kill_process.cold+0x10/0x15 [ 3731.282720][T23455] out_of_memory+0x35c/0x14a0 [ 3731.287451][T23455] ? oom_killer_disable+0x280/0x280 [ 3731.292692][T23455] ? mark_held_locks+0x9f/0xe0 [ 3731.297498][T23455] mem_cgroup_out_of_memory+0x206/0x270 [ 3731.303089][T23455] ? mem_cgroup_margin+0x130/0x130 [ 3731.308258][T23455] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3731.314154][T23455] memory_max_write+0x2f9/0x3c0 [ 3731.319051][T23455] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3731.325245][T23455] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3731.331372][T23455] cgroup_file_write+0x1e2/0x770 [ 3731.336331][T23455] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3731.342435][T23455] ? kill_css+0x370/0x370 [ 3731.346795][T23455] ? kill_css+0x370/0x370 [ 3731.351228][T23455] kernfs_fop_write_iter+0x3f1/0x600 [ 3731.356544][T23455] vfs_write+0x9ed/0xdd0 [ 3731.360807][T23455] ? kernel_write+0x630/0x630 [ 3731.365509][T23455] ? __fget_files+0x26a/0x440 [ 3731.370212][T23455] ksys_write+0x12b/0x250 [ 3731.374556][T23455] ? __ia32_sys_read+0xb0/0xb0 [ 3731.379344][T23455] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3731.385259][T23455] do_syscall_64+0x39/0xb0 [ 3731.389872][T23455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3731.395789][T23455] RIP: 0033:0x7f0865e8c0c9 [ 3731.400212][T23455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3731.419916][T23455] RSP: 002b:00007f0866c32168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3731.428339][T23455] RAX: ffffffffffffffda RBX: 00007f0865fabf80 RCX: 00007f0865e8c0c9 [ 3731.436316][T23455] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3731.444377][T23455] RBP: 00007f0865ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3731.452353][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3731.460328][T23455] R13: 00007fffd5df713f R14: 00007f0866c32300 R15: 0000000000022000 [ 3731.468332][T23455] [ 3731.485259][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3731.496870][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3731.515842][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3731.531528][T23455] memory: usage 8588kB, limit 0kB, failcnt 2215 [ 3731.538437][T23455] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3731.567653][T23258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3731.581537][T23455] Memory cgroup stats for /syz3: [ 3731.585834][T23455] anon 114688 [ 3731.585834][T23455] file 8359936 [ 3731.585834][T23455] kernel 315392 [ 3731.585834][T23455] kernel_stack 65536 [ 3731.585834][T23455] pagetables 81920 [ 3731.585834][T23455] sec_pagetables 0 [ 3731.585834][T23455] percpu 64 [ 3731.585834][T23455] sock 0 [ 3731.585834][T23455] vmalloc 0 [ 3731.585834][T23455] shmem 8359936 [ 3731.585834][T23455] zswap 0 [ 3731.585834][T23455] zswapped 0 [ 3731.585834][T23455] file_mapped 163840 [ 3731.585834][T23455] file_dirty 0 [ 3731.585834][T23455] file_writeback 0 [ 3731.585834][T23455] swapcached 0 [ 3731.585834][T23455] anon_thp 0 [ 3731.585834][T23455] file_thp 0 [ 3731.585834][T23455] shmem_thp 0 [ 3731.585834][T23455] inactive_anon 4046848 [ 3731.585834][T23455] active_anon 4427776 [ 3731.585834][T23455] inactive_file 0 [ 3731.585834][T23455] active_file 0 [ 3731.585834][T23455] unevictable 0 [ 3731.585834][T23455] slab_reclaimable 33736 [ 3731.585834][T23455] slab_unreclaimable 101112 [ 3731.585834][T23455] slab 134848 [ 3731.702382][T23272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3731.713195][T23272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3731.736105][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3731.746536][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3731.757326][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3731.766164][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3731.775298][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3731.796947][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3731.882794][T23253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3731.903898][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3731.968269][T23253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3732.050729][T23253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3732.110615][T23253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3732.127246][T23455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23454,uid=0 19:57:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3732.144128][T23455] Memory cgroup out of memory: Killed process 23455 (syz-executor.3) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3732.164161][T23254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3732.322472][T23389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3732.361699][T23238] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3732.393684][T23238] CPU: 0 PID: 23238 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3732.404278][T23238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3732.414370][T23238] Call Trace: [ 3732.417671][T23238] [ 3732.420622][T23238] dump_stack_lvl+0xd1/0x138 [ 3732.425259][T23238] dump_header+0x10b/0x85f [ 3732.429720][T23238] oom_kill_process.cold+0x10/0x15 [ 3732.434872][T23238] out_of_memory+0x35c/0x14a0 [ 3732.439600][T23238] ? find_held_lock+0x2d/0x110 [ 3732.444406][T23238] ? oom_killer_disable+0x280/0x280 [ 3732.449695][T23238] ? find_held_lock+0x2d/0x110 [ 3732.454506][T23238] mem_cgroup_out_of_memory+0x206/0x270 [ 3732.460096][T23238] ? mem_cgroup_margin+0x130/0x130 [ 3732.465331][T23238] ? lock_downgrade+0x6e0/0x6e0 [ 3732.470229][T23238] try_charge_memcg+0xefb/0x12f0 [ 3732.475207][T23238] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3732.481202][T23238] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3732.486943][T23238] ? lock_downgrade+0x6e0/0x6e0 [ 3732.491805][T23238] ? lock_downgrade+0x6e0/0x6e0 [ 3732.496676][T23238] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3732.502244][T23238] __alloc_pages+0x1f3/0x5b0 [ 3732.506871][T23238] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3732.513679][T23238] alloc_pages+0x1aa/0x270 [ 3732.518107][T23238] pte_alloc_one+0x1a/0x230 [ 3732.522629][T23238] __pte_alloc+0x6d/0x260 [ 3732.526974][T23238] ? pmd_install+0x160/0x160 [ 3732.531585][T23238] copy_page_range+0x17a8/0x3b40 [ 3732.536571][T23238] ? mas_store+0x206/0x2e0 [ 3732.540997][T23238] ? handle_mm_fault+0x850/0x850 [ 3732.545976][T23238] ? up_write+0x1b0/0x520 [ 3732.550328][T23238] dup_mmap+0xc10/0x10b0 [ 3732.554593][T23238] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3732.560239][T23238] ? lock_downgrade+0x6e0/0x6e0 [ 3732.565104][T23238] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3732.570942][T23238] ? mm_init+0x8e0/0xc10 [ 3732.575231][T23238] copy_process+0x440f/0x7520 [ 3732.579927][T23238] ? _raw_spin_unlock+0x28/0x40 [ 3732.584789][T23238] ? wp_page_reuse+0x197/0x570 [ 3732.589581][T23238] ? __cleanup_sighand+0xb0/0xb0 [ 3732.595136][T23238] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3732.600535][T23238] ? rwlock_bug.part.0+0x90/0x90 [ 3732.605487][T23238] ? lock_chain_count+0x20/0x20 [ 3732.610355][T23238] kernel_clone+0xeb/0x990 [ 3732.614808][T23238] ? create_io_thread+0xf0/0xf0 [ 3732.619676][T23238] ? find_held_lock+0x2d/0x110 [ 3732.624473][T23238] __do_sys_clone+0xba/0x100 [ 3732.629252][T23238] ? kernel_clone+0x990/0x990 [ 3732.634050][T23238] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3732.640184][T23238] do_syscall_64+0x39/0xb0 [ 3732.644629][T23238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3732.650538][T23238] RIP: 0033:0x7f0865e89dfb [ 3732.654961][T23238] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3732.674599][T23238] RSP: 002b:00007fffd5df7380 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3732.683023][T23238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0865e89dfb [ 3732.691015][T23238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3732.698991][T23238] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555573de400 [ 3732.706972][T23238] R10: 00005555573de6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3732.714950][T23238] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffd5df7460 [ 3732.722960][T23238] [ 3732.752703][T23254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3732.819528][T23258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3732.891394][T23238] memory: usage 8416kB, limit 0kB, failcnt 2237 [ 3732.897719][T23238] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3732.921822][T23238] Memory cgroup stats for /syz3: [ 3732.922027][T23238] anon 40960 [ 3732.922027][T23238] file 8359936 [ 3732.922027][T23238] kernel 217088 [ 3732.922027][T23238] kernel_stack 32768 [ 3732.922027][T23238] pagetables 32768 [ 3732.922027][T23238] sec_pagetables 0 [ 3732.922027][T23238] percpu 128 [ 3732.922027][T23238] sock 0 [ 3732.922027][T23238] vmalloc 0 [ 3732.922027][T23238] shmem 8359936 [ 3732.922027][T23238] zswap 0 [ 3732.922027][T23238] zswapped 0 [ 3732.922027][T23238] file_mapped 147456 [ 3732.922027][T23238] file_dirty 0 [ 3732.922027][T23238] file_writeback 0 [ 3732.922027][T23238] swapcached 0 [ 3732.922027][T23238] anon_thp 0 [ 3732.922027][T23238] file_thp 0 [ 3732.922027][T23238] shmem_thp 0 [ 3732.922027][T23238] inactive_anon 3973120 [ 3732.922027][T23238] active_anon 4427776 [ 3732.922027][T23238] inactive_file 0 [ 3732.922027][T23238] active_file 0 [ 3732.922027][T23238] unevictable 0 [ 3732.922027][T23238] slab_reclaimable 29448 [ 3732.922027][T23238] slab_unreclaimable 94040 [ 3732.922027][T23238] slab 123488 [ 3733.042609][T23238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23238,uid=0 [ 3733.066484][T23238] Memory cgroup out of memory: Killed process 23238 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3733.091864][T23389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3733.131322][T23254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3733.173663][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3733.201324][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3733.219934][T23258] 8021q: adding VLAN 0 to HW filter on device team0 [ 3733.265151][T23272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3733.331428][T23254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3733.402931][T23389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3733.461473][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3733.471966][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3733.632903][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3733.651638][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3733.671143][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 3733.678285][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3733.697980][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3733.721846][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 19:57:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3733.730380][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 3733.737550][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3733.852146][T23389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3733.945872][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3733.961602][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3734.048445][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3734.061971][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 19:57:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3734.092496][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3734.121881][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3734.130489][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3734.153003][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3734.180368][T23253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3734.205588][T23258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3734.252656][T23258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3734.284342][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3734.301836][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3734.362791][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 3734.436302][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3734.444750][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3734.559823][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3734.589271][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3734.639221][T27000] bridge0: port 1(bridge_slave_0) entered blocking state [ 3734.647353][T27000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3734.714951][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3734.751833][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3734.791535][T27000] bridge0: port 2(bridge_slave_1) entered blocking state [ 3734.798684][T27000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3734.852278][T23254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3734.901325][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3734.948432][T23254] 8021q: adding VLAN 0 to HW filter on device team0 [ 3734.990682][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3735.024068][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3735.053564][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3735.083788][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3735.111749][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3735.145038][T23389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3735.168343][T23389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3735.193039][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3735.211694][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3735.232024][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3735.251207][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3735.267015][T32708] bridge0: port 1(bridge_slave_0) entered blocking state [ 3735.274277][T32708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3735.302605][T23389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3735.351214][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3735.359363][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3735.382246][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3735.390784][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3735.415244][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3735.424518][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3735.432441][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3735.439992][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3735.449270][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3735.458211][T27000] bridge0: port 2(bridge_slave_1) entered blocking state [ 3735.465404][T27000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3735.474169][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3735.483397][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3735.493636][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3735.506421][T23253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3735.533440][T23389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3735.571585][T23258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3735.591906][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3735.602044][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3735.612500][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3735.622114][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3735.630662][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3735.657860][T23272] device veth0_vlan entered promiscuous mode [ 3735.691966][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3735.700104][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3735.719899][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3735.729279][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3735.738719][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3735.758619][T23254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3735.775344][T23272] device veth1_vlan entered promiscuous mode [ 3735.812380][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3735.820498][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3735.835582][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3735.888034][T27309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3735.981891][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3735.990781][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3736.021704][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3736.050350][T23272] device veth0_macvtap entered promiscuous mode [ 3736.125279][T27309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3736.177130][T23258] device veth0_vlan entered promiscuous mode [ 3736.212776][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3736.222670][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3736.248563][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3736.268610][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3736.461949][T27309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3736.496846][T23258] device veth1_vlan entered promiscuous mode [ 3736.539528][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3736.582880][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3736.611426][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3736.622471][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3736.633268][T23272] device veth1_macvtap entered promiscuous mode [ 3736.685680][T27309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3736.778169][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3736.784987][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3736.787907][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3736.803107][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3736.812372][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3736.820822][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3736.831812][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3736.832811][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3736.849664][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3736.901119][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3736.941115][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3736.971052][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3737.001096][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3737.030893][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3737.052841][T23272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3737.063871][T23389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3737.086689][T23253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3737.131362][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3737.140173][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3737.160225][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3737.172556][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3737.183359][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3737.193903][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3737.203924][T23272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3737.218327][T23272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3737.230181][T23272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3737.256189][T23389] 8021q: adding VLAN 0 to HW filter on device team0 [ 3737.322180][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3737.332563][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3737.342471][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3737.350474][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3737.359578][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3737.368830][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3737.377888][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3737.396405][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3737.410522][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 3737.417752][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3737.429953][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3737.438887][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3737.447914][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 3737.455119][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3737.463711][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3737.471836][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3737.482349][T23272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3737.518481][T23272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3737.549916][T23272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3737.571133][T23272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3737.604379][T23258] device veth0_macvtap entered promiscuous mode [ 3737.628332][T23254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3737.675515][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3737.688988][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3737.706860][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3737.763574][T23258] device veth1_macvtap entered promiscuous mode [ 3737.865912][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3737.891767][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3737.921500][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3737.941987][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3737.972780][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3738.041539][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3738.050121][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3738.072501][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3738.090497][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3738.100074][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3738.141164][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3738.171537][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3738.202131][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3738.212721][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3738.231049][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.250953][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3738.274168][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.284566][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3738.295599][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.305549][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3738.321024][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.332597][T23258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3738.358904][T23253] device veth0_vlan entered promiscuous mode [ 3738.372562][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3738.390561][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3738.400178][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3738.420458][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3738.443285][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3738.462904][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.482732][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3738.493534][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.503528][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3738.533060][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.554078][T23258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3738.574202][T23258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3738.585869][T23258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3738.653211][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3738.670233][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3738.690443][T23258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3738.709240][T23258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3738.721905][T23258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3738.730767][T23258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3738.812481][T23253] device veth1_vlan entered promiscuous mode [ 3738.827886][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3738.837702][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3738.888670][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3738.907975][T23389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3738.915466][ T5854] Bluetooth: hci0: command 0x0409 tx timeout [ 3738.959285][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3738.969972][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3738.978330][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3738.994427][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3739.083153][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3739.091495][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3739.112543][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3739.112712][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3739.151473][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3739.160560][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3739.316821][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3739.325574][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3739.346116][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3739.408719][T23253] device veth0_macvtap entered promiscuous mode [ 3739.427698][T23254] device veth0_vlan entered promiscuous mode [ 3739.571706][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3739.585793][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3739.609826][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3739.629723][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3739.647463][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3739.670627][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3739.699079][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3739.740047][T23253] device veth1_macvtap entered promiscuous mode [ 3739.762214][T23389] device veth0_vlan entered promiscuous mode [ 3739.887455][T23254] device veth1_vlan entered promiscuous mode [ 3739.900172][T23569] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3739.907636][T23520] chnl_net:caif_netlink_parms(): no params data found [ 3739.918784][T23569] CPU: 1 PID: 23569 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3739.929288][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3739.939483][T23569] Call Trace: [ 3739.942908][T23569] [ 3739.945851][T23569] dump_stack_lvl+0xd1/0x138 [ 3739.951514][T23569] dump_header+0x10b/0x85f [ 3739.955964][T23569] oom_kill_process.cold+0x10/0x15 [ 3739.961299][T23569] out_of_memory+0x35c/0x14a0 [ 3739.966077][T23569] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3739.972260][T23569] ? oom_killer_disable+0x280/0x280 [ 3739.977501][T23569] ? mem_cgroup_margin+0x1b/0x130 [ 3739.982559][T23569] ? mem_cgroup_margin+0x66/0x130 [ 3739.987630][T23569] mem_cgroup_out_of_memory+0x206/0x270 [ 3739.993204][T23569] ? mem_cgroup_margin+0x130/0x130 [ 3739.998447][T23569] memory_max_write+0x2f9/0x3c0 [ 3740.003422][T23569] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3740.009510][T23569] ? cgroup_file_write+0x8e/0x770 [ 3740.014608][T23569] cgroup_file_write+0x1e2/0x770 [ 3740.019568][T23569] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3740.025650][T23569] ? kill_css+0x370/0x370 [ 3740.030009][T23569] ? kill_css+0x370/0x370 [ 3740.034352][T23569] kernfs_fop_write_iter+0x3f1/0x600 [ 3740.039665][T23569] vfs_write+0x9ed/0xdd0 [ 3740.043922][T23569] ? kernel_write+0x630/0x630 [ 3740.048616][T23569] ? __fget_files+0x26a/0x440 [ 3740.053320][T23569] ksys_write+0x12b/0x250 [ 3740.057662][T23569] ? __ia32_sys_read+0xb0/0xb0 [ 3740.062445][T23569] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3740.068392][T23569] do_syscall_64+0x39/0xb0 [ 3740.072861][T23569] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3740.078809][T23569] RIP: 0033:0x7fb22708c0c9 [ 3740.083247][T23569] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3740.102957][T23569] RSP: 002b:00007fb227ec3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3740.111391][T23569] RAX: ffffffffffffffda RBX: 00007fb2271abf80 RCX: 00007fb22708c0c9 [ 3740.119985][T23569] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3740.127967][T23569] RBP: 00007fb2270e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3740.135945][T23569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3740.143923][T23569] R13: 00007ffcf970a0df R14: 00007fb227ec3300 R15: 0000000000022000 [ 3740.151926][T23569] [ 3740.187384][T23389] device veth1_vlan entered promiscuous mode [ 3740.201871][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3740.210721][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3740.211166][T23569] memory: usage 8592kB, limit 0kB, failcnt 1839 [ 3740.231973][T23569] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3740.232057][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3740.263328][T23569] Memory cgroup stats for /syz5: [ 3740.266075][T23569] anon 114688 [ 3740.266075][T23569] file 8355840 [ 3740.266075][T23569] kernel 311296 [ 3740.266075][T23569] kernel_stack 65536 [ 3740.266075][T23569] pagetables 81920 [ 3740.266075][T23569] sec_pagetables 0 [ 3740.266075][T23569] percpu 64 [ 3740.266075][T23569] sock 0 [ 3740.266075][T23569] vmalloc 0 [ 3740.266075][T23569] shmem 8355840 [ 3740.266075][T23569] zswap 0 [ 3740.266075][T23569] zswapped 0 [ 3740.266075][T23569] file_mapped 241664 [ 3740.266075][T23569] file_dirty 0 [ 3740.266075][T23569] file_writeback 0 [ 3740.266075][T23569] swapcached 0 [ 3740.266075][T23569] anon_thp 0 [ 3740.266075][T23569] file_thp 0 [ 3740.266075][T23569] shmem_thp 0 [ 3740.266075][T23569] inactive_anon 114688 [ 3740.266075][T23569] active_anon 8355840 [ 3740.266075][T23569] inactive_file 0 [ 3740.266075][T23569] active_file 0 [ 3740.266075][T23569] unevictable 0 [ 3740.266075][T23569] slab_reclaimable 40048 [ 3740.266075][T23569] slab_unreclaimable 99816 [ 3740.266075][T23569] slab 139864 [ 3740.471663][T11011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3740.480171][T11011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3740.484173][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3740.520516][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3740.531387][T23569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23568,uid=0 [ 3740.532305][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3740.570562][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3740.581975][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3740.596395][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3740.608471][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3740.620741][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3740.622542][T23569] Memory cgroup out of memory: Killed process 23569 (syz-executor.5) total-vm:56588kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3740.631590][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3740.667049][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3740.678823][T23253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3740.713211][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3740.723292][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3740.732858][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3740.742051][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3740.751081][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3740.819920][T23389] device veth0_macvtap entered promiscuous mode [ 3740.849225][T23389] device veth1_macvtap entered promiscuous mode [ 3740.915166][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3740.915547][T23254] device veth0_macvtap entered promiscuous mode [ 3740.937495][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3740.949448][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3740.958358][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3740.966892][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3740.975209][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3740.984249][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3740.992983][ T5854] Bluetooth: hci0: command 0x041b tx timeout [ 3741.000266][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3741.016826][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.026745][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3741.037234][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.048223][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3741.061935][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.072997][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3741.083605][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.095379][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3741.108704][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.120581][T23253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3741.145284][T23254] device veth1_macvtap entered promiscuous mode [ 3741.156597][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3741.166410][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3741.175029][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3741.184357][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3741.198305][T23253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3741.209057][T23253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3741.218840][T23253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3741.227614][T23253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3741.330157][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.358231][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.377004][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.401630][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.421261][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.443738][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.461366][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.491144][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.504847][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.531349][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.541467][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.552396][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.564224][T23254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3741.574734][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.588598][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.599131][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.621378][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.633597][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.644494][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.654501][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.665071][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.675504][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.686417][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.697296][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.718970][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.740560][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3741.762512][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3741.785210][T23389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3741.803141][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3741.812234][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3741.821721][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3741.832060][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3741.855104][T23584] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3741.869298][T23584] CPU: 1 PID: 23584 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3741.879795][T23584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3741.889675][T23520] bridge0: port 1(bridge_slave_0) entered blocking state [ 3741.889890][T23584] Call Trace: [ 3741.889902][T23584] [ 3741.900650][T23520] bridge0: port 1(bridge_slave_0) entered disabled state [ 3741.903157][T23584] dump_stack_lvl+0xd1/0x138 [ 3741.903198][T23584] dump_header+0x10b/0x85f [ 3741.903241][T23584] oom_kill_process.cold+0x10/0x15 [ 3741.903284][T23584] out_of_memory+0x35c/0x14a0 [ 3741.903325][T23584] ? mark_held_locks+0x9f/0xe0 [ 3741.918361][T23520] device bridge_slave_0 entered promiscuous mode [ 3741.919379][T23584] ? oom_killer_disable+0x280/0x280 [ 3741.919429][T23584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3741.938094][T23520] bridge0: port 2(bridge_slave_1) entered blocking state [ 3741.940540][T23584] mem_cgroup_out_of_memory+0x206/0x270 [ 3741.940589][T23584] ? mem_cgroup_margin+0x130/0x130 [ 3741.957266][T23520] bridge0: port 2(bridge_slave_1) entered disabled state [ 3741.959015][T23584] memory_max_write+0x2f9/0x3c0 [ 3741.976879][T23520] device bridge_slave_1 entered promiscuous mode [ 3741.977246][T23584] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3741.995026][T23584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3742.001263][T23584] cgroup_file_write+0x1e2/0x770 [ 3742.006302][T23584] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3742.012505][T23584] ? kill_css+0x370/0x370 [ 3742.016966][T23584] ? kill_css+0x370/0x370 [ 3742.021348][T23584] kernfs_fop_write_iter+0x3f1/0x600 [ 3742.026698][T23584] vfs_write+0x9ed/0xdd0 [ 3742.031016][T23584] ? kernel_write+0x630/0x630 [ 3742.035813][T23584] ? __fget_files+0x26a/0x440 [ 3742.040546][T23584] ksys_write+0x12b/0x250 [ 3742.044910][T23584] ? __ia32_sys_read+0xb0/0xb0 [ 3742.049978][T23584] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3742.056173][T23584] do_syscall_64+0x39/0xb0 [ 3742.060802][T23584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3742.066732][T23584] RIP: 0033:0x7fcd5588c0c9 [ 3742.071180][T23584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3742.091005][T23584] RSP: 002b:00007fcd543fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3742.099549][T23584] RAX: ffffffffffffffda RBX: 00007fcd559abf80 RCX: 00007fcd5588c0c9 [ 3742.107561][T23584] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3742.116345][T23584] RBP: 00007fcd558e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3742.124486][T23584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3742.132479][T23584] R13: 00007ffdd16ab63f R14: 00007fcd543fe300 R15: 0000000000022000 [ 3742.140566][T23584] [ 3742.155500][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.161884][T23584] memory: usage 8560kB, limit 0kB, failcnt 2201 [ 3742.166684][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.173324][T23584] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3742.189755][T23584] Memory cgroup stats for /syz0: [ 3742.189946][T23584] anon 114688 [ 3742.189946][T23584] file 8347648 [ 3742.189946][T23584] kernel 282624 [ 3742.189946][T23584] kernel_stack 65536 [ 3742.189946][T23584] pagetables 81920 [ 3742.189946][T23584] sec_pagetables 0 [ 3742.189946][T23584] percpu 64 [ 3742.189946][T23584] sock 0 [ 3742.189946][T23584] vmalloc 0 [ 3742.189946][T23584] shmem 8347648 [ 3742.189946][T23584] zswap 0 [ 3742.189946][T23584] zswapped 0 [ 3742.189946][T23584] file_mapped 192512 [ 3742.189946][T23584] file_dirty 0 [ 3742.189946][T23584] file_writeback 0 [ 3742.189946][T23584] swapcached 0 [ 3742.189946][T23584] anon_thp 0 [ 3742.189946][T23584] file_thp 0 [ 3742.189946][T23584] shmem_thp 0 [ 3742.189946][T23584] inactive_anon 114688 [ 3742.189946][T23584] active_anon 8347648 [ 3742.189946][T23584] inactive_file 0 [ 3742.189946][T23584] active_file 0 [ 3742.189946][T23584] unevictable 0 [ 3742.189946][T23584] slab_reclaimable 35424 [ 3742.189946][T23584] slab_unreclaimable 75696 [ 3742.189946][T23584] slab 111120 [ 3742.194980][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.195002][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.195022][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.195045][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.195062][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.195076][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.195093][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.195109][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.195120][T23254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.291911][T23584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3742.382831][T23254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.400366][T23584] ,cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23258,uid=0 [ 3742.403831][T23254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3742.413542][T23584] Memory cgroup out of memory: Killed process 23258 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3742.443411][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.464448][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.474656][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.485991][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.496366][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.507171][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.518214][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.530689][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.541226][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.552571][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.562497][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.573595][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.588297][T23389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3742.599499][T23389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3742.624944][T23389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3742.675323][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3742.684652][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3742.694059][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3742.703932][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3742.753287][T23389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.767581][T23389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.776724][T23389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.785859][T23389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.803219][T23520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3742.815240][T23254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.824145][T23254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.833581][T23254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.842770][T23254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3742.908888][T23520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3743.037704][T23520] team0: Port device team_slave_0 added [ 3743.071207][ T5105] Bluetooth: hci0: command 0x040f tx timeout [ 3743.157323][T23520] team0: Port device team_slave_1 added [ 3743.158221][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3743.174556][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3743.219090][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3743.292466][T23520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3743.299476][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3743.346852][T23520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3743.391393][T23520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3743.398405][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3743.449888][T23520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3743.500421][T11011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3743.518327][T11011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3743.610487][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3743.631446][T11011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3743.639640][T11011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3743.710430][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3743.734713][T27309] device hsr_slave_0 left promiscuous mode [ 3743.763320][T27309] device hsr_slave_1 left promiscuous mode [ 3743.800262][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3743.852295][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3743.886774][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3743.957164][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3743.979593][T27309] device bridge_slave_1 left promiscuous mode [ 3744.047214][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3744.055312][T23598] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3744.067852][T23598] CPU: 1 PID: 23598 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3744.078365][T23598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3744.088461][T23598] Call Trace: [ 3744.091807][T23598] [ 3744.094762][T23598] dump_stack_lvl+0xd1/0x138 [ 3744.099432][T23598] dump_header+0x10b/0x85f [ 3744.103930][T23598] oom_kill_process.cold+0x10/0x15 [ 3744.109078][T23598] out_of_memory+0x35c/0x14a0 [ 3744.113788][T23598] ? oom_killer_disable+0x280/0x280 [ 3744.119008][T23598] ? mark_held_locks+0x9f/0xe0 [ 3744.123790][T23598] mem_cgroup_out_of_memory+0x206/0x270 [ 3744.129364][T23598] ? mem_cgroup_margin+0x130/0x130 [ 3744.134515][T23598] memory_max_write+0x2f9/0x3c0 [ 3744.139385][T23598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3744.145464][T23598] ? lock_release+0x810/0x810 [ 3744.150160][T23598] cgroup_file_write+0x1e2/0x770 [ 3744.155118][T23598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3744.161198][T23598] ? kill_css+0x370/0x370 [ 3744.165542][T23598] ? __virt_addr_valid+0x61/0x2e0 [ 3744.170595][T23598] ? kill_css+0x370/0x370 [ 3744.174936][T23598] kernfs_fop_write_iter+0x3f1/0x600 [ 3744.180339][T23598] vfs_write+0x9ed/0xdd0 [ 3744.184617][T23598] ? kernel_write+0x630/0x630 [ 3744.189311][T23598] ? __fget_files+0x26a/0x440 [ 3744.194021][T23598] ksys_write+0x12b/0x250 [ 3744.198365][T23598] ? __ia32_sys_read+0xb0/0xb0 [ 3744.203144][T23598] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3744.209068][T23598] do_syscall_64+0x39/0xb0 [ 3744.213599][T23598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3744.219503][T23598] RIP: 0033:0x7fe0bac8c0c9 [ 3744.223937][T23598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3744.243553][T23598] RSP: 002b:00007fe0bb90e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3744.251985][T23598] RAX: ffffffffffffffda RBX: 00007fe0badabf80 RCX: 00007fe0bac8c0c9 [ 3744.259963][T23598] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3744.267966][T23598] RBP: 00007fe0bace7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3744.279248][T23598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3744.287226][T23598] R13: 00007ffdb11df42f R14: 00007fe0bb90e300 R15: 0000000000022000 [ 3744.295223][T23598] [ 3744.314171][T23598] memory: usage 8524kB, limit 0kB, failcnt 1621 [ 3744.320726][T23598] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3744.322067][T27309] device bridge_slave_0 left promiscuous mode [ 3744.329057][T23598] Memory cgroup stats for [ 3744.346252][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3744.351347][T23598] /syz1: [ 3744.367352][T23598] anon 114688 [ 3744.367352][T23598] file 8318976 [ 3744.367352][T23598] kernel 278528 [ 3744.367352][T23598] kernel_stack 65536 [ 3744.367352][T23598] pagetables 77824 [ 3744.367352][T23598] sec_pagetables 0 [ 3744.367352][T23598] percpu 64 [ 3744.367352][T23598] sock 0 [ 3744.367352][T23598] vmalloc 0 [ 3744.367352][T23598] shmem 8318976 [ 3744.367352][T23598] zswap 0 [ 3744.367352][T23598] zswapped 0 [ 3744.367352][T23598] file_mapped 131072 [ 3744.367352][T23598] file_dirty 0 [ 3744.367352][T23598] file_writeback 0 [ 3744.367352][T23598] swapcached 0 [ 3744.367352][T23598] anon_thp 0 [ 3744.367352][T23598] file_thp 0 [ 3744.367352][T23598] shmem_thp 0 [ 3744.367352][T23598] inactive_anon 114688 [ 3744.367352][T23598] active_anon 8318976 [ 3744.367352][T23598] inactive_file 0 [ 3744.367352][T23598] active_file 0 [ 3744.367352][T23598] unevictable 0 [ 3744.367352][T23598] slab_reclaimable 39272 [ 3744.367352][T23598] slab_unreclaimable 73752 [ 3744.367352][T23598] slab 113024 [ 3744.470490][T23598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3744.474696][T27309] device hsr_slave_0 left promiscuous mode [ 3744.481232][T23598] ,cpuset=syz1,mems_allowed=0-1 [ 3744.504692][T27309] device hsr_slave_1 left promiscuous mode [ 3744.523524][T23598] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23253,uid=0 [ 3744.537359][T23598] Memory cgroup out of memory: Killed process 23253 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3744.558225][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3744.573458][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3744.596569][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3744.604208][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3744.651344][T27309] device bridge_slave_1 left promiscuous mode [ 3744.657635][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3744.667919][T27309] device bridge_slave_0 left promiscuous mode [ 3744.675293][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3744.692215][T27309] device hsr_slave_0 left promiscuous mode [ 3744.702509][T27309] device hsr_slave_1 left promiscuous mode [ 3744.718489][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3744.729843][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3744.752279][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3744.759782][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3744.781325][T27309] device bridge_slave_1 left promiscuous mode [ 3744.787614][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3744.808934][T27309] device bridge_slave_0 left promiscuous mode [ 3744.819362][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3744.874375][T27309] device veth1_macvtap left promiscuous mode [ 3744.880507][T27309] device veth0_macvtap left promiscuous mode [ 3744.898251][T27309] device veth1_vlan left promiscuous mode [ 3744.918525][T27309] device veth0_vlan left promiscuous mode [ 3744.927000][T27309] device veth1_macvtap left promiscuous mode [ 3744.933356][T27309] device veth0_macvtap left promiscuous mode [ 3744.939499][T27309] device veth1_vlan left promiscuous mode [ 3744.945554][T27309] device veth0_vlan left promiscuous mode [ 3744.958893][T27309] device veth1_macvtap left promiscuous mode [ 3744.977176][T27309] device veth0_macvtap left promiscuous mode [ 3744.989638][T27309] device veth1_vlan left promiscuous mode [ 3745.011910][T27309] device veth0_vlan left promiscuous mode [ 3745.151263][ T5105] Bluetooth: hci0: command 0x0419 tx timeout [ 3745.852137][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3745.883773][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3745.907412][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3745.950379][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3746.132118][T27309] bond0 (unregistering): Released all slaves [ 3746.403144][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3746.418692][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3746.435131][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3746.450297][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3746.523612][T27309] bond0 (unregistering): Released all slaves [ 3746.653153][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3746.668675][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3746.686735][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3746.706820][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3746.784114][T27309] bond0 (unregistering): Released all slaves [ 3746.860758][T22448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3746.879659][T23520] device hsr_slave_0 entered promiscuous mode [ 3746.882202][T22448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3746.897748][T23520] device hsr_slave_1 entered promiscuous mode [ 3746.928078][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3747.003690][T11011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3747.025156][T11011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3747.039516][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3747.076400][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3747.095758][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3747.110132][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3747.536555][T23655] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3747.635864][T23655] CPU: 1 PID: 23655 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3747.646544][T23655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3747.656639][T23655] Call Trace: [ 3747.659953][T23655] [ 3747.662944][T23655] dump_stack_lvl+0xd1/0x138 [ 3747.667632][T23655] dump_header+0x10b/0x85f [ 3747.672109][T23655] oom_kill_process.cold+0x10/0x15 [ 3747.677388][T23655] out_of_memory+0x35c/0x14a0 [ 3747.682145][T23655] ? oom_killer_disable+0x280/0x280 [ 3747.687403][T23655] ? mark_held_locks+0x9f/0xe0 [ 3747.692239][T23655] mem_cgroup_out_of_memory+0x206/0x270 [ 3747.697947][T23655] ? mem_cgroup_margin+0x130/0x130 [ 3747.703158][T23655] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3747.709029][T23655] memory_max_write+0x2f9/0x3c0 [ 3747.713949][T23655] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3747.720165][T23655] ? lock_release+0x810/0x810 [ 3747.724899][T23655] cgroup_file_write+0x1e2/0x770 [ 3747.729890][T23655] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3747.736006][T23655] ? kill_css+0x370/0x370 [ 3747.740487][T23655] ? kill_css+0x370/0x370 [ 3747.744865][T23655] kernfs_fop_write_iter+0x3f1/0x600 [ 3747.750300][T23655] vfs_write+0x9ed/0xdd0 [ 3747.754600][T23655] ? kernel_write+0x630/0x630 [ 3747.759340][T23655] ? __fget_files+0x26a/0x440 [ 3747.764094][T23655] ksys_write+0x12b/0x250 [ 3747.768468][T23655] ? __ia32_sys_read+0xb0/0xb0 [ 3747.773281][T23655] ? syscall_enter_from_user_mode+0x30/0xb0 [ 3747.779225][T23655] do_syscall_64+0x39/0xb0 [ 3747.783697][T23655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3747.789648][T23655] RIP: 0033:0x7fa3ba68c0c9 [ 3747.794107][T23655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3747.813760][T23655] RSP: 002b:00007fa3bb455168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3747.822253][T23655] RAX: ffffffffffffffda RBX: 00007fa3ba7abf80 RCX: 00007fa3ba68c0c9 [ 3747.830282][T23655] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3747.838291][T23655] RBP: 00007fa3ba6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3747.846304][T23655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3747.854323][T23655] R13: 00007ffcf0e6d65f R14: 00007fa3bb455300 R15: 0000000000022000 [ 3747.862375][T23655] [ 3747.911821][T23655] memory: usage 8568kB, limit 0kB, failcnt 2372 [ 3747.918537][T23655] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3747.935368][T23655] Memory cgroup stats for /syz4: [ 3747.962353][T23655] anon 114688 [ 3747.962353][T23655] file 8359936 [ 3747.962353][T23655] kernel 278528 [ 3747.962353][T23655] kernel_stack 65536 [ 3747.962353][T23655] pagetables 81920 [ 3747.962353][T23655] sec_pagetables 0 [ 3747.962353][T23655] percpu 64 [ 3747.962353][T23655] sock 0 [ 3747.962353][T23655] vmalloc 0 [ 3747.962353][T23655] shmem 8359936 [ 3747.962353][T23655] zswap 0 [ 3747.962353][T23655] zswapped 0 [ 3747.962353][T23655] file_mapped 176128 [ 3747.962353][T23655] file_dirty 0 [ 3747.962353][T23655] file_writeback 0 [ 3747.962353][T23655] swapcached 0 [ 3747.962353][T23655] anon_thp 0 [ 3747.962353][T23655] file_thp 0 [ 3747.962353][T23655] shmem_thp 0 [ 3747.962353][T23655] inactive_anon 114688 [ 3747.962353][T23655] active_anon 8359936 [ 3747.962353][T23655] inactive_file 0 [ 3747.962353][T23655] active_file 0 [ 3747.962353][T23655] unevictable 0 [ 3747.962353][T23655] slab_reclaimable 33736 [ 3747.962353][T23655] slab_unreclaimable 75696 [ 3747.962353][T23655] slab 109432 [ 3748.170235][T23655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23653,uid=0 19:57:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3748.231165][T23655] Memory cgroup out of memory: Killed process 23655 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:57:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:57:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3748.288211][T23272] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3748.340930][T23272] CPU: 1 PID: 23272 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3748.351423][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3748.361520][T23272] Call Trace: [ 3748.364823][T23272] [ 3748.367773][T23272] dump_stack_lvl+0xd1/0x138 [ 3748.372408][T23272] dump_header+0x10b/0x85f [ 3748.376964][T23272] oom_kill_process.cold+0x10/0x15 [ 3748.382121][T23272] out_of_memory+0x35c/0x14a0 [ 3748.386850][T23272] ? find_held_lock+0x2d/0x110 [ 3748.391743][T23272] ? oom_killer_disable+0x280/0x280 [ 3748.397007][T23272] ? find_held_lock+0x2d/0x110 [ 3748.401823][T23272] mem_cgroup_out_of_memory+0x206/0x270 [ 3748.407520][T23272] ? mem_cgroup_margin+0x130/0x130 [ 3748.412693][T23272] ? lock_downgrade+0x6e0/0x6e0 [ 3748.417589][T23272] try_charge_memcg+0xefb/0x12f0 [ 3748.422658][T23272] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3748.428756][T23272] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3748.434526][T23272] ? lock_downgrade+0x6e0/0x6e0 [ 3748.439418][T23272] ? lock_downgrade+0x6e0/0x6e0 [ 3748.444297][T23272] ? rcu_read_unlock+0x9/0x60 [ 3748.449028][T23272] obj_cgroup_charge+0x2af/0x5e0 [ 3748.454008][T23272] ? copy_process+0x3aa/0x7520 [ 3748.458804][T23272] kmem_cache_alloc_node+0xb7/0x460 [ 3748.464038][T23272] copy_process+0x3aa/0x7520 [ 3748.468663][T23272] ? _raw_spin_unlock+0x28/0x40 [ 3748.473546][T23272] ? wp_page_reuse+0x197/0x570 [ 3748.478345][T23272] ? do_wp_page+0x844/0x3370 [ 3748.483078][T23272] ? __cleanup_sighand+0xb0/0xb0 [ 3748.488044][T23272] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3748.493461][T23272] ? rwlock_bug.part.0+0x90/0x90 [ 3748.498429][T23272] ? lock_chain_count+0x20/0x20 [ 3748.503327][T23272] kernel_clone+0xeb/0x990 [ 3748.507774][T23272] ? create_io_thread+0xf0/0xf0 [ 3748.512671][T23272] ? find_held_lock+0x2d/0x110 [ 3748.517488][T23272] __do_sys_clone+0xba/0x100 [ 3748.522118][T23272] ? kernel_clone+0x990/0x990 [ 3748.526850][T23272] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3748.532796][T23272] do_syscall_64+0x39/0xb0 [ 3748.537254][T23272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3748.543175][T23272] RIP: 0033:0x7fb227089dfb [ 3748.547618][T23272] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3748.567270][T23272] RSP: 002b:00007ffcf970a320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3748.575723][T23272] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb227089dfb [ 3748.583734][T23272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3748.591742][T23272] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555d12400 [ 3748.599753][T23272] R10: 0000555555d126d0 R11: 0000000000000246 R12: 0000000000000001 [ 3748.607892][T23272] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcf970a400 [ 3748.615928][T23272] [ 3748.901027][T23272] memory: usage 8304kB, limit 0kB, failcnt 1858 [ 3748.907348][T23272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3748.923151][T23272] Memory cgroup stats for /syz5: [ 3748.923362][T23272] anon 40960 [ 3748.923362][T23272] file 8355840 [ 3748.923362][T23272] kernel 106496 [ 3748.923362][T23272] kernel_stack 0 [ 3748.923362][T23272] pagetables 8192 [ 3748.923362][T23272] sec_pagetables 0 [ 3748.923362][T23272] percpu 0 [ 3748.923362][T23272] sock 0 [ 3748.923362][T23272] vmalloc 0 [ 3748.923362][T23272] shmem 8355840 [ 3748.923362][T23272] zswap 0 [ 3748.923362][T23272] zswapped 0 [ 3748.923362][T23272] file_mapped 221184 [ 3748.923362][T23272] file_dirty 0 [ 3748.923362][T23272] file_writeback 0 [ 3748.923362][T23272] swapcached 0 [ 3748.923362][T23272] anon_thp 0 [ 3748.923362][T23272] file_thp 0 [ 3748.923362][T23272] shmem_thp 0 [ 3748.923362][T23272] inactive_anon 40960 [ 3748.923362][T23272] active_anon 8355840 [ 3748.923362][T23272] inactive_file 0 [ 3748.923362][T23272] active_file 0 [ 3748.923362][T23272] unevictable 0 [ 3748.923362][T23272] slab_reclaimable 28032 [ 3748.923362][T23272] slab_unreclaimable 59008 [ 3748.923362][T23272] slab 87040 [ 3749.119636][T23520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3749.149859][T23520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3749.166197][T23272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23272,uid=0 [ 3749.193976][T23520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3749.219875][T23272] Memory cgroup out of memory: Killed process 23272 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3749.251255][T23520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3749.301706][T23389] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3749.322645][T23389] CPU: 1 PID: 23389 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3749.333234][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3749.343321][T23389] Call Trace: [ 3749.346625][T23389] [ 3749.349578][T23389] dump_stack_lvl+0xd1/0x138 [ 3749.354211][T23389] dump_header+0x10b/0x85f [ 3749.358690][T23389] oom_kill_process.cold+0x10/0x15 [ 3749.363906][T23389] out_of_memory+0x35c/0x14a0 [ 3749.368640][T23389] ? oom_killer_disable+0x280/0x280 [ 3749.373896][T23389] ? find_held_lock+0x2d/0x110 [ 3749.378723][T23389] mem_cgroup_out_of_memory+0x206/0x270 [ 3749.384588][T23389] ? mem_cgroup_margin+0x130/0x130 [ 3749.389879][T23389] ? lock_downgrade+0x6e0/0x6e0 [ 3749.394789][T23389] try_charge_memcg+0xefb/0x12f0 [ 3749.399782][T23389] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3749.405801][T23389] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3749.411579][T23389] ? lock_downgrade+0x6e0/0x6e0 [ 3749.416473][T23389] ? lock_downgrade+0x6e0/0x6e0 [ 3749.421379][T23389] ? rcu_read_unlock+0x9/0x60 [ 3749.426111][T23389] obj_cgroup_charge+0x2af/0x5e0 [ 3749.431092][T23389] ? copy_process+0x3aa/0x7520 [ 3749.435892][T23389] kmem_cache_alloc_node+0xb7/0x460 [ 3749.439250][T23520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3749.441111][T23389] copy_process+0x3aa/0x7520 [ 3749.441142][T23389] ? _raw_spin_unlock+0x28/0x40 [ 3749.441170][T23389] ? wp_page_reuse+0x197/0x570 [ 3749.441201][T23389] ? do_wp_page+0x844/0x3370 [ 3749.441242][T23389] ? __cleanup_sighand+0xb0/0xb0 [ 3749.441267][T23389] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3749.441306][T23389] ? rwlock_bug.part.0+0x90/0x90 [ 3749.441329][T23389] ? lock_chain_count+0x20/0x20 [ 3749.441357][T23389] kernel_clone+0xeb/0x990 [ 3749.489717][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3749.491212][T23389] ? create_io_thread+0xf0/0xf0 [ 3749.491253][T23389] ? find_held_lock+0x2d/0x110 [ 3749.491299][T23389] __do_sys_clone+0xba/0x100 [ 3749.491327][T23389] ? kernel_clone+0x990/0x990 [ 3749.491369][T23389] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3749.491404][T23389] do_syscall_64+0x39/0xb0 [ 3749.518815][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3749.523343][T23389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3749.523378][T23389] RIP: 0033:0x7fb6e7c89dfb [ 3749.523397][T23389] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3749.523418][T23389] RSP: 002b:00007ffffa8c1860 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3749.523441][T23389] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6e7c89dfb [ 3749.523456][T23389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3749.523471][T23389] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555618d400 [ 3749.523485][T23389] R10: 000055555618d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3749.523500][T23389] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffffa8c1940 [ 3749.523532][T23389] [ 3749.542827][T23520] 8021q: adding VLAN 0 to HW filter on device team0 [ 3749.636050][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3749.646273][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3749.654973][T23389] memory: usage 280kB, limit 0kB, failcnt 4710 [ 3749.669087][T23389] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3749.678019][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 3749.685220][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3749.701416][T23389] Memory cgroup stats for /syz2: [ 3749.701609][T23389] anon 45056 [ 3749.701609][T23389] file 155648 [ 3749.701609][T23389] kernel 86016 [ 3749.701609][T23389] kernel_stack 0 [ 3749.701609][T23389] pagetables 8192 [ 3749.701609][T23389] sec_pagetables 0 [ 3749.701609][T23389] percpu 0 [ 3749.701609][T23389] sock 0 [ 3749.701609][T23389] vmalloc 0 [ 3749.701609][T23389] shmem 151552 [ 3749.701609][T23389] zswap 0 [ 3749.701609][T23389] zswapped 0 [ 3749.701609][T23389] file_mapped 139264 [ 3749.701609][T23389] file_dirty 0 [ 3749.701609][T23389] file_writeback 0 [ 3749.701609][T23389] swapcached 0 [ 3749.701609][T23389] anon_thp 0 [ 3749.701609][T23389] file_thp 0 [ 3749.701609][T23389] shmem_thp 0 [ 3749.701609][T23389] inactive_anon 102400 [ 3749.701609][T23389] active_anon 94208 [ 3749.701609][T23389] inactive_file 0 [ 3749.701609][T23389] active_file 4096 [ 3749.701609][T23389] unevictable 0 [ 3749.701609][T23389] slab_reclaimable 9304 [ 3749.701609][T23389] slab_unreclaimable 59008 [ 3749.701609][T23389] slab 68312 [ 3749.877230][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3749.891652][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3749.900417][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3749.952153][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 3749.959331][T12356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3749.991313][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3750.000208][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3750.089714][T23389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23389,uid=0 [ 3750.151303][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3750.170427][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3750.187334][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3750.196946][T23389] Memory cgroup out of memory: Killed process 23389 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3750.212262][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3750.250783][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3750.255071][T23254] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3750.275286][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3750.299457][T23254] CPU: 1 PID: 23254 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3750.309947][T23254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3750.317055][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3750.320035][T23254] Call Trace: [ 3750.320046][T23254] [ 3750.334003][T23254] dump_stack_lvl+0xd1/0x138 [ 3750.338630][T23254] dump_header+0x10b/0x85f [ 3750.343100][T23254] oom_kill_process.cold+0x10/0x15 [ 3750.348260][T23254] out_of_memory+0x35c/0x14a0 [ 3750.352979][T23254] ? oom_killer_disable+0x280/0x280 [ 3750.358213][T23254] ? find_held_lock+0x2d/0x110 [ 3750.363002][T23254] mem_cgroup_out_of_memory+0x206/0x270 [ 3750.368568][T23254] ? mem_cgroup_margin+0x130/0x130 [ 3750.373697][T23254] ? lock_downgrade+0x6e0/0x6e0 [ 3750.378575][T23254] try_charge_memcg+0xefb/0x12f0 [ 3750.383535][T23254] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3750.389700][T23254] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3750.396139][T23254] ? lock_downgrade+0x6e0/0x6e0 [ 3750.400999][T23254] ? lock_downgrade+0x6e0/0x6e0 [ 3750.405866][T23254] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3750.411427][T23254] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3750.417596][T23254] copy_process+0x4e3/0x7520 [ 3750.422197][T23254] ? _raw_spin_unlock+0x28/0x40 [ 3750.427063][T23254] ? wp_page_reuse+0x197/0x570 [ 3750.431854][T23254] ? do_wp_page+0x844/0x3370 [ 3750.436575][T23254] ? __cleanup_sighand+0xb0/0xb0 [ 3750.441535][T23254] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3750.446943][T23254] ? rwlock_bug.part.0+0x90/0x90 [ 3750.451941][T23254] ? lock_chain_count+0x20/0x20 [ 3750.456835][T23254] kernel_clone+0xeb/0x990 [ 3750.461286][T23254] ? create_io_thread+0xf0/0xf0 [ 3750.466164][T23254] ? find_held_lock+0x2d/0x110 [ 3750.470964][T23254] __do_sys_clone+0xba/0x100 [ 3750.475589][T23254] ? kernel_clone+0x990/0x990 [ 3750.480314][T23254] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3750.486235][T23254] do_syscall_64+0x39/0xb0 [ 3750.490677][T23254] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3750.496587][T23254] RIP: 0033:0x7fa3ba689dfb [ 3750.501007][T23254] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3750.520620][T23254] RSP: 002b:00007ffcf0e6d8a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3750.529040][T23254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa3ba689dfb [ 3750.537018][T23254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3750.544990][T23254] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556b46400 [ 3750.552963][T23254] R10: 0000555556b466d0 R11: 0000000000000246 R12: 0000000000000001 [ 3750.560940][T23254] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcf0e6d980 [ 3750.568930][T23254] [ 3750.603879][T23520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:57:52 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:57:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3751.411208][T23254] memory: usage 8300kB, limit 0kB, failcnt 2391 [ 3751.427849][T23254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3751.461045][T23254] Memory cgroup stats for /syz4: [ 3751.461249][T23254] anon 45056 [ 3751.461249][T23254] file 8359936 [ 3751.461249][T23254] kernel 94208 [ 3751.461249][T23254] kernel_stack 0 [ 3751.461249][T23254] pagetables 8192 [ 3751.461249][T23254] sec_pagetables 0 [ 3751.461249][T23254] percpu 0 [ 3751.461249][T23254] sock 0 [ 3751.461249][T23254] vmalloc 0 [ 3751.461249][T23254] shmem 8359936 [ 3751.461249][T23254] zswap 0 [ 3751.461249][T23254] zswapped 0 [ 3751.461249][T23254] file_mapped 163840 [ 3751.461249][T23254] file_dirty 0 [ 3751.461249][T23254] file_writeback 0 [ 3751.461249][T23254] swapcached 0 [ 3751.461249][T23254] anon_thp 0 [ 3751.461249][T23254] file_thp 0 [ 3751.461249][T23254] shmem_thp 0 [ 3751.461249][T23254] inactive_anon 45056 [ 3751.461249][T23254] active_anon 8359936 [ 3751.461249][T23254] inactive_file 0 [ 3751.461249][T23254] active_file 0 [ 3751.461249][T23254] unevictable 0 [ 3751.461249][T23254] slab_reclaimable 29448 [ 3751.461249][T23254] slab_unreclaimable 39792 [ 3751.461249][T23254] slab 69240 [ 3751.557672][T23254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23254,uid=0 [ 3751.574968][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3751.584852][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3751.593458][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3751.603217][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3751.610903][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3751.618870][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3751.687766][T23254] Memory cgroup out of memory: Killed process 23254 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3752.026723][T23520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3752.064687][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:57:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3752.081378][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3752.143047][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3752.172058][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3752.233203][T23687] chnl_net:caif_netlink_parms(): no params data found [ 3752.272735][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3752.291348][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3752.327664][T23520] device veth0_vlan entered promiscuous mode [ 3752.340180][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3752.362071][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3752.480515][T23520] device veth1_vlan entered promiscuous mode 19:57:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3752.641250][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3752.649616][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3752.678982][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3752.687449][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3752.696486][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3752.726076][T23687] bridge0: port 1(bridge_slave_0) entered blocking state [ 3752.771706][T23687] bridge0: port 1(bridge_slave_0) entered disabled state [ 3752.780685][T23687] device bridge_slave_0 entered promiscuous mode [ 3752.851588][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3752.859955][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3752.896986][T23520] device veth0_macvtap entered promiscuous mode [ 3752.938460][T23687] bridge0: port 2(bridge_slave_1) entered blocking state [ 3752.951135][T23687] bridge0: port 2(bridge_slave_1) entered disabled state [ 3752.985797][T23687] device bridge_slave_1 entered promiscuous mode [ 3753.030707][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3753.039621][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3753.077226][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3753.162534][T23520] device veth1_macvtap entered promiscuous mode [ 3753.181561][T23687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3753.223760][T23687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3753.252201][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3753.264754][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.277691][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3753.289395][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.331006][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3753.381050][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.442284][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3753.494697][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.517005][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3753.528209][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.528771][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3753.540128][T23520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3753.555995][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3753.564725][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3753.574376][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3753.578047][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3753.589819][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3753.597880][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3753.631576][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3753.640368][T27000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3753.641009][ T5854] Bluetooth: hci1: command 0x0409 tx timeout [ 3753.718291][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3753.761136][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.801737][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3753.841013][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.869563][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3753.902120][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.937393][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3753.949948][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.960709][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3753.971914][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3753.983764][T23520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3754.051402][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3754.065321][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3754.076904][T23520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3754.089426][T23520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3754.108548][T23520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3754.119959][T23520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3754.135168][T23687] team0: Port device team_slave_0 added [ 3754.145623][T23687] team0: Port device team_slave_1 added [ 3754.230784][T23687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3754.241586][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3754.289516][T23687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3754.393235][T23687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3754.400252][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3754.462983][T23687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3754.498338][T23707] chnl_net:caif_netlink_parms(): no params data found [ 3754.635840][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3754.645787][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3754.655415][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3754.666624][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3754.675215][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3754.682668][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3754.721963][T23687] device hsr_slave_0 entered promiscuous mode [ 3754.729776][T23687] device hsr_slave_1 entered promiscuous mode [ 3754.740019][T23687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3754.747879][T23687] Cannot create hsr debugfs directory [ 3754.754428][ T5854] Bluetooth: hci2: command 0x0409 tx timeout [ 3754.809888][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3754.862224][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3754.874387][T27309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3754.985771][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3755.031825][T27309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3755.175316][T27309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3755.181686][T11011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3755.220926][T11011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3755.306535][T27309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3755.320626][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3755.329039][T23707] bridge0: port 1(bridge_slave_0) entered blocking state [ 3755.361097][T23707] bridge0: port 1(bridge_slave_0) entered disabled state [ 3755.379696][T23707] device bridge_slave_0 entered promiscuous mode [ 3755.409032][T23712] chnl_net:caif_netlink_parms(): no params data found [ 3755.441880][ T5105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3755.452883][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3755.461799][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3755.469627][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3755.481590][ T5105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3755.488866][ T5105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3755.534890][T23707] bridge0: port 2(bridge_slave_1) entered blocking state [ 3755.553156][T23707] bridge0: port 2(bridge_slave_1) entered disabled state [ 3755.570997][T23707] device bridge_slave_1 entered promiscuous mode [ 3755.631199][ T5854] Bluetooth: hci3: command 0x0409 tx timeout [ 3755.722449][ T5854] Bluetooth: hci1: command 0x041b tx timeout [ 3755.863302][T23707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3755.883852][T23707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3755.902948][T23729] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3755.921126][T23729] CPU: 0 PID: 23729 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3755.931628][T23729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3755.941799][T23729] Call Trace: [ 3755.945097][T23729] [ 3755.948054][T23729] dump_stack_lvl+0xd1/0x138 [ 3755.952684][T23729] dump_header+0x10b/0x85f [ 3755.957174][T23729] oom_kill_process.cold+0x10/0x15 [ 3755.962370][T23729] out_of_memory+0x35c/0x14a0 [ 3755.967106][T23729] ? oom_killer_disable+0x280/0x280 [ 3755.972431][T23729] ? mark_held_locks+0x9f/0xe0 [ 3755.977236][T23729] mem_cgroup_out_of_memory+0x206/0x270 [ 3755.982830][T23729] ? mem_cgroup_margin+0x130/0x130 [ 3755.988010][T23729] memory_max_write+0x2f9/0x3c0 [ 3755.992911][T23729] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3755.999018][T23729] ? lock_release+0x810/0x810 [ 3756.003759][T23729] cgroup_file_write+0x1e2/0x770 [ 3756.008731][T23729] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3756.014852][T23729] ? kill_css+0x370/0x370 [ 3756.019265][T23729] ? kill_css+0x370/0x370 [ 3756.023627][T23729] kernfs_fop_write_iter+0x3f1/0x600 [ 3756.028971][T23729] vfs_write+0x9ed/0xdd0 [ 3756.033262][T23729] ? kernel_write+0x630/0x630 [ 3756.037982][T23729] ? __fget_files+0x26a/0x440 [ 3756.042709][T23729] ksys_write+0x12b/0x250 [ 3756.047067][T23729] ? __ia32_sys_read+0xb0/0xb0 [ 3756.051865][T23729] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3756.057802][T23729] do_syscall_64+0x39/0xb0 [ 3756.062256][T23729] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3756.068179][T23729] RIP: 0033:0x7fa145a8c0c9 [ 3756.072625][T23729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3756.092344][T23729] RSP: 002b:00007fa1467bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3756.100787][T23729] RAX: ffffffffffffffda RBX: 00007fa145babf80 RCX: 00007fa145a8c0c9 [ 3756.108806][T23729] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3756.116797][T23729] RBP: 00007fa145ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3756.124787][T23729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3756.132868][T23729] R13: 00007ffeed6e7e2f R14: 00007fa1467bd300 R15: 0000000000022000 [ 3756.140969][T23729] [ 3756.157250][T23729] memory: usage 8568kB, limit 0kB, failcnt 2254 [ 3756.167666][T23729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3756.177532][T23729] Memory cgroup stats for /syz3: [ 3756.183563][T23729] anon 114688 [ 3756.183563][T23729] file 8364032 [ 3756.183563][T23729] kernel 282624 [ 3756.183563][T23729] kernel_stack 65536 [ 3756.183563][T23729] pagetables 77824 [ 3756.183563][T23729] sec_pagetables 0 [ 3756.183563][T23729] percpu 64 [ 3756.183563][T23729] sock 0 [ 3756.183563][T23729] vmalloc 0 [ 3756.183563][T23729] shmem 8359936 [ 3756.183563][T23729] zswap 0 [ 3756.183563][T23729] zswapped 0 [ 3756.183563][T23729] file_mapped 163840 [ 3756.183563][T23729] file_dirty 4096 [ 3756.183563][T23729] file_writeback 0 [ 3756.183563][T23729] swapcached 0 [ 3756.183563][T23729] anon_thp 0 [ 3756.183563][T23729] file_thp 0 [ 3756.183563][T23729] shmem_thp 0 [ 3756.183563][T23729] inactive_anon 4042752 [ 3756.183563][T23729] active_anon 4427776 [ 3756.183563][T23729] inactive_file 0 [ 3756.183563][T23729] active_file 0 [ 3756.183563][T23729] unevictable 0 [ 3756.183563][T23729] slab_reclaimable 39128 [ 3756.183563][T23729] slab_unreclaimable 73752 [ 3756.183563][T23729] slab 112880 [ 3756.293089][T23729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23520,uid=0 [ 3756.311456][T23729] Memory cgroup out of memory: Killed process 23520 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3756.406063][T23707] team0: Port device team_slave_0 added [ 3756.539446][T23707] team0: Port device team_slave_1 added [ 3756.548379][T23712] bridge0: port 1(bridge_slave_0) entered blocking state [ 3756.560996][T23712] bridge0: port 1(bridge_slave_0) entered disabled state [ 3756.573247][T23712] device bridge_slave_0 entered promiscuous mode [ 3756.645601][T23687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:57:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3756.733359][T23712] bridge0: port 2(bridge_slave_1) entered blocking state [ 3756.740518][T23712] bridge0: port 2(bridge_slave_1) entered disabled state [ 3756.750334][T23712] device bridge_slave_1 entered promiscuous mode [ 3756.761317][ T5854] Bluetooth: hci4: command 0x0409 tx timeout [ 3756.794826][T27309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3756.831100][ T5854] Bluetooth: hci2: command 0x041b tx timeout [ 3756.871997][T23687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3756.949545][T23707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3756.958873][T23707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 19:57:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3757.040974][T23707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3757.153352][T27309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3757.204806][T23718] chnl_net:caif_netlink_parms(): no params data found [ 3757.244820][T23687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3757.293004][T23707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3757.300020][T23707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3757.384973][T23707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3757.475507][T23712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3757.534092][T27309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3757.551215][ T5854] Bluetooth: hci5: command 0x0409 tx timeout [ 3757.576366][T23687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3757.632555][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3757.638939][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3757.699676][T23712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3757.711021][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 3757.775955][T27309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3757.791075][ T5854] Bluetooth: hci1: command 0x040f tx timeout [ 3757.891951][T23707] device hsr_slave_0 entered promiscuous mode [ 3757.899325][T23707] device hsr_slave_1 entered promiscuous mode [ 3757.910314][T23707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3757.918057][T23707] Cannot create hsr debugfs directory [ 3757.953512][T23712] team0: Port device team_slave_0 added [ 3758.042670][T23712] team0: Port device team_slave_1 added [ 3758.231408][T23718] bridge0: port 1(bridge_slave_0) entered blocking state [ 3758.238692][T23718] bridge0: port 1(bridge_slave_0) entered disabled state [ 3758.263111][T23718] device bridge_slave_0 entered promiscuous mode [ 3758.318464][T23726] chnl_net:caif_netlink_parms(): no params data found [ 3758.341412][T23712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3758.348427][T23712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3758.395429][T23712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3758.427187][T23718] bridge0: port 2(bridge_slave_1) entered blocking state [ 3758.451038][T23718] bridge0: port 2(bridge_slave_1) entered disabled state [ 3758.471099][T23718] device bridge_slave_1 entered promiscuous mode [ 3758.494910][T23712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3758.511544][T23712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3758.571000][T23712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3758.614114][T23687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3758.728341][T23687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3758.803794][T23718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3758.841418][ T5854] Bluetooth: hci4: command 0x041b tx timeout [ 3758.902197][T27309] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3758.922702][ T5854] Bluetooth: hci2: command 0x040f tx timeout [ 3758.967042][T23687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3759.065248][T23718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3759.150642][T23712] device hsr_slave_0 entered promiscuous mode [ 3759.191505][T23712] device hsr_slave_1 entered promiscuous mode [ 3759.201424][T23712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3759.209018][T23712] Cannot create hsr debugfs directory [ 3759.272214][T23687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3759.301772][T27309] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3759.595233][T27309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3759.617909][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3759.628213][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3759.635659][T10157] Bluetooth: hci5: command 0x041b tx timeout [ 3759.645400][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3759.653559][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3759.661230][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3759.695940][T23718] team0: Port device team_slave_0 added [ 3759.801472][ T5105] Bluetooth: hci3: command 0x040f tx timeout [ 3759.801791][T27309] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3759.880964][ T5105] Bluetooth: hci1: command 0x0419 tx timeout [ 3759.884212][T23718] team0: Port device team_slave_1 added [ 3760.017201][T23707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3760.098736][T23726] bridge0: port 1(bridge_slave_0) entered blocking state [ 3760.121650][T23726] bridge0: port 1(bridge_slave_0) entered disabled state [ 3760.130095][T23726] device bridge_slave_0 entered promiscuous mode [ 3760.262902][T23718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3760.269906][T23718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3760.350886][T23718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3760.385163][T23718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3760.400876][T23718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3760.450887][T23718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3760.524490][T23707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3760.554485][T23726] bridge0: port 2(bridge_slave_1) entered blocking state [ 3760.567431][T23726] bridge0: port 2(bridge_slave_1) entered disabled state [ 3760.586634][T23726] device bridge_slave_1 entered promiscuous mode [ 3760.653232][T23707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3760.821885][T23707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3760.863930][T23726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3760.911223][ T5105] Bluetooth: hci4: command 0x040f tx timeout [ 3760.982083][T23726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3761.001080][ T5105] Bluetooth: hci2: command 0x0419 tx timeout [ 3761.015830][T23687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3761.154712][T23718] device hsr_slave_0 entered promiscuous mode [ 3761.178270][T23718] device hsr_slave_1 entered promiscuous mode [ 3761.191784][T23718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3761.199385][T23718] Cannot create hsr debugfs directory [ 3761.270319][T23687] 8021q: adding VLAN 0 to HW filter on device team0 [ 3761.334777][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3761.343300][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3761.359837][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3761.371803][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3761.383421][T32708] bridge0: port 1(bridge_slave_0) entered blocking state [ 3761.390522][T32708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3761.399551][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3761.408495][T32708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3761.417134][T32708] bridge0: port 2(bridge_slave_1) entered blocking state [ 3761.424292][T32708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3761.513129][T23726] team0: Port device team_slave_0 added [ 3761.582913][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3761.596736][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3761.608439][T23726] team0: Port device team_slave_1 added [ 3761.646813][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3761.689414][T23726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3761.696972][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3761.723705][T23726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3761.741231][ T5105] Bluetooth: hci0: command 0x0409 tx timeout [ 3761.741243][ T5854] Bluetooth: hci5: command 0x040f tx timeout [ 3761.778444][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3761.790114][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3761.800632][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3761.809500][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3761.823613][T23726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3761.830625][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3761.858251][T23726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3761.870973][ T5854] Bluetooth: hci3: command 0x0419 tx timeout [ 3762.191916][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3762.200127][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3762.231696][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3762.245336][T23687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3762.784535][T23726] device hsr_slave_0 entered promiscuous mode [ 3762.841774][T23726] device hsr_slave_1 entered promiscuous mode [ 3762.861484][T23726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3762.869116][T23726] Cannot create hsr debugfs directory [ 3762.991124][ T5105] Bluetooth: hci4: command 0x0419 tx timeout [ 3763.013179][T23707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3763.482000][T23765] chnl_net:caif_netlink_parms(): no params data found [ 3763.516413][T23707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3763.791031][ T5105] Bluetooth: hci0: command 0x041b tx timeout [ 3763.800978][ T5105] Bluetooth: hci5: command 0x0419 tx timeout [ 3763.896315][T23707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3764.025232][T23707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3764.054542][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3764.071242][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3764.117059][T23687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3764.477878][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3764.488069][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3764.523623][T23687] device veth0_vlan entered promiscuous mode [ 3764.592547][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3764.601683][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3764.610326][T23765] bridge0: port 1(bridge_slave_0) entered blocking state [ 3764.619162][T23765] bridge0: port 1(bridge_slave_0) entered disabled state [ 3764.630400][T23765] device bridge_slave_0 entered promiscuous mode [ 3764.644209][T23687] device veth1_vlan entered promiscuous mode [ 3764.666149][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3764.681685][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3764.689661][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3764.711936][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3764.790016][T23765] bridge0: port 2(bridge_slave_1) entered blocking state [ 3764.806719][T23765] bridge0: port 2(bridge_slave_1) entered disabled state [ 3764.830745][T23765] device bridge_slave_1 entered promiscuous mode [ 3764.907816][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3764.916849][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3764.986040][T23687] device veth0_macvtap entered promiscuous mode [ 3765.007920][T23765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3765.042606][T23765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3765.118212][T23687] device veth1_macvtap entered promiscuous mode [ 3765.195683][T23712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3765.258587][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.299647][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.328120][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.351784][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.370913][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.401109][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.421005][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.441074][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.461084][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.489171][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.512632][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3765.530983][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.552844][T23687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3765.564233][T23712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3765.611933][T23712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3765.664800][T23765] team0: Port device team_slave_0 added [ 3765.681918][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3765.704606][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3765.731982][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3765.808017][T23712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3765.837148][T23765] team0: Port device team_slave_1 added [ 3765.870925][ T5854] Bluetooth: hci0: command 0x040f tx timeout [ 3765.879349][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3765.900890][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.910758][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3765.952560][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3765.981539][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3766.011025][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3766.051092][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3766.070949][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3766.091009][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3766.130243][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3766.151400][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3766.190900][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3766.232582][T23687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3766.396294][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3766.411827][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3766.521777][T23765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3766.528781][T23765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3766.602958][T23765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3766.636157][T23707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3766.652177][T23687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3766.667064][T23687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3766.691078][T23687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3766.699838][T23687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3766.762301][T23765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3766.769317][T23765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3766.796644][T23765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3766.942715][T23707] 8021q: adding VLAN 0 to HW filter on device team0 [ 3766.992529][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3767.002012][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3767.144270][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3767.161603][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3767.170134][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 3767.177307][T30819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3767.206329][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3767.219983][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3767.229297][T30819] bridge0: port 2(bridge_slave_1) entered blocking state [ 3767.236505][T30819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3767.246881][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3767.284215][T23765] device hsr_slave_0 entered promiscuous mode [ 3767.301205][T23765] device hsr_slave_1 entered promiscuous mode [ 3767.312280][T23765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3767.319934][T23765] Cannot create hsr debugfs directory [ 3767.399599][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3767.409215][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3767.418954][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3767.430546][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3767.527003][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3767.536194][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3767.546980][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3767.556118][T23718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3767.724356][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3767.737712][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3767.748628][T23718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3767.775679][T23718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3767.801957][T23707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3767.802739][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3767.818250][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3767.944204][T23712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3767.951553][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 3767.970031][T23718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3768.014085][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3768.196460][T23712] 8021q: adding VLAN 0 to HW filter on device team0 [ 3768.275890][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3768.291778][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3768.361647][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3768.373043][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3768.401724][T32707] bridge0: port 1(bridge_slave_0) entered blocking state [ 3768.408885][T32707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3768.447555][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3768.481865][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3768.490406][T32707] bridge0: port 2(bridge_slave_1) entered blocking state [ 3768.497611][T32707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3768.623891][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3768.631738][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3768.641101][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3768.656300][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3768.665141][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3768.679389][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3768.703325][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3768.713621][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3768.782642][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3768.803439][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3768.829550][T23712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3768.869682][T23712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3768.907727][T23707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3768.925097][T27309] device hsr_slave_0 left promiscuous mode [ 3768.943395][T27309] device hsr_slave_1 left promiscuous mode [ 3768.970060][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3768.981048][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3769.011131][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3769.018726][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3769.053297][T27309] device bridge_slave_1 left promiscuous mode [ 3769.059601][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3769.119880][T27309] device bridge_slave_0 left promiscuous mode [ 3769.162667][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3769.189137][T23844] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3769.211474][T23844] CPU: 1 PID: 23844 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3769.221976][T23844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3769.232071][T23844] Call Trace: [ 3769.235391][T23844] [ 3769.238345][T23844] dump_stack_lvl+0xd1/0x138 [ 3769.242981][T23844] dump_header+0x10b/0x85f [ 3769.247450][T23844] oom_kill_process.cold+0x10/0x15 [ 3769.252626][T23844] out_of_memory+0x35c/0x14a0 [ 3769.257367][T23844] ? oom_killer_disable+0x280/0x280 [ 3769.262618][T23844] ? mark_held_locks+0x9f/0xe0 [ 3769.267422][T23844] mem_cgroup_out_of_memory+0x206/0x270 [ 3769.273019][T23844] ? mem_cgroup_margin+0x130/0x130 [ 3769.278347][T23844] memory_max_write+0x2f9/0x3c0 [ 3769.283236][T23844] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3769.289344][T23844] ? lock_release+0x810/0x810 [ 3769.294056][T23844] cgroup_file_write+0x1e2/0x770 [ 3769.299034][T23844] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3769.305133][T23844] ? kill_css+0x370/0x370 [ 3769.309498][T23844] ? __virt_addr_valid+0x61/0x2e0 [ 3769.314576][T23844] ? kill_css+0x370/0x370 [ 3769.318939][T23844] kernfs_fop_write_iter+0x3f1/0x600 [ 3769.324293][T23844] vfs_write+0x9ed/0xdd0 [ 3769.328579][T23844] ? kernel_write+0x630/0x630 [ 3769.333294][T23844] ? __fget_files+0x26a/0x440 [ 3769.338021][T23844] ksys_write+0x12b/0x250 [ 3769.342380][T23844] ? __ia32_sys_read+0xb0/0xb0 [ 3769.347189][T23844] ? syscall_enter_from_user_mode+0x30/0xb0 [ 3769.353141][T23844] do_syscall_64+0x39/0xb0 [ 3769.357778][T23844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3769.363714][T23844] RIP: 0033:0x7ff66b88c0c9 [ 3769.368156][T23844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3769.387813][T23844] RSP: 002b:00007ff66c551168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3769.396280][T23844] RAX: ffffffffffffffda RBX: 00007ff66b9abf80 RCX: 00007ff66b88c0c9 [ 3769.404291][T23844] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3769.412301][T23844] RBP: 00007ff66b8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3769.420312][T23844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3769.428320][T23844] R13: 00007ffe8d47426f R14: 00007ff66c551300 R15: 0000000000022000 [ 3769.436361][T23844] [ 3769.455485][T27309] device hsr_slave_0 left promiscuous mode [ 3769.462168][T27309] device hsr_slave_1 left promiscuous mode [ 3769.468790][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3769.477773][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3769.488024][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3769.495882][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3769.505782][T27309] device bridge_slave_1 left promiscuous mode [ 3769.512397][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3769.532693][T27309] device bridge_slave_0 left promiscuous mode [ 3769.538949][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3769.551939][T23844] memory: usage 8548kB, limit 0kB, failcnt 1621 [ 3769.558778][T23844] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3769.575262][T27309] device hsr_slave_0 left promiscuous mode [ 3769.599767][T23844] Memory cgroup stats for /syz1: [ 3769.601270][T23844] anon 114688 [ 3769.601270][T23844] file 8318976 [ 3769.601270][T23844] kernel 307200 [ 3769.601270][T23844] kernel_stack 65536 [ 3769.601270][T23844] pagetables 77824 [ 3769.601270][T23844] sec_pagetables 0 [ 3769.601270][T23844] percpu 64 [ 3769.601270][T23844] sock 0 [ 3769.601270][T23844] vmalloc 0 [ 3769.601270][T23844] shmem 8318976 [ 3769.601270][T23844] zswap 0 [ 3769.601270][T23844] zswapped 0 [ 3769.601270][T23844] file_mapped 131072 [ 3769.601270][T23844] file_dirty 0 [ 3769.601270][T23844] file_writeback 0 [ 3769.601270][T23844] swapcached 0 [ 3769.601270][T23844] anon_thp 0 [ 3769.601270][T23844] file_thp 0 [ 3769.601270][T23844] shmem_thp 0 [ 3769.601270][T23844] inactive_anon 114688 [ 3769.601270][T23844] active_anon 8318976 [ 3769.601270][T23844] inactive_file 0 [ 3769.601270][T23844] active_file 0 [ 3769.601270][T23844] unevictable 0 [ 3769.601270][T23844] slab_reclaimable 39272 [ 3769.601270][T23844] slab_unreclaimable 100464 [ 3769.601270][T23844] slab 139736 [ 3769.703185][T27309] device hsr_slave_1 left promiscuous mode [ 3769.712171][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3769.719677][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3769.731123][T23844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23843,uid=0 [ 3769.751497][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3769.758985][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3769.783722][T27309] device bridge_slave_1 left promiscuous mode [ 3769.790127][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3769.801691][T27309] device bridge_slave_0 left promiscuous mode [ 3769.808124][T27309] bridge0: port 1(bridge_slave_0) entered disabled state 19:58:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3769.819212][T23844] Memory cgroup out of memory: Killed process 23844 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3769.846930][T27309] device hsr_slave_0 left promiscuous mode [ 3769.871255][T27309] device hsr_slave_1 left promiscuous mode [ 3769.884393][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3769.897726][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3769.926500][T23687] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3769.943663][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3769.961074][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3769.968383][T23687] CPU: 1 PID: 23687 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3769.979010][T23687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3769.984046][T27309] device bridge_slave_1 left promiscuous mode [ 3769.989072][T23687] Call Trace: [ 3769.989084][T23687] [ 3770.001630][T23687] dump_stack_lvl+0xd1/0x138 [ 3770.006271][T23687] dump_header+0x10b/0x85f [ 3770.010734][T23687] oom_kill_process.cold+0x10/0x15 [ 3770.015890][T23687] out_of_memory+0x35c/0x14a0 [ 3770.020622][T23687] ? find_held_lock+0x2d/0x110 [ 3770.021096][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3770.025408][T23687] ? oom_killer_disable+0x280/0x280 [ 3770.037883][T23687] ? find_held_lock+0x2d/0x110 [ 3770.042782][T23687] mem_cgroup_out_of_memory+0x206/0x270 [ 3770.048371][T23687] ? mem_cgroup_margin+0x130/0x130 [ 3770.053519][T23687] ? lock_downgrade+0x6e0/0x6e0 [ 3770.058418][T23687] try_charge_memcg+0xefb/0x12f0 [ 3770.063394][T23687] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3770.069490][T23687] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3770.075352][T23687] ? lock_downgrade+0x6e0/0x6e0 [ 3770.080257][T23687] ? lock_downgrade+0x6e0/0x6e0 [ 3770.085161][T23687] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3770.090762][T23687] __alloc_pages+0x1f3/0x5b0 [ 3770.095398][T23687] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3770.102228][T23687] alloc_pages+0x1aa/0x270 [ 3770.106677][T23687] pte_alloc_one+0x1a/0x230 [ 3770.111222][T23687] __pte_alloc+0x6d/0x260 [ 3770.115595][T23687] ? pmd_install+0x160/0x160 [ 3770.120243][T23687] copy_page_range+0x17a8/0x3b40 [ 3770.125281][T23687] ? mas_store+0x206/0x2e0 [ 3770.129744][T23687] ? handle_mm_fault+0x850/0x850 [ 3770.134749][T23687] ? up_write+0x1b0/0x520 [ 3770.139128][T23687] dup_mmap+0xc10/0x10b0 [ 3770.143457][T23687] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3770.148773][T23687] ? lock_downgrade+0x6e0/0x6e0 [ 3770.153671][T23687] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3770.159552][T23687] ? mm_init+0x8e0/0xc10 [ 3770.163848][T23687] copy_process+0x440f/0x7520 [ 3770.168578][T23687] ? _raw_spin_unlock+0x28/0x40 [ 3770.173465][T23687] ? wp_page_reuse+0x197/0x570 [ 3770.178306][T23687] ? __cleanup_sighand+0xb0/0xb0 [ 3770.183297][T23687] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3770.188726][T23687] ? rwlock_bug.part.0+0x90/0x90 [ 3770.193715][T23687] ? lock_chain_count+0x20/0x20 [ 3770.198608][T23687] kernel_clone+0xeb/0x990 [ 3770.203063][T23687] ? create_io_thread+0xf0/0xf0 [ 3770.207954][T23687] ? find_held_lock+0x2d/0x110 [ 3770.212770][T23687] __do_sys_clone+0xba/0x100 [ 3770.217395][T23687] ? kernel_clone+0x990/0x990 [ 3770.222126][T23687] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3770.228238][T23687] do_syscall_64+0x39/0xb0 [ 3770.232703][T23687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3770.238626][T23687] RIP: 0033:0x7ff66b889dfb [ 3770.243074][T23687] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3770.262979][T23687] RSP: 002b:00007ffe8d4744b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3770.271425][T23687] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff66b889dfb [ 3770.279421][T23687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3770.287424][T23687] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555699f400 [ 3770.295440][T23687] R10: 000055555699f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3770.303442][T23687] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe8d474590 [ 3770.311490][T23687] [ 3770.341485][T27309] device bridge_slave_0 left promiscuous mode [ 3770.347774][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3770.358077][T23687] memory: usage 8380kB, limit 0kB, failcnt 1647 [ 3770.370958][T23687] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3770.377889][T23687] Memory cgroup stats for /syz1: [ 3770.378088][T23687] anon 45056 [ 3770.378088][T23687] file 8318976 [ 3770.378088][T23687] kernel 217088 [ 3770.378088][T23687] kernel_stack 32768 [ 3770.378088][T23687] pagetables 32768 [ 3770.378088][T23687] sec_pagetables 0 [ 3770.378088][T23687] percpu 128 [ 3770.378088][T23687] sock 0 [ 3770.378088][T23687] vmalloc 0 [ 3770.378088][T23687] shmem 8318976 [ 3770.378088][T23687] zswap 0 [ 3770.378088][T23687] zswapped 0 [ 3770.378088][T23687] file_mapped 131072 [ 3770.378088][T23687] file_dirty 0 [ 3770.378088][T23687] file_writeback 0 [ 3770.378088][T23687] swapcached 0 [ 3770.378088][T23687] anon_thp 0 [ 3770.378088][T23687] file_thp 0 [ 3770.378088][T23687] shmem_thp 0 [ 3770.378088][T23687] inactive_anon 45056 [ 3770.378088][T23687] active_anon 8318976 [ 3770.378088][T23687] inactive_file 0 [ 3770.378088][T23687] active_file 0 [ 3770.378088][T23687] unevictable 0 [ 3770.378088][T23687] slab_reclaimable 31760 [ 3770.378088][T23687] slab_unreclaimable 94688 [ 3770.378088][T23687] slab 126448 [ 3770.482263][T27309] device hsr_slave_0 left promiscuous mode [ 3770.511040][T27309] device hsr_slave_1 left promiscuous mode [ 3770.541016][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3770.548562][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3770.573503][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3770.593635][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3770.632316][T27309] device bridge_slave_1 left promiscuous mode [ 3770.638609][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3770.672231][T27309] device bridge_slave_0 left promiscuous mode [ 3770.678527][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3770.700276][T23687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23687,uid=0 [ 3770.733642][T23687] Memory cgroup out of memory: Killed process 23687 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3770.776935][T27309] device veth1_macvtap left promiscuous mode [ 3770.791027][T27309] device veth0_macvtap left promiscuous mode [ 3770.797226][T27309] device veth1_vlan left promiscuous mode [ 3770.811130][T27309] device veth0_vlan left promiscuous mode [ 3770.902583][T27309] device veth1_macvtap left promiscuous mode [ 3770.924086][T27309] device veth0_macvtap left promiscuous mode [ 3770.934075][T27309] device veth1_vlan left promiscuous mode [ 3770.939963][T27309] device veth0_vlan left promiscuous mode [ 3770.957021][T27309] device veth1_macvtap left promiscuous mode [ 3770.971514][T27309] device veth0_macvtap left promiscuous mode [ 3770.977694][T27309] device veth1_vlan left promiscuous mode [ 3771.001653][T27309] device veth0_vlan left promiscuous mode [ 3771.009586][T27309] device veth1_macvtap left promiscuous mode [ 3771.031247][T27309] device veth0_macvtap left promiscuous mode [ 3771.037444][T27309] device veth1_vlan left promiscuous mode [ 3771.051323][T27309] device veth0_vlan left promiscuous mode [ 3771.076027][T27309] device veth1_macvtap left promiscuous mode [ 3771.091293][T27309] device veth0_macvtap left promiscuous mode [ 3771.097489][T27309] device veth1_vlan left promiscuous mode [ 3771.116367][T27309] device veth0_vlan left promiscuous mode [ 3772.746896][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3772.782100][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3772.807905][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3772.848212][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3772.970648][T27309] bond0 (unregistering): Released all slaves [ 3773.207066][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3773.242188][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3773.281530][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3773.318578][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3773.474568][T27309] bond0 (unregistering): Released all slaves [ 3773.758845][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3773.805317][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3773.845302][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3773.878556][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3774.092231][T27309] bond0 (unregistering): Released all slaves [ 3774.365795][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3774.397977][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3774.414002][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3774.442758][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3774.640079][T27309] bond0 (unregistering): Released all slaves [ 3774.865585][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3774.914364][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3774.939121][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3774.974104][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3775.136863][T27309] bond0 (unregistering): Released all slaves [ 3775.189758][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3775.206452][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3775.227320][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3775.250806][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3775.259936][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3775.401226][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3775.409160][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3775.431645][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 19:58:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3775.534232][T23726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3775.682035][T23765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3775.753600][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3775.771674][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3775.783492][T23707] device veth0_vlan entered promiscuous mode [ 3775.816567][T23726] netdevsim netdevsim4 netdevsim1: renamed from eth1 19:58:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3775.878596][T23707] device veth1_vlan entered promiscuous mode [ 3776.020685][T23765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3776.101353][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3776.112222][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3776.130770][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3776.160263][T23718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3776.199188][T23726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3776.372269][T23765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3776.451225][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3776.471833][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3776.480015][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3776.517505][T23726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3776.583198][T23718] 8021q: adding VLAN 0 to HW filter on device team0 [ 3776.620289][T23765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3776.691241][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3776.698946][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3776.707357][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3776.742892][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3776.766109][T23712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3776.792530][T23707] device veth0_macvtap entered promiscuous mode [ 3776.837636][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3776.848396][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3776.871802][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3776.880470][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 3776.887831][T13737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3776.921793][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3776.942185][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3776.961479][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3776.968662][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3776.983073][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3777.004258][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3777.015260][T23707] device veth1_macvtap entered promiscuous mode [ 3777.086093][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3777.095099][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3777.112219][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3777.144569][T23707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3777.177770][T23707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3777.200951][T23707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3777.220968][T23707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3777.252412][T23707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3777.289112][T23718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3777.351005][T23718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3777.374622][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3777.391804][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3777.411952][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3777.428556][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3777.453522][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3777.472437][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3777.491713][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3777.501625][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3777.525764][T23707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3777.551147][T23707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3777.570908][T23707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3777.599621][T23707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3777.626004][T23707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3777.653471][T23707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3777.691092][T23707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3777.699882][T23707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3777.740916][T23707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3777.801749][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3777.810404][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3777.823494][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3778.123695][T23726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3778.131363][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3778.140499][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3778.206719][T23726] 8021q: adding VLAN 0 to HW filter on device team0 [ 3778.266705][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3778.275807][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3778.335857][T23712] device veth0_vlan entered promiscuous mode [ 3778.346857][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3778.357581][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3778.366630][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3778.381863][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3778.390409][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 3778.397588][T12353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3778.431522][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3778.451494][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3778.465202][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 3778.472424][T12353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3778.522138][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3778.542083][T23765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3778.590562][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3778.612433][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3778.623247][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3778.626552][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3778.645762][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3778.653597][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3778.686225][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3778.695610][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3778.704291][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3778.713675][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3778.732266][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3778.762152][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3778.781504][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3778.801808][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3778.821548][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3778.846221][T23712] device veth1_vlan entered promiscuous mode [ 3778.864190][T22448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3778.878292][T23765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3778.885546][T22448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3778.899901][T23726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3778.942554][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3778.955853][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3778.965199][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3778.973718][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3778.981747][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3778.993753][T23765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3779.041577][T23718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3779.061432][T23765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3779.164142][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3779.189043][T23712] device veth0_macvtap entered promiscuous mode [ 3779.196644][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3779.216129][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3779.232512][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3779.262053][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3779.345905][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3779.361938][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3779.386201][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3779.412639][T23712] device veth1_macvtap entered promiscuous mode [ 3779.464367][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3779.479812][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3779.489290][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3779.542582][T23718] device veth0_vlan entered promiscuous mode [ 3779.607827][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3779.617940][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3779.665012][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3779.701522][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3779.735190][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3779.766264][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3779.776899][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3779.802604][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3779.840058][T23712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3779.901168][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3779.917636][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3779.949525][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3779.973257][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3780.035859][T23718] device veth1_vlan entered promiscuous mode [ 3780.082405][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3780.129312][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3780.139907][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3780.150953][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3780.166866][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3780.188789][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3780.214886][T23949] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3780.227783][T23712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3780.232708][T23726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3780.237175][T23949] CPU: 1 PID: 23949 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3780.253943][T23949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3780.262733][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3780.264004][T23949] Call Trace: [ 3780.264015][T23949] [ 3780.264027][T23949] dump_stack_lvl+0xd1/0x138 [ 3780.281868][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3780.282293][T23949] dump_header+0x10b/0x85f [ 3780.294786][T23949] oom_kill_process.cold+0x10/0x15 [ 3780.299959][T23949] out_of_memory+0x35c/0x14a0 [ 3780.304685][T23949] ? lockdep_hardirqs_on+0x7d/0x100 [ 3780.309934][T23949] ? oom_killer_disable+0x280/0x280 [ 3780.313486][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3780.315162][T23949] ? mem_cgroup_out_of_memory+0x199/0x270 [ 3780.328985][T23949] mem_cgroup_out_of_memory+0x206/0x270 [ 3780.334590][T23949] ? mem_cgroup_margin+0x130/0x130 [ 3780.339779][T23949] memory_max_write+0x2f9/0x3c0 [ 3780.344678][T23949] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3780.350791][T23949] ? lock_release+0x810/0x810 [ 3780.355504][T23949] cgroup_file_write+0x1e2/0x770 [ 3780.360487][T23949] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3780.366599][T23949] ? kill_css+0x370/0x370 [ 3780.370970][T23949] ? kernfs_get_active+0x32/0x150 [ 3780.376026][T23949] ? kill_css+0x370/0x370 [ 3780.380369][T23949] kernfs_fop_write_iter+0x3f1/0x600 [ 3780.385676][T23949] vfs_write+0x9ed/0xdd0 [ 3780.389936][T23949] ? kernel_write+0x630/0x630 [ 3780.394624][T23949] ? __fget_files+0x26a/0x440 [ 3780.399324][T23949] ksys_write+0x12b/0x250 [ 3780.403687][T23949] ? __ia32_sys_read+0xb0/0xb0 [ 3780.408507][T23949] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3780.414434][T23949] do_syscall_64+0x39/0xb0 [ 3780.418886][T23949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3780.424800][T23949] RIP: 0033:0x7f97e088c0c9 [ 3780.429313][T23949] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3780.448932][T23949] RSP: 002b:00007f97e1591168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3780.457358][T23949] RAX: ffffffffffffffda RBX: 00007f97e09abf80 RCX: 00007f97e088c0c9 [ 3780.465336][T23949] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3780.473326][T23949] RBP: 00007f97e08e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3780.481313][T23949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3780.489301][T23949] R13: 00007ffc6547fe4f R14: 00007f97e1591300 R15: 0000000000022000 [ 3780.497306][T23949] [ 3780.508916][T23949] memory: usage 8584kB, limit 0kB, failcnt 2201 [ 3780.546900][T23949] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3780.548627][T23765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3780.619672][T23712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3780.629479][T23949] Memory cgroup stats for /syz0: [ 3780.629692][T23949] anon 114688 [ 3780.629692][T23949] file 8347648 [ 3780.629692][T23949] kernel 270336 [ 3780.629692][T23949] kernel_stack 32768 [ 3780.629692][T23949] pagetables 77824 [ 3780.629692][T23949] sec_pagetables 0 [ 3780.629692][T23949] percpu 64 [ 3780.629692][T23949] sock 0 [ 3780.629692][T23949] vmalloc 0 [ 3780.629692][T23949] shmem 8347648 [ 3780.629692][T23949] zswap 0 [ 3780.629692][T23949] zswapped 0 [ 3780.629692][T23949] file_mapped 192512 [ 3780.629692][T23949] file_dirty 0 [ 3780.629692][T23949] file_writeback 0 [ 3780.629692][T23949] swapcached 0 [ 3780.629692][T23949] anon_thp 0 [ 3780.629692][T23949] file_thp 0 [ 3780.629692][T23949] shmem_thp 0 [ 3780.629692][T23949] inactive_anon 114688 [ 3780.629692][T23949] active_anon 8347648 [ 3780.629692][T23949] inactive_file 0 [ 3780.629692][T23949] active_file 0 [ 3780.629692][T23949] unevictable 0 [ 3780.629692][T23949] slab_reclaimable 35424 [ 3780.629692][T23949] slab_unreclaimable 101760 [ 3780.629692][T23949] slab 137184 [ 3780.711378][T23712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3780.735950][ T5105] Bluetooth: hci1: command 0x0409 tx timeout [ 3780.774354][T23949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23947,uid=0 [ 3780.792449][T23949] Memory cgroup out of memory: Killed process 23949 (syz-executor.0) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 19:58:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3780.817569][T23712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3780.848162][T23712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3780.885220][T23765] 8021q: adding VLAN 0 to HW filter on device team0 [ 3780.910595][T23707] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3780.926811][T23928] chnl_net:caif_netlink_parms(): no params data found [ 3780.938227][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3780.949029][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3780.956926][T23707] CPU: 1 PID: 23707 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3780.967413][T23707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3780.977568][T23707] Call Trace: [ 3780.980860][T23707] [ 3780.983798][T23707] dump_stack_lvl+0xd1/0x138 [ 3780.988412][T23707] dump_header+0x10b/0x85f [ 3780.992873][T23707] oom_kill_process.cold+0x10/0x15 [ 3780.998023][T23707] out_of_memory+0x35c/0x14a0 [ 3781.002751][T23707] ? find_held_lock+0x2d/0x110 [ 3781.007533][T23707] ? oom_killer_disable+0x280/0x280 [ 3781.012755][T23707] ? find_held_lock+0x2d/0x110 [ 3781.017541][T23707] mem_cgroup_out_of_memory+0x206/0x270 [ 3781.023112][T23707] ? mem_cgroup_margin+0x130/0x130 [ 3781.028258][T23707] ? lock_downgrade+0x6e0/0x6e0 [ 3781.033150][T23707] try_charge_memcg+0xefb/0x12f0 [ 3781.038103][T23707] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3781.044119][T23707] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3781.049907][T23707] ? lock_downgrade+0x6e0/0x6e0 [ 3781.054783][T23707] ? lock_downgrade+0x6e0/0x6e0 [ 3781.059866][T23707] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3781.065441][T23707] __alloc_pages+0x1f3/0x5b0 [ 3781.070055][T23707] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3781.076849][T23707] ? find_held_lock+0x2d/0x110 [ 3781.081680][T23707] alloc_pages+0x1aa/0x270 [ 3781.086116][T23707] pte_alloc_one+0x1a/0x230 [ 3781.090660][T23707] __pte_alloc+0x6d/0x260 [ 3781.095032][T23707] ? pmd_install+0x160/0x160 [ 3781.099643][T23707] ? _raw_spin_unlock+0x28/0x40 [ 3781.104598][T23707] ? __pmd_alloc+0x30c/0x5d0 [ 3781.109214][T23707] copy_page_range+0x17a8/0x3b40 [ 3781.114202][T23707] ? mas_store+0x206/0x2e0 [ 3781.118627][T23707] ? handle_mm_fault+0x850/0x850 [ 3781.123598][T23707] ? anon_vma_fork+0xba/0x630 [ 3781.128308][T23707] dup_mmap+0xc10/0x10b0 [ 3781.132592][T23707] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3781.137893][T23707] ? lock_downgrade+0x6e0/0x6e0 [ 3781.142760][T23707] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3781.149118][T23707] ? mm_init+0x8e0/0xc10 [ 3781.153398][T23707] copy_process+0x440f/0x7520 [ 3781.158087][T23707] ? _raw_spin_unlock+0x28/0x40 [ 3781.162951][T23707] ? wp_page_reuse+0x197/0x570 [ 3781.167764][T23707] ? __cleanup_sighand+0xb0/0xb0 [ 3781.172735][T23707] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3781.178933][T23707] ? rwlock_bug.part.0+0x90/0x90 [ 3781.183902][T23707] ? lock_chain_count+0x20/0x20 [ 3781.188769][T23707] kernel_clone+0xeb/0x990 [ 3781.193203][T23707] ? create_io_thread+0xf0/0xf0 [ 3781.199024][T23707] ? find_held_lock+0x2d/0x110 [ 3781.203820][T23707] __do_sys_clone+0xba/0x100 [ 3781.208422][T23707] ? kernel_clone+0x990/0x990 [ 3781.213130][T23707] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3781.219047][T23707] do_syscall_64+0x39/0xb0 [ 3781.223506][T23707] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3781.229442][T23707] RIP: 0033:0x7f97e0889dfb [ 3781.233893][T23707] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3781.253685][T23707] RSP: 002b:00007ffc65480090 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3781.262114][T23707] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97e0889dfb [ 3781.270181][T23707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3781.278159][T23707] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555580c400 [ 3781.286156][T23707] R10: 000055555580c6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3781.294134][T23707] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc65480170 [ 3781.302150][T23707] [ 3781.338995][T23718] device veth0_macvtap entered promiscuous mode [ 3781.355560][T23707] memory: usage 8432kB, limit 0kB, failcnt 2230 [ 3781.364479][T23707] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3781.377217][T23707] Memory cgroup stats for /syz0: [ 3781.377421][T23707] anon 45056 [ 3781.377421][T23707] file 8347648 [ 3781.377421][T23707] kernel 241664 [ 3781.377421][T23707] kernel_stack 32768 [ 3781.377421][T23707] pagetables 53248 [ 3781.377421][T23707] sec_pagetables 0 [ 3781.377421][T23707] percpu 128 [ 3781.377421][T23707] sock 0 [ 3781.377421][T23707] vmalloc 0 [ 3781.377421][T23707] shmem 8347648 [ 3781.377421][T23707] zswap 0 [ 3781.377421][T23707] zswapped 0 [ 3781.377421][T23707] file_mapped 172032 [ 3781.377421][T23707] file_dirty 0 [ 3781.377421][T23707] file_writeback 0 [ 3781.377421][T23707] swapcached 0 [ 3781.377421][T23707] anon_thp 0 [ 3781.377421][T23707] file_thp 0 [ 3781.377421][T23707] shmem_thp 0 [ 3781.377421][T23707] inactive_anon 45056 [ 3781.377421][T23707] active_anon 8347648 [ 3781.377421][T23707] inactive_file 0 [ 3781.377421][T23707] active_file 0 [ 3781.377421][T23707] unevictable 0 [ 3781.377421][T23707] slab_reclaimable 31136 [ 3781.377421][T23707] slab_unreclaimable 98688 [ 3781.377421][T23707] slab 129824 [ 3781.526569][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3781.541911][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3781.572002][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3781.591517][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3781.611225][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 3781.618430][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3781.632687][T23707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23707,uid=0 [ 3781.641460][T23718] device veth1_macvtap entered promiscuous mode [ 3781.670948][T23707] Memory cgroup out of memory: Killed process 23707 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3781.739421][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3781.772034][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3781.913535][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3781.930949][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3781.945150][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3781.958124][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3781.971452][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3781.982574][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3781.992770][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3782.003804][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3782.015929][T23718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3782.038781][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3782.049300][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3782.058638][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state 19:58:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3782.065846][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3782.075934][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3782.085171][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3782.095307][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3782.104854][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3782.146641][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3782.170997][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3782.191983][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3782.221441][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3782.231745][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3782.244561][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3782.254834][T23718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3782.265817][T23718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3782.279004][T23718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3782.307880][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3782.330679][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3782.359415][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3782.380416][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3782.467718][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3782.478466][T23718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3782.495524][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3782.503750][T23718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3782.516660][T23718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3782.525816][T23718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3782.561094][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3782.569262][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3782.581119][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3782.589731][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3782.600425][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3782.610184][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3782.619134][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3782.628308][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3782.637623][T23928] bridge0: port 1(bridge_slave_0) entered blocking state [ 3782.656129][T23928] bridge0: port 1(bridge_slave_0) entered disabled state [ 3782.669936][T23928] device bridge_slave_0 entered promiscuous mode [ 3782.705132][T23765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3782.725858][T23726] device veth0_vlan entered promiscuous mode [ 3782.751114][ T5105] Bluetooth: hci1: command 0x041b tx timeout [ 3782.753981][T23928] bridge0: port 2(bridge_slave_1) entered blocking state [ 3782.776792][T23928] bridge0: port 2(bridge_slave_1) entered disabled state [ 3782.785978][T23928] device bridge_slave_1 entered promiscuous mode [ 3782.821970][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3782.830793][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3782.871587][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3782.879864][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3782.905801][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3782.931625][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3782.939684][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3783.007169][T23726] device veth1_vlan entered promiscuous mode [ 3783.024561][T23928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3783.075513][T23928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3783.268312][T23726] device veth0_macvtap entered promiscuous mode [ 3783.299715][T23928] team0: Port device team_slave_0 added [ 3783.312913][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3783.324710][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3783.390236][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3783.415628][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3783.578349][T23928] team0: Port device team_slave_1 added [ 3783.605697][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3783.635101][T23999] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3783.654489][T23726] device veth1_macvtap entered promiscuous mode [ 3783.661664][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3783.662932][T23999] CPU: 1 PID: 23999 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3783.669836][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3783.680242][T23999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3783.680258][T23999] Call Trace: [ 3783.680268][T23999] [ 3783.680278][T23999] dump_stack_lvl+0xd1/0x138 [ 3783.680314][T23999] dump_header+0x10b/0x85f [ 3783.680351][T23999] oom_kill_process.cold+0x10/0x15 [ 3783.680390][T23999] out_of_memory+0x35c/0x14a0 [ 3783.680437][T23999] ? oom_killer_disable+0x280/0x280 [ 3783.728088][T23999] ? mark_held_locks+0x9f/0xe0 [ 3783.732906][T23999] mem_cgroup_out_of_memory+0x206/0x270 [ 3783.738502][T23999] ? mem_cgroup_margin+0x130/0x130 [ 3783.743684][T23999] memory_max_write+0x2f9/0x3c0 [ 3783.748575][T23999] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3783.754773][T23999] ? lock_release+0x810/0x810 [ 3783.759497][T23999] cgroup_file_write+0x1e2/0x770 [ 3783.764497][T23999] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3783.770673][T23999] ? kill_css+0x370/0x370 [ 3783.775034][T23999] ? kill_css+0x370/0x370 [ 3783.779386][T23999] kernfs_fop_write_iter+0x3f1/0x600 [ 3783.784888][T23999] vfs_write+0x9ed/0xdd0 [ 3783.789329][T23999] ? kernel_write+0x630/0x630 [ 3783.794029][T23999] ? __fget_files+0x26a/0x440 [ 3783.798736][T23999] ksys_write+0x12b/0x250 [ 3783.803079][T23999] ? __ia32_sys_read+0xb0/0xb0 [ 3783.807862][T23999] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3783.813790][T23999] do_syscall_64+0x39/0xb0 [ 3783.818232][T23999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3783.824144][T23999] RIP: 0033:0x7f9ad388c0c9 [ 3783.828571][T23999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3783.849345][T23999] RSP: 002b:00007f9ad4509168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3783.857780][T23999] RAX: ffffffffffffffda RBX: 00007f9ad39abf80 RCX: 00007f9ad388c0c9 [ 3783.865765][T23999] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3783.873746][T23999] RBP: 00007f9ad38e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3783.881725][T23999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3783.889882][T23999] R13: 00007ffd7b56224f R14: 00007f9ad4509300 R15: 0000000000022000 [ 3783.897886][T23999] [ 3783.934510][T23928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3783.961056][T23928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3784.080926][T23928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3784.106764][T23999] memory: usage 8592kB, limit 0kB, failcnt 1875 [ 3784.129645][T23999] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3784.133307][T23765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3784.141631][T23999] Memory cgroup stats for /syz5: [ 3784.145018][T23999] anon 114688 [ 3784.145018][T23999] file 8355840 [ 3784.145018][T23999] kernel 274432 [ 3784.145018][T23999] kernel_stack 32768 [ 3784.145018][T23999] pagetables 77824 [ 3784.145018][T23999] sec_pagetables 0 [ 3784.145018][T23999] percpu 64 [ 3784.145018][T23999] sock 0 [ 3784.145018][T23999] vmalloc 0 [ 3784.145018][T23999] shmem 8355840 [ 3784.145018][T23999] zswap 0 [ 3784.145018][T23999] zswapped 0 [ 3784.145018][T23999] file_mapped 241664 [ 3784.145018][T23999] file_dirty 0 [ 3784.145018][T23999] file_writeback 0 [ 3784.145018][T23999] swapcached 0 [ 3784.145018][T23999] anon_thp 0 [ 3784.145018][T23999] file_thp 0 [ 3784.145018][T23999] shmem_thp 0 [ 3784.145018][T23999] inactive_anon 114688 [ 3784.145018][T23999] active_anon 8355840 [ 3784.145018][T23999] inactive_file 0 [ 3784.145018][T23999] active_file 0 [ 3784.145018][T23999] unevictable 0 [ 3784.145018][T23999] slab_reclaimable 40288 [ 3784.145018][T23999] slab_unreclaimable 100464 [ 3784.145018][T23999] slab 140752 [ 3784.256220][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3784.280141][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3784.298352][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3784.326526][T23999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23998,uid=0 [ 3784.349402][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3784.355973][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3784.368272][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3784.379582][T23999] Memory cgroup out of memory: Killed process 23999 (syz-executor.5) total-vm:56588kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3784.398169][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3784.408238][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 19:58:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:58:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3784.436402][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3784.499121][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3784.521982][T23712] syz-executor.5 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 3784.543880][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3784.560874][T23712] CPU: 1 PID: 23712 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3784.571368][T23712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3784.581456][T23712] Call Trace: [ 3784.584802][T23712] [ 3784.587761][T23712] dump_stack_lvl+0xd1/0x138 [ 3784.592461][T23712] dump_header+0x10b/0x85f [ 3784.596926][T23712] oom_kill_process.cold+0x10/0x15 [ 3784.602082][T23712] out_of_memory+0x35c/0x14a0 [ 3784.606817][T23712] ? find_held_lock+0x2d/0x110 [ 3784.611661][T23712] ? oom_killer_disable+0x280/0x280 [ 3784.616913][T23712] ? find_held_lock+0x2d/0x110 [ 3784.621732][T23712] mem_cgroup_out_of_memory+0x206/0x270 [ 3784.627333][T23712] ? mem_cgroup_margin+0x130/0x130 [ 3784.628686][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3784.632460][T23712] ? lock_downgrade+0x6e0/0x6e0 [ 3784.632504][T23712] try_charge_memcg+0xefb/0x12f0 [ 3784.632535][T23712] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3784.658859][T23712] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3784.664635][T23712] ? lock_downgrade+0x6e0/0x6e0 [ 3784.669504][T23712] ? lock_downgrade+0x6e0/0x6e0 [ 3784.674370][T23712] ? rcu_read_unlock+0x9/0x60 [ 3784.679101][T23712] obj_cgroup_charge+0x2af/0x5e0 [ 3784.684664][T23712] ? __alloc_file+0x21/0x270 [ 3784.689286][T23712] kmem_cache_alloc+0xb5/0x430 [ 3784.694067][T23712] __alloc_file+0x21/0x270 [ 3784.698500][T23712] alloc_empty_file+0x71/0x170 [ 3784.703285][T23712] path_openat+0xe1/0x2a50 [ 3784.707730][T23712] ? path_lookupat+0x840/0x840 [ 3784.712523][T23712] do_filp_open+0x1ba/0x410 [ 3784.717043][T23712] ? may_open_dev+0xf0/0xf0 [ 3784.721561][T23712] ? find_held_lock+0x2d/0x110 [ 3784.726354][T23712] ? do_raw_spin_lock+0x124/0x2b0 [ 3784.731388][T23712] ? rwlock_bug.part.0+0x90/0x90 [ 3784.736344][T23712] ? _raw_spin_unlock+0x28/0x40 [ 3784.741208][T23712] ? alloc_fd+0x2d8/0x6d0 [ 3784.745557][T23712] do_sys_openat2+0x16d/0x4c0 [ 3784.750240][T23712] ? path_umount+0x6b8/0x10b0 [ 3784.754931][T23712] ? putname+0x102/0x140 [ 3784.759211][T23712] ? build_open_flags+0x6f0/0x6f0 [ 3784.764266][T23712] ? xfd_validate_state+0x5d/0x180 [ 3784.769401][T23712] __x64_sys_openat+0x143/0x1f0 [ 3784.774285][T23712] ? __ia32_sys_open+0x1c0/0x1c0 [ 3784.779235][T23712] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3784.785147][T23712] do_syscall_64+0x39/0xb0 [ 3784.789582][T23712] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3784.795485][T23712] RIP: 0033:0x7f9ad388bc38 [ 3784.799908][T23712] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 3784.819526][T23712] RSP: 002b:00007ffd7b561340 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 3784.827979][T23712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9ad388bc38 [ 3784.835956][T23712] RDX: 0000000000090800 RSI: 00007ffd7b562530 RDI: 00000000ffffff9c [ 3784.843934][T23712] RBP: 00007ffd7b56250c R08: 0000000000090800 R09: 00007ffd7b562530 [ 3784.851944][T23712] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f9ad38e6b24 [ 3784.859982][T23712] R13: 00007ffd7b562530 R14: 000000000000000d R15: 00007ffd7b562570 [ 3784.867981][T23712] [ 3784.880305][ T5105] Bluetooth: hci1: command 0x040f tx timeout [ 3784.900943][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3784.930966][T23712] memory: usage 8332kB, limit 0kB, failcnt 1894 [ 3784.950906][T23712] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3784.957847][T23712] Memory cgroup stats for /syz5: [ 3784.958033][T23712] anon 36864 [ 3784.958033][T23712] file 8355840 [ 3784.958033][T23712] kernel 139264 [ 3784.958033][T23712] kernel_stack 0 [ 3784.958033][T23712] pagetables 8192 [ 3784.958033][T23712] sec_pagetables 0 [ 3784.958033][T23712] percpu 64 [ 3784.958033][T23712] sock 0 [ 3784.958033][T23712] vmalloc 0 [ 3784.958033][T23712] shmem 8355840 [ 3784.958033][T23712] zswap 0 [ 3784.958033][T23712] zswapped 0 [ 3784.958033][T23712] file_mapped 221184 [ 3784.958033][T23712] file_dirty 0 [ 3784.958033][T23712] file_writeback 0 [ 3784.958033][T23712] swapcached 0 [ 3784.958033][T23712] anon_thp 0 [ 3784.958033][T23712] file_thp 0 [ 3784.958033][T23712] shmem_thp 0 [ 3784.958033][T23712] inactive_anon 36864 [ 3784.958033][T23712] active_anon 8355840 [ 3784.958033][T23712] inactive_file 0 [ 3784.958033][T23712] active_file 0 [ 3784.958033][T23712] unevictable 0 [ 3784.958033][T23712] slab_reclaimable 34512 [ 3784.958033][T23712] slab_unreclaimable 79592 [ 3784.958033][T23712] slab 114104 [ 3785.029694][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3785.132734][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.171543][T23726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3785.196474][T23928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3785.210979][T23928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3785.297908][T23928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3785.356214][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3785.381886][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3785.410565][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3785.434766][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3785.451043][T23712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23712,uid=0 [ 3785.463233][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.490998][T23712] Memory cgroup out of memory: Killed process 23712 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3785.510410][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3785.549094][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.571017][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3785.591197][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.614665][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3785.628688][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.639180][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3785.650514][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3785.683386][T23726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3785.748476][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3785.781651][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3785.977490][T23726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3786.007115][T23726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3786.046373][T23726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3786.085529][T23726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3786.159324][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3786.182107][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3786.287740][T24022] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3786.334900][T23928] device hsr_slave_0 entered promiscuous mode [ 3786.335841][T24022] CPU: 0 PID: 24022 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3786.351461][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3786.361547][T24022] Call Trace: [ 3786.364847][T24022] [ 3786.368844][T24022] dump_stack_lvl+0xd1/0x138 [ 3786.373509][T24022] dump_header+0x10b/0x85f [ 3786.378062][T24022] oom_kill_process.cold+0x10/0x15 [ 3786.383221][T24022] out_of_memory+0x35c/0x14a0 [ 3786.387957][T24022] ? oom_killer_disable+0x280/0x280 [ 3786.393212][T24022] ? mark_held_locks+0x9f/0xe0 [ 3786.398038][T24022] mem_cgroup_out_of_memory+0x206/0x270 [ 3786.404166][T24022] ? mem_cgroup_margin+0x130/0x130 [ 3786.409342][T24022] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3786.415201][T24022] memory_max_write+0x2f9/0x3c0 [ 3786.420098][T24022] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3786.426218][T24022] ? lock_release+0x810/0x810 [ 3786.430937][T24022] cgroup_file_write+0x1e2/0x770 [ 3786.436002][T24022] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3786.442136][T24022] ? kill_css+0x370/0x370 [ 3786.446501][T24022] ? __virt_addr_valid+0x61/0x2e0 [ 3786.451580][T24022] ? kill_css+0x370/0x370 [ 3786.455945][T24022] kernfs_fop_write_iter+0x3f1/0x600 [ 3786.461285][T24022] vfs_write+0x9ed/0xdd0 [ 3786.465567][T24022] ? kernel_write+0x630/0x630 [ 3786.470292][T24022] ? __fget_files+0x26a/0x440 [ 3786.475023][T24022] ksys_write+0x12b/0x250 [ 3786.479405][T24022] ? __ia32_sys_read+0xb0/0xb0 [ 3786.484237][T24022] do_syscall_64+0x39/0xb0 [ 3786.488701][T24022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3786.494625][T24022] RIP: 0033:0x7fba0da8c0c9 [ 3786.499071][T24022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3786.518715][T24022] RSP: 002b:00007fba0e794168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3786.527510][T24022] RAX: ffffffffffffffda RBX: 00007fba0dbabf80 RCX: 00007fba0da8c0c9 [ 3786.535592][T24022] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3786.543632][T24022] RBP: 00007fba0dae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3786.551632][T24022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3786.559649][T24022] R13: 00007fff34ee16af R14: 00007fba0e794300 R15: 0000000000022000 [ 3786.567690][T24022] [ 3786.586948][T23928] device hsr_slave_1 entered promiscuous mode [ 3786.598955][T23928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3786.631156][T23928] Cannot create hsr debugfs directory [ 3786.646670][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3786.659261][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3786.687455][T23765] device veth0_vlan entered promiscuous mode [ 3786.740661][T24022] memory: usage 512kB, limit 0kB, failcnt 4727 [ 3786.748561][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3786.760692][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3786.760908][T24022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3786.789942][T24022] Memory cgroup stats for /syz2: [ 3786.790158][T24022] anon 114688 [ 3786.790158][T24022] file 155648 [ 3786.790158][T24022] kernel 237568 [ 3786.790158][T24022] kernel_stack 32768 [ 3786.790158][T24022] pagetables 77824 [ 3786.790158][T24022] sec_pagetables 0 [ 3786.790158][T24022] percpu 64 [ 3786.790158][T24022] sock 0 [ 3786.790158][T24022] vmalloc 0 [ 3786.790158][T24022] shmem 151552 [ 3786.790158][T24022] zswap 0 [ 3786.790158][T24022] zswapped 0 [ 3786.790158][T24022] file_mapped 139264 [ 3786.790158][T24022] file_dirty 0 [ 3786.790158][T24022] file_writeback 0 [ 3786.790158][T24022] swapcached 0 [ 3786.790158][T24022] anon_thp 0 [ 3786.790158][T24022] file_thp 0 [ 3786.790158][T24022] shmem_thp 0 [ 3786.790158][T24022] inactive_anon 172032 [ 3786.790158][T24022] active_anon 94208 [ 3786.790158][T24022] inactive_file 0 [ 3786.790158][T24022] active_file 4096 [ 3786.790158][T24022] unevictable 0 [ 3786.790158][T24022] slab_reclaimable 13208 [ 3786.790158][T24022] slab_unreclaimable 84792 [ 3786.790158][T24022] slab 98000 [ 3786.897044][T23765] device veth1_vlan entered promiscuous mode [ 3786.911244][ T5105] Bluetooth: hci1: command 0x0419 tx timeout [ 3786.980143][T24022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24021,uid=0 [ 3787.042686][T24022] Memory cgroup out of memory: Killed process 24022 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3787.083070][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3787.104268][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 19:58:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:58:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3787.131792][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3787.140262][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3787.172776][T23765] device veth0_macvtap entered promiscuous mode [ 3787.237373][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3787.275812][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3787.301983][T23765] device veth1_macvtap entered promiscuous mode [ 3787.336640][T23718] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3787.354583][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3787.364917][T10157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3787.371157][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3787.383917][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3787.385241][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3787.393753][T23718] CPU: 1 PID: 23718 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3787.409776][T23718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3787.419861][T23718] Call Trace: [ 3787.423167][T23718] [ 3787.426135][T23718] dump_stack_lvl+0xd1/0x138 [ 3787.430791][T23718] dump_header+0x10b/0x85f [ 3787.435279][T23718] oom_kill_process.cold+0x10/0x15 [ 3787.440418][T23718] out_of_memory+0x35c/0x14a0 [ 3787.445121][T23718] ? find_held_lock+0x2d/0x110 [ 3787.450022][T23718] ? oom_killer_disable+0x280/0x280 [ 3787.455265][T23718] ? find_held_lock+0x2d/0x110 [ 3787.460047][T23718] mem_cgroup_out_of_memory+0x206/0x270 [ 3787.465611][T23718] ? mem_cgroup_margin+0x130/0x130 [ 3787.470767][T23718] ? lock_downgrade+0x6e0/0x6e0 [ 3787.475647][T23718] try_charge_memcg+0xefb/0x12f0 [ 3787.480603][T23718] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3787.486597][T23718] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3787.492344][T23718] ? lock_downgrade+0x6e0/0x6e0 [ 3787.497295][T23718] ? lock_downgrade+0x6e0/0x6e0 [ 3787.502171][T23718] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3787.507749][T23718] __alloc_pages+0x1f3/0x5b0 [ 3787.512355][T23718] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3787.519164][T23718] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 3787.525098][T23718] alloc_pages+0x1aa/0x270 [ 3787.530165][T23718] __get_free_pages+0xc/0x40 [ 3787.534766][T23718] pgd_alloc+0x29/0x260 [ 3787.538940][T23718] mm_init+0x63b/0xc10 [ 3787.543048][T23718] copy_process+0x43f6/0x7520 [ 3787.547741][T23718] ? _raw_spin_unlock+0x28/0x40 [ 3787.552622][T23718] ? wp_page_reuse+0x197/0x570 [ 3787.557514][T23718] ? __cleanup_sighand+0xb0/0xb0 [ 3787.562547][T23718] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3787.567938][T23718] ? rwlock_bug.part.0+0x90/0x90 [ 3787.573074][T23718] ? lock_chain_count+0x20/0x20 [ 3787.577981][T23718] kernel_clone+0xeb/0x990 [ 3787.582426][T23718] ? create_io_thread+0xf0/0xf0 [ 3787.587326][T23718] ? find_held_lock+0x2d/0x110 [ 3787.592139][T23718] __do_sys_clone+0xba/0x100 [ 3787.596778][T23718] ? kernel_clone+0x990/0x990 [ 3787.601499][T23718] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3787.607439][T23718] do_syscall_64+0x39/0xb0 [ 3787.611912][T23718] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3787.617836][T23718] RIP: 0033:0x7fba0da89dfb [ 3787.622269][T23718] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3787.641903][T23718] RSP: 002b:00007fff34ee18f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3787.650333][T23718] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0da89dfb [ 3787.658333][T23718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3787.666352][T23718] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555740b400 [ 3787.674369][T23718] R10: 000055555740b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3787.682352][T23718] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff34ee19d0 [ 3787.690349][T23718] [ 3787.701294][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3787.708695][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3787.716902][T23718] memory: usage 320kB, limit 0kB, failcnt 4756 [ 3787.751734][T23718] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3787.772146][T23718] Memory cgroup stats for /syz2: [ 3787.772343][T23718] anon 45056 [ 3787.772343][T23718] file 155648 [ 3787.772343][T23718] kernel 126976 [ 3787.772343][T23718] kernel_stack 32768 [ 3787.772343][T23718] pagetables 8192 [ 3787.772343][T23718] sec_pagetables 0 [ 3787.772343][T23718] percpu 64 [ 3787.772343][T23718] sock 0 [ 3787.772343][T23718] vmalloc 0 [ 3787.772343][T23718] shmem 151552 [ 3787.772343][T23718] zswap 0 [ 3787.772343][T23718] zswapped 0 [ 3787.772343][T23718] file_mapped 139264 [ 3787.772343][T23718] file_dirty 0 [ 3787.772343][T23718] file_writeback 0 [ 3787.772343][T23718] swapcached 0 [ 3787.772343][T23718] anon_thp 0 [ 3787.772343][T23718] file_thp 0 [ 3787.772343][T23718] shmem_thp 0 [ 3787.772343][T23718] inactive_anon 102400 [ 3787.772343][T23718] active_anon 94208 [ 3787.772343][T23718] inactive_file 0 [ 3787.772343][T23718] active_file 4096 [ 3787.772343][T23718] unevictable 0 [ 3787.772343][T23718] slab_reclaimable 9304 [ 3787.772343][T23718] slab_unreclaimable 63848 [ 3787.772343][T23718] slab 73152 [ 3787.889523][T23718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23718,uid=0 [ 3787.907536][T23718] Memory cgroup out of memory: Killed process 23718 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3787.963298][T23928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3788.071029][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3788.079236][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3788.166747][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.228663][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.260904][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.310910][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.352402][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.393887][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.444063][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.470920][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.490903][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.520880][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.530774][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3788.560938][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3788.582625][T23765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3788.702876][T23928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3788.801154][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3788.810116][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3788.912303][T24042] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3788.984222][T24042] CPU: 0 PID: 24042 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3788.986127][T27309] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3788.994698][T24042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3788.994716][T24042] Call Trace: [ 3788.994726][T24042] [ 3788.994737][T24042] dump_stack_lvl+0xd1/0x138 [ 3788.994778][T24042] dump_header+0x10b/0x85f [ 3788.994825][T24042] oom_kill_process.cold+0x10/0x15 [ 3788.994867][T24042] out_of_memory+0x35c/0x14a0 [ 3788.994917][T24042] ? oom_killer_disable+0x280/0x280 [ 3789.045970][T24042] ? find_held_lock+0x2d/0x110 [ 3789.050779][T24042] mem_cgroup_out_of_memory+0x206/0x270 [ 3789.056356][T24042] ? mem_cgroup_margin+0x130/0x130 [ 3789.061611][T24042] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3789.067532][T24042] memory_max_write+0x2f9/0x3c0 [ 3789.072404][T24042] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3789.078489][T24042] ? lock_release+0x810/0x810 [ 3789.083272][T24042] cgroup_file_write+0x1e2/0x770 [ 3789.088270][T24042] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3789.094392][T24042] ? kill_css+0x370/0x370 [ 3789.098757][T24042] ? __virt_addr_valid+0x61/0x2e0 [ 3789.103827][T24042] ? kill_css+0x370/0x370 [ 3789.108201][T24042] kernfs_fop_write_iter+0x3f1/0x600 [ 3789.113536][T24042] vfs_write+0x9ed/0xdd0 [ 3789.117811][T24042] ? kernel_write+0x630/0x630 [ 3789.123153][T24042] ? __fget_files+0x26a/0x440 [ 3789.127949][T24042] ksys_write+0x12b/0x250 [ 3789.132384][T24042] ? __ia32_sys_read+0xb0/0xb0 [ 3789.137210][T24042] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3789.143152][T24042] do_syscall_64+0x39/0xb0 [ 3789.147622][T24042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3789.153561][T24042] RIP: 0033:0x7fe04648c0c9 [ 3789.158043][T24042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3789.177667][T24042] RSP: 002b:00007fe044fdd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3789.186112][T24042] RAX: ffffffffffffffda RBX: 00007fe0465ac050 RCX: 00007fe04648c0c9 [ 3789.194098][T24042] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3789.202167][T24042] RBP: 00007fe0464e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3789.210148][T24042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3789.218148][T24042] R13: 00007fff831e519f R14: 00007fe044fdd300 R15: 0000000000022000 [ 3789.226148][T24042] [ 3789.251161][T24042] memory: usage 8600kB, limit 0kB, failcnt 2427 [ 3789.257756][T24042] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3789.281088][T24042] Memory cgroup stats for /syz4: [ 3789.281314][T24042] anon 118784 [ 3789.281314][T24042] file 8359936 [ 3789.281314][T24042] kernel 323584 [ 3789.281314][T24042] kernel_stack 98304 [ 3789.281314][T24042] pagetables 81920 [ 3789.281314][T24042] sec_pagetables 0 [ 3789.281314][T24042] percpu 64 [ 3789.281314][T24042] sock 0 [ 3789.281314][T24042] vmalloc 0 [ 3789.281314][T24042] shmem 8359936 [ 3789.281314][T24042] zswap 0 [ 3789.281314][T24042] zswapped 0 [ 3789.281314][T24042] file_mapped 176128 [ 3789.281314][T24042] file_dirty 0 [ 3789.281314][T24042] file_writeback 0 [ 3789.281314][T24042] swapcached 0 [ 3789.281314][T24042] anon_thp 0 [ 3789.281314][T24042] file_thp 0 [ 3789.281314][T24042] shmem_thp 0 [ 3789.281314][T24042] inactive_anon 118784 [ 3789.281314][T24042] active_anon 8359936 [ 3789.281314][T24042] inactive_file 0 [ 3789.281314][T24042] active_file 0 [ 3789.281314][T24042] unevictable 0 [ 3789.281314][T24042] slab_reclaimable 33736 [ 3789.281314][T24042] slab_unreclaimable 80496 [ 3789.281314][T24042] slab 114232 [ 3789.382271][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.410990][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.440937][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.460945][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.483020][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.510883][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.520761][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.550997][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.576864][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.600881][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.610734][T23765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3789.647455][T23765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3789.671054][T24042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24040,uid=0 [ 3789.688008][T23765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3789.712231][T24042] Memory cgroup out of memory: Killed process 24042 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:58:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:58:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3789.791166][ T5105] Bluetooth: hci2: command 0x0409 tx timeout [ 3789.816479][T23726] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3789.867238][T23928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3790.152439][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3790.169622][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3790.179165][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3790.187880][T23726] CPU: 1 PID: 23726 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3790.198343][T23726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3790.208515][T23726] Call Trace: [ 3790.211803][T23726] [ 3790.214761][T23726] dump_stack_lvl+0xd1/0x138 [ 3790.219376][T23726] dump_header+0x10b/0x85f [ 3790.223819][T23726] oom_kill_process.cold+0x10/0x15 [ 3790.228956][T23726] out_of_memory+0x35c/0x14a0 [ 3790.233691][T23726] ? find_held_lock+0x2d/0x110 [ 3790.238477][T23726] ? oom_killer_disable+0x280/0x280 [ 3790.243701][T23726] ? find_held_lock+0x2d/0x110 [ 3790.248541][T23726] mem_cgroup_out_of_memory+0x206/0x270 [ 3790.254111][T23726] ? mem_cgroup_margin+0x130/0x130 [ 3790.259241][T23726] ? lock_downgrade+0x6e0/0x6e0 [ 3790.264119][T23726] try_charge_memcg+0xefb/0x12f0 [ 3790.269248][T23726] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3790.275269][T23726] ? lock_downgrade+0x6e0/0x6e0 [ 3790.280187][T23726] charge_memcg+0x90/0x3b0 [ 3790.284621][T23726] __mem_cgroup_charge+0x2b/0x90 [ 3790.289607][T23726] ? _compound_head+0x5d/0x150 [ 3790.294384][T23726] __handle_mm_fault+0x187d/0x3c90 [ 3790.299517][T23726] ? vm_iomap_memory+0x190/0x190 [ 3790.304495][T23726] handle_mm_fault+0x1b6/0x850 [ 3790.309378][T23726] do_user_addr_fault+0x475/0x1210 [ 3790.314595][T23726] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3790.320164][T23726] exc_page_fault+0x98/0x170 [ 3790.324765][T23726] asm_exc_page_fault+0x26/0x30 [ 3790.329627][T23726] RIP: 0033:0x7fe04645a7d5 [ 3790.334050][T23726] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 3790.353661][T23726] RSP: 002b:00007fff831e4140 EFLAGS: 00010206 [ 3790.359754][T23726] RAX: 00000000000187c1 RBX: 00007fe0465885e0 RCX: 000055555652d840 [ 3790.367766][T23726] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 3790.375853][T23726] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fe046588640 [ 3790.383833][T23726] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 3790.391810][T23726] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556525800 [ 3790.399820][T23726] [ 3790.412879][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3790.421463][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3790.430152][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3790.438162][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3790.445566][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3790.581881][T27309] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3790.625024][T23765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3790.640907][T23765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3790.649680][T23765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3790.691019][T23765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3790.756429][T23928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3790.867070][T27309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3790.930912][T23726] memory: usage 8308kB, limit 0kB, failcnt 2446 [ 3790.937245][T23726] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3790.944710][T23726] Memory cgroup stats for /syz4: [ 3790.944907][T23726] anon 36864 [ 3790.944907][T23726] file 8359936 [ 3790.944907][T23726] kernel 98304 [ 3790.944907][T23726] kernel_stack 0 [ 3790.944907][T23726] pagetables 8192 [ 3790.944907][T23726] sec_pagetables 0 [ 3790.944907][T23726] percpu 64 [ 3790.944907][T23726] sock 0 [ 3790.944907][T23726] vmalloc 0 [ 3790.944907][T23726] shmem 8359936 [ 3790.944907][T23726] zswap 0 [ 3790.944907][T23726] zswapped 0 [ 3790.944907][T23726] file_mapped 163840 [ 3790.944907][T23726] file_dirty 0 [ 3790.944907][T23726] file_writeback 0 [ 3790.944907][T23726] swapcached 0 [ 3790.944907][T23726] anon_thp 0 [ 3790.944907][T23726] file_thp 0 [ 3790.944907][T23726] shmem_thp 0 [ 3790.944907][T23726] inactive_anon 36864 [ 3790.944907][T23726] active_anon 8359936 [ 3790.944907][T23726] inactive_file 0 [ 3790.944907][T23726] active_file 0 [ 3790.944907][T23726] unevictable 0 [ 3790.944907][T23726] slab_reclaimable 29832 [ 3790.944907][T23726] slab_unreclaimable 44728 [ 3790.944907][T23726] slab 74560 [ 3791.251751][T27309] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3791.331014][T23726] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23726,uid=0 [ 3791.378525][T23726] Memory cgroup out of memory: Killed process 23726 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3791.438399][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3791.470364][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3791.521378][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3791.617697][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3791.636483][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3791.804135][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3791.880982][ T5105] Bluetooth: hci2: command 0x041b tx timeout [ 3792.042632][T23928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3792.204688][T24071] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3792.262081][T27309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3792.299045][T24071] CPU: 0 PID: 24071 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3792.310333][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3792.320514][T24071] Call Trace: [ 3792.323847][T24071] [ 3792.326821][T24071] dump_stack_lvl+0xd1/0x138 [ 3792.331632][T24071] dump_header+0x10b/0x85f [ 3792.336103][T24071] oom_kill_process.cold+0x10/0x15 [ 3792.341267][T24071] out_of_memory+0x35c/0x14a0 [ 3792.346095][T24071] ? oom_killer_disable+0x280/0x280 [ 3792.351966][T24071] ? find_held_lock+0x2d/0x110 [ 3792.356785][T24071] mem_cgroup_out_of_memory+0x206/0x270 [ 3792.362389][T24071] ? mem_cgroup_margin+0x130/0x130 [ 3792.367650][T24071] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3792.373512][T24071] memory_max_write+0x2f9/0x3c0 [ 3792.378410][T24071] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3792.384527][T24071] ? lock_release+0x810/0x810 [ 3792.389243][T24071] cgroup_file_write+0x1e2/0x770 [ 3792.394217][T24071] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3792.400316][T24071] ? kill_css+0x370/0x370 [ 3792.404685][T24071] ? __virt_addr_valid+0x61/0x2e0 [ 3792.409776][T24071] ? kill_css+0x370/0x370 [ 3792.414182][T24071] kernfs_fop_write_iter+0x3f1/0x600 [ 3792.419520][T24071] vfs_write+0x9ed/0xdd0 [ 3792.423805][T24071] ? kernel_write+0x630/0x630 [ 3792.428533][T24071] ? __fget_files+0x26a/0x440 [ 3792.433273][T24071] ksys_write+0x12b/0x250 [ 3792.437638][T24071] ? __ia32_sys_read+0xb0/0xb0 [ 3792.442437][T24071] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3792.448374][T24071] do_syscall_64+0x39/0xb0 [ 3792.452834][T24071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3792.458793][T24071] RIP: 0033:0x7f47c1a8c0c9 [ 3792.463266][T24071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3792.483002][T24071] RSP: 002b:00007f47c2824168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3792.491579][T24071] RAX: ffffffffffffffda RBX: 00007f47c1bac050 RCX: 00007f47c1a8c0c9 [ 3792.499580][T24071] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3792.507653][T24071] RBP: 00007f47c1ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3792.515660][T24071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3792.523673][T24071] R13: 00007ffe9203ee1f R14: 00007f47c2824300 R15: 0000000000022000 [ 3792.531693][T24071] [ 3792.540909][ T5105] Bluetooth: hci3: command 0x0409 tx timeout [ 3792.542929][T24071] memory: usage 8644kB, limit 0kB, failcnt 2254 [ 3792.561663][T23928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3792.608418][T24028] chnl_net:caif_netlink_parms(): no params data found [ 3792.608914][T24071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3792.652661][T23928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3792.659977][T24071] Memory cgroup stats for /syz3: [ 3792.660186][T24071] anon 118784 [ 3792.660186][T24071] file 8359936 [ 3792.660186][T24071] kernel 360448 [ 3792.660186][T24071] kernel_stack 98304 [ 3792.660186][T24071] pagetables 81920 [ 3792.660186][T24071] sec_pagetables 0 [ 3792.660186][T24071] percpu 64 [ 3792.660186][T24071] sock 0 [ 3792.660186][T24071] vmalloc 0 [ 3792.660186][T24071] shmem 8359936 [ 3792.660186][T24071] zswap 0 [ 3792.660186][T24071] zswapped 0 [ 3792.660186][T24071] file_mapped 163840 [ 3792.660186][T24071] file_dirty 0 [ 3792.660186][T24071] file_writeback 0 [ 3792.660186][T24071] swapcached 0 [ 3792.660186][T24071] anon_thp 0 [ 3792.660186][T24071] file_thp 0 [ 3792.660186][T24071] shmem_thp 0 [ 3792.660186][T24071] inactive_anon 4050944 [ 3792.660186][T24071] active_anon 4427776 [ 3792.660186][T24071] inactive_file 0 [ 3792.660186][T24071] active_file 0 [ 3792.660186][T24071] unevictable 0 [ 3792.660186][T24071] slab_reclaimable 39272 [ 3792.660186][T24071] slab_unreclaimable 109152 [ 3792.660186][T24071] slab 148424 [ 3792.779409][T27309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3792.808251][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3792.819816][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3792.827707][T24051] chnl_net:caif_netlink_parms(): no params data found [ 3792.827999][T24071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3792.837366][T10157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3792.837423][T24071] ,cpuset= [ 3792.845948][T10157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3792.852048][T24071] syz3 [ 3792.855375][T10157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3792.863542][T24071] ,mems_allowed=0-1 19:58:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:58:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3792.871653][T10157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3792.871676][T24071] ,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24068,uid=0 [ 3792.903906][T23928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3792.905250][T24071] Memory cgroup out of memory: Killed process 24068 (syz-executor.3) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3793.014669][T23765] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3793.033480][T23765] CPU: 0 PID: 23765 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3793.044174][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3793.054296][T23765] Call Trace: [ 3793.057608][T23765] [ 3793.061009][T23765] dump_stack_lvl+0xd1/0x138 [ 3793.065654][T23765] dump_header+0x10b/0x85f [ 3793.070128][T23765] oom_kill_process.cold+0x10/0x15 [ 3793.075295][T23765] out_of_memory+0x35c/0x14a0 [ 3793.080022][T23765] ? find_held_lock+0x2d/0x110 [ 3793.084849][T23765] ? oom_killer_disable+0x280/0x280 [ 3793.090165][T23765] ? find_held_lock+0x2d/0x110 [ 3793.095007][T23765] mem_cgroup_out_of_memory+0x206/0x270 [ 3793.100626][T23765] ? mem_cgroup_margin+0x130/0x130 [ 3793.105796][T23765] ? lock_downgrade+0x6e0/0x6e0 [ 3793.110716][T23765] try_charge_memcg+0xefb/0x12f0 [ 3793.115704][T23765] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3793.121720][T23765] ? lock_downgrade+0x6e0/0x6e0 [ 3793.126621][T23765] charge_memcg+0x90/0x3b0 [ 3793.131112][T23765] __mem_cgroup_charge+0x2b/0x90 [ 3793.136097][T23765] ? copy_mc_to_kernel+0x3e/0x90 [ 3793.141076][T23765] do_wp_page+0x7ec/0x3370 [ 3793.145546][T23765] ? lock_release+0x810/0x810 [ 3793.150269][T23765] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3793.155706][T23765] ? do_raw_spin_lock+0x124/0x2b0 [ 3793.160765][T23765] ? rwlock_bug.part.0+0x90/0x90 [ 3793.165741][T23765] ? lock_chain_count+0x20/0x20 [ 3793.170642][T23765] __handle_mm_fault+0x1f58/0x3c90 [ 3793.175907][T23765] ? vm_iomap_memory+0x190/0x190 [ 3793.180963][T23765] handle_mm_fault+0x1b6/0x850 [ 3793.185784][T23765] do_user_addr_fault+0x475/0x1210 [ 3793.190928][T23765] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3793.196525][T23765] exc_page_fault+0x98/0x170 [ 3793.201160][T23765] asm_exc_page_fault+0x26/0x30 [ 3793.206067][T23765] RIP: 0033:0x7f47c1aaf594 [ 3793.210525][T23765] Code: d7 48 89 50 40 eb ab 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 64 8b 04 25 08 03 00 00 41 89 c3 41 83 cb 02 41 39 c3 74 17 64 44 0f b1 1c 25 08 03 00 00 75 e7 41 83 e3 bb 41 83 fb 0a 74 [ 3793.230173][T23765] RSP: 002b:00007ffe9203f048 EFLAGS: 00010202 [ 3793.236289][T23765] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 3793.244299][T23765] RDX: 0000000040000001 RSI: 00007ffe9203f0dc RDI: 00000000ffffffff [ 3793.252299][T23765] RBP: 00007ffe9203f0dc R08: 0000000000000ed0 R09: 00007ffe92085080 [ 3793.260322][T23765] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000001 [ 3793.268330][T23765] R13: 000000000039e047 R14: 0000000000000000 R15: 00007ffe9203f140 [ 3793.276535][T23765] [ 3793.310271][T23765] memory: usage 8468kB, limit 0kB, failcnt 2310 [ 3793.342846][T27309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3793.353602][T23765] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3793.360500][T23765] Memory cgroup stats for /syz3: [ 3793.360668][T23765] anon 61440 [ 3793.360668][T23765] file 8359936 [ 3793.360668][T23765] kernel 249856 [ 3793.360668][T23765] kernel_stack 32768 [ 3793.360668][T23765] pagetables 57344 [ 3793.360668][T23765] sec_pagetables 0 [ 3793.360668][T23765] percpu 128 [ 3793.360668][T23765] sock 0 [ 3793.360668][T23765] vmalloc 0 [ 3793.360668][T23765] shmem 8359936 [ 3793.360668][T23765] zswap 0 [ 3793.360668][T23765] zswapped 0 [ 3793.360668][T23765] file_mapped 147456 [ 3793.360668][T23765] file_dirty 0 [ 3793.360668][T23765] file_writeback 0 [ 3793.360668][T23765] swapcached 0 [ 3793.360668][T23765] anon_thp 0 [ 3793.360668][T23765] file_thp 0 [ 3793.360668][T23765] shmem_thp 0 [ 3793.360668][T23765] inactive_anon 3993600 [ 3793.360668][T23765] active_anon 4427776 [ 3793.360668][T23765] inactive_file 0 [ 3793.360668][T23765] active_file 0 [ 3793.360668][T23765] unevictable 0 [ 3793.360668][T23765] slab_reclaimable 29448 [ 3793.360668][T23765] slab_unreclaimable 99480 [ 3793.360668][T23765] slab 128928 [ 3793.575189][T23765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23765,uid=0 [ 3793.661122][T23765] Memory cgroup out of memory: Killed process 23765 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3793.742545][T27309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3793.951021][ T5854] Bluetooth: hci2: command 0x040f tx timeout 19:58:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3794.072312][T24028] bridge0: port 1(bridge_slave_0) entered blocking state [ 3794.079470][T24028] bridge0: port 1(bridge_slave_0) entered disabled state [ 3794.099405][T24028] device bridge_slave_0 entered promiscuous mode [ 3794.162347][T24028] bridge0: port 2(bridge_slave_1) entered blocking state [ 3794.169513][T24028] bridge0: port 2(bridge_slave_1) entered disabled state [ 3794.184596][T24028] device bridge_slave_1 entered promiscuous mode [ 3794.294235][T24051] bridge0: port 1(bridge_slave_0) entered blocking state [ 3794.306354][T24051] bridge0: port 1(bridge_slave_0) entered disabled state [ 3794.320660][T24051] device bridge_slave_0 entered promiscuous mode [ 3794.413939][T24051] bridge0: port 2(bridge_slave_1) entered blocking state [ 3794.425327][T24051] bridge0: port 2(bridge_slave_1) entered disabled state [ 3794.438314][T24051] device bridge_slave_1 entered promiscuous mode [ 3794.462246][T24028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3794.516861][T24028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3794.593492][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 3794.687497][T24051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3794.754000][T24028] team0: Port device team_slave_0 added [ 3794.767400][T24028] team0: Port device team_slave_1 added [ 3794.824078][T24051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3794.849513][T23928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3794.911391][ T5854] Bluetooth: hci4: command 0x0409 tx timeout [ 3795.017120][T24028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3795.030672][T24028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3795.090312][T24028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3795.109716][T23928] 8021q: adding VLAN 0 to HW filter on device team0 [ 3795.158995][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3795.172138][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3795.193150][T24028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3795.200149][T24028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3795.249064][T24028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3795.274675][T24051] team0: Port device team_slave_0 added [ 3795.401757][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3795.412602][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3795.421832][T32710] bridge0: port 1(bridge_slave_0) entered blocking state [ 3795.428948][T32710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3795.438423][T24078] chnl_net:caif_netlink_parms(): no params data found [ 3795.460608][T24051] team0: Port device team_slave_1 added [ 3795.473058][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3795.491425][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3795.499447][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3795.511050][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3795.521474][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3795.532347][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3795.657731][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3795.682108][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3795.695231][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3795.702471][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3795.832636][T24028] device hsr_slave_0 entered promiscuous mode [ 3795.840015][T24028] device hsr_slave_1 entered promiscuous mode [ 3795.862845][T24028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3795.870595][T24028] Cannot create hsr debugfs directory [ 3795.896599][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3795.931487][T24051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3795.938496][T24051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3795.989602][T24051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3796.031975][ T5105] Bluetooth: hci2: command 0x0419 tx timeout [ 3796.096632][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3796.108028][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3796.134665][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3796.151631][T24051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3796.158630][T24051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3796.188918][T24051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3796.312224][T23928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3796.325036][T23928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3796.339453][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3796.348686][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3796.360298][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3796.369215][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3796.378699][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3796.472995][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3796.594908][T24078] bridge0: port 1(bridge_slave_0) entered blocking state [ 3796.603647][T24078] bridge0: port 1(bridge_slave_0) entered disabled state [ 3796.614300][T24078] device bridge_slave_0 entered promiscuous mode [ 3796.626036][T24078] bridge0: port 2(bridge_slave_1) entered blocking state [ 3796.633464][T24078] bridge0: port 2(bridge_slave_1) entered disabled state [ 3796.642195][T24078] device bridge_slave_1 entered promiscuous mode [ 3796.656690][T24051] device hsr_slave_0 entered promiscuous mode [ 3796.664176][T24051] device hsr_slave_1 entered promiscuous mode [ 3796.674222][ T5105] Bluetooth: hci3: command 0x040f tx timeout [ 3796.680572][T24051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3796.688811][T24051] Cannot create hsr debugfs directory [ 3796.896002][T24078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3796.936409][T24078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3796.978310][T23928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3796.992635][ T5105] Bluetooth: hci4: command 0x041b tx timeout [ 3797.063900][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3797.082317][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3797.137785][T24078] team0: Port device team_slave_0 added [ 3797.354221][T24078] team0: Port device team_slave_1 added [ 3797.501976][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3797.513093][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3797.551250][ T5105] Bluetooth: hci0: command 0x0409 tx timeout [ 3797.588210][T24078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3797.611127][T24078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3797.680295][T24078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3797.826282][T24078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3797.850904][T24078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3797.931075][T24078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3798.014086][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3798.023083][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3798.072398][T23928] device veth0_vlan entered promiscuous mode [ 3798.132341][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3798.151875][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3798.165121][T23928] device veth1_vlan entered promiscuous mode [ 3798.225727][T24078] device hsr_slave_0 entered promiscuous mode [ 3798.251618][T24078] device hsr_slave_1 entered promiscuous mode [ 3798.261624][T24078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3798.269241][T24078] Cannot create hsr debugfs directory [ 3798.332172][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3798.340525][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3798.387541][T24117] chnl_net:caif_netlink_parms(): no params data found [ 3798.424885][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3798.441834][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3798.573825][T23928] device veth0_macvtap entered promiscuous mode [ 3798.619123][T23928] device veth1_macvtap entered promiscuous mode [ 3798.724133][T24028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3798.751865][ T5105] Bluetooth: hci3: command 0x0419 tx timeout [ 3798.765441][T24117] bridge0: port 1(bridge_slave_0) entered blocking state [ 3798.776669][T24117] bridge0: port 1(bridge_slave_0) entered disabled state [ 3798.813407][T24117] device bridge_slave_0 entered promiscuous mode [ 3798.861572][T24028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3798.889231][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3798.920940][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3798.940863][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3798.960889][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3798.988637][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3799.009747][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.040871][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3799.056072][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.071018][ T5105] Bluetooth: hci4: command 0x040f tx timeout [ 3799.073369][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3799.100904][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.120995][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3799.151421][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.180985][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3799.200858][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.233338][T23928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3799.244717][T24117] bridge0: port 2(bridge_slave_1) entered blocking state [ 3799.281024][T24117] bridge0: port 2(bridge_slave_1) entered disabled state [ 3799.290131][T24117] device bridge_slave_1 entered promiscuous mode [ 3799.322222][T24028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3799.397091][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3799.411931][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3799.420326][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3799.462737][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3799.496470][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.507238][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.551042][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.590903][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.610894][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.630869][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.630969][ T5105] Bluetooth: hci0: command 0x041b tx timeout [ 3799.650963][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.670908][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.690298][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.721071][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.740875][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.760949][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.780949][T23928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3799.804164][T23928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3799.833448][T23928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3800.021275][T24028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3800.151565][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3800.160426][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3800.204129][T23928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.216778][T23928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.226529][T23928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.235934][T23928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3800.361850][T27309] device hsr_slave_0 left promiscuous mode [ 3800.381406][T27309] device hsr_slave_1 left promiscuous mode [ 3800.402703][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3800.410200][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3800.453645][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3800.471098][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3800.491431][T27309] device bridge_slave_1 left promiscuous mode [ 3800.497730][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3800.508884][T27309] device bridge_slave_0 left promiscuous mode [ 3800.517732][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3800.532628][T27309] device hsr_slave_0 left promiscuous mode [ 3800.551415][T27309] device hsr_slave_1 left promiscuous mode [ 3800.566658][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3800.580998][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3800.603879][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3800.620981][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3800.631878][T27309] device bridge_slave_1 left promiscuous mode [ 3800.638234][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3800.662916][T27309] device bridge_slave_0 left promiscuous mode [ 3800.669203][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3800.708870][T27309] device hsr_slave_0 left promiscuous mode [ 3800.730771][T27309] device hsr_slave_1 left promiscuous mode [ 3800.739659][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3800.747825][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3800.773313][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3800.791007][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3800.806466][T27309] device bridge_slave_1 left promiscuous mode [ 3800.821117][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3800.842466][T27309] device bridge_slave_0 left promiscuous mode [ 3800.848729][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3800.882000][T27309] device hsr_slave_0 left promiscuous mode [ 3800.903659][T27309] device hsr_slave_1 left promiscuous mode [ 3800.912373][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3800.919937][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3800.949893][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3800.966583][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3800.987075][T27309] device bridge_slave_1 left promiscuous mode [ 3801.012562][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3801.032284][T27309] device bridge_slave_0 left promiscuous mode [ 3801.038573][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3801.101771][T27309] device veth1_macvtap left promiscuous mode [ 3801.107906][T27309] device veth0_macvtap left promiscuous mode [ 3801.131004][T27309] device veth1_vlan left promiscuous mode [ 3801.136949][T27309] device veth0_vlan left promiscuous mode [ 3801.151522][ T5105] Bluetooth: hci4: command 0x0419 tx timeout [ 3801.160277][T27309] device veth1_macvtap left promiscuous mode [ 3801.171008][T27309] device veth0_macvtap left promiscuous mode [ 3801.177183][T27309] device veth1_vlan left promiscuous mode [ 3801.201259][T27309] device veth0_vlan left promiscuous mode [ 3801.217251][T27309] device veth1_macvtap left promiscuous mode [ 3801.231188][T27309] device veth0_macvtap left promiscuous mode [ 3801.237374][T27309] device veth1_vlan left promiscuous mode [ 3801.261025][T27309] device veth0_vlan left promiscuous mode [ 3801.281570][T27309] device veth1_macvtap left promiscuous mode [ 3801.287667][T27309] device veth0_macvtap left promiscuous mode [ 3801.301011][T27309] device veth1_vlan left promiscuous mode [ 3801.306996][T27309] device veth0_vlan left promiscuous mode [ 3801.711126][ T5105] Bluetooth: hci0: command 0x040f tx timeout [ 3802.666608][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3802.685559][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3802.720344][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3802.757559][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3802.924269][T27309] bond0 (unregistering): Released all slaves [ 3803.194983][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3803.214915][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3803.230653][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3803.258746][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3803.461753][T27309] bond0 (unregistering): Released all slaves [ 3803.733214][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3803.771551][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3803.791041][ T5105] Bluetooth: hci0: command 0x0419 tx timeout [ 3803.814993][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3803.844625][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3804.019240][T27309] bond0 (unregistering): Released all slaves [ 3804.317936][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3804.352352][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3804.391628][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3804.419644][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3804.509838][T27309] bond0 (unregistering): Released all slaves [ 3804.585740][T24117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3804.630331][T24117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3804.719078][T24117] team0: Port device team_slave_0 added [ 3804.807120][T24117] team0: Port device team_slave_1 added [ 3804.923551][T24117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3804.930574][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3804.976396][T24117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3805.032780][T24117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3805.039789][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3805.123272][T24117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3805.157336][T24051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3805.226185][T24078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3805.271316][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3805.279509][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3805.294174][T24051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3805.404491][T24078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3805.433885][T24051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3805.483814][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3805.537890][T24117] device hsr_slave_0 entered promiscuous mode [ 3805.551888][T24117] device hsr_slave_1 entered promiscuous mode [ 3805.599873][T24028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3805.640250][T24051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3805.685907][T24078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3805.722645][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3805.751154][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3805.786005][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3805.833294][T24028] 8021q: adding VLAN 0 to HW filter on device team0 [ 3805.950487][T24078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3806.009242][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3806.021670][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3806.104922][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3806.130266][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3806.151874][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 3806.159018][T30819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3806.180185][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3806.221935][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3806.230563][T30819] bridge0: port 2(bridge_slave_1) entered blocking state [ 3806.237751][T30819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3806.363476][T24238] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3806.391209][T24238] CPU: 0 PID: 24238 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3806.401723][T24238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3806.413744][T24238] Call Trace: [ 3806.417060][T24238] [ 3806.420021][T24238] dump_stack_lvl+0xd1/0x138 [ 3806.424841][T24238] dump_header+0x10b/0x85f [ 3806.429405][T24238] oom_kill_process.cold+0x10/0x15 [ 3806.434648][T24238] out_of_memory+0x35c/0x14a0 [ 3806.439361][T24238] ? lockdep_hardirqs_on+0x7d/0x100 [ 3806.444569][T24238] ? oom_killer_disable+0x280/0x280 [ 3806.449775][T24238] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 3806.455447][T24238] mem_cgroup_out_of_memory+0x206/0x270 [ 3806.461309][T24238] ? mem_cgroup_margin+0x130/0x130 [ 3806.466498][T24238] memory_max_write+0x2f9/0x3c0 [ 3806.471453][T24238] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3806.477529][T24238] ? lock_release+0x810/0x810 [ 3806.482216][T24238] cgroup_file_write+0x1e2/0x770 [ 3806.487158][T24238] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3806.493241][T24238] ? kill_css+0x370/0x370 [ 3806.497587][T24238] ? __virt_addr_valid+0x61/0x2e0 [ 3806.502659][T24238] ? kill_css+0x370/0x370 [ 3806.507066][T24238] kernfs_fop_write_iter+0x3f1/0x600 [ 3806.512384][T24238] vfs_write+0x9ed/0xdd0 [ 3806.516631][T24238] ? kernel_write+0x630/0x630 [ 3806.521315][T24238] ? __fget_files+0x26a/0x440 [ 3806.525999][T24238] ksys_write+0x12b/0x250 [ 3806.530322][T24238] ? __ia32_sys_read+0xb0/0xb0 [ 3806.535083][T24238] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3806.540983][T24238] do_syscall_64+0x39/0xb0 [ 3806.545491][T24238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3806.551414][T24238] RIP: 0033:0x7f2a80a8c0c9 [ 3806.556635][T24238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3806.576883][T24238] RSP: 002b:00007f2a817d7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3806.585429][T24238] RAX: ffffffffffffffda RBX: 00007f2a80babf80 RCX: 00007f2a80a8c0c9 [ 3806.593498][T24238] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3806.601508][T24238] RBP: 00007f2a80ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3806.609505][T24238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3806.617526][T24238] R13: 00007ffe1da9702f R14: 00007f2a817d7300 R15: 0000000000022000 [ 3806.625550][T24238] [ 3806.644640][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3806.661746][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3806.681720][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3806.690661][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3806.785742][T24238] memory: usage 8604kB, limit 0kB, failcnt 1664 [ 3806.801467][T24238] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3806.804383][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3806.816436][T24238] Memory cgroup stats for /syz1: [ 3806.819339][T24238] anon 118784 [ 3806.819339][T24238] file 8318976 [ 3806.819339][T24238] kernel 360448 [ 3806.819339][T24238] kernel_stack 98304 [ 3806.819339][T24238] pagetables 81920 [ 3806.819339][T24238] sec_pagetables 0 [ 3806.819339][T24238] percpu 64 [ 3806.819339][T24238] sock 0 [ 3806.819339][T24238] vmalloc 0 [ 3806.819339][T24238] shmem 8318976 [ 3806.819339][T24238] zswap 0 [ 3806.819339][T24238] zswapped 0 [ 3806.819339][T24238] file_mapped 131072 [ 3806.819339][T24238] file_dirty 0 [ 3806.819339][T24238] file_writeback 0 [ 3806.819339][T24238] swapcached 0 [ 3806.819339][T24238] anon_thp 0 [ 3806.819339][T24238] file_thp 0 [ 3806.819339][T24238] shmem_thp 0 [ 3806.819339][T24238] inactive_anon 49152 [ 3806.819339][T24238] active_anon 8318976 [ 3806.819339][T24238] inactive_file 0 [ 3806.819339][T24238] active_file 0 [ 3806.819339][T24238] unevictable 0 [ 3806.819339][T24238] slab_reclaimable 39272 [ 3806.819339][T24238] slab_unreclaimable 108504 [ 3806.819339][T24238] slab 147776 [ 3806.920991][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3806.932572][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3806.941518][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3806.951536][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3806.956644][T24238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3806.960089][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3806.960552][T24238] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23928,uid=0 [ 3807.019547][T24028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3807.024300][T24238] Memory cgroup out of memory: Killed process 23928 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 3807.042647][T24051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3807.206802][T24051] 8021q: adding VLAN 0 to HW filter on device team0 [ 3807.236710][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3807.245336][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3807.361889][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3807.383506][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3807.401585][T32710] bridge0: port 1(bridge_slave_0) entered blocking state [ 3807.408782][T32710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3807.431407][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3807.440281][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3807.449049][T32710] bridge0: port 2(bridge_slave_1) entered blocking state [ 3807.456266][T32710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3807.481518][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3807.489478][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3807.499044][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3807.508024][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 19:58:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:58:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3807.549361][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3807.558795][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3807.571142][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3807.578744][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3807.599678][T24051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3807.652028][T24051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3807.762596][T24117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3807.891604][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3807.915223][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 19:58:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3807.941966][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3807.971410][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3807.980402][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3808.008946][T24078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3808.027726][T24028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3808.082139][T24117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3808.132004][T24078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3808.180316][T24078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3808.322615][T24117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3808.374344][T24078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3808.445555][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3808.461769][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3808.531331][T24117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3808.633378][T24028] device veth0_vlan entered promiscuous mode [ 3808.660304][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3808.669621][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3808.720389][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3808.729042][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3808.752500][T24028] device veth1_vlan entered promiscuous mode [ 3808.871534][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3808.880487][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3808.912616][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3808.941774][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3808.954275][T24028] device veth0_macvtap entered promiscuous mode [ 3808.989159][T24078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3809.074046][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3809.087266][T24028] device veth1_macvtap entered promiscuous mode [ 3809.109748][T24078] 8021q: adding VLAN 0 to HW filter on device team0 [ 3809.159133][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3809.169252][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3809.190434][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3809.198688][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3809.228272][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3809.311405][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.350882][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3809.390912][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.410935][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3809.450852][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.460723][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3809.531142][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.572102][T24028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3809.586687][T24051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3809.641068][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3809.649997][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3809.701774][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3809.741328][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3809.781590][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 3809.788758][T30819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3809.853330][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3809.901171][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.941143][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3809.991657][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3809.992231][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3810.012376][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3810.020702][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3810.020904][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3810.042552][T10157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3810.050125][T10157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3810.058433][T10157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3810.112554][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3810.122532][T24028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3810.133843][T24028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3810.145568][T24028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3810.164896][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3810.182943][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3810.195832][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3810.209222][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3810.227806][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3810.251511][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3810.258716][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3810.301222][T24117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3810.335457][T24028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3810.350987][T24028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3810.359755][T24028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3810.390886][T24028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3810.411970][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3810.441961][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3810.475652][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3810.531714][T24117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3810.553536][T24117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3810.581268][T24117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3810.608019][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3810.621758][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3810.670410][T24078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3810.694279][T24078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3810.762748][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3810.781568][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3810.801984][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3810.810619][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3810.861697][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3810.881289][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3810.893177][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3810.901564][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3810.909239][ T5105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3810.918047][ T5105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3811.204569][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3811.218564][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3811.371229][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3811.379611][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3811.464264][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3811.481899][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3811.490396][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3811.529754][T24051] device veth0_vlan entered promiscuous mode [ 3811.550641][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3811.557996][T24051] device veth1_vlan entered promiscuous mode [ 3811.566980][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3811.577331][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3811.585909][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3811.587670][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3811.632852][T24117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3811.687882][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3811.696456][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3811.776516][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3811.811865][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3811.853321][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3811.911657][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3811.922369][T24051] device veth0_macvtap entered promiscuous mode [ 3811.940255][T24117] 8021q: adding VLAN 0 to HW filter on device team0 19:58:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3811.999844][T24051] device veth1_macvtap entered promiscuous mode [ 3812.111212][ T5105] Bluetooth: hci1: command 0x0409 tx timeout [ 3812.155012][T24263] chnl_net:caif_netlink_parms(): no params data found 19:58:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3812.283910][T24078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3812.301614][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3812.310037][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3812.340160][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3812.396164][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3812.445466][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 3812.452694][T13737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3812.461309][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3812.469044][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3812.477359][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3812.487298][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3812.496738][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3812.503938][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3812.532650][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3812.597588][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3812.621893][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3812.656125][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3812.694367][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3812.722891][T24303] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3812.726134][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3812.750957][T24303] CPU: 1 PID: 24303 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3812.761452][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3812.771552][T24303] Call Trace: [ 3812.774861][T24303] [ 3812.777821][T24303] dump_stack_lvl+0xd1/0x138 [ 3812.782471][T24303] dump_header+0x10b/0x85f [ 3812.787023][T24303] oom_kill_process.cold+0x10/0x15 [ 3812.792292][T24303] out_of_memory+0x35c/0x14a0 [ 3812.797043][T24303] ? oom_killer_disable+0x280/0x280 [ 3812.802323][T24303] ? mark_held_locks+0x9f/0xe0 [ 3812.807149][T24303] mem_cgroup_out_of_memory+0x206/0x270 [ 3812.812771][T24303] ? mem_cgroup_margin+0x130/0x130 [ 3812.817958][T24303] memory_max_write+0x2f9/0x3c0 [ 3812.822870][T24303] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3812.828993][T24303] ? cgroup_file_write+0x192/0x770 [ 3812.834165][T24303] cgroup_file_write+0x1e2/0x770 [ 3812.839205][T24303] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3812.845321][T24303] ? kill_css+0x370/0x370 [ 3812.849818][T24303] ? __virt_addr_valid+0x61/0x2e0 [ 3812.855031][T24303] ? kill_css+0x370/0x370 [ 3812.859422][T24303] kernfs_fop_write_iter+0x3f1/0x600 [ 3812.864769][T24303] vfs_write+0x9ed/0xdd0 [ 3812.869147][T24303] ? kernel_write+0x630/0x630 [ 3812.873870][T24303] ? __fget_files+0x26a/0x440 [ 3812.878608][T24303] ksys_write+0x12b/0x250 [ 3812.880956][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3812.882961][T24303] ? __ia32_sys_read+0xb0/0xb0 [ 3812.897599][T24303] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3812.903552][T24303] do_syscall_64+0x39/0xb0 [ 3812.906248][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3812.908004][T24303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3812.919072][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3812.924276][T24303] RIP: 0033:0x7fa7a608c0c9 [ 3812.924303][T24303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3812.924326][T24303] RSP: 002b:00007fa7a6d89168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3812.924352][T24303] RAX: ffffffffffffffda RBX: 00007fa7a61abf80 RCX: 00007fa7a608c0c9 [ 3812.924368][T24303] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3812.924382][T24303] RBP: 00007fa7a60e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3812.924396][T24303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3812.924412][T24303] R13: 00007ffc47344b6f R14: 00007fa7a6d89300 R15: 0000000000022000 [ 3812.937333][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3812.938648][T24303] [ 3812.958875][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.041126][ T5105] Bluetooth: hci5: command 0x0409 tx timeout [ 3813.043388][T24303] memory: usage 8572kB, limit 0kB, failcnt 2247 [ 3813.051006][T24051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3813.065169][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3813.073429][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3813.079041][T24303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3813.082555][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3813.128764][T24303] Memory cgroup stats for /syz0: [ 3813.148362][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3813.153122][T24303] anon 131072 [ 3813.153122][T24303] file 8347648 [ 3813.153122][T24303] kernel 278528 [ 3813.153122][T24303] kernel_stack 65536 [ 3813.153122][T24303] pagetables 77824 [ 3813.153122][T24303] sec_pagetables 0 [ 3813.153122][T24303] percpu 64 [ 3813.153122][T24303] sock 0 [ 3813.153122][T24303] vmalloc 0 [ 3813.153122][T24303] shmem 8347648 [ 3813.153122][T24303] zswap 0 [ 3813.153122][T24303] zswapped 0 [ 3813.153122][T24303] file_mapped 192512 [ 3813.153122][T24303] file_dirty 0 [ 3813.153122][T24303] file_writeback 0 [ 3813.153122][T24303] swapcached 0 [ 3813.153122][T24303] anon_thp 0 [ 3813.153122][T24303] file_thp 0 [ 3813.153122][T24303] shmem_thp 0 [ 3813.153122][T24303] inactive_anon 131072 [ 3813.153122][T24303] active_anon 8347648 [ 3813.153122][T24303] inactive_file 0 [ 3813.153122][T24303] active_file 0 [ 3813.153122][T24303] unevictable 0 [ 3813.153122][T24303] slab_reclaimable 40576 [ 3813.153122][T24303] slab_unreclaimable 75048 [ 3813.153122][T24303] slab 115624 [ 3813.156035][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.169196][T24303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24302,uid=0 [ 3813.296830][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 19:58:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3813.348837][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.350991][T24303] Memory cgroup out of memory: Killed process 24303 (syz-executor.0) total-vm:54540kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3813.369941][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3813.420243][T24028] syz-executor.0 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 3813.441821][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.460942][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3813.484386][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.501006][T24028] CPU: 0 PID: 24028 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3813.511504][T24028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3813.521593][T24028] Call Trace: [ 3813.524899][T24028] [ 3813.527859][T24028] dump_stack_lvl+0xd1/0x138 [ 3813.532498][T24028] dump_header+0x10b/0x85f [ 3813.536968][T24028] oom_kill_process.cold+0x10/0x15 [ 3813.542132][T24028] out_of_memory+0x35c/0x14a0 [ 3813.546953][T24028] ? find_held_lock+0x2d/0x110 [ 3813.551762][T24028] ? oom_killer_disable+0x280/0x280 [ 3813.557017][T24028] ? find_held_lock+0x2d/0x110 [ 3813.561927][T24028] mem_cgroup_out_of_memory+0x206/0x270 [ 3813.567528][T24028] ? mem_cgroup_margin+0x130/0x130 [ 3813.572686][T24028] ? lock_downgrade+0x6e0/0x6e0 [ 3813.577594][T24028] try_charge_memcg+0xefb/0x12f0 [ 3813.582584][T24028] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3813.588609][T24028] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3813.589051][T24051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3813.594369][T24028] ? lock_downgrade+0x6e0/0x6e0 [ 3813.594433][T24028] obj_cgroup_charge+0x2af/0x5e0 [ 3813.594465][T24028] kmem_cache_alloc_lru+0x145/0x760 [ 3813.594493][T24028] ? ext4_alloc_inode+0x28/0x680 [ 3813.594527][T24028] ? ext4_free_in_core_inode+0x70/0x70 [ 3813.606670][T24051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3813.609884][T24028] ext4_alloc_inode+0x28/0x680 [ 3813.644994][T24028] ? ext4_free_in_core_inode+0x70/0x70 [ 3813.650471][T24028] alloc_inode+0x61/0x230 [ 3813.654826][T24028] iget_locked+0x1bb/0x700 [ 3813.659265][T24028] __ext4_iget+0x3af/0x4230 [ 3813.663797][T24028] ? ext4_get_projid+0x190/0x190 [ 3813.668752][T24028] ? ext4_fname_prepare_lookup+0x163/0x200 [ 3813.674572][T24028] ? ext4_fname_setup_filename+0x110/0x110 [ 3813.680417][T24028] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3813.686099][T24028] ext4_lookup+0x387/0x700 [ 3813.690555][T24028] ? ext4_resetent+0x2d0/0x2d0 [ 3813.695351][T24028] __lookup_slow+0x24c/0x460 [ 3813.700127][T24028] ? __lookup_hash+0x180/0x180 [ 3813.704948][T24028] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3813.710437][T24028] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3813.716019][T24028] ? lookup_fast+0x14e/0x520 [ 3813.720635][T24028] walk_component+0x33f/0x5a0 [ 3813.725688][T24028] path_lookupat+0x1ba/0x840 [ 3813.730975][T24028] filename_lookup+0x1d2/0x590 [ 3813.735758][T24028] ? may_linkat+0x500/0x500 [ 3813.740295][T24028] ? __might_fault+0xd9/0x180 [ 3813.745001][T24028] ? __phys_addr_symbol+0x30/0x70 [ 3813.750041][T24028] ? __check_object_size+0x2e2/0x5a0 [ 3813.755402][T24028] ? strncpy_from_user+0x28b/0x3c0 [ 3813.760536][T24028] ? getname_flags.part.0+0x1dd/0x4f0 [ 3813.765947][T24028] user_path_at_empty+0x46/0x60 [ 3813.770819][T24028] __x64_sys_umount+0xfc/0x190 [ 3813.775600][T24028] ? path_umount+0x10b0/0x10b0 [ 3813.780397][T24028] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3813.786314][T24028] do_syscall_64+0x39/0xb0 [ 3813.790750][T24028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3813.796657][T24028] RIP: 0033:0x7fa7a608d537 [ 3813.801079][T24028] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3813.820693][T24028] RSP: 002b:00007ffc47343cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3813.829122][T24028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa7a608d537 [ 3813.837279][T24028] RDX: 00007ffc47343d9a RSI: 000000000000000a RDI: 00007ffc47343d90 [ 3813.845258][T24028] RBP: 00007ffc47343d90 R08: 00000000ffffffff R09: 00007ffc47343b60 [ 3813.853234][T24028] R10: 0000555555580873 R11: 0000000000000246 R12: 00007fa7a60e6b24 [ 3813.861209][T24028] R13: 00007ffc47344e50 R14: 0000555555580810 R15: 00007ffc47344e90 [ 3813.869206][T24028] [ 3813.877959][T24051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3813.886200][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3813.895629][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3813.905613][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3813.915941][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3813.924924][T24028] memory: usage 8308kB, limit 0kB, failcnt 2266 [ 3813.925601][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3813.932214][T24028] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3813.946732][T24028] Memory cgroup stats for /syz0: [ 3813.946932][T24028] anon 40960 [ 3813.946932][T24028] file 8347648 [ 3813.946932][T24028] kernel 102400 [ 3813.946932][T24028] kernel_stack 0 [ 3813.946932][T24028] pagetables 8192 [ 3813.946932][T24028] sec_pagetables 0 [ 3813.946932][T24028] percpu 64 [ 3813.946932][T24028] sock 0 [ 3813.946932][T24028] vmalloc 0 [ 3813.946932][T24028] shmem 8347648 [ 3813.946932][T24028] zswap 0 [ 3813.946932][T24028] zswapped 0 [ 3813.946932][T24028] file_mapped 172032 [ 3813.946932][T24028] file_dirty 0 [ 3813.946932][T24028] file_writeback 0 [ 3813.946932][T24028] swapcached 0 [ 3813.946932][T24028] anon_thp 0 [ 3813.946932][T24028] file_thp 0 [ 3813.946932][T24028] shmem_thp 0 [ 3813.946932][T24028] inactive_anon 40960 [ 3813.946932][T24028] active_anon 8347648 [ 3813.946932][T24028] inactive_file 0 [ 3813.946932][T24028] active_file 0 [ 3813.946932][T24028] unevictable 0 [ 3813.946932][T24028] slab_reclaimable 32288 [ 3813.946932][T24028] slab_unreclaimable 47000 [ 3813.946932][T24028] slab 79288 [ 3814.055508][T24028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24028,uid=0 [ 3814.071536][T24028] Memory cgroup out of memory: Killed process 24028 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3814.136789][T24276] chnl_net:caif_netlink_parms(): no params data found [ 3814.156545][T24051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3814.165957][T24051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3814.174813][T24051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3814.183654][T24051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3814.192510][ T5105] Bluetooth: hci1: command 0x041b tx timeout [ 3814.200170][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3814.209002][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3814.227451][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3814.235954][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3814.250373][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3814.258871][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3814.267740][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3814.303200][T27309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3814.361193][T24263] bridge0: port 1(bridge_slave_0) entered blocking state [ 3814.368318][T24263] bridge0: port 1(bridge_slave_0) entered disabled state [ 3814.376992][T24263] device bridge_slave_0 entered promiscuous mode [ 3814.397156][T24117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3814.443484][T27309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3814.473473][T24263] bridge0: port 2(bridge_slave_1) entered blocking state [ 3814.480630][T24263] bridge0: port 2(bridge_slave_1) entered disabled state [ 3814.502915][T24263] device bridge_slave_1 entered promiscuous mode [ 3814.604995][T27309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3814.651270][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3814.672223][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3814.695483][T24078] device veth0_vlan entered promiscuous mode [ 3814.871886][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3814.891812][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3814.942151][T27309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3814.989843][T24078] device veth1_vlan entered promiscuous mode [ 3815.046988][T24263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3815.081119][T10157] Bluetooth: hci5: command 0x041b tx timeout [ 3815.165456][T24263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3815.208273][T24078] device veth0_macvtap entered promiscuous mode [ 3815.288908][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3815.298988][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3815.328490][T24078] device veth1_macvtap entered promiscuous mode [ 3815.336982][T24276] bridge0: port 1(bridge_slave_0) entered blocking state [ 3815.344683][T24276] bridge0: port 1(bridge_slave_0) entered disabled state [ 3815.354273][T24276] device bridge_slave_0 entered promiscuous mode [ 3815.364848][T24276] bridge0: port 2(bridge_slave_1) entered blocking state [ 3815.372189][T24276] bridge0: port 2(bridge_slave_1) entered disabled state [ 3815.380060][T24276] device bridge_slave_1 entered promiscuous mode [ 3815.430616][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3815.440158][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3815.459820][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.486522][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.511245][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.531161][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.561103][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.581339][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.605973][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.632775][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.650897][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.670918][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.681414][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3815.692229][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.704165][T24078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3815.736096][T24276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3815.748925][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3815.774965][T24263] team0: Port device team_slave_0 added [ 3815.779894][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3815.815485][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3815.825942][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3815.835632][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3815.843815][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3815.852582][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3815.865150][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3815.881580][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.891924][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3815.902790][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.912986][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3815.923765][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.934040][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3815.959603][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.972070][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3815.985095][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3815.995554][T24078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3816.006388][T24078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3816.018107][T24078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3816.032561][T24117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3816.042201][T24276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3816.082552][T24263] team0: Port device team_slave_1 added [ 3816.109034][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3816.120185][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3816.184897][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3816.201011][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3816.218345][T24276] team0: Port device team_slave_0 added [ 3816.252505][T24078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3816.263152][T24078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3816.281074][T10157] Bluetooth: hci1: command 0x040f tx timeout [ 3816.301114][T24078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3816.309966][T24078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3816.376813][T27309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3816.409525][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3816.419483][T24276] team0: Port device team_slave_1 added [ 3816.495166][T24263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3816.511701][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3816.567614][T24263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3816.653196][T27309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3816.715791][T24276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3816.732744][T24276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3816.815955][T24276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3816.889469][T24263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3816.905725][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3816.979843][T24263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3817.028658][T24334] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3817.048513][T27309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3817.061308][T24334] CPU: 1 PID: 24334 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3817.072007][T24334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3817.082358][T24334] Call Trace: [ 3817.085677][T24334] [ 3817.088642][T24334] dump_stack_lvl+0xd1/0x138 [ 3817.093284][T24334] dump_header+0x10b/0x85f [ 3817.097757][T24334] oom_kill_process.cold+0x10/0x15 [ 3817.102903][T24334] out_of_memory+0x35c/0x14a0 [ 3817.107743][T24334] ? oom_killer_disable+0x280/0x280 [ 3817.112990][T24334] ? mark_held_locks+0x9f/0xe0 [ 3817.117819][T24334] mem_cgroup_out_of_memory+0x206/0x270 [ 3817.123418][T24334] ? mem_cgroup_margin+0x130/0x130 [ 3817.128608][T24334] memory_max_write+0x2f9/0x3c0 [ 3817.133478][T24334] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3817.139584][T24334] ? lock_release+0x810/0x810 [ 3817.144286][T24334] cgroup_file_write+0x1e2/0x770 [ 3817.149782][T24334] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3817.155894][T24334] ? kill_css+0x370/0x370 [ 3817.160272][T24334] ? kill_css+0x370/0x370 [ 3817.164709][T24334] kernfs_fop_write_iter+0x3f1/0x600 [ 3817.170037][T24334] vfs_write+0x9ed/0xdd0 [ 3817.174318][T24334] ? kernel_write+0x630/0x630 [ 3817.179022][T24334] ? __fget_files+0x26a/0x440 [ 3817.183738][T24334] ksys_write+0x12b/0x250 [ 3817.188086][T24334] ? __ia32_sys_read+0xb0/0xb0 [ 3817.192869][T24334] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3817.198905][T24334] do_syscall_64+0x39/0xb0 [ 3817.203432][T24334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3817.209337][T24334] RIP: 0033:0x7f644428c0c9 [ 3817.213765][T24334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3817.234514][T24334] RSP: 002b:00007f6444fab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3817.242945][T24334] RAX: ffffffffffffffda RBX: 00007f64443abf80 RCX: 00007f644428c0c9 [ 3817.250943][T24334] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3817.259009][T24334] RBP: 00007f64442e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3817.267005][T24334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3817.275018][T24334] R13: 00007ffc4b7f5c4f R14: 00007f6444fab300 R15: 0000000000022000 [ 3817.283019][T24334] [ 3817.287205][T10157] Bluetooth: hci5: command 0x040f tx timeout [ 3817.315302][T24276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3817.325027][T24276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3817.376032][T24334] memory: usage 8564kB, limit 0kB, failcnt 1911 [ 3817.380881][T24276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3817.482769][T27309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3817.661054][T24334] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3817.675698][T24263] device hsr_slave_0 entered promiscuous mode [ 3817.686520][T24263] device hsr_slave_1 entered promiscuous mode [ 3817.699474][T24334] Memory cgroup stats for /syz5: [ 3817.704062][T24263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3817.720485][T24334] anon 110592 [ 3817.720485][T24334] file 8355840 [ 3817.720485][T24334] kernel 286720 [ 3817.720485][T24334] kernel_stack 65536 [ 3817.720485][T24334] pagetables 77824 [ 3817.720485][T24334] sec_pagetables 0 [ 3817.720485][T24334] percpu 64 [ 3817.720485][T24334] sock 0 [ 3817.720485][T24334] vmalloc 0 [ 3817.720485][T24334] shmem 8355840 [ 3817.720485][T24334] zswap 0 [ 3817.720485][T24334] zswapped 0 [ 3817.720485][T24334] file_mapped 241664 [ 3817.720485][T24334] file_dirty 0 [ 3817.720485][T24334] file_writeback 0 [ 3817.720485][T24334] swapcached 0 [ 3817.720485][T24334] anon_thp 0 [ 3817.720485][T24334] file_thp 0 [ 3817.720485][T24334] shmem_thp 0 [ 3817.720485][T24334] inactive_anon 110592 [ 3817.720485][T24334] active_anon 8355840 [ 3817.720485][T24334] inactive_file 0 [ 3817.720485][T24334] active_file 0 [ 3817.720485][T24334] unevictable 0 [ 3817.720485][T24334] slab_reclaimable 43008 [ 3817.720485][T24334] slab_unreclaimable 73752 [ 3817.720485][T24334] slab 116760 [ 3817.831718][T24263] Cannot create hsr debugfs directory [ 3817.843284][T24334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24051,uid=0 [ 3817.859525][T24334] Memory cgroup out of memory: Killed process 24051 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3817.863062][T24276] device hsr_slave_0 entered promiscuous mode [ 3817.885453][T24276] device hsr_slave_1 entered promiscuous mode [ 3817.892883][T24276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3817.900483][T24276] Cannot create hsr debugfs directory [ 3817.922438][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3817.931063][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3818.013182][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 19:58:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3818.196892][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3818.206275][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 19:58:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3818.244014][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3818.313687][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3818.314024][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3818.331370][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3818.351709][T10157] Bluetooth: hci1: command 0x0419 tx timeout [ 3818.352860][T24117] device veth0_vlan entered promiscuous mode [ 3818.410644][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3818.461826][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3818.469865][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3818.750725][T24117] device veth1_vlan entered promiscuous mode [ 3819.072705][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3819.079091][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3819.128847][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3819.158848][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3819.311684][T10157] Bluetooth: hci5: command 0x0419 tx timeout [ 3819.421988][T24341] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3819.473822][T24341] CPU: 1 PID: 24341 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3819.484316][T24341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3819.494413][T24341] Call Trace: [ 3819.497727][T24341] [ 3819.500684][T24341] dump_stack_lvl+0xd1/0x138 [ 3819.505669][T24341] dump_header+0x10b/0x85f [ 3819.510140][T24341] oom_kill_process.cold+0x10/0x15 [ 3819.515302][T24341] out_of_memory+0x35c/0x14a0 [ 3819.520036][T24341] ? oom_killer_disable+0x280/0x280 [ 3819.525273][T24341] ? mark_held_locks+0x9f/0xe0 [ 3819.530053][T24341] mem_cgroup_out_of_memory+0x206/0x270 [ 3819.535621][T24341] ? mem_cgroup_margin+0x130/0x130 [ 3819.540766][T24341] memory_max_write+0x2f9/0x3c0 [ 3819.545635][T24341] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3819.552419][T24341] ? lock_release+0x810/0x810 [ 3819.557297][T24341] cgroup_file_write+0x1e2/0x770 [ 3819.563037][T24341] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3819.569202][T24341] ? kill_css+0x370/0x370 [ 3819.573576][T24341] ? kill_css+0x370/0x370 [ 3819.577935][T24341] kernfs_fop_write_iter+0x3f1/0x600 [ 3819.583248][T24341] vfs_write+0x9ed/0xdd0 [ 3819.587505][T24341] ? kernel_write+0x630/0x630 [ 3819.592218][T24341] ? __fget_files+0x26a/0x440 [ 3819.596919][T24341] ksys_write+0x12b/0x250 [ 3819.601283][T24341] ? __ia32_sys_read+0xb0/0xb0 [ 3819.606090][T24341] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3819.612024][T24341] do_syscall_64+0x39/0xb0 [ 3819.616477][T24341] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3819.622388][T24341] RIP: 0033:0x7fb301e8c0c9 [ 3819.626811][T24341] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3819.646423][T24341] RSP: 002b:00007fb302ccd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3819.654868][T24341] RAX: ffffffffffffffda RBX: 00007fb301fabf80 RCX: 00007fb301e8c0c9 [ 3819.663652][T24341] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3819.671906][T24341] RBP: 00007fb301ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3819.680034][T24341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3819.688094][T24341] R13: 00007ffc48b169bf R14: 00007fb302ccd300 R15: 0000000000022000 [ 3819.696822][T24341] [ 3819.726348][T24341] memory: usage 564kB, limit 0kB, failcnt 4773 [ 3819.741358][T24341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3819.768764][T24341] Memory cgroup stats for /syz2: [ 3819.768985][T24341] anon 114688 [ 3819.768985][T24341] file 155648 [ 3819.768985][T24341] kernel 253952 [ 3819.768985][T24341] kernel_stack 32768 [ 3819.768985][T24341] pagetables 81920 [ 3819.768985][T24341] sec_pagetables 0 [ 3819.768985][T24341] percpu 64 [ 3819.768985][T24341] sock 0 [ 3819.768985][T24341] vmalloc 0 [ 3819.768985][T24341] shmem 151552 [ 3819.768985][T24341] zswap 0 [ 3819.768985][T24341] zswapped 0 [ 3819.768985][T24341] file_mapped 139264 [ 3819.768985][T24341] file_dirty 0 [ 3819.768985][T24341] file_writeback 0 [ 3819.768985][T24341] swapcached 0 [ 3819.768985][T24341] anon_thp 0 [ 3819.768985][T24341] file_thp 0 [ 3819.768985][T24341] shmem_thp 0 [ 3819.768985][T24341] inactive_anon 172032 [ 3819.768985][T24341] active_anon 94208 [ 3819.768985][T24341] inactive_file 4096 [ 3819.768985][T24341] active_file 0 [ 3819.768985][T24341] unevictable 0 [ 3819.768985][T24341] slab_reclaimable 13592 [ 3819.768985][T24341] slab_unreclaimable 100464 [ 3819.768985][T24341] slab 114056 [ 3820.025255][T24117] device veth0_macvtap entered promiscuous mode [ 3820.052588][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3820.151090][T24341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24078,uid=0 [ 3820.191303][T24341] Memory cgroup out of memory: Killed process 24078 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3820.318799][T24117] device veth1_macvtap entered promiscuous mode [ 3820.467349][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.501080][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.521128][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.540891][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.571040][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.591746][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.611047][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.631053][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.655237][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.668111][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.695949][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3820.720931][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.740950][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 19:59:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3820.774794][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3820.795175][T24117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3821.049170][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3821.061850][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3821.142130][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.164101][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.180389][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.193064][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.193096][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3821.203372][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.221190][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3821.221251][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.238988][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.241479][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3821.249940][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.257331][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3821.266753][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.275698][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3821.307626][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.321021][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.331629][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.341563][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3821.352482][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3821.364129][T24117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3821.402042][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3821.418480][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3821.455817][T24117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3821.471208][T24117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3821.480248][T24117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3821.492432][T24117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3821.921018][T24276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3821.942925][T27316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3821.975151][T27316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3821.991858][T24276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3822.045625][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3822.068661][T24276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3822.162158][T24276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3822.254066][T22448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3822.301422][T22448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3822.393706][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3822.673620][T24362] chnl_net:caif_netlink_parms(): no params data found [ 3822.711554][T24371] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3822.737032][T24371] CPU: 0 PID: 24371 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3822.747542][T24371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3822.757635][T24371] Call Trace: [ 3822.760947][T24371] [ 3822.763920][T24371] dump_stack_lvl+0xd1/0x138 [ 3822.768570][T24371] dump_header+0x10b/0x85f [ 3822.773081][T24371] oom_kill_process.cold+0x10/0x15 [ 3822.778258][T24371] out_of_memory+0x35c/0x14a0 [ 3822.783009][T24371] ? oom_killer_disable+0x280/0x280 [ 3822.788296][T24371] mem_cgroup_out_of_memory+0x206/0x270 [ 3822.793951][T24371] ? mem_cgroup_margin+0x130/0x130 [ 3822.799137][T24371] memory_max_write+0x2f9/0x3c0 [ 3822.804034][T24371] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3822.810156][T24371] ? lock_release+0x810/0x810 [ 3822.814880][T24371] cgroup_file_write+0x1e2/0x770 [ 3822.819871][T24371] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3822.825991][T24371] ? kill_css+0x370/0x370 [ 3822.830718][T24371] ? __virt_addr_valid+0x61/0x2e0 [ 3822.833264][T24276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3822.835780][T24371] ? kill_css+0x370/0x370 [ 3822.846740][T24371] kernfs_fop_write_iter+0x3f1/0x600 [ 3822.852130][T24371] vfs_write+0x9ed/0xdd0 [ 3822.856416][T24371] ? kernel_write+0x630/0x630 [ 3822.861133][T24371] ? __fget_files+0x26a/0x440 [ 3822.865959][T24371] ksys_write+0x12b/0x250 [ 3822.870331][T24371] ? __ia32_sys_read+0xb0/0xb0 [ 3822.875142][T24371] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3822.881174][T24371] do_syscall_64+0x39/0xb0 [ 3822.885639][T24371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3822.891663][T24371] RIP: 0033:0x7f1636e8c0c9 [ 3822.896106][T24371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3822.916449][T24371] RSP: 002b:00007f1637b63168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3822.924907][T24371] RAX: ffffffffffffffda RBX: 00007f1636fac050 RCX: 00007f1636e8c0c9 [ 3822.932916][T24371] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3822.940922][T24371] RBP: 00007f1636ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3822.948940][T24371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3822.956958][T24371] R13: 00007ffcbd14babf R14: 00007f1637b63300 R15: 0000000000022000 [ 3822.964996][T24371] [ 3823.089686][T24276] 8021q: adding VLAN 0 to HW filter on device team0 [ 3823.096742][T24371] memory: usage 8636kB, limit 0kB, failcnt 2463 [ 3823.120945][T24371] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3823.151093][T24371] Memory cgroup stats for /syz4: [ 3823.151289][T24371] anon 114688 [ 3823.151289][T24371] file 8359936 [ 3823.151289][T24371] kernel 356352 [ 3823.151289][T24371] kernel_stack 98304 [ 3823.151289][T24371] pagetables 77824 [ 3823.151289][T24371] sec_pagetables 0 [ 3823.151289][T24371] percpu 64 [ 3823.151289][T24371] sock 0 [ 3823.151289][T24371] vmalloc 0 [ 3823.151289][T24371] shmem 8359936 [ 3823.151289][T24371] zswap 0 [ 3823.151289][T24371] zswapped 0 [ 3823.151289][T24371] file_mapped 176128 [ 3823.151289][T24371] file_dirty 0 [ 3823.151289][T24371] file_writeback 0 [ 3823.151289][T24371] swapcached 0 [ 3823.151289][T24371] anon_thp 0 [ 3823.151289][T24371] file_thp 0 [ 3823.151289][T24371] shmem_thp 0 [ 3823.151289][T24371] inactive_anon 114688 [ 3823.151289][T24371] active_anon 8359936 [ 3823.151289][T24371] inactive_file 0 [ 3823.151289][T24371] active_file 0 [ 3823.151289][T24371] unevictable 0 [ 3823.151289][T24371] slab_reclaimable 39272 [ 3823.151289][T24371] slab_unreclaimable 110448 [ 3823.151289][T24371] slab 149720 [ 3823.274593][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3823.291727][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3823.311120][ T5105] Bluetooth: hci2: command 0x0409 tx timeout [ 3823.385771][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3823.411690][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3823.427148][T24371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24117,uid=0 [ 3823.431238][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 3823.449941][T18925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3823.505877][T24371] Memory cgroup out of memory: Killed process 24117 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3823.506315][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3823.531608][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3823.542227][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3823.551263][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 3823.559017][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3823.591341][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3823.600510][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3823.610677][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3823.687998][T24263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3823.724245][T24362] bridge0: port 1(bridge_slave_0) entered blocking state [ 3823.740988][T24362] bridge0: port 1(bridge_slave_0) entered disabled state [ 3823.762476][T24362] device bridge_slave_0 entered promiscuous mode 19:59:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:59:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:59:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3823.819289][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3823.831870][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3823.841659][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3823.896072][T18925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3823.921030][T24263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3823.933906][T24362] bridge0: port 2(bridge_slave_1) entered blocking state [ 3823.970913][T24362] bridge0: port 2(bridge_slave_1) entered disabled state [ 3823.980390][T24362] device bridge_slave_1 entered promiscuous mode [ 3824.074898][T24263] netdevsim netdevsim3 netdevsim2: renamed from eth2 19:59:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3824.118057][T24276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3824.161905][T24276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3824.236065][T24362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3824.373010][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3824.391718][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3824.421578][T24263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3824.459289][T24362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3824.702680][T24362] team0: Port device team_slave_0 added [ 3824.742847][T24362] team0: Port device team_slave_1 added [ 3825.011471][T27309] device hsr_slave_0 left promiscuous mode [ 3825.081151][T27309] device hsr_slave_1 left promiscuous mode [ 3825.151024][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3825.158562][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3825.203595][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3825.221137][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3825.261261][T27309] device bridge_slave_1 left promiscuous mode [ 3825.279968][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3825.302607][T27309] device bridge_slave_0 left promiscuous mode [ 3825.329498][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3825.369895][T27309] device hsr_slave_0 left promiscuous mode [ 3825.391691][ T5105] Bluetooth: hci2: command 0x041b tx timeout [ 3825.401426][T27309] device hsr_slave_1 left promiscuous mode [ 3825.418525][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3825.450925][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3825.472953][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3825.480469][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3825.505263][T27309] device bridge_slave_1 left promiscuous mode [ 3825.521079][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3825.542398][T27309] device bridge_slave_0 left promiscuous mode [ 3825.548670][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3825.587912][T27309] device hsr_slave_0 left promiscuous mode [ 3825.594973][T27309] device hsr_slave_1 left promiscuous mode [ 3825.606075][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3825.628633][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3825.644979][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3825.667032][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3825.684899][T27309] device bridge_slave_1 left promiscuous mode [ 3825.693060][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3825.702791][T27309] device bridge_slave_0 left promiscuous mode [ 3825.709036][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3825.735546][T27309] device hsr_slave_0 left promiscuous mode [ 3825.761062][T27309] device hsr_slave_1 left promiscuous mode [ 3825.771522][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3825.779015][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3825.813592][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3825.831189][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3825.853893][T27309] device bridge_slave_1 left promiscuous mode [ 3825.860160][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3825.882885][T27309] device bridge_slave_0 left promiscuous mode [ 3825.889166][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3825.944428][T27309] device veth1_macvtap left promiscuous mode [ 3825.950544][T27309] device veth0_macvtap left promiscuous mode [ 3825.971015][T27309] device veth1_vlan left promiscuous mode [ 3825.976936][T27309] device veth0_vlan left promiscuous mode [ 3826.004607][T27309] device veth1_macvtap left promiscuous mode [ 3826.010741][T27309] device veth0_macvtap left promiscuous mode [ 3826.020570][T27309] device veth1_vlan left promiscuous mode [ 3826.026595][T27309] device veth0_vlan left promiscuous mode [ 3826.037678][T27309] device veth1_macvtap left promiscuous mode [ 3826.041775][T10157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3826.052867][T27309] device veth0_macvtap left promiscuous mode [ 3826.053719][T10157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3826.059034][T27309] device veth1_vlan left promiscuous mode [ 3826.067879][T10157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3826.091936][T10157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3826.096818][T27309] device veth0_vlan left promiscuous mode [ 3826.105946][T10157] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3826.116879][T10157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3826.148629][T27309] device veth1_macvtap left promiscuous mode [ 3826.161673][T27309] device veth0_macvtap left promiscuous mode [ 3826.167870][T27309] device veth1_vlan left promiscuous mode [ 3826.174530][T27309] device veth0_vlan left promiscuous mode [ 3826.922149][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3826.932182][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3826.944071][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3826.953458][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3826.963301][T31933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3826.963301][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3826.972727][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3826.980313][T31933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3827.001487][T31933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3827.032403][T10157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3827.039812][T10157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3827.471190][ T5854] Bluetooth: hci2: command 0x040f tx timeout [ 3827.588441][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3827.602356][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3827.617125][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3827.632031][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3827.712629][T27309] bond0 (unregistering): Released all slaves [ 3827.868990][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3827.884292][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3827.899004][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3827.915027][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3827.995436][T27309] bond0 (unregistering): Released all slaves [ 3828.140738][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3828.159270][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3828.179317][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3828.200115][ T5854] Bluetooth: hci0: command 0x0409 tx timeout [ 3828.210120][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3828.290195][T27309] bond0 (unregistering): Released all slaves [ 3828.458704][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3828.473205][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3828.487280][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3828.500677][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3828.596869][T27309] bond0 (unregistering): Released all slaves [ 3828.669041][T24362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3828.681768][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3828.708876][T24362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3828.722348][T24362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3828.730889][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3828.771777][T24362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3828.871072][T24362] device hsr_slave_0 entered promiscuous mode [ 3828.883230][T24362] device hsr_slave_1 entered promiscuous mode [ 3828.889888][T24362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3828.900992][T24362] Cannot create hsr debugfs directory [ 3829.033923][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3829.041630][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3829.055021][T24276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3829.071233][ T5854] Bluetooth: hci4: command 0x0409 tx timeout [ 3829.089079][ T5854] Bluetooth: hci3: command 0x0409 tx timeout [ 3829.112929][T24263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3829.193848][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3829.204807][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3829.275012][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3829.285790][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3829.295529][T24263] 8021q: adding VLAN 0 to HW filter on device team0 [ 3829.415796][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3829.424803][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3829.434243][T32710] bridge0: port 1(bridge_slave_0) entered blocking state [ 3829.441434][T32710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3829.449072][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3829.457820][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3829.466749][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3829.475687][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3829.485182][T32710] bridge0: port 2(bridge_slave_1) entered blocking state [ 3829.492364][T32710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3829.502468][T24276] device veth0_vlan entered promiscuous mode [ 3829.538765][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3829.550969][ T5854] Bluetooth: hci2: command 0x0419 tx timeout [ 3829.557953][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3829.581597][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3829.589707][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3829.599164][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3829.650691][T24362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3829.697510][T24276] device veth1_vlan entered promiscuous mode [ 3829.725673][T24415] chnl_net:caif_netlink_parms(): no params data found [ 3829.762637][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3829.781296][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3829.858979][T24362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3829.896133][T24432] chnl_net:caif_netlink_parms(): no params data found [ 3829.938907][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3829.947657][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3829.991400][T24362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3830.021204][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3830.030350][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3830.051703][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3830.081319][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3830.093442][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3830.182427][T24263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3830.212721][T24362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3830.253880][T24436] chnl_net:caif_netlink_parms(): no params data found [ 3830.270972][ T5854] Bluetooth: hci0: command 0x041b tx timeout [ 3830.313510][T24276] device veth0_macvtap entered promiscuous mode [ 3830.321238][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3830.329935][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3830.432830][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3830.455182][T24276] device veth1_macvtap entered promiscuous mode [ 3830.580284][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3830.593630][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.605077][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3830.615799][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.625797][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3830.636642][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.646714][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3830.657656][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.681472][T24276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3830.689251][T24415] bridge0: port 1(bridge_slave_0) entered blocking state [ 3830.698330][T24415] bridge0: port 1(bridge_slave_0) entered disabled state [ 3830.709185][T24415] device bridge_slave_0 entered promiscuous mode [ 3830.752403][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3830.760653][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3830.789607][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3830.801009][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3830.821811][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.837776][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3830.848879][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.859599][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3830.870167][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.880840][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3830.891370][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3830.903093][T24276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3830.910571][T24415] bridge0: port 2(bridge_slave_1) entered blocking state [ 3830.919903][T24415] bridge0: port 2(bridge_slave_1) entered disabled state [ 3830.928411][T24415] device bridge_slave_1 entered promiscuous mode [ 3830.985550][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3830.995090][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3831.007093][T24276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3831.016954][T24276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3831.025788][T24276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3831.034585][T24276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3831.062748][T24415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3831.086449][T24436] bridge0: port 1(bridge_slave_0) entered blocking state [ 3831.095076][T24436] bridge0: port 1(bridge_slave_0) entered disabled state [ 3831.104449][T24436] device bridge_slave_0 entered promiscuous mode [ 3831.114119][T24432] bridge0: port 1(bridge_slave_0) entered blocking state [ 3831.121818][T24432] bridge0: port 1(bridge_slave_0) entered disabled state [ 3831.129685][T24432] device bridge_slave_0 entered promiscuous mode [ 3831.151135][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 3831.157207][ T5854] Bluetooth: hci4: command 0x041b tx timeout [ 3831.187866][T24415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3831.225378][T24436] bridge0: port 2(bridge_slave_1) entered blocking state [ 3831.237990][T24436] bridge0: port 2(bridge_slave_1) entered disabled state [ 3831.251839][T24436] device bridge_slave_1 entered promiscuous mode [ 3831.274949][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3831.282765][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3831.290351][T24432] bridge0: port 2(bridge_slave_1) entered blocking state [ 3831.301005][T24432] bridge0: port 2(bridge_slave_1) entered disabled state [ 3831.322110][T24432] device bridge_slave_1 entered promiscuous mode [ 3831.340557][T24263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3831.453408][T24415] team0: Port device team_slave_0 added [ 3831.547548][T24415] team0: Port device team_slave_1 added [ 3831.579601][T24436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3831.622112][T24432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3831.662348][T24436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3831.686687][T24362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3831.698872][T24432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3831.728782][T31962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3831.738494][T24415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3831.748479][T24415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3831.774692][T31962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3831.799293][T24415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3831.813086][T24415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3831.820064][T24415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3831.849525][T24415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3831.868166][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3831.891716][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3831.900605][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3831.954161][T24362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3832.004856][T24263] device veth0_vlan entered promiscuous mode [ 3832.026170][T24436] team0: Port device team_slave_0 added [ 3832.047674][T24362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3832.058021][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3832.071766][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3832.114028][T24432] team0: Port device team_slave_0 added [ 3832.126606][T24263] device veth1_vlan entered promiscuous mode [ 3832.136673][T24436] team0: Port device team_slave_1 added [ 3832.153899][T24362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3832.167539][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3832.176566][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3832.185009][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3832.208146][T24415] device hsr_slave_0 entered promiscuous mode [ 3832.229165][T24415] device hsr_slave_1 entered promiscuous mode [ 3832.244929][T24415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3832.264571][T24415] Cannot create hsr debugfs directory [ 3832.272835][T24432] team0: Port device team_slave_1 added [ 3832.291646][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3832.314618][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3832.333603][T24436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3832.340607][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3832.367753][ T5854] Bluetooth: hci0: command 0x040f tx timeout [ 3832.399110][T24436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3832.482539][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3832.503447][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3832.539301][T24436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3832.546921][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3832.581606][T24436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3832.598261][T24263] device veth0_macvtap entered promiscuous mode [ 3832.741952][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3832.771390][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3832.787201][T24263] device veth1_macvtap entered promiscuous mode [ 3832.814505][T24471] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3832.828951][T24471] CPU: 0 PID: 24471 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3832.838886][T24432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3832.839410][T24471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3832.839430][T24471] Call Trace: [ 3832.839438][T24471] [ 3832.839449][T24471] dump_stack_lvl+0xd1/0x138 [ 3832.852098][T24432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3832.856516][T24471] dump_header+0x10b/0x85f [ 3832.856564][T24471] oom_kill_process.cold+0x10/0x15 [ 3832.856605][T24471] out_of_memory+0x35c/0x14a0 [ 3832.856652][T24471] ? oom_killer_disable+0x280/0x280 [ 3832.856687][T24471] ? mark_held_locks+0x9f/0xe0 [ 3832.856723][T24471] mem_cgroup_out_of_memory+0x206/0x270 [ 3832.856764][T24471] ? mem_cgroup_margin+0x130/0x130 [ 3832.856815][T24471] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3832.856854][T24471] memory_max_write+0x2f9/0x3c0 [ 3832.856885][T24471] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3832.856919][T24471] ? lock_release+0x810/0x810 [ 3832.856949][T24471] cgroup_file_write+0x1e2/0x770 [ 3832.875811][T24432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3832.893650][T24471] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3832.893689][T24471] ? kill_css+0x370/0x370 [ 3832.893717][T24471] ? __virt_addr_valid+0x61/0x2e0 [ 3832.893760][T24471] ? kill_css+0x370/0x370 [ 3832.893787][T24471] kernfs_fop_write_iter+0x3f1/0x600 [ 3832.893826][T24471] vfs_write+0x9ed/0xdd0 [ 3832.893857][T24471] ? kernel_write+0x630/0x630 [ 3832.893890][T24471] ? __fget_files+0x26a/0x440 [ 3832.893935][T24471] ksys_write+0x12b/0x250 [ 3832.893963][T24471] ? __ia32_sys_read+0xb0/0xb0 [ 3832.893993][T24471] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3832.894033][T24471] do_syscall_64+0x39/0xb0 [ 3832.894069][T24471] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3832.894104][T24471] RIP: 0033:0x7f9de3a8c0c9 [ 3832.894126][T24471] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3832.894148][T24471] RSP: 002b:00007f9de4728168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3832.894174][T24471] RAX: ffffffffffffffda RBX: 00007f9de3babf80 RCX: 00007f9de3a8c0c9 [ 3832.894190][T24471] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3832.894205][T24471] RBP: 00007f9de3ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3832.894221][T24471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3832.894235][T24471] R13: 00007ffddf0557df R14: 00007f9de4728300 R15: 0000000000022000 [ 3832.894269][T24471] [ 3832.934165][T24471] memory: usage 8548kB, limit 0kB, failcnt 1664 [ 3833.018334][T24432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3833.021045][T24471] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3833.052276][T24432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3833.084736][T24471] Memory cgroup stats for [ 3833.149076][T24432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3833.195763][T24471] /syz1: [ 3833.198909][T24471] anon 114688 [ 3833.198909][T24471] file 8318976 [ 3833.198909][T24471] kernel 307200 [ 3833.198909][T24471] kernel_stack 65536 [ 3833.198909][T24471] pagetables 77824 [ 3833.198909][T24471] sec_pagetables 0 [ 3833.198909][T24471] percpu 64 [ 3833.198909][T24471] sock 0 [ 3833.198909][T24471] vmalloc 0 [ 3833.198909][T24471] shmem 8318976 [ 3833.198909][T24471] zswap 0 [ 3833.198909][T24471] zswapped 0 [ 3833.198909][T24471] file_mapped 131072 [ 3833.198909][T24471] file_dirty 0 [ 3833.198909][T24471] file_writeback 0 [ 3833.198909][T24471] swapcached 0 [ 3833.198909][T24471] anon_thp 0 [ 3833.198909][T24471] file_thp 0 [ 3833.198909][T24471] shmem_thp 0 [ 3833.198909][T24471] inactive_anon 77824 [ 3833.198909][T24471] active_anon 8318976 [ 3833.198909][T24471] inactive_file 0 [ 3833.198909][T24471] active_file 0 [ 3833.198909][T24471] unevictable 0 [ 3833.198909][T24471] slab_reclaimable 39272 [ 3833.198909][T24471] slab_unreclaimable 100464 [ 3833.198909][T24471] slab 139736 [ 3833.310943][ T5854] Bluetooth: hci4: command 0x040f tx timeout [ 3833.314832][T10157] Bluetooth: hci3: command 0x040f tx timeout [ 3833.331123][T24471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24276,uid=0 [ 3833.372789][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3833.378811][T24471] Memory cgroup out of memory: Killed process 24276 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3833.391418][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3833.623839][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3833.659444][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.670012][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3833.684614][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.695106][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3833.705898][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.716403][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3833.727600][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.741101][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3833.751974][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.767620][T24263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3833.800763][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3833.814928][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.825875][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3833.836462][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.850957][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3833.861571][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.879647][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3833.891189][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.901375][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3833.911895][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3833.923834][T24263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3833.957752][T24436] device hsr_slave_0 entered promiscuous mode [ 3833.987333][T24436] device hsr_slave_1 entered promiscuous mode [ 3833.994933][T24436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3834.002711][T24436] Cannot create hsr debugfs directory [ 3834.050559][T24432] device hsr_slave_0 entered promiscuous mode [ 3834.057907][T24432] device hsr_slave_1 entered promiscuous mode [ 3834.065464][T24432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3834.073190][T24432] Cannot create hsr debugfs directory [ 3834.078868][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3834.089767][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3834.098864][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3834.107467][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3834.122005][T24263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.130765][T24263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.140543][T24263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.150392][T24263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.431994][T31933] Bluetooth: hci0: command 0x0419 tx timeout [ 3834.473400][T24415] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3834.522633][T24362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3834.637846][T24415] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3834.749901][T24415] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3834.801041][T24362] 8021q: adding VLAN 0 to HW filter on device team0 [ 3834.833779][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3834.851676][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3834.881820][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3834.890007][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3834.999465][T24415] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3835.029198][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3835.037561][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3835.060467][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3835.091547][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 3835.098699][T12353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3835.121736][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3835.141372][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3835.161277][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 3835.168408][T12353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3835.189438][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3835.212897][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3835.279797][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3835.301746][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3835.312796][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3835.340405][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3835.350167][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3835.377029][T24362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3835.390285][T24362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3835.401179][T31933] Bluetooth: hci4: command 0x0419 tx timeout [ 3835.407256][T31933] Bluetooth: hci3: command 0x0419 tx timeout [ 3835.431157][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3835.439360][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3835.456252][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3835.482204][T31962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3835.490343][T31962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3835.530543][T24436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3835.598229][T27309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3835.654921][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3835.760324][T24436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3835.816277][T27309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3835.922967][T24436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3836.018713][T27309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3836.039929][T24478] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3836.057850][T24478] CPU: 1 PID: 24478 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3836.068452][T24478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3836.078552][T24478] Call Trace: [ 3836.082291][T24478] [ 3836.085236][T24478] dump_stack_lvl+0xd1/0x138 [ 3836.089852][T24478] dump_header+0x10b/0x85f [ 3836.094302][T24478] oom_kill_process.cold+0x10/0x15 [ 3836.099466][T24478] out_of_memory+0x35c/0x14a0 [ 3836.104191][T24478] ? oom_killer_disable+0x280/0x280 [ 3836.109417][T24478] ? mark_held_locks+0x9f/0xe0 [ 3836.114204][T24478] mem_cgroup_out_of_memory+0x206/0x270 [ 3836.119796][T24478] ? mem_cgroup_margin+0x130/0x130 [ 3836.124950][T24478] memory_max_write+0x2f9/0x3c0 [ 3836.129827][T24478] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3836.135922][T24478] ? lock_release+0x810/0x810 [ 3836.140616][T24478] cgroup_file_write+0x1e2/0x770 [ 3836.145585][T24478] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3836.151751][T24478] ? kill_css+0x370/0x370 [ 3836.156098][T24478] ? __virt_addr_valid+0x61/0x2e0 [ 3836.161161][T24478] ? kill_css+0x370/0x370 [ 3836.165538][T24478] kernfs_fop_write_iter+0x3f1/0x600 [ 3836.170851][T24478] vfs_write+0x9ed/0xdd0 [ 3836.175122][T24478] ? kernel_write+0x630/0x630 [ 3836.179822][T24478] ? __fget_files+0x26a/0x440 [ 3836.184538][T24478] ksys_write+0x12b/0x250 [ 3836.188877][T24478] ? __ia32_sys_read+0xb0/0xb0 [ 3836.193660][T24478] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3836.199585][T24478] do_syscall_64+0x39/0xb0 [ 3836.204114][T24478] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3836.210030][T24478] RIP: 0033:0x7f811228c0c9 [ 3836.214455][T24478] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3836.234160][T24478] RSP: 002b:00007f8112f4c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3836.242585][T24478] RAX: ffffffffffffffda RBX: 00007f81123abf80 RCX: 00007f811228c0c9 [ 3836.250588][T24478] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3836.258584][T24478] RBP: 00007f81122e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3836.266560][T24478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3836.274713][T24478] R13: 00007fff074d32cf R14: 00007f8112f4c300 R15: 0000000000022000 [ 3836.282724][T24478] [ 3836.305038][T24478] memory: usage 8564kB, limit 0kB, failcnt 2361 [ 3836.312644][T24478] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3836.320395][T24478] Memory cgroup stats for /syz3: [ 3836.322080][T24478] anon 114688 [ 3836.322080][T24478] file 8359936 [ 3836.322080][T24478] kernel 278528 [ 3836.322080][T24478] kernel_stack 65536 [ 3836.322080][T24478] pagetables 77824 [ 3836.322080][T24478] sec_pagetables 0 [ 3836.322080][T24478] percpu 64 [ 3836.322080][T24478] sock 0 [ 3836.322080][T24478] vmalloc 0 [ 3836.322080][T24478] shmem 8359936 [ 3836.322080][T24478] zswap 0 [ 3836.322080][T24478] zswapped 0 [ 3836.322080][T24478] file_mapped 163840 [ 3836.322080][T24478] file_dirty 0 [ 3836.322080][T24478] file_writeback 0 [ 3836.322080][T24478] swapcached 0 [ 3836.322080][T24478] anon_thp 0 [ 3836.322080][T24478] file_thp 0 [ 3836.322080][T24478] shmem_thp 0 [ 3836.322080][T24478] inactive_anon 4046848 [ 3836.322080][T24478] active_anon 4427776 [ 3836.322080][T24478] inactive_file 0 [ 3836.322080][T24478] active_file 0 [ 3836.322080][T24478] unevictable 0 [ 3836.322080][T24478] slab_reclaimable 39128 [ 3836.322080][T24478] slab_unreclaimable 73752 [ 3836.322080][T24478] slab 112880 [ 3836.333905][T24362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3836.439543][T24478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24477,uid=0 [ 3836.466124][T24478] Memory cgroup out of memory: Killed process 24477 (syz-executor.3) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 19:59:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:59:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3836.672336][T24436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3836.703287][T24263] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3836.715713][T24263] CPU: 1 PID: 24263 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3836.726787][T24263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3836.736896][T24263] Call Trace: [ 3836.740208][T24263] [ 3836.743175][T24263] dump_stack_lvl+0xd1/0x138 [ 3836.747822][T24263] dump_header+0x10b/0x85f [ 3836.752322][T24263] oom_kill_process.cold+0x10/0x15 [ 3836.757493][T24263] out_of_memory+0x35c/0x14a0 [ 3836.762216][T24263] ? find_held_lock+0x2d/0x110 [ 3836.767025][T24263] ? oom_killer_disable+0x280/0x280 [ 3836.772285][T24263] ? find_held_lock+0x2d/0x110 [ 3836.777072][T24263] mem_cgroup_out_of_memory+0x206/0x270 [ 3836.782658][T24263] ? mem_cgroup_margin+0x130/0x130 [ 3836.787790][T24263] ? lock_downgrade+0x6e0/0x6e0 [ 3836.793024][T24263] try_charge_memcg+0xefb/0x12f0 [ 3836.797976][T24263] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3836.803988][T24263] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3836.809814][T24263] ? lock_downgrade+0x6e0/0x6e0 [ 3836.814671][T24263] ? lock_downgrade+0x6e0/0x6e0 [ 3836.819560][T24263] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3836.825157][T24263] __alloc_pages+0x1f3/0x5b0 [ 3836.829806][T24263] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3836.836617][T24263] ? find_held_lock+0x2d/0x110 [ 3836.841503][T24263] ? lock_downgrade+0x6e0/0x6e0 [ 3836.846457][T24263] ? do_raw_spin_lock+0x124/0x2b0 [ 3836.851498][T24263] alloc_pages+0x1aa/0x270 [ 3836.856104][T24263] __pmd_alloc+0x3f/0x5d0 [ 3836.860448][T24263] ? __pud_alloc+0xe4/0x180 [ 3836.865071][T24263] copy_page_range+0x2829/0x3b40 [ 3836.870089][T24263] ? mas_store+0x206/0x2e0 [ 3836.874531][T24263] ? handle_mm_fault+0x850/0x850 [ 3836.879496][T24263] ? anon_vma_fork+0xba/0x630 [ 3836.884192][T24263] dup_mmap+0xc10/0x10b0 [ 3836.888456][T24263] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3836.893756][T24263] ? lock_downgrade+0x6e0/0x6e0 [ 3836.898803][T24263] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3836.904747][T24263] ? mm_init+0x8e0/0xc10 [ 3836.909007][T24263] copy_process+0x440f/0x7520 [ 3836.913695][T24263] ? _raw_spin_unlock+0x28/0x40 [ 3836.918559][T24263] ? wp_page_reuse+0x197/0x570 [ 3836.923350][T24263] ? __cleanup_sighand+0xb0/0xb0 [ 3836.928303][T24263] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3836.933697][T24263] ? rwlock_bug.part.0+0x90/0x90 [ 3836.938734][T24263] ? lock_chain_count+0x20/0x20 [ 3836.943606][T24263] kernel_clone+0xeb/0x990 [ 3836.948063][T24263] ? create_io_thread+0xf0/0xf0 [ 3836.953045][T24263] ? find_held_lock+0x2d/0x110 [ 3836.957854][T24263] __do_sys_clone+0xba/0x100 [ 3836.962484][T24263] ? kernel_clone+0x990/0x990 [ 3836.967194][T24263] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3836.973125][T24263] do_syscall_64+0x39/0xb0 [ 3836.977569][T24263] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3836.983479][T24263] RIP: 0033:0x7f8112289dfb [ 3836.987903][T24263] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3837.007614][T24263] RSP: 002b:00007fff074d3510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3837.017087][T24263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8112289dfb [ 3837.025328][T24263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3837.033492][T24263] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555559d5400 [ 3837.041662][T24263] R10: 00005555559d56d0 R11: 0000000000000246 R12: 0000000000000001 [ 3837.049645][T24263] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff074d35f0 [ 3837.057674][T24263] [ 3837.063889][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3837.072260][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3837.095886][T27309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3837.180479][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3837.195708][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3837.301826][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3837.309748][T24263] memory: usage 8368kB, limit 0kB, failcnt 2380 [ 3837.321087][T24263] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3837.321820][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3837.328194][T24263] Memory cgroup stats for /syz3: [ 3837.361091][T24263] anon 45056 [ 3837.361091][T24263] file 8359936 [ 3837.361091][T24263] kernel 163840 [ 3837.361091][T24263] kernel_stack 32768 [ 3837.361091][T24263] pagetables 8192 [ 3837.361091][T24263] sec_pagetables 0 [ 3837.361091][T24263] percpu 128 [ 3837.361091][T24263] sock 0 [ 3837.361091][T24263] vmalloc 0 [ 3837.361091][T24263] shmem 8359936 [ 3837.361091][T24263] zswap 0 [ 3837.361091][T24263] zswapped 0 [ 3837.361091][T24263] file_mapped 147456 [ 3837.361091][T24263] file_dirty 0 [ 3837.361091][T24263] file_writeback 0 [ 3837.361091][T24263] swapcached 0 [ 3837.361091][T24263] anon_thp 0 [ 3837.361091][T24263] file_thp 0 [ 3837.361091][T24263] shmem_thp 0 [ 3837.361091][T24263] inactive_anon 3969024 [ 3837.361091][T24263] active_anon 4427776 [ 3837.361091][T24263] inactive_file 0 [ 3837.361091][T24263] active_file 0 [ 3837.361091][T24263] unevictable 0 [ 3837.361091][T24263] slab_reclaimable 30216 [ 3837.361091][T24263] slab_unreclaimable 65648 [ 3837.361091][T24263] slab 95864 [ 3837.368714][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3837.664416][T24263] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24263,uid=0 [ 3837.671254][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3837.731764][T24263] Memory cgroup out of memory: Killed process 24263 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3837.768574][T24362] device veth0_vlan entered promiscuous mode [ 3837.843914][T24362] device veth1_vlan entered promiscuous mode [ 3837.861877][T24436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3837.958014][T24432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3838.012858][T24436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3838.152469][T24432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3838.179558][T24436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3838.190483][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3838.200961][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3838.214868][T24362] device veth0_macvtap entered promiscuous mode 19:59:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3838.267466][T24432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3838.332127][T24436] netdevsim netdevsim4 netdevsim3: renamed from eth3 19:59:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3838.442104][T24432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3838.491891][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3838.511760][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3838.533662][T32706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3838.545745][T24362] device veth1_macvtap entered promiscuous mode [ 3838.590176][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3838.652000][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3838.700968][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3838.730878][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3838.760922][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3838.790842][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3838.830537][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3838.872582][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3838.903440][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3838.950922][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3838.981106][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3839.030851][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.062644][T24362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3839.242316][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3839.271234][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3839.303823][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3839.342864][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.356280][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.380908][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.399436][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.425257][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.448286][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.453947][T10157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3839.468497][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.469409][T10157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3839.487789][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.499457][T10157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3839.507493][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.521136][T10157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3839.529248][T10157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3839.532582][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.547080][T10157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3839.580925][T24362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3839.600867][T24362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3839.636351][T24362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3839.663093][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3839.684632][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3839.760050][T24362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3839.781674][T24362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3839.790475][T24362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3839.822026][T24362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3840.168165][T24432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3840.222795][T24436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3840.310931][T24432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3840.369956][T24432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3840.524152][T24432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3840.601558][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3840.609719][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3840.752302][T24436] 8021q: adding VLAN 0 to HW filter on device team0 [ 3840.769758][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3840.778572][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3840.802180][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3840.828800][T10157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3840.842755][T10157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3840.854396][T10157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3840.865913][T10157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3840.876520][T10157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3840.885880][T10157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3841.046018][T24415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3841.063558][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3841.083739][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3841.101531][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 3841.108746][T30819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3841.117310][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3841.126330][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3841.135104][T30819] bridge0: port 2(bridge_slave_1) entered blocking state [ 3841.142267][T30819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3841.149991][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3841.225339][T24415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3841.242337][T24491] chnl_net:caif_netlink_parms(): no params data found [ 3841.256229][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3841.269554][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3841.282324][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3841.293474][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3841.314042][T24415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3841.386632][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3841.395239][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3841.413279][T24415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3841.434557][T24436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3841.445361][T24436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3841.632694][T31933] Bluetooth: hci1: command 0x0409 tx timeout [ 3841.649427][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3841.657835][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3841.668528][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3841.677540][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3841.686776][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3841.695878][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3841.810486][T24432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3841.886831][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3841.907659][T24516] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3841.939808][T24516] CPU: 0 PID: 24516 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3841.950321][T24516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3841.960424][T24516] Call Trace: [ 3841.963735][T24516] [ 3841.966708][T24516] dump_stack_lvl+0xd1/0x138 [ 3841.971371][T24516] dump_header+0x10b/0x85f [ 3841.975853][T24516] oom_kill_process.cold+0x10/0x15 [ 3841.981026][T24516] out_of_memory+0x35c/0x14a0 [ 3841.985786][T24516] ? oom_killer_disable+0x280/0x280 [ 3841.991217][T24516] ? mark_held_locks+0x9f/0xe0 [ 3841.996125][T24516] mem_cgroup_out_of_memory+0x206/0x270 [ 3842.001910][T24516] ? mem_cgroup_margin+0x130/0x130 [ 3842.007268][T24516] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3842.013141][T24516] memory_max_write+0x2f9/0x3c0 [ 3842.018040][T24516] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3842.024164][T24516] ? lock_release+0x810/0x810 [ 3842.028901][T24516] cgroup_file_write+0x1e2/0x770 [ 3842.033896][T24516] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3842.040101][T24516] ? kill_css+0x370/0x370 [ 3842.044481][T24516] ? __virt_addr_valid+0x61/0x2e0 [ 3842.049656][T24516] ? kill_css+0x370/0x370 [ 3842.054038][T24516] kernfs_fop_write_iter+0x3f1/0x600 [ 3842.059399][T24516] vfs_write+0x9ed/0xdd0 [ 3842.063697][T24516] ? kernel_write+0x630/0x630 [ 3842.068635][T24516] ? __fget_files+0x26a/0x440 [ 3842.073562][T24516] ksys_write+0x12b/0x250 [ 3842.077942][T24516] ? __ia32_sys_read+0xb0/0xb0 [ 3842.082752][T24516] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3842.088704][T24516] do_syscall_64+0x39/0xb0 [ 3842.093176][T24516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3842.099126][T24516] RIP: 0033:0x7f34c208c0c9 [ 3842.103589][T24516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3842.123241][T24516] RSP: 002b:00007f34c2dd3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3842.131772][T24516] RAX: ffffffffffffffda RBX: 00007f34c21abf80 RCX: 00007f34c208c0c9 [ 3842.139783][T24516] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3842.147800][T24516] RBP: 00007f34c20e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3842.155901][T24516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3842.163910][T24516] R13: 00007ffc31bf6fdf R14: 00007f34c2dd3300 R15: 0000000000022000 [ 3842.171946][T24516] [ 3842.211512][T24516] memory: usage 8628kB, limit 0kB, failcnt 2266 [ 3842.218408][T24516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3842.224353][T24491] bridge0: port 1(bridge_slave_0) entered blocking state [ 3842.227702][T24516] Memory cgroup stats for /syz0: [ 3842.240789][T24516] anon 118784 [ 3842.240789][T24516] file 8347648 [ 3842.240789][T24516] kernel 356352 [ 3842.240789][T24516] kernel_stack 98304 [ 3842.240789][T24516] pagetables 77824 [ 3842.240789][T24516] sec_pagetables 0 [ 3842.240789][T24516] percpu 64 [ 3842.240789][T24516] sock 0 [ 3842.240789][T24516] vmalloc 0 [ 3842.240789][T24516] shmem 8347648 [ 3842.240789][T24516] zswap 0 [ 3842.240789][T24516] zswapped 0 [ 3842.240789][T24516] file_mapped 192512 [ 3842.240789][T24516] file_dirty 0 [ 3842.240789][T24516] file_writeback 0 [ 3842.240789][T24516] swapcached 0 [ 3842.240789][T24516] anon_thp 0 [ 3842.240789][T24516] file_thp 0 [ 3842.240789][T24516] shmem_thp 0 [ 3842.240789][T24516] inactive_anon 118784 [ 3842.240789][T24516] active_anon 8347648 [ 3842.240789][T24516] inactive_file 0 [ 3842.240789][T24516] active_file 0 [ 3842.240789][T24516] unevictable 0 [ 3842.240789][T24516] slab_reclaimable 40576 [ 3842.240789][T24516] slab_unreclaimable 110448 [ 3842.240789][T24516] slab 151024 [ 3842.258597][T24491] bridge0: port 1(bridge_slave_0) entered disabled state [ 3842.375830][T24516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24515,uid=0 [ 3842.399561][T24491] device bridge_slave_0 entered promiscuous mode [ 3842.414247][T24516] Memory cgroup out of memory: Killed process 24516 (syz-executor.0) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:59:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3842.450635][T24432] 8021q: adding VLAN 0 to HW filter on device team0 [ 3842.541383][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3842.549420][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3842.565812][T24362] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 3842.577888][T24491] bridge0: port 2(bridge_slave_1) entered blocking state [ 3842.580744][T24362] CPU: 0 PID: 24362 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3842.588236][T24491] bridge0: port 2(bridge_slave_1) entered disabled state [ 3842.595691][T24362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3842.595706][T24362] Call Trace: [ 3842.595714][T24362] [ 3842.595723][T24362] dump_stack_lvl+0xd1/0x138 [ 3842.595758][T24362] dump_header+0x10b/0x85f [ 3842.595792][T24362] oom_kill_process.cold+0x10/0x15 [ 3842.595830][T24362] out_of_memory+0x35c/0x14a0 [ 3842.605738][T24491] device bridge_slave_1 entered promiscuous mode [ 3842.612897][T24362] ? find_held_lock+0x2d/0x110 [ 3842.612937][T24362] ? oom_killer_disable+0x280/0x280 [ 3842.654558][T24362] ? find_held_lock+0x2d/0x110 [ 3842.659494][T24362] mem_cgroup_out_of_memory+0x206/0x270 [ 3842.665067][T24362] ? mem_cgroup_margin+0x130/0x130 [ 3842.670197][T24362] ? lock_downgrade+0x6e0/0x6e0 [ 3842.675076][T24362] try_charge_memcg+0xefb/0x12f0 [ 3842.680030][T24362] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3842.686062][T24362] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3842.691897][T24362] ? lock_downgrade+0x6e0/0x6e0 [ 3842.696762][T24362] ? lock_downgrade+0x6e0/0x6e0 [ 3842.701619][T24362] ? rcu_read_unlock+0x9/0x60 [ 3842.706341][T24362] obj_cgroup_charge+0x2af/0x5e0 [ 3842.711306][T24362] __kmem_cache_alloc_node+0xb2/0x430 [ 3842.716687][T24362] ? kvmalloc_node+0xa2/0x1a0 [ 3842.721383][T24362] ? kvmalloc_node+0xa2/0x1a0 [ 3842.726199][T24362] __kmalloc_node+0x4d/0xd0 [ 3842.730815][T24362] kvmalloc_node+0xa2/0x1a0 [ 3842.735353][T24362] xt_alloc_table_info+0x40/0xa0 [ 3842.740310][T24362] do_ip6t_set_ctl+0x514/0xb30 [ 3842.745083][T24362] ? trace_contention_end+0x153/0x1e0 [ 3842.750473][T24362] ? __mutex_lock+0x231/0x1360 [ 3842.755254][T24362] ? compat_do_replace.constprop.0+0x410/0x410 [ 3842.761546][T24362] ? wait_for_completion_io_timeout+0x20/0x20 [ 3842.767622][T24362] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3842.773040][T24362] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 3842.779073][T24362] nf_setsockopt+0x87/0xe0 [ 3842.783529][T24362] ipv6_setsockopt+0x12b/0x190 [ 3842.788397][T24362] tcp_setsockopt+0x9f/0x100 [ 3842.793011][T24362] ? sock_common_recvmsg+0x190/0x190 [ 3842.798347][T24362] __sys_setsockopt+0x2c6/0x5b0 [ 3842.803236][T24362] ? __ia32_sys_recv+0x100/0x100 [ 3842.808214][T24362] ? up_write+0x520/0x520 [ 3842.812592][T24362] ? handle_mm_fault+0x25b/0x850 [ 3842.817589][T24362] __x64_sys_setsockopt+0xbe/0x160 [ 3842.822735][T24362] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3842.828651][T24362] do_syscall_64+0x39/0xb0 [ 3842.833102][T24362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3842.839066][T24362] RIP: 0033:0x7f34c208d71a [ 3842.843512][T24362] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3842.863306][T24362] RSP: 002b:00007ffc31bf6b48 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3842.871730][T24362] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f34c208d71a [ 3842.879768][T24362] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 3842.887838][T24362] RBP: 00007ffc31bf6b70 R08: 0000000000000558 R09: fefefefefeff646b [ 3842.895824][T24362] R10: 00007f34c2184940 R11: 0000000000000206 R12: 00007ffc31bf6bd0 [ 3842.903820][T24362] R13: 0000000000000003 R14: 00007ffc31bf6b6c R15: 00007f34c21848e0 [ 3842.911851][T24362] [ 3842.920445][T31933] Bluetooth: hci5: command 0x0409 tx timeout [ 3842.930081][T24362] memory: usage 8328kB, limit 0kB, failcnt 2285 [ 3842.982398][T24362] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3842.983773][T24491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3842.989387][T24362] Memory cgroup stats for /syz0: [ 3843.021514][T24362] anon 36864 [ 3843.021514][T24362] file 8347648 [ 3843.021514][T24362] kernel 131072 [ 3843.021514][T24362] kernel_stack 0 [ 3843.021514][T24362] pagetables 8192 [ 3843.021514][T24362] sec_pagetables 0 [ 3843.021514][T24362] percpu 64 [ 3843.021514][T24362] sock 0 [ 3843.021514][T24362] vmalloc 0 [ 3843.021514][T24362] shmem 8347648 [ 3843.021514][T24362] zswap 0 [ 3843.021514][T24362] zswapped 0 [ 3843.021514][T24362] file_mapped 172032 [ 3843.021514][T24362] file_dirty 0 [ 3843.021514][T24362] file_writeback 0 [ 3843.021514][T24362] swapcached 0 [ 3843.021514][T24362] anon_thp 0 [ 3843.021514][T24362] file_thp 0 [ 3843.021514][T24362] shmem_thp 0 [ 3843.021514][T24362] inactive_anon 36864 [ 3843.021514][T24362] active_anon 8347648 [ 3843.021514][T24362] inactive_file 0 [ 3843.021514][T24362] active_file 0 [ 3843.021514][T24362] unevictable 0 [ 3843.021514][T24362] slab_reclaimable 33832 [ 3843.021514][T24362] slab_unreclaimable 77304 [ 3843.021514][T24362] slab 111136 [ 3843.121213][T24362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24362,uid=0 [ 3843.137022][T24362] Memory cgroup out of memory: Killed process 24362 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3843.173265][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3843.182474][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3843.201202][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 3843.208464][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3843.217025][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3843.228441][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3843.237619][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 3843.244921][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3843.253559][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3843.262931][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3843.270578][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3843.279222][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3843.314381][T24491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3843.376277][T24436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3843.424500][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3843.434043][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3843.586645][T24491] team0: Port device team_slave_0 added [ 3843.616784][T24432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3843.639089][T24432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3843.670171][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 19:59:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3843.692036][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3843.706163][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3843.721508][T31933] Bluetooth: hci1: command 0x041b tx timeout [ 3843.728408][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3843.751974][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3843.771439][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3843.844042][T24491] team0: Port device team_slave_1 added [ 3843.855723][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:59:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3844.047990][T24415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3844.204694][T24415] 8021q: adding VLAN 0 to HW filter on device team0 [ 3844.244454][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3844.281535][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3844.301231][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3844.312242][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3844.362104][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3844.369345][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3844.403012][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3844.441714][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3844.450388][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 3844.457599][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3844.496194][T24491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3844.510870][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3844.568206][T24491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3844.628755][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3844.652290][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3844.667771][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3844.700590][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3844.717980][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3844.728862][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3844.744334][T24491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3844.771074][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3844.799274][T24491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3844.811489][T24506] chnl_net:caif_netlink_parms(): no params data found [ 3844.853666][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3844.869416][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3844.880221][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3844.889441][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3844.924374][T24415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3844.959208][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3844.967244][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3844.995388][T24432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3845.003251][T31933] Bluetooth: hci5: command 0x041b tx timeout [ 3845.057195][T24491] device hsr_slave_0 entered promiscuous mode [ 3845.121556][T24491] device hsr_slave_1 entered promiscuous mode [ 3845.140476][T24491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3845.148762][T24491] Cannot create hsr debugfs directory [ 3845.268573][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3845.278929][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3845.389396][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3845.412058][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3845.428642][T24436] device veth0_vlan entered promiscuous mode [ 3845.526246][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3845.537905][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3845.559337][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3845.582356][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3845.613233][T24506] bridge0: port 1(bridge_slave_0) entered blocking state [ 3845.631424][T24506] bridge0: port 1(bridge_slave_0) entered disabled state [ 3845.651459][T24506] device bridge_slave_0 entered promiscuous mode [ 3845.669321][T24436] device veth1_vlan entered promiscuous mode [ 3845.732236][T24506] bridge0: port 2(bridge_slave_1) entered blocking state [ 3845.739508][T24506] bridge0: port 2(bridge_slave_1) entered disabled state [ 3845.752185][T24506] device bridge_slave_1 entered promiscuous mode [ 3845.791483][T31933] Bluetooth: hci1: command 0x040f tx timeout [ 3845.798087][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3845.812677][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3845.831879][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3845.842301][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3845.849911][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3845.915157][T24415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3845.933712][T24432] device veth0_vlan entered promiscuous mode [ 3845.961857][T10157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3845.973738][T10157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3845.982616][T10157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3845.990585][T10157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3846.000450][T10157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3846.007929][T10157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3846.066620][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3846.081793][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3846.089902][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3846.109179][T24432] device veth1_vlan entered promiscuous mode [ 3846.151986][T24436] device veth0_macvtap entered promiscuous mode [ 3846.216121][T24506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3846.250369][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3846.273639][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3846.291966][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3846.314257][T24436] device veth1_macvtap entered promiscuous mode [ 3846.344112][T24506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3846.390294][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3846.402048][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3846.457934][T24506] team0: Port device team_slave_0 added [ 3846.624487][T27309] device hsr_slave_0 left promiscuous mode [ 3846.691129][T27309] device hsr_slave_1 left promiscuous mode [ 3846.697828][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3846.711305][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3846.733924][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3846.750893][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3846.773157][T27309] device bridge_slave_1 left promiscuous mode [ 3846.779461][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3846.802755][T27309] device bridge_slave_0 left promiscuous mode [ 3846.809172][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3846.824384][T27309] device hsr_slave_0 left promiscuous mode [ 3846.831451][T27309] device hsr_slave_1 left promiscuous mode [ 3846.861075][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3846.869086][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3846.880040][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3846.907649][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3846.929331][T27309] device bridge_slave_1 left promiscuous mode [ 3846.945771][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3846.972266][T27309] device bridge_slave_0 left promiscuous mode [ 3846.978617][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3847.012295][T27309] device hsr_slave_0 left promiscuous mode [ 3847.018988][T27309] device hsr_slave_1 left promiscuous mode [ 3847.041783][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3847.049275][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3847.072088][T31933] Bluetooth: hci5: command 0x040f tx timeout [ 3847.081146][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3847.088627][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3847.114880][T27309] device bridge_slave_1 left promiscuous mode [ 3847.121736][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3847.130749][T27309] device bridge_slave_0 left promiscuous mode [ 3847.137537][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3847.158763][T27309] device hsr_slave_0 left promiscuous mode [ 3847.187874][T27309] device hsr_slave_1 left promiscuous mode [ 3847.205835][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3847.221133][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3847.245004][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3847.254938][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3847.271129][T27309] device bridge_slave_1 left promiscuous mode [ 3847.277472][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3847.302857][T27309] device bridge_slave_0 left promiscuous mode [ 3847.309201][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3847.343838][T27309] device hsr_slave_0 left promiscuous mode [ 3847.361040][T27309] device hsr_slave_1 left promiscuous mode [ 3847.372843][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3847.380395][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3847.403597][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3847.420927][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3847.436977][T27309] device bridge_slave_1 left promiscuous mode [ 3847.443653][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3847.453296][T27309] device bridge_slave_0 left promiscuous mode [ 3847.459642][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3847.487882][T27309] device veth1_macvtap left promiscuous mode [ 3847.495186][T27309] device veth0_macvtap left promiscuous mode [ 3847.501735][T27309] device veth1_vlan left promiscuous mode [ 3847.507609][T27309] device veth0_vlan left promiscuous mode [ 3847.515607][T27309] device veth1_macvtap left promiscuous mode [ 3847.521781][T27309] device veth0_macvtap left promiscuous mode [ 3847.528142][T27309] device veth1_vlan left promiscuous mode [ 3847.534228][T27309] device veth0_vlan left promiscuous mode [ 3847.542444][T27309] device veth1_macvtap left promiscuous mode [ 3847.548518][T27309] device veth0_macvtap left promiscuous mode [ 3847.555771][T27309] device veth1_vlan left promiscuous mode [ 3847.561850][T27309] device veth0_vlan left promiscuous mode [ 3847.581501][T27309] device veth1_macvtap left promiscuous mode [ 3847.588385][T27309] device veth0_macvtap left promiscuous mode [ 3847.602798][T27309] device veth1_vlan left promiscuous mode [ 3847.608875][T27309] device veth0_vlan left promiscuous mode [ 3847.618781][T27309] device veth1_macvtap left promiscuous mode [ 3847.625194][T27309] device veth0_macvtap left promiscuous mode [ 3847.632005][T27309] device veth1_vlan left promiscuous mode [ 3847.637923][T27309] device veth0_vlan left promiscuous mode [ 3847.881969][T31933] Bluetooth: hci1: command 0x0419 tx timeout [ 3848.031049][T10157] Bluetooth: hci2: command 0x0409 tx timeout [ 3849.011162][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3849.051588][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3849.067202][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3849.093711][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3849.151236][T10157] Bluetooth: hci5: command 0x0419 tx timeout [ 3849.231702][T27309] bond0 (unregistering): Released all slaves [ 3849.503264][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3849.538114][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3849.574259][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3849.631602][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3849.850704][T27309] bond0 (unregistering): Released all slaves [ 3850.087095][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3850.110936][T10157] Bluetooth: hci2: command 0x041b tx timeout [ 3850.132978][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3850.163013][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3850.208590][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3850.381186][T27309] bond0 (unregistering): Released all slaves [ 3850.687557][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3850.705105][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3850.723885][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3850.742393][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3850.867818][T27309] bond0 (unregistering): Released all slaves [ 3851.168928][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3851.187416][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3851.205055][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3851.238716][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3851.403032][T27309] bond0 (unregistering): Released all slaves [ 3851.488093][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3851.520821][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3851.530694][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3851.561066][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3851.593301][T24436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3851.647846][T24506] team0: Port device team_slave_1 added [ 3851.673017][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3851.707060][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3851.729689][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3851.739140][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3851.774598][T24432] device veth0_macvtap entered promiscuous mode [ 3851.989380][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3852.007954][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3852.031008][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.050844][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3852.070882][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.089673][T24436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3852.104919][T24432] device veth1_macvtap entered promiscuous mode [ 3852.114997][T24506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3852.131664][T24506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3852.158327][T24506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3852.186778][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3852.190908][T10157] Bluetooth: hci2: command 0x040f tx timeout [ 3852.197241][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3852.327150][T24436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.336921][T24436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.347466][T24436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.359319][T24436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.392324][T24506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3852.399428][T24506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3852.429231][T24506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3852.462792][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3852.472270][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3852.481920][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3852.493175][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.503484][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3852.514911][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.525935][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3852.536779][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.562779][T24432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3852.622556][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3852.631788][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3852.640705][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3852.650517][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3852.659941][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3852.668589][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3852.678957][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3852.691090][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.706289][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3852.729016][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.739376][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3852.760835][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3852.793681][T24432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3852.837840][T24415] device veth0_vlan entered promiscuous mode [ 3852.871225][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3852.880037][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3852.908641][T24432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.919267][T24432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.942262][T24432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.951584][T24432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.997380][T24506] device hsr_slave_0 entered promiscuous mode [ 3853.015161][T24506] device hsr_slave_1 entered promiscuous mode [ 3853.081981][T24415] device veth1_vlan entered promiscuous mode [ 3853.376249][T24415] device veth0_macvtap entered promiscuous mode [ 3853.470475][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3853.484037][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3853.494671][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3853.514530][T24415] device veth1_macvtap entered promiscuous mode [ 3853.522299][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3853.528892][T24491] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3853.618788][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3853.629173][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3853.638767][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3853.662087][T24491] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3853.677113][T24491] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3853.710172][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3853.721735][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3853.732552][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3853.743486][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3853.760021][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3853.780877][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3853.790750][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3853.820836][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3853.849084][T24415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3853.863364][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3853.870281][T24579] chnl_net:caif_netlink_parms(): no params data found [ 3853.901999][T24491] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3853.902184][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3853.922485][T27313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3853.931897][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3853.953342][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3853.962567][T27313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3853.975915][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3853.984624][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3853.994912][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3854.014491][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3854.024571][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3854.035752][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3854.046503][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3854.060190][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3854.071495][T24415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3854.082564][T24415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3854.093807][T24415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3854.137304][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3854.148606][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3854.273718][T31933] Bluetooth: hci2: command 0x0419 tx timeout [ 3854.294317][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3854.305116][T24415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.319139][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3854.327950][T24415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.366096][T24415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.401519][T24415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.503655][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3854.680769][T24623] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3854.684942][T24506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3854.706508][T24623] CPU: 1 PID: 24623 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3854.717063][T24623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3854.727279][T24623] Call Trace: [ 3854.730589][T24623] [ 3854.733550][T24623] dump_stack_lvl+0xd1/0x138 [ 3854.738224][T24623] dump_header+0x10b/0x85f [ 3854.742699][T24623] oom_kill_process.cold+0x10/0x15 [ 3854.747950][T24623] out_of_memory+0x35c/0x14a0 [ 3854.752710][T24623] ? oom_killer_disable+0x280/0x280 [ 3854.757961][T24623] ? mark_held_locks+0x9f/0xe0 [ 3854.762781][T24623] mem_cgroup_out_of_memory+0x206/0x270 [ 3854.768401][T24623] ? mem_cgroup_margin+0x130/0x130 [ 3854.773594][T24623] memory_max_write+0x2f9/0x3c0 [ 3854.778528][T24623] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3854.784655][T24623] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3854.790877][T24623] cgroup_file_write+0x1e2/0x770 [ 3854.796123][T24623] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3854.802332][T24623] ? kill_css+0x370/0x370 [ 3854.806718][T24623] ? kernfs_fop_write_iter+0x3c2/0x600 [ 3854.812238][T24623] ? kill_css+0x370/0x370 [ 3854.816624][T24623] kernfs_fop_write_iter+0x3f1/0x600 [ 3854.821986][T24623] vfs_write+0x9ed/0xdd0 [ 3854.826293][T24623] ? kernel_write+0x630/0x630 [ 3854.831041][T24623] ? __fget_files+0x26a/0x440 [ 3854.835779][T24623] ksys_write+0x12b/0x250 [ 3854.840152][T24623] ? __ia32_sys_read+0xb0/0xb0 [ 3854.845048][T24623] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3854.851019][T24623] do_syscall_64+0x39/0xb0 [ 3854.855483][T24623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3854.861435][T24623] RIP: 0033:0x7fc78dc8c0c9 [ 3854.866843][T24623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3854.887800][T24623] RSP: 002b:00007fc78e988168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3854.896259][T24623] RAX: ffffffffffffffda RBX: 00007fc78ddabf80 RCX: 00007fc78dc8c0c9 [ 3854.904269][T24623] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3854.912367][T24623] RBP: 00007fc78dce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3854.920378][T24623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3854.928389][T24623] R13: 00007fffeba1fdbf R14: 00007fc78e988300 R15: 0000000000022000 [ 3854.936613][T24623] [ 3855.001005][T24623] memory: usage 8572kB, limit 0kB, failcnt 2463 [ 3855.008981][T24623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3855.036611][T24623] Memory cgroup stats for /syz4: [ 3855.036808][T24623] anon 114688 [ 3855.036808][T24623] file 8359936 [ 3855.036808][T24623] kernel 303104 [ 3855.036808][T24623] kernel_stack 65536 [ 3855.036808][T24623] pagetables 77824 [ 3855.036808][T24623] sec_pagetables 0 [ 3855.036808][T24623] percpu 64 [ 3855.036808][T24623] sock 0 [ 3855.036808][T24623] vmalloc 0 [ 3855.036808][T24623] shmem 8359936 [ 3855.036808][T24623] zswap 0 [ 3855.036808][T24623] zswapped 0 [ 3855.036808][T24623] file_mapped 176128 [ 3855.036808][T24623] file_dirty 0 [ 3855.036808][T24623] file_writeback 0 [ 3855.036808][T24623] swapcached 0 [ 3855.036808][T24623] anon_thp 0 [ 3855.036808][T24623] file_thp 0 [ 3855.036808][T24623] shmem_thp 0 [ 3855.036808][T24623] inactive_anon 114688 [ 3855.036808][T24623] active_anon 8359936 [ 3855.036808][T24623] inactive_file 0 [ 3855.036808][T24623] active_file 0 [ 3855.036808][T24623] unevictable 0 [ 3855.036808][T24623] slab_reclaimable 33736 [ 3855.036808][T24623] slab_unreclaimable 99168 [ 3855.036808][T24623] slab 132904 [ 3855.238741][T24623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24622,uid=0 [ 3855.254574][T24579] bridge0: port 1(bridge_slave_0) entered blocking state [ 3855.254646][T24579] bridge0: port 1(bridge_slave_0) entered disabled state [ 3855.255850][T24579] device bridge_slave_0 entered promiscuous mode [ 3855.295241][T24623] Memory cgroup out of memory: Killed process 24623 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3855.330517][T24632] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3855.371124][T24632] CPU: 1 PID: 24632 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3855.373815][T24506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3855.381599][T24632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3855.381617][T24632] Call Trace: [ 3855.381625][T24632] [ 3855.381635][T24632] dump_stack_lvl+0xd1/0x138 [ 3855.381671][T24632] dump_header+0x10b/0x85f [ 3855.381710][T24632] oom_kill_process.cold+0x10/0x15 [ 3855.423893][T24632] out_of_memory+0x35c/0x14a0 [ 3855.428642][T24632] ? oom_killer_disable+0x280/0x280 [ 3855.433896][T24632] mem_cgroup_out_of_memory+0x206/0x270 [ 3855.439587][T24632] ? mem_cgroup_margin+0x130/0x130 [ 3855.444743][T24632] memory_max_write+0x2f9/0x3c0 [ 3855.449610][T24632] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3855.455711][T24632] ? cgroup_file_write+0x8e/0x770 [ 3855.460778][T24632] cgroup_file_write+0x1e2/0x770 [ 3855.465827][T24632] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3855.472086][T24632] ? kill_css+0x370/0x370 [ 3855.476436][T24632] ? __virt_addr_valid+0x61/0x2e0 [ 3855.481502][T24632] ? kill_css+0x370/0x370 [ 3855.485851][T24632] kernfs_fop_write_iter+0x3f1/0x600 [ 3855.491169][T24632] vfs_write+0x9ed/0xdd0 [ 3855.495430][T24632] ? kernel_write+0x630/0x630 [ 3855.500127][T24632] ? lockdep_hardirqs_on+0x7d/0x100 [ 3855.505429][T24632] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3855.511696][T24632] ? ksys_write+0xce/0x250 [ 3855.516131][T24632] ksys_write+0x12b/0x250 [ 3855.520478][T24632] ? __ia32_sys_read+0xb0/0xb0 [ 3855.525317][T24632] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3855.531320][T24632] do_syscall_64+0x39/0xb0 [ 3855.535847][T24632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3855.541755][T24632] RIP: 0033:0x7f09e308c0c9 [ 3855.546180][T24632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3855.565997][T24632] RSP: 002b:00007f09e3e4b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3855.574641][T24632] RAX: ffffffffffffffda RBX: 00007f09e31abf80 RCX: 00007f09e308c0c9 [ 3855.582625][T24632] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3855.590608][T24632] RBP: 00007f09e30e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3855.599369][T24632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3855.607349][T24632] R13: 00007fff709be5af R14: 00007f09e3e4b300 R15: 0000000000022000 [ 3855.615350][T24632] 19:59:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3855.681197][T24579] bridge0: port 2(bridge_slave_1) entered blocking state [ 3855.688739][T24579] bridge0: port 2(bridge_slave_1) entered disabled state [ 3855.722435][T24579] device bridge_slave_1 entered promiscuous mode [ 3855.821810][T24506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3855.862949][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3855.894964][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3855.997218][T24506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3856.038286][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3856.050044][T24579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3856.083580][T31962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3856.104859][T31962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3856.126421][T24579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3856.244312][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3856.273920][T24579] team0: Port device team_slave_0 added [ 3856.284281][T24491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3856.317280][T24579] team0: Port device team_slave_1 added [ 3856.356655][T24491] 8021q: adding VLAN 0 to HW filter on device team0 [ 3856.386591][T24632] memory: usage 516kB, limit 0kB, failcnt 4773 [ 3856.406232][T24632] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3856.420359][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3856.441980][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3856.465903][T24632] Memory cgroup stats for /syz2: [ 3856.466128][T24632] anon 114688 [ 3856.466128][T24632] file 155648 [ 3856.466128][T24632] kernel 258048 [ 3856.466128][T24632] kernel_stack 32768 [ 3856.466128][T24632] pagetables 81920 [ 3856.466128][T24632] sec_pagetables 0 [ 3856.466128][T24632] percpu 64 [ 3856.466128][T24632] sock 0 [ 3856.466128][T24632] vmalloc 0 [ 3856.466128][T24632] shmem 151552 [ 3856.466128][T24632] zswap 0 [ 3856.466128][T24632] zswapped 0 [ 3856.466128][T24632] file_mapped 139264 [ 3856.466128][T24632] file_dirty 0 [ 3856.466128][T24632] file_writeback 0 [ 3856.466128][T24632] swapcached 0 [ 3856.466128][T24632] anon_thp 0 [ 3856.466128][T24632] file_thp 0 [ 3856.466128][T24632] shmem_thp 0 [ 3856.466128][T24632] inactive_anon 172032 [ 3856.466128][T24632] active_anon 94208 [ 3856.466128][T24632] inactive_file 0 [ 3856.466128][T24632] active_file 4096 [ 3856.466128][T24632] unevictable 0 [ 3856.466128][T24632] slab_reclaimable 13208 [ 3856.466128][T24632] slab_unreclaimable 97872 [ 3856.466128][T24632] slab 111080 [ 3856.631184][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3856.640120][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3856.711713][T30819] bridge0: port 1(bridge_slave_0) entered blocking state [ 3856.718890][T30819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3856.795427][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3856.806168][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3856.820431][T30819] bridge0: port 2(bridge_slave_1) entered blocking state [ 3856.820634][T24632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3856.827612][T30819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3856.840571][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3856.866617][T24632] ,cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24631,uid=0 [ 3856.868723][T24579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3856.878065][T24632] Memory cgroup out of memory: Killed process 24632 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3856.912072][T24436] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3856.931040][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3856.937515][T24436] CPU: 1 PID: 24436 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3856.967766][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3856.977870][T24436] Call Trace: [ 3856.981173][T24436] [ 3856.984131][T24436] dump_stack_lvl+0xd1/0x138 [ 3856.988848][T24436] dump_header+0x10b/0x85f [ 3856.993379][T24436] oom_kill_process.cold+0x10/0x15 [ 3856.998512][T24436] out_of_memory+0x35c/0x14a0 [ 3857.003214][T24436] ? oom_killer_disable+0x280/0x280 [ 3857.008440][T24436] ? find_held_lock+0x2d/0x110 [ 3857.013266][T24436] mem_cgroup_out_of_memory+0x206/0x270 [ 3857.018831][T24436] ? mem_cgroup_margin+0x130/0x130 [ 3857.023970][T24436] ? lock_downgrade+0x6e0/0x6e0 [ 3857.029018][T24436] try_charge_memcg+0xefb/0x12f0 [ 3857.033978][T24436] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3857.039993][T24436] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3857.045820][T24436] ? lock_downgrade+0x6e0/0x6e0 [ 3857.050683][T24436] ? lock_downgrade+0x6e0/0x6e0 [ 3857.055565][T24436] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3857.061128][T24436] __alloc_pages+0x1f3/0x5b0 [ 3857.065929][T24436] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3857.072823][T24436] ? copy_page_range+0x1ff7/0x3b40 [ 3857.077955][T24436] alloc_pages+0x1aa/0x270 [ 3857.082397][T24436] get_zeroed_page+0x14/0x40 [ 3857.086992][T24436] __pud_alloc+0x3b/0x180 [ 3857.091344][T24436] copy_page_range+0x246b/0x3b40 [ 3857.096303][T24436] ? mas_wr_modify+0x2da/0x16d0 [ 3857.101183][T24436] ? mas_store+0x206/0x2e0 [ 3857.105608][T24436] ? handle_mm_fault+0x850/0x850 [ 3857.110607][T24436] ? anon_vma_fork+0xba/0x630 [ 3857.115310][T24436] dup_mmap+0xc10/0x10b0 [ 3857.119575][T24436] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3857.124887][T24436] ? lock_downgrade+0x6e0/0x6e0 [ 3857.129752][T24436] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3857.135598][T24436] ? mm_init+0x8e0/0xc10 [ 3857.139853][T24436] copy_process+0x440f/0x7520 [ 3857.144645][T24436] ? _raw_spin_unlock+0x28/0x40 [ 3857.149506][T24436] ? wp_page_reuse+0x197/0x570 [ 3857.154300][T24436] ? __cleanup_sighand+0xb0/0xb0 [ 3857.159257][T24436] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3857.164736][T24436] ? rwlock_bug.part.0+0x90/0x90 [ 3857.169774][T24436] ? lock_chain_count+0x20/0x20 [ 3857.174637][T24436] kernel_clone+0xeb/0x990 [ 3857.179155][T24436] ? create_io_thread+0xf0/0xf0 [ 3857.184069][T24436] ? find_held_lock+0x2d/0x110 [ 3857.188861][T24436] __do_sys_clone+0xba/0x100 [ 3857.193476][T24436] ? kernel_clone+0x990/0x990 [ 3857.198183][T24436] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3857.204100][T24436] do_syscall_64+0x39/0xb0 [ 3857.208533][T24436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3857.214441][T24436] RIP: 0033:0x7fc78dc89dfb [ 3857.218985][T24436] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3857.238600][T24436] RSP: 002b:00007fffeba20000 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3857.247039][T24436] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc78dc89dfb [ 3857.255014][T24436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3857.263185][T24436] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555566d9400 [ 3857.271197][T24436] R10: 00005555566d96d0 R11: 0000000000000246 R12: 0000000000000001 [ 3857.279263][T24436] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffeba200e0 [ 3857.287258][T24436] 19:59:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:59:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3857.373201][T24579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3857.407471][T24579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3857.416235][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3857.455741][T24579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3857.503632][T24436] memory: usage 8368kB, limit 0kB, failcnt 2498 [ 3857.530933][T24436] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3857.555428][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3857.561158][T24436] Memory cgroup stats for /syz4: [ 3857.563591][T24436] anon 45056 [ 3857.563591][T24436] file 8359936 [ 3857.563591][T24436] kernel 163840 [ 3857.563591][T24436] kernel_stack 32768 [ 3857.563591][T24436] pagetables 8192 [ 3857.563591][T24436] sec_pagetables 0 [ 3857.563591][T24436] percpu 64 [ 3857.563591][T24436] sock 0 [ 3857.563591][T24436] vmalloc 0 [ 3857.563591][T24436] shmem 8359936 [ 3857.563591][T24436] zswap 0 [ 3857.563591][T24436] zswapped 0 [ 3857.563591][T24436] file_mapped 163840 [ 3857.563591][T24436] file_dirty 0 [ 3857.563591][T24436] file_writeback 0 [ 3857.563591][T24436] swapcached 0 [ 3857.563591][T24436] anon_thp 0 [ 3857.563591][T24436] file_thp 0 [ 3857.563591][T24436] shmem_thp 0 [ 3857.563591][T24436] inactive_anon 45056 [ 3857.563591][T24436] active_anon 8359936 [ 3857.563591][T24436] inactive_file 0 [ 3857.563591][T24436] active_file 0 [ 3857.563591][T24436] unevictable 0 [ 3857.563591][T24436] slab_reclaimable 29448 [ 3857.563591][T24436] slab_unreclaimable 80576 [ 3857.563591][T24436] slab 110024 [ 3857.565981][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3857.571095][T24436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24436,uid=0 [ 3857.771047][T24436] Memory cgroup out of memory: Killed process 24436 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3857.816059][T24432] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3857.841319][T24432] CPU: 0 PID: 24432 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3857.851897][T24432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3857.862081][T24432] Call Trace: [ 3857.865383][T24432] [ 3857.868338][T24432] dump_stack_lvl+0xd1/0x138 [ 3857.872979][T24432] dump_header+0x10b/0x85f [ 3857.877452][T24432] oom_kill_process.cold+0x10/0x15 [ 3857.882625][T24432] out_of_memory+0x35c/0x14a0 [ 3857.887333][T24432] ? oom_killer_disable+0x280/0x280 [ 3857.892550][T24432] ? find_held_lock+0x2d/0x110 [ 3857.897334][T24432] mem_cgroup_out_of_memory+0x206/0x270 [ 3857.902931][T24432] ? mem_cgroup_margin+0x130/0x130 [ 3857.908093][T24432] ? lock_downgrade+0x6e0/0x6e0 [ 3857.912991][T24432] try_charge_memcg+0xefb/0x12f0 [ 3857.917950][T24432] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3857.923953][T24432] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3857.929696][T24432] ? lock_downgrade+0x6e0/0x6e0 [ 3857.934556][T24432] ? lock_downgrade+0x6e0/0x6e0 [ 3857.939424][T24432] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3857.944984][T24432] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3857.951160][T24432] copy_process+0x4e3/0x7520 [ 3857.955783][T24432] ? _raw_spin_unlock+0x28/0x40 [ 3857.960733][T24432] ? wp_page_reuse+0x197/0x570 [ 3857.965520][T24432] ? do_wp_page+0x844/0x3370 [ 3857.970139][T24432] ? __cleanup_sighand+0xb0/0xb0 [ 3857.975091][T24432] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3857.980500][T24432] ? rwlock_bug.part.0+0x90/0x90 [ 3857.985538][T24432] ? lock_chain_count+0x20/0x20 [ 3857.990492][T24432] kernel_clone+0xeb/0x990 [ 3857.995092][T24432] ? create_io_thread+0xf0/0xf0 [ 3858.000045][T24432] ? find_held_lock+0x2d/0x110 [ 3858.005007][T24432] __do_sys_clone+0xba/0x100 [ 3858.009613][T24432] ? kernel_clone+0x990/0x990 [ 3858.014313][T24432] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3858.020226][T24432] do_syscall_64+0x39/0xb0 [ 3858.024832][T24432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3858.030827][T24432] RIP: 0033:0x7f09e3089dfb [ 3858.035248][T24432] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3858.054863][T24432] RSP: 002b:00007fff709be7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3858.063283][T24432] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09e3089dfb [ 3858.071362][T24432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3858.079341][T24432] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556764400 [ 3858.087489][T24432] R10: 00005555567646d0 R11: 0000000000000246 R12: 0000000000000001 [ 3858.095467][T24432] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff709be8d0 [ 3858.103461][T24432] [ 3858.141342][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3858.153123][T24432] memory: usage 292kB, limit 0kB, failcnt 4792 [ 3858.155023][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3858.159328][T24432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3858.187240][T24579] device hsr_slave_0 entered promiscuous mode [ 3858.215523][T24432] Memory cgroup stats for /syz2: [ 3858.215736][T24432] anon 28672 [ 3858.215736][T24432] file 155648 [ 3858.215736][T24432] kernel 114688 [ 3858.215736][T24432] kernel_stack 0 [ 3858.215736][T24432] pagetables 8192 [ 3858.215736][T24432] sec_pagetables 0 [ 3858.215736][T24432] percpu 64 [ 3858.215736][T24432] sock 0 [ 3858.215736][T24432] vmalloc 0 [ 3858.215736][T24432] shmem 151552 [ 3858.215736][T24432] zswap 0 [ 3858.215736][T24432] zswapped 0 [ 3858.215736][T24432] file_mapped 139264 [ 3858.215736][T24432] file_dirty 0 [ 3858.215736][T24432] file_writeback 0 [ 3858.215736][T24432] swapcached 0 [ 3858.215736][T24432] anon_thp 0 [ 3858.215736][T24432] file_thp 0 [ 3858.215736][T24432] shmem_thp 0 [ 3858.215736][T24432] inactive_anon 86016 [ 3858.215736][T24432] active_anon 94208 [ 3858.215736][T24432] inactive_file 4096 [ 3858.215736][T24432] active_file 0 [ 3858.215736][T24432] unevictable 0 [ 3858.215736][T24432] slab_reclaimable 6728 [ 3858.215736][T24432] slab_unreclaimable 78288 [ 3858.215736][T24432] slab 85016 [ 3858.314565][T24579] device hsr_slave_1 entered promiscuous mode [ 3858.315339][T24432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24432,uid=0 [ 3858.336541][T24432] Memory cgroup out of memory: Killed process 24432 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3858.360877][T24579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3858.368763][T24579] Cannot create hsr debugfs directory [ 3858.400598][T24491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3858.411394][T24415] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3858.442338][T24415] CPU: 0 PID: 24415 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3858.453174][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3858.463023][T24491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3858.463318][T24415] Call Trace: [ 3858.463328][T24415] [ 3858.479991][T24415] dump_stack_lvl+0xd1/0x138 [ 3858.484621][T24415] dump_header+0x10b/0x85f [ 3858.489078][T24415] oom_kill_process.cold+0x10/0x15 [ 3858.494233][T24415] out_of_memory+0x35c/0x14a0 [ 3858.498942][T24415] ? oom_killer_disable+0x280/0x280 [ 3858.504165][T24415] ? find_held_lock+0x2d/0x110 [ 3858.508951][T24415] mem_cgroup_out_of_memory+0x206/0x270 [ 3858.514543][T24415] ? mem_cgroup_margin+0x130/0x130 [ 3858.519675][T24415] ? lock_downgrade+0x6e0/0x6e0 [ 3858.524554][T24415] try_charge_memcg+0xefb/0x12f0 [ 3858.529526][T24415] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3858.535531][T24415] ? lock_downgrade+0x6e0/0x6e0 [ 3858.540505][T24415] charge_memcg+0x90/0x3b0 [ 3858.545149][T24415] __mem_cgroup_charge+0x2b/0x90 [ 3858.550093][T24415] ? _compound_head+0x5d/0x150 [ 3858.554871][T24415] __handle_mm_fault+0x187d/0x3c90 [ 3858.560007][T24415] ? vm_iomap_memory+0x190/0x190 [ 3858.564984][T24415] handle_mm_fault+0x1b6/0x850 [ 3858.569780][T24415] do_user_addr_fault+0x475/0x1210 [ 3858.574907][T24415] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3858.580476][T24415] exc_page_fault+0x98/0x170 [ 3858.585078][T24415] asm_exc_page_fault+0x26/0x30 [ 3858.589938][T24415] RIP: 0033:0x7f241b64a28d [ 3858.594357][T24415] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 3858.613970][T24415] RSP: 002b:00007ffc51042f50 EFLAGS: 00010206 [ 3858.620041][T24415] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 3858.628022][T24415] RDX: 00007ffc51043640 RSI: 00007f241b6e6b43 RDI: 00007ffc510434c0 [ 3858.636118][T24415] RBP: 00007ffc510434a0 R08: 0000000000000000 R09: 00007ffc510435b0 [ 3858.644135][T24415] R10: 0000000000000231 R11: 0000000000000293 R12: 00007ffc510434c0 [ 3858.652129][T24415] R13: 00007f241b6e6b43 R14: 00007ffc51043640 R15: 00007ffc51043640 [ 3858.660156][T24415] [ 3858.665936][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3858.668947][T24415] memory: usage 8320kB, limit 0kB, failcnt 1931 [ 3858.680143][T24415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3858.681516][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3858.689619][T24415] Memory cgroup stats for /syz5: [ 3858.695897][T24415] anon 36864 [ 3858.695897][T24415] file 8355840 [ 3858.695897][T24415] kernel 110592 [ 3858.695897][T24415] kernel_stack 0 [ 3858.695897][T24415] pagetables 8192 [ 3858.695897][T24415] sec_pagetables 0 [ 3858.695897][T24415] percpu 0 [ 3858.695897][T24415] sock 0 [ 3858.695897][T24415] vmalloc 0 [ 3858.695897][T24415] shmem 8355840 [ 3858.695897][T24415] zswap 0 [ 3858.695897][T24415] zswapped 0 [ 3858.695897][T24415] file_mapped 221184 [ 3858.695897][T24415] file_dirty 0 [ 3858.695897][T24415] file_writeback 0 [ 3858.695897][T24415] swapcached 0 [ 3858.695897][T24415] anon_thp 0 [ 3858.695897][T24415] file_thp 0 [ 3858.695897][T24415] shmem_thp 0 [ 3858.695897][T24415] inactive_anon 36864 [ 3858.695897][T24415] active_anon 8355840 [ 3858.695897][T24415] inactive_file 0 [ 3858.695897][T24415] active_file 0 [ 3858.695897][T24415] unevictable 0 [ 3858.695897][T24415] slab_reclaimable 30992 [ 3858.695897][T24415] slab_unreclaimable 59656 [ 3858.695897][T24415] slab 90648 [ 3858.716246][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3858.804032][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3858.812767][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3858.862895][T24415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24415,uid=0 [ 3858.881323][T24415] Memory cgroup out of memory: Killed process 24415 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3858.924326][T24506] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3858.941555][T24506] netdevsim netdevsim3 netdevsim1: renamed from eth1 19:59:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3858.978150][T24506] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3859.049795][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3859.122126][T24506] netdevsim netdevsim3 netdevsim3: renamed from eth3 19:59:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:59:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3859.752283][T24579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3859.967693][T24579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3860.042769][T24506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3860.103356][T24579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3860.230636][T24506] 8021q: adding VLAN 0 to HW filter on device team0 [ 3860.281309][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3860.289866][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3860.308655][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3860.328526][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3860.346536][T24491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3860.393516][T24579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3860.465470][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3860.475719][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3860.484751][T30817] bridge0: port 1(bridge_slave_0) entered blocking state [ 3860.492015][T30817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3860.500229][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3860.509692][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3860.522844][T30817] bridge0: port 2(bridge_slave_1) entered blocking state [ 3860.531498][T30817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3860.583054][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3860.593281][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3860.603134][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3860.639314][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3860.659234][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3860.669513][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3860.681147][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3860.719910][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3860.746392][T24506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3860.758954][T24506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3860.784123][T24491] device veth0_vlan entered promiscuous mode [ 3860.791967][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3860.801600][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3860.810512][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3860.819844][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3860.828866][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3860.837769][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3860.872945][T24491] device veth1_vlan entered promiscuous mode [ 3860.891972][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3860.899935][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3860.921799][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3860.929803][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3861.077952][T24491] device veth0_macvtap entered promiscuous mode [ 3861.138425][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3861.171769][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3861.180527][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3861.236607][T24491] device veth1_macvtap entered promiscuous mode [ 3861.263246][T24579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3861.319626][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3861.341192][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.360853][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3861.380829][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.403446][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3861.421107][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.443092][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3861.461034][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.510833][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3861.541025][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.562547][T24491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3861.570370][T24579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3861.614320][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3861.632433][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3861.662690][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3861.714844][T24506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3861.726072][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3861.761129][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.810951][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3861.832339][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.854901][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3861.866204][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.876383][T31933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3861.887114][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3861.897769][T31933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3861.906656][T31933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3861.915039][T31933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3861.922544][T31933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3861.926631][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3861.980999][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3862.007442][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3862.044292][T24491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3862.081076][T24579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3862.094222][T24579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3862.133424][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3862.144109][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3862.152241][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3862.161159][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3862.186592][T24491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.220600][T24491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.246100][T24491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.291379][T24491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.354233][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3862.381928][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3862.451350][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3862.459820][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3862.483383][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3862.492030][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3862.532164][T24506] device veth0_vlan entered promiscuous mode [ 3862.575760][T24506] device veth1_vlan entered promiscuous mode [ 3862.801591][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3862.812619][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3862.831654][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3862.862380][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3862.886160][T24692] chnl_net:caif_netlink_parms(): no params data found [ 3862.895587][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3862.908636][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3862.918783][T24506] device veth0_macvtap entered promiscuous mode [ 3862.950016][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3862.966256][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3863.001708][T24506] device veth1_macvtap entered promiscuous mode [ 3863.092999][T27309] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.111574][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.112967][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3863.135717][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.160832][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.161575][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3863.180880][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.200858][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.220817][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.230691][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.260983][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.290845][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.318107][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.344972][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3863.366637][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.395888][T24506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3863.476518][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3863.527591][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3863.547065][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3863.582545][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3863.643145][T27309] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.685401][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.707483][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.727447][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.748028][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.763850][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.784971][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.810579][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.830941][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.850816][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.870814][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.880686][T24506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3863.919735][T24506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3863.940178][T24506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3863.969681][T24579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3864.041225][T10157] Bluetooth: hci0: command 0x0409 tx timeout [ 3864.071380][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3864.083732][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3864.143050][T27309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3864.182759][T24506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3864.201135][T24728] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3864.220960][T24506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3864.229722][T24506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3864.238591][T24728] CPU: 0 PID: 24728 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3864.249127][T24728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3864.259397][T24728] Call Trace: [ 3864.262724][T24728] [ 3864.265687][T24728] dump_stack_lvl+0xd1/0x138 [ 3864.270330][T24728] dump_header+0x10b/0x85f [ 3864.274813][T24728] oom_kill_process.cold+0x10/0x15 [ 3864.279995][T24728] out_of_memory+0x35c/0x14a0 [ 3864.284747][T24728] ? oom_killer_disable+0x280/0x280 [ 3864.290009][T24728] ? find_held_lock+0x2d/0x110 [ 3864.294833][T24728] mem_cgroup_out_of_memory+0x206/0x270 [ 3864.300436][T24728] ? mem_cgroup_margin+0x130/0x130 [ 3864.305584][T24728] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3864.311419][T24728] memory_max_write+0x2f9/0x3c0 [ 3864.316299][T24728] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3864.322475][T24728] ? lock_release+0x810/0x810 [ 3864.327258][T24728] cgroup_file_write+0x1e2/0x770 [ 3864.332246][T24728] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3864.338331][T24728] ? kill_css+0x370/0x370 [ 3864.342700][T24728] ? __virt_addr_valid+0x61/0x2e0 [ 3864.347773][T24728] ? kill_css+0x370/0x370 [ 3864.352227][T24728] kernfs_fop_write_iter+0x3f1/0x600 [ 3864.357547][T24728] vfs_write+0x9ed/0xdd0 [ 3864.361815][T24728] ? kernel_write+0x630/0x630 [ 3864.366603][T24728] ? __fget_files+0x26a/0x440 [ 3864.371314][T24728] ksys_write+0x12b/0x250 [ 3864.375659][T24728] ? __ia32_sys_read+0xb0/0xb0 [ 3864.380445][T24728] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3864.386481][T24728] do_syscall_64+0x39/0xb0 [ 3864.390933][T24728] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3864.397291][T24728] RIP: 0033:0x7feffa28c0c9 [ 3864.401892][T24728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3864.421711][T24728] RSP: 002b:00007feffaf9d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3864.430147][T24728] RAX: ffffffffffffffda RBX: 00007feffa3ac050 RCX: 00007feffa28c0c9 [ 3864.438417][T24728] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3864.446426][T24728] RBP: 00007feffa2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3864.454602][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3864.462710][T24728] R13: 00007fffbb21d53f R14: 00007feffaf9d300 R15: 0000000000022000 [ 3864.471026][T24728] [ 3864.513493][T24506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3864.540741][T24692] bridge0: port 1(bridge_slave_0) entered blocking state [ 3864.547640][T24728] memory: usage 8568kB, limit 0kB, failcnt 1664 [ 3864.547920][T24692] bridge0: port 1(bridge_slave_0) entered disabled state [ 3864.559437][T24728] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3864.568729][T24728] Memory cgroup stats for /syz1: [ 3864.568947][T24728] anon 118784 [ 3864.568947][T24728] file 8318976 [ 3864.568947][T24728] kernel 323584 [ 3864.568947][T24728] kernel_stack 98304 [ 3864.568947][T24728] pagetables 77824 [ 3864.568947][T24728] sec_pagetables 0 [ 3864.568947][T24728] percpu 64 [ 3864.568947][T24728] sock 0 [ 3864.568947][T24728] vmalloc 0 [ 3864.568947][T24728] shmem 8318976 [ 3864.568947][T24728] zswap 0 [ 3864.568947][T24728] zswapped 0 [ 3864.568947][T24728] file_mapped 131072 [ 3864.568947][T24728] file_dirty 0 [ 3864.568947][T24728] file_writeback 0 [ 3864.568947][T24728] swapcached 0 [ 3864.568947][T24728] anon_thp 0 [ 3864.568947][T24728] file_thp 0 [ 3864.568947][T24728] shmem_thp 0 [ 3864.568947][T24728] inactive_anon 118784 [ 3864.568947][T24728] active_anon 8318976 [ 3864.568947][T24728] inactive_file 0 [ 3864.568947][T24728] active_file 0 [ 3864.568947][T24728] unevictable 0 [ 3864.568947][T24728] slab_reclaimable 39272 [ 3864.568947][T24728] slab_unreclaimable 82440 [ 3864.568947][T24728] slab 121712 [ 3864.612084][T24692] device bridge_slave_0 entered promiscuous mode [ 3864.699900][T24728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24491,uid=0 [ 3864.743924][T24728] Memory cgroup out of memory: Killed process 24491 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3864.780754][T24579] 8021q: adding VLAN 0 to HW filter on device team0 [ 3864.846610][T27309] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3864.882564][T24692] bridge0: port 2(bridge_slave_1) entered blocking state [ 3864.889755][T24692] bridge0: port 2(bridge_slave_1) entered disabled state [ 3864.922135][T24692] device bridge_slave_1 entered promiscuous mode [ 3864.930310][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3864.938810][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3864.947132][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3864.956576][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3864.965392][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 3864.972575][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3864.983055][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3865.133687][T24692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3865.161716][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3865.170529][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3865.188167][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3865.195450][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3865.203540][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3865.213056][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3865.223456][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3865.297464][T24692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3865.307728][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3865.331691][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3865.343497][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3865.352758][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3865.362409][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3865.371926][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3865.394892][T24579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3865.491706][T24692] team0: Port device team_slave_0 added [ 3865.552690][T24692] team0: Port device team_slave_1 added [ 3865.569818][T27313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3865.607463][T27313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:59:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 19:59:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3865.703282][T24692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3865.710291][T24692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3865.880926][T24692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3865.981956][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3866.052954][T27309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3866.111921][T10157] Bluetooth: hci0: command 0x041b tx timeout [ 3866.127363][T24692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3866.148946][T24692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3866.230133][T24692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3866.331674][T27309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3866.411564][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3866.419746][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3866.543199][T27309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3866.592905][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3866.644145][T24692] device hsr_slave_0 entered promiscuous mode [ 3866.701419][T24692] device hsr_slave_1 entered promiscuous mode [ 3866.731265][T24692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3866.740873][T24692] Cannot create hsr debugfs directory [ 3866.788474][T27309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3866.866141][T24756] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3866.931236][T24756] CPU: 1 PID: 24756 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3866.942109][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3866.952277][T24756] Call Trace: [ 3866.955579][T24756] [ 3866.958525][T24756] dump_stack_lvl+0xd1/0x138 [ 3866.963238][T24756] dump_header+0x10b/0x85f [ 3866.967961][T24756] oom_kill_process.cold+0x10/0x15 [ 3866.973395][T24756] out_of_memory+0x35c/0x14a0 [ 3866.978222][T24756] ? oom_killer_disable+0x280/0x280 [ 3866.983472][T24756] mem_cgroup_out_of_memory+0x206/0x270 [ 3866.989188][T24756] ? mem_cgroup_margin+0x130/0x130 [ 3866.994350][T24756] memory_max_write+0x2f9/0x3c0 [ 3866.999223][T24756] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3867.005406][T24756] ? lock_release+0x810/0x810 [ 3867.010126][T24756] cgroup_file_write+0x1e2/0x770 [ 3867.015089][T24756] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3867.021210][T24756] ? kill_css+0x370/0x370 [ 3867.025656][T24756] ? __virt_addr_valid+0x61/0x2e0 [ 3867.030738][T24756] ? kill_css+0x370/0x370 [ 3867.035104][T24756] kernfs_fop_write_iter+0x3f1/0x600 [ 3867.040433][T24756] vfs_write+0x9ed/0xdd0 [ 3867.044706][T24756] ? kernel_write+0x630/0x630 [ 3867.049410][T24756] ? __fget_files+0x26a/0x440 [ 3867.054215][T24756] ksys_write+0x12b/0x250 [ 3867.058575][T24756] ? __ia32_sys_read+0xb0/0xb0 [ 3867.063397][T24756] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3867.069494][T24756] do_syscall_64+0x39/0xb0 [ 3867.073959][T24756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3867.079871][T24756] RIP: 0033:0x7ff26348c0c9 [ 3867.084302][T24756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3867.104103][T24756] RSP: 002b:00007ff26420b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3867.112535][T24756] RAX: ffffffffffffffda RBX: 00007ff2635ac050 RCX: 00007ff26348c0c9 [ 3867.120612][T24756] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3867.128682][T24756] RBP: 00007ff2634e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3867.136665][T24756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3867.144647][T24756] R13: 00007ffe19894eaf R14: 00007ff26420b300 R15: 0000000000022000 [ 3867.152654][T24756] [ 3867.226881][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3867.237421][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3867.257219][T24579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3867.336220][T24756] memory: usage 8644kB, limit 0kB, failcnt 2397 [ 3867.367450][T24756] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3867.399566][T24756] Memory cgroup stats for /syz3: [ 3867.399751][T24756] anon 118784 [ 3867.399751][T24756] file 8364032 [ 3867.399751][T24756] kernel 352256 [ 3867.399751][T24756] kernel_stack 98304 [ 3867.399751][T24756] pagetables 81920 [ 3867.399751][T24756] sec_pagetables 0 [ 3867.399751][T24756] percpu 64 [ 3867.399751][T24756] sock 0 [ 3867.399751][T24756] vmalloc 0 [ 3867.399751][T24756] shmem 8359936 [ 3867.399751][T24756] zswap 0 [ 3867.399751][T24756] zswapped 0 [ 3867.399751][T24756] file_mapped 163840 [ 3867.399751][T24756] file_dirty 0 [ 3867.399751][T24756] file_writeback 0 [ 3867.399751][T24756] swapcached 0 [ 3867.399751][T24756] anon_thp 0 [ 3867.399751][T24756] file_thp 0 [ 3867.399751][T24756] shmem_thp 0 [ 3867.399751][T24756] inactive_anon 4050944 [ 3867.399751][T24756] active_anon 4427776 [ 3867.399751][T24756] inactive_file 4096 [ 3867.399751][T24756] active_file 0 [ 3867.399751][T24756] unevictable 0 [ 3867.399751][T24756] slab_reclaimable 38888 [ 3867.399751][T24756] slab_unreclaimable 109800 [ 3867.399751][T24756] slab 148688 [ 3867.517521][T24756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24506,uid=0 [ 3867.541162][T24756] Memory cgroup out of memory: Killed process 24506 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3867.652190][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3867.670997][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3867.816211][T27309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3867.988195][T24579] device veth0_vlan entered promiscuous mode [ 3868.062002][T27309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:59:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 19:59:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3868.121100][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3868.129731][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3868.152028][T24579] device veth1_vlan entered promiscuous mode [ 3868.191092][T10157] Bluetooth: hci0: command 0x040f tx timeout [ 3868.231292][T31933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3868.240501][T31933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3868.249888][T31933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3868.258369][T31933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3868.266192][T31933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3868.321908][T27309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3868.451833][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3868.476087][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3868.501841][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3868.531535][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 19:59:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3868.600424][T27309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3868.642635][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3868.662234][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3868.683496][T24579] device veth0_macvtap entered promiscuous mode [ 3868.736547][T24579] device veth1_macvtap entered promiscuous mode [ 3868.830306][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3868.858907][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3868.870013][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3868.890352][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3868.961089][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3869.010888][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.069019][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3869.100865][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.140984][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3869.170831][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.180736][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3869.241590][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.263509][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3869.304174][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.352505][T24579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3869.452999][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3869.483777][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3869.522147][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3869.571162][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3869.585178][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.636824][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.649952][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.660660][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.697131][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.702107][T31933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3869.721349][T31933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3869.731892][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.732015][T31933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3869.752675][T31933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3869.760273][T31933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3869.767981][T31933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3869.770979][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.841478][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.871055][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.910921][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3869.940686][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3869.957408][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3870.000879][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3870.029128][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3870.062669][T24579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3870.162192][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3870.171391][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3870.205350][T24579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3870.231812][T24579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3870.282561][T31933] Bluetooth: hci0: command 0x0419 tx timeout [ 3870.289474][T24579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3870.351089][T10157] Bluetooth: hci1: command 0x0409 tx timeout [ 3870.360977][T24579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3870.761702][T31933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3870.772656][T31933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3870.780898][T31933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3870.794407][T31933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3870.802839][T31933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3870.810614][T31933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3871.104215][T24766] chnl_net:caif_netlink_parms(): no params data found [ 3871.216981][T10157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3871.226589][T10157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3871.235762][T10157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3871.244824][T10157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3871.252845][T10157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3871.302466][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3871.310639][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3871.385594][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3871.785024][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3871.793457][T10157] Bluetooth: hci3: command 0x0409 tx timeout [ 3871.821150][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3871.989049][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3872.003481][T24766] bridge0: port 1(bridge_slave_0) entered blocking state [ 3872.010641][T24766] bridge0: port 1(bridge_slave_0) entered disabled state [ 3872.037765][T24766] device bridge_slave_0 entered promiscuous mode [ 3872.116871][T24692] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3872.245817][T24780] chnl_net:caif_netlink_parms(): no params data found [ 3872.268458][T24766] bridge0: port 2(bridge_slave_1) entered blocking state [ 3872.284341][T24766] bridge0: port 2(bridge_slave_1) entered disabled state [ 3872.312319][T24766] device bridge_slave_1 entered promiscuous mode [ 3872.365121][T24692] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3872.441116][T31933] Bluetooth: hci1: command 0x041b tx timeout [ 3872.448788][T24815] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3872.460972][T24815] CPU: 1 PID: 24815 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3872.472032][T24815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3872.482130][T24815] Call Trace: [ 3872.485441][T24815] [ 3872.488403][T24815] dump_stack_lvl+0xd1/0x138 [ 3872.493044][T24815] dump_header+0x10b/0x85f [ 3872.497523][T24815] oom_kill_process.cold+0x10/0x15 [ 3872.502780][T24815] out_of_memory+0x35c/0x14a0 [ 3872.507526][T24815] ? oom_killer_disable+0x280/0x280 [ 3872.512804][T24815] ? find_held_lock+0x2d/0x110 [ 3872.517636][T24815] mem_cgroup_out_of_memory+0x206/0x270 [ 3872.523228][T24815] ? mem_cgroup_margin+0x130/0x130 [ 3872.528377][T24815] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3872.534216][T24815] memory_max_write+0x2f9/0x3c0 [ 3872.539093][T24815] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3872.545178][T24815] ? lock_release+0x810/0x810 [ 3872.549882][T24815] cgroup_file_write+0x1e2/0x770 [ 3872.554843][T24815] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3872.560961][T24815] ? kill_css+0x370/0x370 [ 3872.565318][T24815] ? __virt_addr_valid+0x61/0x2e0 [ 3872.570462][T24815] ? kill_css+0x370/0x370 [ 3872.574808][T24815] kernfs_fop_write_iter+0x3f1/0x600 [ 3872.580122][T24815] vfs_write+0x9ed/0xdd0 [ 3872.584396][T24815] ? kernel_write+0x630/0x630 [ 3872.589093][T24815] ? lockdep_hardirqs_on+0x7d/0x100 [ 3872.594326][T24815] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3872.600533][T24815] ksys_write+0x12b/0x250 [ 3872.604884][T24815] ? __ia32_sys_read+0xb0/0xb0 [ 3872.609671][T24815] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3872.615589][T24815] do_syscall_64+0x39/0xb0 [ 3872.620041][T24815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3872.625953][T24815] RIP: 0033:0x7fed55a8c0c9 [ 3872.630405][T24815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3872.650041][T24815] RSP: 002b:00007fed56838168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3872.658498][T24815] RAX: ffffffffffffffda RBX: 00007fed55babf80 RCX: 00007fed55a8c0c9 [ 3872.666491][T24815] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3872.674573][T24815] RBP: 00007fed55ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3872.682552][T24815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3872.690529][T24815] R13: 00007fff3daf1f9f R14: 00007fed56838300 R15: 0000000000022000 [ 3872.698530][T24815] [ 3872.774458][T24692] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3872.779441][T24815] memory: usage 8588kB, limit 0kB, failcnt 2302 [ 3872.791579][T24815] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3872.810473][T24815] Memory cgroup stats for /syz0: [ 3872.815502][T24815] anon 114688 [ 3872.815502][T24815] file 8347648 [ 3872.815502][T24815] kernel 311296 [ 3872.815502][T24815] kernel_stack 65536 [ 3872.815502][T24815] pagetables 81920 [ 3872.815502][T24815] sec_pagetables 0 [ 3872.815502][T24815] percpu 64 [ 3872.815502][T24815] sock 0 [ 3872.815502][T24815] vmalloc 0 [ 3872.815502][T24815] shmem 8347648 [ 3872.815502][T24815] zswap 0 [ 3872.815502][T24815] zswapped 0 [ 3872.815502][T24815] file_mapped 192512 [ 3872.815502][T24815] file_dirty 0 [ 3872.815502][T24815] file_writeback 0 [ 3872.815502][T24815] swapcached 0 [ 3872.815502][T24815] anon_thp 0 [ 3872.815502][T24815] file_thp 0 [ 3872.815502][T24815] shmem_thp 0 [ 3872.815502][T24815] inactive_anon 114688 [ 3872.815502][T24815] active_anon 8347648 [ 3872.815502][T24815] inactive_file 0 [ 3872.815502][T24815] active_file 0 [ 3872.815502][T24815] unevictable 0 [ 3872.815502][T24815] slab_reclaimable 40576 [ 3872.815502][T24815] slab_unreclaimable 101760 [ 3872.815502][T24815] slab 142336 [ 3872.919171][T31933] Bluetooth: hci4: command 0x0409 tx timeout [ 3872.941621][T24815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24814,uid=0 [ 3872.986438][T24815] Memory cgroup out of memory: Killed process 24814 (syz-executor.0) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 19:59:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3873.062684][T24692] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3873.078917][T24766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3873.155219][T24766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3873.181528][T24579] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 3873.197167][T24579] CPU: 1 PID: 24579 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3873.207657][T24579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3873.217749][T24579] Call Trace: [ 3873.221051][T24579] [ 3873.224003][T24579] dump_stack_lvl+0xd1/0x138 [ 3873.228671][T24579] dump_header+0x10b/0x85f [ 3873.233139][T24579] oom_kill_process.cold+0x10/0x15 [ 3873.238303][T24579] out_of_memory+0x35c/0x14a0 [ 3873.243030][T24579] ? find_held_lock+0x2d/0x110 [ 3873.247927][T24579] ? oom_killer_disable+0x280/0x280 [ 3873.253172][T24579] ? find_held_lock+0x2d/0x110 [ 3873.257962][T24579] mem_cgroup_out_of_memory+0x206/0x270 [ 3873.263542][T24579] ? mem_cgroup_margin+0x130/0x130 [ 3873.268675][T24579] ? lock_downgrade+0x6e0/0x6e0 [ 3873.273641][T24579] try_charge_memcg+0xefb/0x12f0 [ 3873.278596][T24579] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3873.284589][T24579] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3873.290344][T24579] ? lock_downgrade+0x6e0/0x6e0 [ 3873.295205][T24579] ? lock_downgrade+0x6e0/0x6e0 [ 3873.300064][T24579] ? rcu_read_unlock+0x9/0x60 [ 3873.304768][T24579] obj_cgroup_charge+0x2af/0x5e0 [ 3873.309761][T24579] __kmem_cache_alloc_node+0xb2/0x430 [ 3873.315143][T24579] ? kvmalloc_node+0xa2/0x1a0 [ 3873.319928][T24579] ? kvmalloc_node+0xa2/0x1a0 [ 3873.324620][T24579] __kmalloc_node+0x4d/0xd0 [ 3873.329146][T24579] kvmalloc_node+0xa2/0x1a0 [ 3873.333669][T24579] alloc_fdtable+0xf4/0x2a0 [ 3873.338181][T24579] dup_fd+0x722/0xcb0 [ 3873.342269][T24579] copy_process+0x24ea/0x7520 [ 3873.347044][T24579] ? _raw_spin_unlock+0x28/0x40 [ 3873.351907][T24579] ? wp_page_reuse+0x197/0x570 [ 3873.356910][T24579] ? __cleanup_sighand+0xb0/0xb0 [ 3873.361857][T24579] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3873.367450][T24579] ? rwlock_bug.part.0+0x90/0x90 [ 3873.372396][T24579] ? lock_chain_count+0x20/0x20 [ 3873.377333][T24579] kernel_clone+0xeb/0x990 [ 3873.381790][T24579] ? create_io_thread+0xf0/0xf0 [ 3873.386667][T24579] ? find_held_lock+0x2d/0x110 [ 3873.391493][T24579] __do_sys_clone+0xba/0x100 [ 3873.396186][T24579] ? kernel_clone+0x990/0x990 [ 3873.400890][T24579] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3873.406805][T24579] do_syscall_64+0x39/0xb0 [ 3873.411238][T24579] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3873.417142][T24579] RIP: 0033:0x7fed55a89dfb [ 3873.421652][T24579] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3873.441265][T24579] RSP: 002b:00007fff3daf21e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3873.449686][T24579] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed55a89dfb [ 3873.457683][T24579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3873.465766][T24579] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556019400 [ 3873.473781][T24579] R10: 00005555560196d0 R11: 0000000000000246 R12: 0000000000000001 [ 3873.481770][T24579] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff3daf22c0 [ 3873.490045][T24579] [ 3873.502633][T10157] Bluetooth: hci5: command 0x0409 tx timeout [ 3873.513169][T24579] memory: usage 8352kB, limit 0kB, failcnt 2332 [ 3873.519470][T24579] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3873.577748][T24789] chnl_net:caif_netlink_parms(): no params data found [ 3873.584690][T24579] Memory cgroup stats for /syz0: [ 3873.584876][T24579] anon 36864 [ 3873.584876][T24579] file 8347648 [ 3873.584876][T24579] kernel 167936 [ 3873.584876][T24579] kernel_stack 32768 [ 3873.584876][T24579] pagetables 8192 [ 3873.584876][T24579] sec_pagetables 0 [ 3873.584876][T24579] percpu 64 [ 3873.584876][T24579] sock 0 [ 3873.584876][T24579] vmalloc 0 [ 3873.584876][T24579] shmem 8347648 [ 3873.584876][T24579] zswap 0 [ 3873.584876][T24579] zswapped 0 [ 3873.584876][T24579] file_mapped 172032 [ 3873.584876][T24579] file_dirty 0 [ 3873.584876][T24579] file_writeback 0 [ 3873.584876][T24579] swapcached 0 [ 3873.584876][T24579] anon_thp 0 [ 3873.584876][T24579] file_thp 0 [ 3873.584876][T24579] shmem_thp 0 [ 3873.584876][T24579] inactive_anon 36864 [ 3873.584876][T24579] active_anon 8347648 [ 3873.584876][T24579] inactive_file 0 [ 3873.584876][T24579] active_file 0 [ 3873.584876][T24579] unevictable 0 [ 3873.584876][T24579] slab_reclaimable 31904 [ 3873.584876][T24579] slab_unreclaimable 79696 [ 3873.584876][T24579] slab 111600 [ 3873.685147][T24579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24579,uid=0 [ 3873.701094][T24579] Memory cgroup out of memory: Killed process 24579 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3873.868966][T24766] team0: Port device team_slave_0 added [ 3873.880939][T10157] Bluetooth: hci3: command 0x041b tx timeout [ 3873.886000][T24766] team0: Port device team_slave_1 added [ 3873.972458][T24766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3873.979642][T24766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3874.008738][T24766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3874.060456][T24780] bridge0: port 1(bridge_slave_0) entered blocking state [ 3874.068540][T24780] bridge0: port 1(bridge_slave_0) entered disabled state [ 3874.077966][T24780] device bridge_slave_0 entered promiscuous mode [ 3874.090501][T24766] batman_adv: batadv0: Adding interface: batadv_slave_1 19:59:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3874.101991][T24766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3874.161993][T24766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 19:59:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3874.236684][T24780] bridge0: port 2(bridge_slave_1) entered blocking state [ 3874.245896][T24780] bridge0: port 2(bridge_slave_1) entered disabled state [ 3874.256606][T24780] device bridge_slave_1 entered promiscuous mode [ 3874.396627][T24789] bridge0: port 1(bridge_slave_0) entered blocking state [ 3874.431483][T24789] bridge0: port 1(bridge_slave_0) entered disabled state [ 3874.439854][T24789] device bridge_slave_0 entered promiscuous mode [ 3874.474939][T24789] bridge0: port 2(bridge_slave_1) entered blocking state [ 3874.490933][T24789] bridge0: port 2(bridge_slave_1) entered disabled state [ 3874.499139][T24789] device bridge_slave_1 entered promiscuous mode [ 3874.511132][T10157] Bluetooth: hci1: command 0x040f tx timeout [ 3874.563158][T24766] device hsr_slave_0 entered promiscuous mode [ 3874.583933][T24766] device hsr_slave_1 entered promiscuous mode [ 3874.611804][T24766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3874.619449][T24766] Cannot create hsr debugfs directory [ 3874.718436][T24780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3874.739527][T24794] chnl_net:caif_netlink_parms(): no params data found [ 3874.815116][T24789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3874.861755][T24780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3874.907877][T24789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3874.991577][T10157] Bluetooth: hci4: command 0x041b tx timeout [ 3875.088653][T24789] team0: Port device team_slave_0 added [ 3875.160752][T24780] team0: Port device team_slave_0 added [ 3875.200239][T24789] team0: Port device team_slave_1 added [ 3875.226278][T24692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3875.249587][T24780] team0: Port device team_slave_1 added [ 3875.382531][T24789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3875.389560][T24789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3875.418681][T24789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3875.515049][T24780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3875.531025][T24780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3875.559065][T10157] Bluetooth: hci5: command 0x041b tx timeout [ 3875.591155][T24780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3875.613114][T24789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3875.620139][T24789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3875.661311][T24789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3875.673300][T24794] bridge0: port 1(bridge_slave_0) entered blocking state [ 3875.680428][T24794] bridge0: port 1(bridge_slave_0) entered disabled state [ 3875.690175][T24794] device bridge_slave_0 entered promiscuous mode [ 3875.781008][T24692] 8021q: adding VLAN 0 to HW filter on device team0 [ 3875.788773][T24780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3875.797599][T24780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3875.848040][T24780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3875.889888][T24794] bridge0: port 2(bridge_slave_1) entered blocking state [ 3875.911123][T24794] bridge0: port 2(bridge_slave_1) entered disabled state [ 3875.941099][T24794] device bridge_slave_1 entered promiscuous mode [ 3875.951378][T10157] Bluetooth: hci3: command 0x040f tx timeout [ 3875.981363][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3875.989312][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3876.197763][T31933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3876.208437][T31933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3876.216952][T31933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3876.226088][T31933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3876.234830][T31933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3876.242388][T31933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3876.438044][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3876.449769][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3876.459390][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3876.466558][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3876.476650][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3876.486569][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3876.495347][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 3876.502500][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3876.510090][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3876.583250][T24789] device hsr_slave_0 entered promiscuous mode [ 3876.591152][T31933] Bluetooth: hci1: command 0x0419 tx timeout [ 3876.621447][T24789] device hsr_slave_1 entered promiscuous mode [ 3876.641026][T24789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3876.648824][T24789] Cannot create hsr debugfs directory [ 3876.676115][T24794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3876.746773][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3876.771743][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3876.823273][T24794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3876.894401][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3876.905262][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3877.052120][T24780] device hsr_slave_0 entered promiscuous mode [ 3877.071201][T31933] Bluetooth: hci4: command 0x040f tx timeout [ 3877.078046][T24780] device hsr_slave_1 entered promiscuous mode [ 3877.093017][T24780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3877.113114][T24780] Cannot create hsr debugfs directory [ 3877.121087][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3877.129222][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3877.138193][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3877.163368][T24794] team0: Port device team_slave_0 added [ 3877.224795][T24794] team0: Port device team_slave_1 added [ 3877.251782][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3877.260505][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3877.271040][T24692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3877.423409][T27309] device hsr_slave_0 left promiscuous mode [ 3877.430363][T27309] device hsr_slave_1 left promiscuous mode [ 3877.439051][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3877.448094][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3877.457923][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3877.465977][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3877.476276][T27309] device bridge_slave_1 left promiscuous mode [ 3877.482751][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3877.492163][T27309] device bridge_slave_0 left promiscuous mode [ 3877.498428][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3877.530600][T27309] device hsr_slave_0 left promiscuous mode [ 3877.559645][T27309] device hsr_slave_1 left promiscuous mode [ 3877.581768][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3877.589318][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3877.621198][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3877.628720][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3877.636608][T31933] Bluetooth: hci5: command 0x040f tx timeout [ 3877.645418][T27309] device bridge_slave_1 left promiscuous mode [ 3877.651915][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3877.662322][T27309] device bridge_slave_0 left promiscuous mode [ 3877.668584][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3877.707233][T27309] device hsr_slave_0 left promiscuous mode [ 3877.715091][T27309] device hsr_slave_1 left promiscuous mode [ 3877.722087][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3877.729559][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3877.739276][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3877.746961][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3877.756949][T27309] device bridge_slave_1 left promiscuous mode [ 3877.763878][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3877.775778][T27309] device bridge_slave_0 left promiscuous mode [ 3877.782450][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3877.811345][T27309] device hsr_slave_0 left promiscuous mode [ 3877.821406][T27309] device hsr_slave_1 left promiscuous mode [ 3877.841626][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3877.849146][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3877.873330][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3877.890925][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3877.915550][T27309] device bridge_slave_1 left promiscuous mode [ 3877.922192][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3877.951293][T27309] device bridge_slave_0 left promiscuous mode [ 3877.957561][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3878.003207][T27309] device hsr_slave_0 left promiscuous mode [ 3878.016263][T27309] device hsr_slave_1 left promiscuous mode [ 3878.032666][T31933] Bluetooth: hci3: command 0x0419 tx timeout [ 3878.040005][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3878.069399][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3878.080631][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3878.088711][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3878.099013][T27309] device bridge_slave_1 left promiscuous mode [ 3878.106782][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3878.116529][T27309] device bridge_slave_0 left promiscuous mode [ 3878.131055][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3878.183724][T27309] device veth1_macvtap left promiscuous mode [ 3878.189827][T27309] device veth0_macvtap left promiscuous mode [ 3878.211039][T27309] device veth1_vlan left promiscuous mode [ 3878.216932][T27309] device veth0_vlan left promiscuous mode [ 3878.249187][T27309] device veth1_macvtap left promiscuous mode [ 3878.255538][T27309] device veth0_macvtap left promiscuous mode [ 3878.270965][T31933] Bluetooth: hci2: command 0x0409 tx timeout [ 3878.278694][T27309] device veth1_vlan left promiscuous mode [ 3878.301070][T27309] device veth0_vlan left promiscuous mode [ 3878.308273][T27309] device veth1_macvtap left promiscuous mode [ 3878.320885][T27309] device veth0_macvtap left promiscuous mode [ 3878.327475][T27309] device veth1_vlan left promiscuous mode [ 3878.339578][T27309] device veth0_vlan left promiscuous mode [ 3878.363189][T27309] device veth1_macvtap left promiscuous mode [ 3878.369473][T27309] device veth0_macvtap left promiscuous mode [ 3878.390971][T27309] device veth1_vlan left promiscuous mode [ 3878.396815][T27309] device veth0_vlan left promiscuous mode [ 3878.412916][T27309] device veth1_macvtap left promiscuous mode [ 3878.418975][T27309] device veth0_macvtap left promiscuous mode [ 3878.441258][T27309] device veth1_vlan left promiscuous mode [ 3878.447290][T27309] device veth0_vlan left promiscuous mode [ 3879.151360][T31933] Bluetooth: hci4: command 0x0419 tx timeout [ 3879.711136][T31933] Bluetooth: hci5: command 0x0419 tx timeout [ 3879.998561][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3880.061705][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3880.078355][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3880.114410][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3880.277967][T27309] bond0 (unregistering): Released all slaves [ 3880.350951][T31933] Bluetooth: hci2: command 0x041b tx timeout [ 3880.512753][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3880.519294][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3880.587898][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3880.619255][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3880.654143][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3880.714203][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3880.922039][T27309] bond0 (unregistering): Released all slaves [ 3881.265581][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3881.295492][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3881.344046][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3881.391320][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3881.557243][T27309] bond0 (unregistering): Released all slaves [ 3881.804188][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3881.824284][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3881.847715][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3881.881330][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3882.072954][T27309] bond0 (unregistering): Released all slaves [ 3882.394120][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3882.431290][T31933] Bluetooth: hci2: command 0x040f tx timeout [ 3882.431985][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3882.501051][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3882.564149][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3882.816020][T27309] bond0 (unregistering): Released all slaves [ 3882.960497][T24794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3882.980826][T24794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3883.041012][T24794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3883.063321][T24794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3883.070324][T24794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3883.140859][T24794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3883.466317][T24794] device hsr_slave_0 entered promiscuous mode [ 3883.492021][T24794] device hsr_slave_1 entered promiscuous mode [ 3883.511824][T24794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3883.519438][T24794] Cannot create hsr debugfs directory [ 3883.617762][T24766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3883.746250][T24692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3883.770331][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3883.791207][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3883.812410][T24766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3883.857323][T24766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3884.021351][T24860] chnl_net:caif_netlink_parms(): no params data found [ 3884.043223][T24766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3884.510946][T31933] Bluetooth: hci2: command 0x0419 tx timeout [ 3884.780673][T24766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3884.796927][T24860] bridge0: port 1(bridge_slave_0) entered blocking state [ 3884.805468][T24860] bridge0: port 1(bridge_slave_0) entered disabled state [ 3884.832861][T24860] device bridge_slave_0 entered promiscuous mode [ 3884.876772][T24766] 8021q: adding VLAN 0 to HW filter on device team0 [ 3884.912647][T24860] bridge0: port 2(bridge_slave_1) entered blocking state [ 3884.919894][T24860] bridge0: port 2(bridge_slave_1) entered disabled state [ 3884.962813][T24860] device bridge_slave_1 entered promiscuous mode [ 3884.970659][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3884.980083][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3885.091750][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3885.101243][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3885.109899][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3885.117115][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3885.125581][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3885.134690][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3885.234871][T24860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3885.276987][T24860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3885.298026][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3885.331581][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3885.341269][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3885.349966][T13737] bridge0: port 2(bridge_slave_1) entered blocking state [ 3885.357361][T13737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3885.380061][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3885.421707][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3885.437826][T24692] device veth0_vlan entered promiscuous mode [ 3885.531629][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3885.540572][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3885.564132][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3885.581704][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3885.589787][T32707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3885.619370][T24692] device veth1_vlan entered promiscuous mode [ 3885.657002][T24860] team0: Port device team_slave_0 added [ 3885.673055][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3885.713314][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3885.731812][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3885.751162][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3885.759727][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3885.791188][T24789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3885.980890][T24780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3886.042495][T24860] team0: Port device team_slave_1 added [ 3886.053526][T24766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3886.084504][T24766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3886.112483][T24789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3886.391866][T24780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3886.461099][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3886.483390][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3886.498048][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3886.522787][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3886.541940][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3886.555341][T24789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3886.634946][T24692] device veth0_macvtap entered promiscuous mode [ 3886.662502][T24860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3886.669518][T24860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3886.755614][T24860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3886.942811][T24780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3887.018711][T24789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3887.034511][T24860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3887.043923][T24860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3887.083898][T24860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3887.103228][T24692] device veth1_macvtap entered promiscuous mode [ 3887.135955][T24780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3887.325176][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3887.340937][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.351609][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3887.370915][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.387705][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3887.414626][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.442192][T24692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3887.459587][T24860] device hsr_slave_0 entered promiscuous mode [ 3887.483614][T24860] device hsr_slave_1 entered promiscuous mode [ 3887.502424][T24860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3887.543581][T24860] Cannot create hsr debugfs directory [ 3887.552700][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3887.571173][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3887.581983][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3887.613226][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3887.639025][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.660860][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3887.672922][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.683538][T24692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3887.694873][T24692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3887.723769][T24692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3887.792443][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3887.800028][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3887.808835][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3887.818290][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3887.833952][T24692] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3887.844671][T24692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3887.855197][T24692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3887.865195][T24692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3887.878994][T24766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3888.018196][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3888.051974][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3888.182347][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3888.197879][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3888.247068][T24766] device veth0_vlan entered promiscuous mode [ 3888.274390][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3888.291856][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3888.311483][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3888.319668][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3888.382794][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3888.473149][T24794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3888.525990][T24766] device veth1_vlan entered promiscuous mode [ 3888.562773][T24789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3888.584489][T24780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3888.614518][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3888.669462][T24794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3888.731296][T24780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3888.771339][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3888.791335][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3888.808231][T24789] 8021q: adding VLAN 0 to HW filter on device team0 [ 3888.833248][T24780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3888.951796][T24794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3888.996959][T24766] device veth0_macvtap entered promiscuous mode [ 3889.014572][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3889.031653][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3889.039611][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3889.061608][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3889.070493][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3889.103532][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3889.121623][T24780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3889.158875][T24766] device veth1_macvtap entered promiscuous mode [ 3889.294311][T24794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3889.376964][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3889.421889][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3889.477480][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3889.521809][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3889.528966][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3889.554830][T24963] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3889.566482][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3889.576790][T24963] CPU: 1 PID: 24963 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3889.587283][T24963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3889.597384][T24963] Call Trace: [ 3889.600698][T24963] [ 3889.604102][T24963] dump_stack_lvl+0xd1/0x138 [ 3889.608754][T24963] dump_header+0x10b/0x85f [ 3889.613237][T24963] oom_kill_process.cold+0x10/0x15 [ 3889.618421][T24963] out_of_memory+0x35c/0x14a0 [ 3889.623181][T24963] ? oom_killer_disable+0x280/0x280 [ 3889.628514][T24963] ? mark_held_locks+0x9f/0xe0 [ 3889.633327][T24963] mem_cgroup_out_of_memory+0x206/0x270 [ 3889.638932][T24963] ? mem_cgroup_margin+0x130/0x130 [ 3889.644134][T24963] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3889.650018][T24963] memory_max_write+0x2f9/0x3c0 [ 3889.654918][T24963] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3889.661039][T24963] ? lock_release+0x810/0x810 [ 3889.665773][T24963] cgroup_file_write+0x1e2/0x770 [ 3889.670759][T24963] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3889.676869][T24963] ? kill_css+0x370/0x370 [ 3889.681282][T24963] ? kill_css+0x370/0x370 [ 3889.685668][T24963] kernfs_fop_write_iter+0x3f1/0x600 [ 3889.691020][T24963] vfs_write+0x9ed/0xdd0 [ 3889.695322][T24963] ? kernel_write+0x630/0x630 [ 3889.700060][T24963] ? __fget_files+0x26a/0x440 [ 3889.704810][T24963] ksys_write+0x12b/0x250 [ 3889.709294][T24963] ? __ia32_sys_read+0xb0/0xb0 [ 3889.714174][T24963] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3889.720264][T24963] do_syscall_64+0x39/0xb0 [ 3889.724736][T24963] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3889.730773][T24963] RIP: 0033:0x7f925cc8c0c9 [ 3889.735230][T24963] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3889.754885][T24963] RSP: 002b:00007f925d9dc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3889.763434][T24963] RAX: ffffffffffffffda RBX: 00007f925cdabf80 RCX: 00007f925cc8c0c9 [ 3889.771463][T24963] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3889.779579][T24963] RBP: 00007f925cce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3889.787592][T24963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3889.795601][T24963] R13: 00007ffd549904ff R14: 00007f925d9dc300 R15: 0000000000022000 [ 3889.803636][T24963] [ 3889.817245][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3889.826222][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 3889.833402][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3889.859111][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3889.909620][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3889.942376][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3889.975573][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.014914][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3890.060873][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.080837][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3890.100850][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.132593][T24766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3890.185113][T24963] memory: usage 8592kB, limit 0kB, failcnt 2515 [ 3890.221121][T24963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3890.221295][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3890.240881][T24963] Memory cgroup stats for /syz4: [ 3890.241144][T24963] anon 114688 [ 3890.241144][T24963] file 8359936 [ 3890.241144][T24963] kernel 270336 [ 3890.241144][T24963] kernel_stack 32768 [ 3890.241144][T24963] pagetables 77824 [ 3890.241144][T24963] sec_pagetables 0 [ 3890.241144][T24963] percpu 64 [ 3890.241144][T24963] sock 0 [ 3890.241144][T24963] vmalloc 0 [ 3890.241144][T24963] shmem 8359936 [ 3890.241144][T24963] zswap 0 [ 3890.241144][T24963] zswapped 0 [ 3890.241144][T24963] file_mapped 176128 [ 3890.241144][T24963] file_dirty 0 [ 3890.241144][T24963] file_writeback 0 [ 3890.241144][T24963] swapcached 0 [ 3890.241144][T24963] anon_thp 0 [ 3890.241144][T24963] file_thp 0 [ 3890.241144][T24963] shmem_thp 0 [ 3890.241144][T24963] inactive_anon 114688 [ 3890.241144][T24963] active_anon 8359936 [ 3890.241144][T24963] inactive_file 0 [ 3890.241144][T24963] active_file 0 [ 3890.241144][T24963] unevictable 0 [ 3890.241144][T24963] slab_reclaimable 33736 [ 3890.241144][T24963] slab_unreclaimable 101760 [ 3890.241144][T24963] slab 135496 [ 3890.241517][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3890.246157][T24963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 3890.551789][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3890.580952][T24963] syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24962,uid=0 [ 3890.593041][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3890.612406][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3890.631612][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3890.640423][T24963] Memory cgroup out of memory: Killed process 24963 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3890.650011][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 20:00:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3890.732491][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3890.751126][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.790942][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3890.820883][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.845669][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3890.875119][T24692] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3890.885337][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.911672][T24766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3890.930831][T24692] CPU: 1 PID: 24692 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3890.931141][T24766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3890.941302][T24692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3890.941318][T24692] Call Trace: [ 3890.941326][T24692] [ 3890.941335][T24692] dump_stack_lvl+0xd1/0x138 [ 3890.941372][T24692] dump_header+0x10b/0x85f [ 3890.976537][T24692] oom_kill_process.cold+0x10/0x15 [ 3890.981702][T24692] out_of_memory+0x35c/0x14a0 [ 3890.986434][T24692] ? find_held_lock+0x2d/0x110 [ 3890.991235][T24692] ? oom_killer_disable+0x280/0x280 [ 3890.996476][T24692] ? find_held_lock+0x2d/0x110 [ 3891.001309][T24692] mem_cgroup_out_of_memory+0x206/0x270 [ 3891.003970][T24766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3891.006875][T24692] ? mem_cgroup_margin+0x130/0x130 [ 3891.006913][T24692] ? lock_downgrade+0x6e0/0x6e0 [ 3891.024108][T24692] try_charge_memcg+0xefb/0x12f0 [ 3891.029086][T24692] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3891.035273][T24692] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3891.041026][T24692] ? lock_downgrade+0x6e0/0x6e0 [ 3891.045906][T24692] ? lock_downgrade+0x6e0/0x6e0 [ 3891.050790][T24692] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3891.056373][T24692] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3891.062567][T24692] copy_process+0x4e3/0x7520 [ 3891.067179][T24692] ? _raw_spin_unlock+0x28/0x40 [ 3891.072061][T24692] ? wp_page_reuse+0x197/0x570 [ 3891.076945][T24692] ? do_wp_page+0x844/0x3370 [ 3891.081574][T24692] ? __cleanup_sighand+0xb0/0xb0 [ 3891.086545][T24692] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3891.090401][T24789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3891.091940][T24692] ? rwlock_bug.part.0+0x90/0x90 [ 3891.091969][T24692] ? lock_chain_count+0x20/0x20 [ 3891.091996][T24692] kernel_clone+0xeb/0x990 [ 3891.092026][T24692] ? create_io_thread+0xf0/0xf0 [ 3891.121516][T24692] ? find_held_lock+0x2d/0x110 [ 3891.126342][T24692] __do_sys_clone+0xba/0x100 [ 3891.130973][T24692] ? kernel_clone+0x990/0x990 [ 3891.135696][T24692] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3891.141624][T24692] do_syscall_64+0x39/0xb0 [ 3891.146074][T24692] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3891.151191][T24789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3891.151973][T24692] RIP: 0033:0x7f925cc89dfb [ 3891.166746][T24692] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3891.186392][T24692] RSP: 002b:00007ffd54990740 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3891.194851][T24692] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f925cc89dfb [ 3891.202859][T24692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3891.210866][T24692] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555714a400 [ 3891.218863][T24692] R10: 000055555714a6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3891.226865][T24692] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd54990820 [ 3891.234986][T24692] [ 3891.253659][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3891.271842][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3891.291445][T24692] memory: usage 8352kB, limit 0kB, failcnt 2550 [ 3891.297390][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3891.297808][T24692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3891.328783][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3891.331208][T24692] Memory cgroup stats for /syz4: [ 3891.336827][T24692] anon 45056 [ 3891.336827][T24692] file 8359936 [ 3891.336827][T24692] kernel 131072 [ 3891.336827][T24692] kernel_stack 0 [ 3891.336827][T24692] pagetables 8192 [ 3891.336827][T24692] sec_pagetables 0 [ 3891.336827][T24692] percpu 64 [ 3891.336827][T24692] sock 0 [ 3891.336827][T24692] vmalloc 0 [ 3891.336827][T24692] shmem 8359936 [ 3891.336827][T24692] zswap 0 [ 3891.336827][T24692] zswapped 0 [ 3891.336827][T24692] file_mapped 163840 [ 3891.336827][T24692] file_dirty 0 [ 3891.336827][T24692] file_writeback 0 [ 3891.336827][T24692] swapcached 0 [ 3891.336827][T24692] anon_thp 0 [ 3891.336827][T24692] file_thp 0 [ 3891.336827][T24692] shmem_thp 0 [ 3891.336827][T24692] inactive_anon 45056 [ 3891.336827][T24692] active_anon 8359936 [ 3891.336827][T24692] inactive_file 0 [ 3891.336827][T24692] active_file 0 [ 3891.336827][T24692] unevictable 0 [ 3891.336827][T24692] slab_reclaimable 30216 [ 3891.336827][T24692] slab_unreclaimable 82176 [ 3891.336827][T24692] slab 112392 [ 3891.356439][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3891.523296][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3891.533359][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3891.548136][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3891.583943][T24766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3891.631525][T24766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3891.649912][T24766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3891.662794][T24766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3891.708485][T24860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3891.727529][T24692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24692,uid=0 [ 3891.805256][T24692] Memory cgroup out of memory: Killed process 24692 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3891.950245][T24860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3892.112582][T24860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3892.180102][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3892.191513][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3892.344983][T24789] 8021q: adding VLAN 0 to HW filter on device batadv0 20:00:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3892.414843][T24860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3892.497561][T24780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3892.523841][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3892.550685][T24780] 8021q: adding VLAN 0 to HW filter on device team0 [ 3892.580812][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3892.628010][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3892.640902][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3892.648917][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3892.696752][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3892.705707][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3892.714939][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3892.724178][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3892.732504][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3892.739630][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3892.754501][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3892.771739][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3892.780303][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 3892.787585][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state 20:00:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3892.810190][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3892.823827][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3892.875920][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3892.884763][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3892.907702][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3892.939708][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3892.976613][T24780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3893.060128][T24780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3893.141242][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3893.152156][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3893.216626][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3893.232427][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3893.241600][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3893.255759][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3893.525975][T27309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3893.737227][T24996] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3893.785826][T24996] CPU: 0 PID: 24996 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3893.796335][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3893.806428][T24996] Call Trace: [ 3893.809750][T24996] [ 3893.812761][T24996] dump_stack_lvl+0xd1/0x138 [ 3893.817399][T24996] dump_header+0x10b/0x85f [ 3893.822480][T24996] oom_kill_process.cold+0x10/0x15 [ 3893.827650][T24996] out_of_memory+0x35c/0x14a0 [ 3893.832397][T24996] ? lockdep_hardirqs_on+0x7d/0x100 [ 3893.837661][T24996] ? oom_killer_disable+0x280/0x280 [ 3893.842929][T24996] ? mem_cgroup_out_of_memory+0x199/0x270 [ 3893.848712][T24996] mem_cgroup_out_of_memory+0x206/0x270 [ 3893.854314][T24996] ? mem_cgroup_margin+0x130/0x130 [ 3893.859494][T24996] memory_max_write+0x2f9/0x3c0 [ 3893.864389][T24996] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3893.870688][T24996] cgroup_file_write+0x1e2/0x770 [ 3893.875766][T24996] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3893.881982][T24996] ? kill_css+0x370/0x370 [ 3893.886369][T24996] ? kill_css+0x370/0x370 [ 3893.891525][T24996] kernfs_fop_write_iter+0x3f1/0x600 [ 3893.896967][T24996] vfs_write+0x9ed/0xdd0 [ 3893.901248][T24996] ? kernel_write+0x630/0x630 [ 3893.905971][T24996] ? __fget_files+0x26a/0x440 [ 3893.910721][T24996] ksys_write+0x12b/0x250 [ 3893.915103][T24996] ? __ia32_sys_read+0xb0/0xb0 [ 3893.919931][T24996] do_syscall_64+0x39/0xb0 [ 3893.924587][T24996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3893.930611][T24996] RIP: 0033:0x7fc941e8c0c9 [ 3893.935080][T24996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3893.954818][T24996] RSP: 002b:00007fc942c5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3893.963306][T24996] RAX: ffffffffffffffda RBX: 00007fc941fabf80 RCX: 00007fc941e8c0c9 [ 3893.971491][T24996] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3893.979493][T24996] RBP: 00007fc941ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3893.987499][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3893.995524][T24996] R13: 00007ffcc044835f R14: 00007fc942c5b300 R15: 0000000000022000 [ 3894.003662][T24996] [ 3894.193154][T27309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3894.250965][T24860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3894.293330][T24860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3894.349894][T24996] memory: usage 528kB, limit 0kB, failcnt 4809 [ 3894.357107][T24996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3894.362473][T27309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3894.364535][T24996] Memory cgroup stats for /syz2: [ 3894.375126][T24996] anon 114688 [ 3894.375126][T24996] file 155648 [ 3894.375126][T24996] kernel 229376 [ 3894.375126][T24996] kernel_stack 32768 [ 3894.375126][T24996] pagetables 81920 [ 3894.375126][T24996] sec_pagetables 0 [ 3894.375126][T24996] percpu 64 [ 3894.375126][T24996] sock 0 [ 3894.375126][T24996] vmalloc 0 [ 3894.375126][T24996] shmem 151552 [ 3894.375126][T24996] zswap 0 [ 3894.375126][T24996] zswapped 0 [ 3894.375126][T24996] file_mapped 139264 [ 3894.375126][T24996] file_dirty 0 [ 3894.375126][T24996] file_writeback 0 [ 3894.375126][T24996] swapcached 0 [ 3894.375126][T24996] anon_thp 0 [ 3894.375126][T24996] file_thp 0 [ 3894.375126][T24996] shmem_thp 0 [ 3894.375126][T24996] inactive_anon 172032 [ 3894.375126][T24996] active_anon 94208 [ 3894.375126][T24996] inactive_file 4096 [ 3894.375126][T24996] active_file 0 [ 3894.375126][T24996] unevictable 0 [ 3894.375126][T24996] slab_reclaimable 13592 [ 3894.375126][T24996] slab_unreclaimable 73752 [ 3894.375126][T24996] slab 87344 [ 3894.478978][T24860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3894.486581][T24996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24995,uid=0 [ 3894.541442][T24860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3894.548610][T24996] Memory cgroup out of memory: Killed process 24996 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3894.583208][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3894.601786][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 20:00:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3894.701693][T27309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3894.791971][T24766] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3894.813703][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3894.832373][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3894.840401][T24766] CPU: 0 PID: 24766 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3894.850844][T24766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3894.860933][T24766] Call Trace: [ 3894.864318][T24766] [ 3894.867264][T24766] dump_stack_lvl+0xd1/0x138 [ 3894.871894][T24766] dump_header+0x10b/0x85f [ 3894.876361][T24766] oom_kill_process.cold+0x10/0x15 [ 3894.881511][T24766] out_of_memory+0x35c/0x14a0 [ 3894.886230][T24766] ? find_held_lock+0x2d/0x110 [ 3894.891039][T24766] ? oom_killer_disable+0x280/0x280 [ 3894.896273][T24766] ? find_held_lock+0x2d/0x110 [ 3894.901062][T24766] mem_cgroup_out_of_memory+0x206/0x270 [ 3894.906642][T24766] ? mem_cgroup_margin+0x130/0x130 [ 3894.911800][T24766] ? lock_downgrade+0x6e0/0x6e0 [ 3894.916858][T24766] try_charge_memcg+0xefb/0x12f0 [ 3894.921902][T24766] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3894.928015][T24766] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3894.933874][T24766] ? lock_downgrade+0x6e0/0x6e0 [ 3894.938745][T24766] ? lock_downgrade+0x6e0/0x6e0 [ 3894.943707][T24766] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3894.949358][T24766] __alloc_pages+0x1f3/0x5b0 [ 3894.953966][T24766] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3894.960787][T24766] alloc_pages+0x1aa/0x270 [ 3894.965225][T24766] pte_alloc_one+0x1a/0x230 [ 3894.969748][T24766] __pte_alloc+0x6d/0x260 [ 3894.974107][T24766] ? pmd_install+0x160/0x160 [ 3894.978894][T24766] copy_page_range+0x17a8/0x3b40 [ 3894.983881][T24766] ? mas_store+0x206/0x2e0 [ 3894.988323][T24766] ? handle_mm_fault+0x850/0x850 [ 3894.993290][T24766] ? up_write+0x1b0/0x520 [ 3894.997641][T24766] dup_mmap+0xc10/0x10b0 [ 3895.001910][T24766] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3895.007841][T24766] ? lock_downgrade+0x6e0/0x6e0 [ 3895.012729][T24766] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3895.018653][T24766] ? mm_init+0x8e0/0xc10 [ 3895.022998][T24766] copy_process+0x440f/0x7520 [ 3895.027707][T24766] ? _raw_spin_unlock+0x28/0x40 [ 3895.032571][T24766] ? wp_page_reuse+0x197/0x570 [ 3895.037364][T24766] ? __cleanup_sighand+0xb0/0xb0 [ 3895.042314][T24766] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3895.047711][T24766] ? rwlock_bug.part.0+0x90/0x90 [ 3895.052690][T24766] ? lock_chain_count+0x20/0x20 [ 3895.057656][T24766] kernel_clone+0xeb/0x990 [ 3895.062562][T24766] ? create_io_thread+0xf0/0xf0 [ 3895.067435][T24766] ? find_held_lock+0x2d/0x110 [ 3895.072232][T24766] __do_sys_clone+0xba/0x100 [ 3895.076845][T24766] ? kernel_clone+0x990/0x990 [ 3895.081565][T24766] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3895.087493][T24766] do_syscall_64+0x39/0xb0 [ 3895.091945][T24766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3895.097851][T24766] RIP: 0033:0x7fc941e89dfb [ 3895.102272][T24766] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3895.121890][T24766] RSP: 002b:00007ffcc04485a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3895.130488][T24766] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc941e89dfb [ 3895.138465][T24766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3895.146711][T24766] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555561a3400 [ 3895.154690][T24766] R10: 00005555561a36d0 R11: 0000000000000246 R12: 0000000000000001 [ 3895.162754][T24766] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcc0448680 [ 3895.170762][T24766] [ 3895.193115][T24789] device veth0_vlan entered promiscuous mode [ 3895.205786][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3895.221739][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3895.232732][T24766] memory: usage 360kB, limit 0kB, failcnt 4851 [ 3895.238957][T24766] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3895.251958][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3895.259510][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3895.261031][T24766] Memory cgroup stats for /syz2: [ 3895.266984][T24766] anon 45056 [ 3895.266984][T24766] file 155648 [ 3895.266984][T24766] kernel 167936 [ 3895.266984][T24766] kernel_stack 32768 [ 3895.266984][T24766] pagetables 32768 [ 3895.266984][T24766] sec_pagetables 0 [ 3895.266984][T24766] percpu 128 [ 3895.266984][T24766] sock 0 [ 3895.266984][T24766] vmalloc 0 [ 3895.266984][T24766] shmem 151552 [ 3895.266984][T24766] zswap 0 [ 3895.266984][T24766] zswapped 0 [ 3895.266984][T24766] file_mapped 139264 [ 3895.266984][T24766] file_dirty 4096 [ 3895.266984][T24766] file_writeback 0 [ 3895.266984][T24766] swapcached 0 [ 3895.266984][T24766] anon_thp 0 [ 3895.266984][T24766] file_thp 0 [ 3895.266984][T24766] shmem_thp 0 [ 3895.266984][T24766] inactive_anon 102400 [ 3895.266984][T24766] active_anon 94208 [ 3895.266984][T24766] inactive_file 0 [ 3895.266984][T24766] active_file 4096 [ 3895.266984][T24766] unevictable 0 [ 3895.266984][T24766] slab_reclaimable 9304 [ 3895.266984][T24766] slab_unreclaimable 67328 [ 3895.266984][T24766] slab 76632 [ 3895.364360][T24794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3895.382314][T24780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3895.392985][T24766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24766,uid=0 [ 3895.398698][T24789] device veth1_vlan entered promiscuous mode [ 3895.408735][T24766] Memory cgroup out of memory: Killed process 24766 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3895.521100][T24794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3895.583862][T24794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3895.595298][T24794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3895.684253][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3895.693168][T10157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3895.703043][T10157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3895.712389][T10157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3895.720670][T10157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3895.729649][T32710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3895.739248][T10157] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3895.746961][T10157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3895.866288][T24789] device veth0_macvtap entered promiscuous mode [ 3895.912218][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3895.922155][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3895.937390][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3895.960504][T24780] device veth0_vlan entered promiscuous mode [ 3896.007876][T24780] device veth1_vlan entered promiscuous mode [ 3896.065525][T24789] device veth1_macvtap entered promiscuous mode [ 3896.078219][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3896.087439][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3896.096713][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3896.157293][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3896.172233][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3896.180235][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3896.217651][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.232181][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.244804][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.255558][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.265541][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.276422][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.287851][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.298392][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.308288][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.318872][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.331527][T24789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3896.363739][T24780] device veth0_macvtap entered promiscuous mode [ 3896.376509][T24860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3896.385942][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3896.396329][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3896.405381][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3896.414570][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3896.453373][T24780] device veth1_macvtap entered promiscuous mode [ 3896.469986][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3896.478949][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3896.487198][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3896.496575][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3896.521641][T24860] 8021q: adding VLAN 0 to HW filter on device team0 [ 3896.529042][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3896.539925][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.552544][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3896.563287][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.573486][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3896.584302][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.598032][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3896.609969][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.620189][T24789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3896.630883][T24789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.642727][T24789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3896.658957][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.671228][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.682167][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.692806][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.702938][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.718454][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.731317][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.742053][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.752298][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.763807][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.773972][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3896.784564][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3896.796452][T24780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3896.881463][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3896.890276][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3896.900558][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3896.910258][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3896.919822][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3896.929133][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3896.938447][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 3896.945843][T13737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3896.956971][T24789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3896.966858][T24789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3896.976283][T24789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3896.985630][T24789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3897.038225][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3897.046769][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3897.055780][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3897.068163][T30821] bridge0: port 2(bridge_slave_1) entered blocking state [ 3897.075366][T30821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3897.084077][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3897.093800][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3897.104300][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.115693][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.126239][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.137251][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.148060][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.175656][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.192688][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.210829][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.220702][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.249322][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.268193][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3897.284414][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3897.303800][T24780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3897.387451][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3897.397138][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3897.407177][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3897.423999][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3897.479060][T24780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3897.513133][T24780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3897.522341][T24780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3897.531558][T24780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3897.556359][T24794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3897.609529][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3897.638837][T24860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3897.666380][T24860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3897.758829][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3897.767790][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3897.777035][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3897.802771][T31933] Bluetooth: hci0: command 0x0409 tx timeout [ 3897.812096][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3897.825563][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3898.002329][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3898.010295][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3898.034083][T24794] 8021q: adding VLAN 0 to HW filter on device team0 [ 3898.068969][T25012] chnl_net:caif_netlink_parms(): no params data found [ 3898.172246][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3898.172502][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3898.180301][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3898.212034][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3898.231534][T22308] bridge0: port 1(bridge_slave_0) entered blocking state [ 3898.238692][T22308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3898.261173][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3898.281378][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3898.290707][T22308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3898.298005][T22308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3898.309825][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3898.323141][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3898.371049][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3898.380026][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3898.475572][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3898.493620][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3898.522887][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3898.532483][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3898.548357][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3898.661966][T24794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3898.682241][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3898.699780][ T7571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3898.732051][ T7571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3898.735165][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3898.750068][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3898.771158][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3898.781741][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3898.801704][T24860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3898.814317][T27316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3898.836119][T27316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3898.891729][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3898.899919][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3899.081098][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3899.089297][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3899.098491][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3899.152477][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3899.241893][T25012] bridge0: port 1(bridge_slave_0) entered blocking state [ 3899.270585][T25012] bridge0: port 1(bridge_slave_0) entered disabled state [ 3899.299776][T25012] device bridge_slave_0 entered promiscuous mode [ 3899.337750][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3899.461003][T25012] bridge0: port 2(bridge_slave_1) entered blocking state [ 3899.468184][T25012] bridge0: port 2(bridge_slave_1) entered disabled state [ 3899.470116][T25060] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3899.488344][T25060] CPU: 0 PID: 25060 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3899.498896][T25060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3899.508965][T25060] Call Trace: [ 3899.512260][T25060] [ 3899.515199][T25060] dump_stack_lvl+0xd1/0x138 [ 3899.519815][T25060] dump_header+0x10b/0x85f [ 3899.524350][T25060] oom_kill_process.cold+0x10/0x15 [ 3899.529582][T25060] out_of_memory+0x35c/0x14a0 [ 3899.534287][T25060] ? lockdep_hardirqs_on+0x7d/0x100 [ 3899.539505][T25060] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3899.545676][T25060] ? oom_killer_disable+0x280/0x280 [ 3899.550907][T25060] mem_cgroup_out_of_memory+0x206/0x270 [ 3899.556481][T25060] ? mem_cgroup_margin+0x130/0x130 [ 3899.561804][T25060] memory_max_write+0x2f9/0x3c0 [ 3899.566676][T25060] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3899.572862][T25060] ? lock_release+0x810/0x810 [ 3899.577647][T25060] cgroup_file_write+0x1e2/0x770 [ 3899.582610][T25060] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3899.588775][T25060] ? kill_css+0x370/0x370 [ 3899.593133][T25060] ? __virt_addr_valid+0x61/0x2e0 [ 3899.598187][T25060] ? kill_css+0x370/0x370 [ 3899.602549][T25060] kernfs_fop_write_iter+0x3f1/0x600 [ 3899.607870][T25060] vfs_write+0x9ed/0xdd0 [ 3899.612131][T25060] ? kernel_write+0x630/0x630 [ 3899.616923][T25060] ? __fget_files+0x26a/0x440 [ 3899.621639][T25060] ksys_write+0x12b/0x250 [ 3899.625985][T25060] ? __ia32_sys_read+0xb0/0xb0 [ 3899.630761][T25060] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3899.636675][T25060] do_syscall_64+0x39/0xb0 [ 3899.641110][T25060] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3899.647024][T25060] RIP: 0033:0x7fb7b088c0c9 [ 3899.651456][T25060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3899.671259][T25060] RSP: 002b:00007fb7b16a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3899.679689][T25060] RAX: ffffffffffffffda RBX: 00007fb7b09abf80 RCX: 00007fb7b088c0c9 [ 3899.687673][T25060] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3899.695735][T25060] RBP: 00007fb7b08e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3899.703796][T25060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3899.711774][T25060] R13: 00007ffd4f83944f R14: 00007fb7b16a4300 R15: 0000000000022000 [ 3899.719873][T25060] [ 3899.751089][T25060] memory: usage 8552kB, limit 0kB, failcnt 1931 [ 3899.763565][T25060] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3899.777414][T25012] device bridge_slave_1 entered promiscuous mode [ 3899.789922][T25060] Memory cgroup stats for /syz5: [ 3899.793251][T25060] anon 114688 [ 3899.793251][T25060] file 8355840 [ 3899.793251][T25060] kernel 282624 [ 3899.793251][T25060] kernel_stack 65536 [ 3899.793251][T25060] pagetables 81920 [ 3899.793251][T25060] sec_pagetables 0 [ 3899.793251][T25060] percpu 64 [ 3899.793251][T25060] sock 0 [ 3899.793251][T25060] vmalloc 0 [ 3899.793251][T25060] shmem 8355840 [ 3899.793251][T25060] zswap 0 [ 3899.793251][T25060] zswapped 0 [ 3899.793251][T25060] file_mapped 241664 [ 3899.793251][T25060] file_dirty 0 [ 3899.793251][T25060] file_writeback 0 [ 3899.793251][T25060] swapcached 0 [ 3899.793251][T25060] anon_thp 0 [ 3899.793251][T25060] file_thp 0 [ 3899.793251][T25060] shmem_thp 0 [ 3899.793251][T25060] inactive_anon 114688 [ 3899.793251][T25060] active_anon 8355840 [ 3899.793251][T25060] inactive_file 0 [ 3899.793251][T25060] active_file 0 [ 3899.793251][T25060] unevictable 0 [ 3899.793251][T25060] slab_reclaimable 39160 [ 3899.793251][T25060] slab_unreclaimable 72456 [ 3899.793251][T25060] slab 111616 [ 3899.896089][T31933] Bluetooth: hci0: command 0x041b tx timeout [ 3899.964226][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3899.993282][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3900.048436][T24860] device veth0_vlan entered promiscuous mode [ 3900.143718][T25060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25059,uid=0 [ 3900.161712][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3900.188204][T18924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3900.201074][T25060] Memory cgroup out of memory: Killed process 25060 (syz-executor.5) total-vm:56588kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3900.244052][T24860] device veth1_vlan entered promiscuous mode [ 3900.272374][T25066] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3900.287846][T25066] CPU: 1 PID: 25066 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3900.298342][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3900.300969][T24794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3900.308495][T25066] Call Trace: [ 3900.308507][T25066] [ 3900.308518][T25066] dump_stack_lvl+0xd1/0x138 [ 3900.326446][T25066] dump_header+0x10b/0x85f [ 3900.330933][T25066] oom_kill_process.cold+0x10/0x15 [ 3900.336117][T25066] out_of_memory+0x35c/0x14a0 [ 3900.340866][T25066] ? oom_killer_disable+0x280/0x280 [ 3900.346126][T25066] ? mark_held_locks+0x9f/0xe0 [ 3900.350951][T25066] mem_cgroup_out_of_memory+0x206/0x270 [ 3900.356551][T25066] ? mem_cgroup_margin+0x130/0x130 [ 3900.361761][T25066] memory_max_write+0x2f9/0x3c0 [ 3900.366672][T25066] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3900.372806][T25066] ? cgroup_file_write+0x8e/0x770 [ 3900.377890][T25066] cgroup_file_write+0x1e2/0x770 [ 3900.382882][T25066] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3900.389004][T25066] ? kill_css+0x370/0x370 [ 3900.393402][T25066] ? kill_css+0x370/0x370 [ 3900.397779][T25066] kernfs_fop_write_iter+0x3f1/0x600 [ 3900.403128][T25066] vfs_write+0x9ed/0xdd0 [ 3900.407419][T25066] ? kernel_write+0x630/0x630 [ 3900.412153][T25066] ? __fget_files+0x26a/0x440 [ 3900.416884][T25066] ksys_write+0x12b/0x250 [ 3900.421269][T25066] ? __ia32_sys_read+0xb0/0xb0 [ 3900.426073][T25066] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3900.432017][T25066] do_syscall_64+0x39/0xb0 [ 3900.436491][T25066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3900.442446][T25066] RIP: 0033:0x7fce37a8c0c9 [ 3900.446890][T25066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3900.466713][T25066] RSP: 002b:00007fce3883c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3900.475173][T25066] RAX: ffffffffffffffda RBX: 00007fce37babf80 RCX: 00007fce37a8c0c9 [ 3900.483273][T25066] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3900.491290][T25066] RBP: 00007fce37ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3900.499648][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3900.507670][T25066] R13: 00007fffc98d1eef R14: 00007fce3883c300 R15: 0000000000022000 [ 3900.515785][T25066] [ 3900.547581][T25066] memory: usage 8544kB, limit 0kB, failcnt 1664 [ 3900.554921][T25066] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3900.562278][T25066] Memory cgroup stats for /syz1: [ 3900.570303][T25066] anon 114688 [ 3900.570303][T25066] file 8318976 [ 3900.570303][T25066] kernel 315392 [ 3900.570303][T25066] kernel_stack 65536 [ 3900.570303][T25066] pagetables 81920 [ 3900.570303][T25066] sec_pagetables 0 [ 3900.570303][T25066] percpu 64 [ 3900.570303][T25066] sock 0 [ 3900.570303][T25066] vmalloc 0 [ 3900.570303][T25066] shmem 8318976 [ 3900.570303][T25066] zswap 0 [ 3900.570303][T25066] zswapped 0 [ 3900.570303][T25066] file_mapped 131072 [ 3900.570303][T25066] file_dirty 0 [ 3900.570303][T25066] file_writeback 0 [ 3900.570303][T25066] swapcached 0 [ 3900.570303][T25066] anon_thp 0 [ 3900.570303][T25066] file_thp 0 [ 3900.570303][T25066] shmem_thp 0 [ 3900.570303][T25066] inactive_anon 114688 [ 3900.570303][T25066] active_anon 8318976 [ 3900.570303][T25066] inactive_file 0 [ 3900.570303][T25066] active_file 0 [ 3900.570303][T25066] unevictable 0 [ 3900.570303][T25066] slab_reclaimable 39272 [ 3900.570303][T25066] slab_unreclaimable 99816 [ 3900.570303][T25066] slab 139088 [ 3900.672419][T25012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3900.677082][T25066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24780,uid=0 [ 3900.708156][T25066] Memory cgroup out of memory: Killed process 24780 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3900.718992][T25012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3900.741124][T24789] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 3900.761138][T24789] CPU: 0 PID: 24789 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3900.771646][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3900.781836][T24789] Call Trace: [ 3900.785156][T24789] [ 3900.788131][T24789] dump_stack_lvl+0xd1/0x138 [ 3900.792775][T24789] dump_header+0x10b/0x85f [ 3900.797253][T24789] oom_kill_process.cold+0x10/0x15 [ 3900.802428][T24789] out_of_memory+0x35c/0x14a0 [ 3900.807121][T24789] ? oom_killer_disable+0x280/0x280 [ 3900.812346][T24789] ? find_held_lock+0x2d/0x110 [ 3900.817132][T24789] mem_cgroup_out_of_memory+0x206/0x270 [ 3900.822708][T24789] ? mem_cgroup_margin+0x130/0x130 [ 3900.827869][T24789] ? lock_downgrade+0x6e0/0x6e0 [ 3900.832800][T24789] try_charge_memcg+0xefb/0x12f0 [ 3900.837778][T24789] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3900.845726][T24789] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3900.851484][T24789] ? lock_downgrade+0x6e0/0x6e0 [ 3900.856368][T24789] ? lock_downgrade+0x6e0/0x6e0 [ 3900.861228][T24789] ? rcu_read_unlock+0x9/0x60 [ 3900.865910][T24789] obj_cgroup_charge+0x2af/0x5e0 [ 3900.870857][T24789] __kmem_cache_alloc_node+0xb2/0x430 [ 3900.876286][T24789] ? kvmalloc_node+0xa2/0x1a0 [ 3900.881011][T24789] ? kvmalloc_node+0xa2/0x1a0 [ 3900.885716][T24789] __kmalloc_node+0x4d/0xd0 [ 3900.890330][T24789] kvmalloc_node+0xa2/0x1a0 [ 3900.894864][T24789] xt_alloc_table_info+0x40/0xa0 [ 3900.899866][T24789] do_ipt_set_ctl+0x514/0xb10 [ 3900.904585][T24789] ? trace_contention_end+0x153/0x1e0 [ 3900.910029][T24789] ? __mutex_lock+0x231/0x1360 [ 3900.914805][T24789] ? compat_do_replace.constprop.0+0x400/0x400 [ 3900.921016][T24789] ? do_ip_setsockopt+0x231/0x3a10 [ 3900.926169][T24789] ? wait_for_completion_io_timeout+0x20/0x20 [ 3900.932272][T24789] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3900.937710][T24789] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 3900.943730][T24789] nf_setsockopt+0x87/0xe0 [ 3900.948433][T24789] ip_setsockopt+0xf2/0x110 [ 3900.952965][T24789] tcp_setsockopt+0x9f/0x100 [ 3900.957599][T24789] ? sock_common_recvmsg+0x190/0x190 [ 3900.962881][T24789] __sys_setsockopt+0x2c6/0x5b0 [ 3900.967743][T24789] ? __ia32_sys_recv+0x100/0x100 [ 3900.972693][T24789] ? up_write+0x520/0x520 [ 3900.977067][T24789] ? handle_mm_fault+0x25b/0x850 [ 3900.982062][T24789] __x64_sys_setsockopt+0xbe/0x160 [ 3900.987224][T24789] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3900.993229][T24789] do_syscall_64+0x39/0xb0 [ 3900.997662][T24789] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3901.003558][T24789] RIP: 0033:0x7fb7b088d71a [ 3901.007978][T24789] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3901.027600][T24789] RSP: 002b:00007ffd4f838fb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3901.036053][T24789] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7b088d71a [ 3901.044020][T24789] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 3901.052003][T24789] RBP: 00007ffd4f838fe0 R08: 00000000000002d8 R09: ffffffffff000000 [ 3901.059997][T24789] R10: 00007fb7b0985d80 R11: 0000000000000206 R12: 00007ffd4f839040 [ 3901.067970][T24789] R13: 0000000000000003 R14: 00007ffd4f838fdc R15: 00007fb7b0985d20 [ 3901.075987][T24789] [ 3901.094813][T24789] memory: usage 8304kB, limit 0kB, failcnt 1950 [ 3901.101229][T24789] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3901.108099][T24789] Memory cgroup stats for /syz5: [ 3901.108302][T24789] anon 40960 [ 3901.108302][T24789] file 8355840 [ 3901.108302][T24789] kernel 106496 [ 3901.108302][T24789] kernel_stack 0 [ 3901.108302][T24789] pagetables 8192 [ 3901.108302][T24789] sec_pagetables 0 [ 3901.108302][T24789] percpu 64 [ 3901.108302][T24789] sock 0 [ 3901.108302][T24789] vmalloc 0 [ 3901.108302][T24789] shmem 8355840 [ 3901.108302][T24789] zswap 0 [ 3901.108302][T24789] zswapped 0 [ 3901.108302][T24789] file_mapped 221184 [ 3901.108302][T24789] file_dirty 0 [ 3901.108302][T24789] file_writeback 0 [ 3901.108302][T24789] swapcached 0 [ 3901.108302][T24789] anon_thp 0 [ 3901.108302][T24789] file_thp 0 [ 3901.108302][T24789] shmem_thp 0 [ 3901.108302][T24789] inactive_anon 40960 [ 3901.108302][T24789] active_anon 8355840 [ 3901.108302][T24789] inactive_file 0 [ 3901.108302][T24789] active_file 0 [ 3901.108302][T24789] unevictable 0 [ 3901.108302][T24789] slab_reclaimable 34224 [ 3901.108302][T24789] slab_unreclaimable 47872 [ 3901.108302][T24789] slab 82096 [ 3901.205646][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3901.206190][T24789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3901.213328][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3901.274475][T24789] ,cpuset= [ 3901.283941][T25012] team0: Port device team_slave_0 added [ 3901.293181][T24789] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24789,uid=0 [ 3901.306783][T25012] team0: Port device team_slave_1 added [ 3901.318772][T24789] Memory cgroup out of memory: Killed process 24789 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 20:00:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 20:00:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 20:00:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3901.458547][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3901.468938][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3901.481227][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3901.508067][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3901.694016][T25012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3901.711760][T25012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 20:00:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x0, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 3901.759826][T25012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3901.839016][T24860] device veth0_macvtap entered promiscuous mode [ 3901.855042][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3901.873290][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3901.892722][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3901.913110][T24794] device veth0_vlan entered promiscuous mode [ 3901.941973][T25012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3901.948995][T25012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3901.951369][ T5854] Bluetooth: hci0: command 0x040f tx timeout [ 3902.017513][T25012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3902.049853][T24860] device veth1_macvtap entered promiscuous mode [ 3902.072447][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3902.103488][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3902.134035][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3902.268265][T24794] device veth1_vlan entered promiscuous mode [ 3902.366033][T25012] device hsr_slave_0 entered promiscuous mode [ 3902.385323][T25012] device hsr_slave_1 entered promiscuous mode [ 3902.396031][T25012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3902.433583][T25012] Cannot create hsr debugfs directory [ 3902.650396][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.688063][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.718603][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.749678][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.790638][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.820910][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.850829][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.881009][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.914869][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.935934][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.960907][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3902.981927][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3902.994500][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.019564][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.033697][T24860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3903.044558][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.055521][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.066467][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.083243][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.093259][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.105848][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.115740][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.126475][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.136384][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.146920][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.158135][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.168719][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.178585][T24860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3903.189346][T24860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.205436][T24860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3903.222026][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3903.232382][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3903.241985][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3903.251552][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3903.292884][T24860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3903.302047][T24860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3903.322735][T24860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3903.345267][T24860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3903.370088][T24794] device veth0_macvtap entered promiscuous mode [ 3903.427085][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3903.436217][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3903.457401][T24794] device veth1_macvtap entered promiscuous mode [ 3903.524598][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3903.541984][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3903.598962][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.639126][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.652162][T31933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3903.660830][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.672163][T31933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3903.682362][T31933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3903.685901][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.701724][T31933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3903.707462][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.722849][T31933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3903.745819][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.775534][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.801592][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.821427][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.839997][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.855487][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.874934][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.900398][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.923587][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.945089][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3903.965340][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3903.985064][T24794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3904.017694][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3904.031074][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 3904.061635][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3904.096753][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.114511][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.124523][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.135147][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.145270][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.155803][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.166179][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.176905][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.186859][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.207948][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.217968][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.230870][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.254822][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.280859][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.300967][T24794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3904.320834][T24794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3904.343446][T24794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3904.402841][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3904.412544][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3904.436208][T24794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3904.471025][T24794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3904.479789][T24794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3904.510055][T31933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3904.510554][T24794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3904.531576][T31933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3904.539905][T31933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3904.548000][T31933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3904.556405][T31933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3904.563950][T31933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3904.620887][T27309] device hsr_slave_0 left promiscuous mode [ 3904.627526][T27309] device hsr_slave_1 left promiscuous mode [ 3904.651026][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3904.658530][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3904.698819][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3904.731131][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3904.764673][T27309] device bridge_slave_1 left promiscuous mode [ 3904.781015][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3904.793058][T27309] device bridge_slave_0 left promiscuous mode [ 3904.799434][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3904.847173][T27309] device hsr_slave_0 left promiscuous mode [ 3904.861601][T27309] device hsr_slave_1 left promiscuous mode [ 3904.901259][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3904.908799][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3904.932746][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3904.940263][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3904.973412][T27309] device bridge_slave_1 left promiscuous mode [ 3904.979846][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3905.012484][T27309] device bridge_slave_0 left promiscuous mode [ 3905.018770][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3905.055488][T27309] device hsr_slave_0 left promiscuous mode [ 3905.069014][T27309] device hsr_slave_1 left promiscuous mode [ 3905.076074][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3905.084226][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3905.097940][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3905.107154][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3905.117045][T27309] device bridge_slave_1 left promiscuous mode [ 3905.123647][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3905.133025][T27309] device bridge_slave_0 left promiscuous mode [ 3905.139255][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3905.171577][T27309] device hsr_slave_0 left promiscuous mode [ 3905.180270][T27309] device hsr_slave_1 left promiscuous mode [ 3905.198431][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3905.209551][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3905.221267][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3905.228913][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3905.239085][T27309] device bridge_slave_1 left promiscuous mode [ 3905.246590][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3905.256979][T27309] device bridge_slave_0 left promiscuous mode [ 3905.263617][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3905.288297][T27309] device veth1_macvtap left promiscuous mode [ 3905.294608][T27309] device veth0_macvtap left promiscuous mode [ 3905.301217][T27309] device veth1_vlan left promiscuous mode [ 3905.307075][T27309] device veth0_vlan left promiscuous mode [ 3905.319493][T27309] device veth1_macvtap left promiscuous mode [ 3905.326510][T27309] device veth0_macvtap left promiscuous mode [ 3905.333617][T27309] device veth1_vlan left promiscuous mode [ 3905.339495][T27309] device veth0_vlan left promiscuous mode [ 3905.348013][T27309] device veth1_macvtap left promiscuous mode [ 3905.354364][T27309] device veth0_macvtap left promiscuous mode [ 3905.361953][T27309] device veth1_vlan left promiscuous mode [ 3905.367815][T27309] device veth0_vlan left promiscuous mode [ 3905.378323][T27309] device veth1_macvtap left promiscuous mode [ 3905.391310][T27309] device veth0_macvtap left promiscuous mode [ 3905.397479][T27309] device veth1_vlan left promiscuous mode [ 3905.417267][T27309] device veth0_vlan left promiscuous mode [ 3905.790909][T31933] Bluetooth: hci1: command 0x0409 tx timeout [ 3906.577505][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3906.590921][T31933] Bluetooth: hci3: command 0x0409 tx timeout [ 3906.618389][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3906.652453][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3906.695833][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3906.852553][T27309] bond0 (unregistering): Released all slaves [ 3907.113959][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3907.136129][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3907.152657][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3907.169742][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3907.343454][T27309] bond0 (unregistering): Released all slaves [ 3907.659135][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3907.677517][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3907.698716][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3907.717707][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3907.842782][T27309] bond0 (unregistering): Released all slaves [ 3907.870900][T31933] Bluetooth: hci1: command 0x041b tx timeout [ 3908.182124][T27309] team0 (unregistering): Port device team_slave_1 removed [ 3908.228342][T27309] team0 (unregistering): Port device team_slave_0 removed [ 3908.248132][T27309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3908.281486][T27309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3908.452456][T27309] bond0 (unregistering): Released all slaves [ 3908.641266][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3908.649478][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3908.671314][T31933] Bluetooth: hci3: command 0x041b tx timeout [ 3908.770715][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3908.901265][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3908.956960][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3909.078775][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3909.357976][T27314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3909.380885][T27314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3909.409296][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3909.441277][T25132] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3909.512672][T25132] CPU: 1 PID: 25132 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3909.523426][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3909.533515][T25132] Call Trace: [ 3909.536823][T25132] [ 3909.539786][T25132] dump_stack_lvl+0xd1/0x138 [ 3909.544430][T25132] dump_header+0x10b/0x85f [ 3909.548898][T25132] oom_kill_process.cold+0x10/0x15 [ 3909.549455][T27313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3909.554061][T25132] out_of_memory+0x35c/0x14a0 [ 3909.554111][T25132] ? oom_killer_disable+0x280/0x280 [ 3909.554158][T25132] mem_cgroup_out_of_memory+0x206/0x270 [ 3909.554195][T25132] ? mem_cgroup_margin+0x130/0x130 [ 3909.554246][T25132] memory_max_write+0x2f9/0x3c0 [ 3909.554274][T25132] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3909.554303][T25132] ? lock_release+0x810/0x810 [ 3909.554335][T25132] cgroup_file_write+0x1e2/0x770 [ 3909.554369][T25132] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3909.554397][T25132] ? kill_css+0x370/0x370 [ 3909.554427][T25132] ? __virt_addr_valid+0x61/0x2e0 [ 3909.554472][T25132] ? kill_css+0x370/0x370 [ 3909.623667][T25132] kernfs_fop_write_iter+0x3f1/0x600 [ 3909.628987][T25132] vfs_write+0x9ed/0xdd0 [ 3909.633250][T25132] ? kernel_write+0x630/0x630 [ 3909.637953][T25132] ? __fget_files+0x26a/0x440 [ 3909.642653][T25132] ksys_write+0x12b/0x250 [ 3909.647016][T25132] ? __ia32_sys_read+0xb0/0xb0 [ 3909.651839][T25132] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3909.657867][T25132] do_syscall_64+0x39/0xb0 [ 3909.662329][T25132] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3909.668324][T25132] RIP: 0033:0x7f62fbe8c0c9 [ 3909.672747][T25132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3909.692364][T25132] RSP: 002b:00007f62fcc6d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3909.700791][T25132] RAX: ffffffffffffffda RBX: 00007f62fbfac050 RCX: 00007f62fbe8c0c9 [ 3909.708859][T25132] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000006 [ 3909.716839][T25132] RBP: 00007f62fbee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3909.724838][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3909.732819][T25132] R13: 00007ffd9c97d46f R14: 00007f62fcc6d300 R15: 0000000000022000 [ 3909.740820][T25132] [ 3909.791086][T25132] memory: usage 8636kB, limit 0kB, failcnt 2349 [ 3909.797477][T27313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3909.805551][T25132] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3909.852206][T25132] Memory cgroup stats for /syz0: [ 3909.852422][T25132] anon 122880 [ 3909.852422][T25132] file 8347648 [ 3909.852422][T25132] kernel 360448 [ 3909.852422][T25132] kernel_stack 98304 [ 3909.852422][T25132] pagetables 81920 [ 3909.852422][T25132] sec_pagetables 0 [ 3909.852422][T25132] percpu 64 [ 3909.852422][T25132] sock 0 [ 3909.852422][T25132] vmalloc 0 [ 3909.852422][T25132] shmem 8347648 [ 3909.852422][T25132] zswap 0 [ 3909.852422][T25132] zswapped 0 [ 3909.852422][T25132] file_mapped 192512 [ 3909.852422][T25132] file_dirty 0 [ 3909.852422][T25132] file_writeback 0 [ 3909.852422][T25132] swapcached 0 [ 3909.852422][T25132] anon_thp 0 [ 3909.852422][T25132] file_thp 0 [ 3909.852422][T25132] shmem_thp 0 [ 3909.852422][T25132] inactive_anon 122880 [ 3909.852422][T25132] active_anon 8347648 [ 3909.852422][T25132] inactive_file 0 [ 3909.852422][T25132] active_file 0 [ 3909.852422][T25132] unevictable 0 [ 3909.852422][T25132] slab_reclaimable 40960 [ 3909.852422][T25132] slab_unreclaimable 110448 [ 3909.852422][T25132] slab 151408 [ 3909.953021][T31933] Bluetooth: hci1: command 0x040f tx timeout [ 3909.962493][T25132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=25129,uid=0 [ 3909.979729][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3910.000464][T25096] chnl_net:caif_netlink_parms(): no params data found [ 3910.021022][T25132] Memory cgroup out of memory: Killed process 25129 (syz-executor.0) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3910.044455][T25012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3910.119337][T25115] chnl_net:caif_netlink_parms(): no params data found [ 3910.159893][T25012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3910.164777][T24860] syz-executor.0 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 3910.192835][T24860] CPU: 0 PID: 24860 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3910.203418][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3910.213511][T24860] Call Trace: [ 3910.216824][T24860] [ 3910.219862][T24860] dump_stack_lvl+0xd1/0x138 [ 3910.224557][T24860] dump_header+0x10b/0x85f [ 3910.229202][T24860] oom_kill_process.cold+0x10/0x15 [ 3910.234390][T24860] out_of_memory+0x35c/0x14a0 [ 3910.239138][T24860] ? find_held_lock+0x2d/0x110 [ 3910.243954][T24860] ? oom_killer_disable+0x280/0x280 [ 3910.249205][T24860] ? find_held_lock+0x2d/0x110 [ 3910.254045][T24860] mem_cgroup_out_of_memory+0x206/0x270 [ 3910.259674][T24860] ? mem_cgroup_margin+0x130/0x130 [ 3910.264887][T24860] ? lock_downgrade+0x6e0/0x6e0 [ 3910.269817][T24860] try_charge_memcg+0xefb/0x12f0 [ 3910.274806][T24860] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3910.280822][T24860] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3910.286582][T24860] ? lock_downgrade+0x6e0/0x6e0 [ 3910.291479][T24860] obj_cgroup_charge+0x2af/0x5e0 [ 3910.296476][T24860] kmem_cache_alloc_lru+0x145/0x760 [ 3910.301715][T24860] ? ext4_alloc_inode+0x28/0x680 [ 3910.306718][T24860] ? ext4_free_in_core_inode+0x70/0x70 [ 3910.312297][T24860] ext4_alloc_inode+0x28/0x680 [ 3910.317095][T24860] ? ext4_free_in_core_inode+0x70/0x70 [ 3910.322576][T24860] alloc_inode+0x61/0x230 [ 3910.326946][T24860] iget_locked+0x1bb/0x700 [ 3910.331408][T24860] __ext4_iget+0x3af/0x4230 [ 3910.336050][T24860] ? ext4_get_projid+0x190/0x190 [ 3910.341039][T24860] ? ext4_fname_prepare_lookup+0x163/0x200 [ 3910.347139][T24860] ? ext4_fname_setup_filename+0x110/0x110 [ 3910.353026][T24860] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3910.358811][T24860] ext4_lookup+0x387/0x700 [ 3910.363355][T24860] ? ext4_resetent+0x2d0/0x2d0 [ 3910.368267][T24860] __lookup_slow+0x24c/0x460 [ 3910.372908][T24860] ? __lookup_hash+0x180/0x180 [ 3910.377895][T24860] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3910.383497][T24860] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 3910.388996][T24860] ? lookup_fast+0x14e/0x520 [ 3910.393622][T24860] walk_component+0x33f/0x5a0 [ 3910.398342][T24860] path_lookupat+0x1ba/0x840 [ 3910.402971][T24860] filename_lookup+0x1d2/0x590 [ 3910.407780][T24860] ? may_linkat+0x500/0x500 [ 3910.412316][T24860] ? __might_fault+0xd9/0x180 [ 3910.417045][T24860] ? __phys_addr_symbol+0x30/0x70 [ 3910.422104][T24860] ? __check_object_size+0x2e2/0x5a0 [ 3910.427427][T24860] ? strncpy_from_user+0x28b/0x3c0 [ 3910.432592][T24860] ? getname_flags.part.0+0x1dd/0x4f0 [ 3910.438015][T24860] user_path_at_empty+0x46/0x60 [ 3910.442907][T24860] __x64_sys_umount+0xfc/0x190 [ 3910.447724][T24860] ? path_umount+0x10b0/0x10b0 [ 3910.452528][T24860] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3910.458461][T24860] do_syscall_64+0x39/0xb0 [ 3910.462917][T24860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3910.468837][T24860] RIP: 0033:0x7f62fbe8d537 [ 3910.473294][T24860] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3910.493019][T24860] RSP: 002b:00007ffd9c97c5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3910.501463][T24860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f62fbe8d537 [ 3910.509484][T24860] RDX: 00007ffd9c97c69c RSI: 000000000000000a RDI: 00007ffd9c97c690 [ 3910.517567][T24860] RBP: 00007ffd9c97c690 R08: 00000000ffffffff R09: 00007ffd9c97c460 [ 3910.525568][T24860] R10: 00005555572b2853 R11: 0000000000000246 R12: 00007f62fbee6b24 [ 3910.533564][T24860] R13: 00007ffd9c97d750 R14: 00005555572b2810 R15: 00007ffd9c97d790 [ 3910.541587][T24860] [ 3910.582647][T25012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3910.603997][T24860] memory: usage 8312kB, limit 0kB, failcnt 2376 [ 3910.610412][T24860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3910.617953][T24860] Memory cgroup stats for /syz0: [ 3910.618130][T24860] anon 36864 [ 3910.618130][T24860] file 8347648 [ 3910.618130][T24860] kernel 126976 [ 3910.618130][T24860] kernel_stack 0 [ 3910.618130][T24860] pagetables 8192 [ 3910.618130][T24860] sec_pagetables 0 [ 3910.618130][T24860] percpu 64 [ 3910.618130][T24860] sock 0 [ 3910.618130][T24860] vmalloc 0 [ 3910.618130][T24860] shmem 8347648 [ 3910.618130][T24860] zswap 0 [ 3910.618130][T24860] zswapped 0 [ 3910.618130][T24860] file_mapped 172032 [ 3910.618130][T24860] file_dirty 0 [ 3910.618130][T24860] file_writeback 0 [ 3910.618130][T24860] swapcached 0 [ 3910.618130][T24860] anon_thp 0 [ 3910.618130][T24860] file_thp 0 [ 3910.618130][T24860] shmem_thp 0 [ 3910.618130][T24860] inactive_anon 36864 [ 3910.618130][T24860] active_anon 8347648 [ 3910.618130][T24860] inactive_file 0 [ 3910.618130][T24860] active_file 0 [ 3910.618130][T24860] unevictable 0 [ 3910.618130][T24860] slab_reclaimable 34480 [ 3910.618130][T24860] slab_unreclaimable 71440 [ 3910.618130][T24860] slab 105920 [ 3910.741205][T24860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24860,uid=0 [ 3910.750988][T31933] Bluetooth: hci3: command 0x040f tx timeout [ 3910.785665][T24860] Memory cgroup out of memory: Killed process 24860 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3910.825813][T25012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3910.880590][T25142] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3910.899688][T25142] CPU: 1 PID: 25142 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3910.910177][T25142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3910.920365][T25142] Call Trace: [ 3910.923789][T25142] [ 3910.926757][T25142] dump_stack_lvl+0xd1/0x138 [ 3910.931403][T25142] dump_header+0x10b/0x85f [ 3910.935897][T25142] oom_kill_process.cold+0x10/0x15 [ 3910.941071][T25142] out_of_memory+0x35c/0x14a0 [ 3910.945805][T25142] ? lockdep_hardirqs_on+0x7d/0x100 [ 3910.951064][T25142] ? oom_killer_disable+0x280/0x280 [ 3910.956300][T25142] mem_cgroup_out_of_memory+0x206/0x270 [ 3910.961876][T25142] ? mem_cgroup_margin+0x130/0x130 [ 3910.967075][T25142] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3910.972933][T25142] memory_max_write+0x2f9/0x3c0 [ 3910.977794][T25142] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3910.983959][T25142] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3910.990161][T25142] cgroup_file_write+0x1e2/0x770 [ 3910.995156][T25142] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3911.001495][T25142] ? kill_css+0x370/0x370 [ 3911.005847][T25142] ? kill_css+0x370/0x370 [ 3911.010185][T25142] kernfs_fop_write_iter+0x3f1/0x600 [ 3911.015492][T25142] vfs_write+0x9ed/0xdd0 [ 3911.019747][T25142] ? kernel_write+0x630/0x630 [ 3911.024701][T25142] ? __fget_files+0x26a/0x440 [ 3911.029401][T25142] ksys_write+0x12b/0x250 [ 3911.033741][T25142] ? __ia32_sys_read+0xb0/0xb0 [ 3911.038511][T25142] ? __x64_sys_write+0x11/0xb0 [ 3911.043285][T25142] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 3911.048941][T25142] do_syscall_64+0x39/0xb0 [ 3911.053467][T25142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3911.059892][T25142] RIP: 0033:0x7f640868c0c9 [ 3911.064313][T25142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3911.083938][T25142] RSP: 002b:00007f6409304168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3911.092633][T25142] RAX: ffffffffffffffda RBX: 00007f64087abf80 RCX: 00007f640868c0c9 [ 3911.100705][T25142] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3911.108683][T25142] RBP: 00007f64086e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3911.116659][T25142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3911.124631][T25142] R13: 00007ffe7ae668cf R14: 00007f6409304300 R15: 0000000000022000 [ 3911.132624][T25142] [ 3911.173568][T25142] memory: usage 8592kB, limit 0kB, failcnt 2397 [ 3911.179893][T25142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3911.194564][T25142] Memory cgroup stats for /syz3: [ 3911.194772][T25142] anon 114688 [ 3911.194772][T25142] file 8359936 [ 3911.194772][T25142] kernel 274432 [ 3911.194772][T25142] kernel_stack 32768 [ 3911.194772][T25142] pagetables 77824 [ 3911.194772][T25142] sec_pagetables 0 [ 3911.194772][T25142] percpu 64 [ 3911.194772][T25142] sock 0 [ 3911.194772][T25142] vmalloc 0 [ 3911.194772][T25142] shmem 8359936 [ 3911.194772][T25142] zswap 0 [ 3911.194772][T25142] zswapped 0 [ 3911.194772][T25142] file_mapped 163840 [ 3911.194772][T25142] file_dirty 0 [ 3911.194772][T25142] file_writeback 0 [ 3911.194772][T25142] swapcached 0 [ 3911.194772][T25142] anon_thp 0 [ 3911.194772][T25142] file_thp 0 [ 3911.194772][T25142] shmem_thp 0 [ 3911.194772][T25142] inactive_anon 4046848 [ 3911.194772][T25142] active_anon 4427776 [ 3911.194772][T25142] inactive_file 0 [ 3911.194772][T25142] active_file 0 [ 3911.194772][T25142] unevictable 0 [ 3911.194772][T25142] slab_reclaimable 33736 [ 3911.194772][T25142] slab_unreclaimable 100464 [ 3911.194772][T25142] slab 134200 [ 3911.315613][T25142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24794,uid=0 [ 3911.331871][T25142] Memory cgroup out of memory: Killed process 24794 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3911.474224][T25096] bridge0: port 1(bridge_slave_0) entered blocking state [ 3911.491192][T25096] bridge0: port 1(bridge_slave_0) entered disabled state [ 3911.515420][T25096] device bridge_slave_0 entered promiscuous mode [ 3911.547454][T25096] bridge0: port 2(bridge_slave_1) entered blocking state [ 3911.555606][T25096] bridge0: port 2(bridge_slave_1) entered disabled state [ 3911.573547][T25096] device bridge_slave_1 entered promiscuous mode [ 3911.611843][T25115] bridge0: port 1(bridge_slave_0) entered blocking state [ 3911.619006][T25115] bridge0: port 1(bridge_slave_0) entered disabled state [ 3911.662181][T25115] device bridge_slave_0 entered promiscuous mode [ 3911.771652][T25115] bridge0: port 2(bridge_slave_1) entered blocking state [ 3911.793645][T25115] bridge0: port 2(bridge_slave_1) entered disabled state [ 3911.802486][T25115] device bridge_slave_1 entered promiscuous mode [ 3911.820441][T25096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 20:00:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 20:00:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) 20:00:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(r1, &(0x7f0000000740), 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 3911.886759][T25096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3912.030991][T31933] Bluetooth: hci1: command 0x0419 tx timeout [ 3912.043046][T25096] team0: Port device team_slave_0 added [ 3912.053408][T25115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3912.106849][T25115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3912.149093][T25096] team0: Port device team_slave_1 added 20:00:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1800, 0x1, 0x9, 0x3, 0x401, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb41d2d1423798cbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x83bf5a16820c3244, @perf_bp={&(0x7f0000000200)}, 0x3005, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) close(r1) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) [ 3912.272700][T25115] team0: Port device team_slave_0 added [ 3912.285193][T25096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3912.301024][T25096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3912.344372][T25096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3912.368592][T25115] team0: Port device team_slave_1 added [ 3912.395426][T25096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3912.411317][T25096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3912.457264][T25096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3912.545028][T25115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3912.556969][T25115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3912.588700][T25115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3912.685513][T25012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3912.726693][T25115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3912.737526][T25115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3912.790925][T25115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3912.831195][ T5854] Bluetooth: hci3: command 0x0419 tx timeout [ 3912.875120][T25096] device hsr_slave_0 entered promiscuous mode [ 3912.895823][T25096] device hsr_slave_1 entered promiscuous mode [ 3913.029887][T25115] device hsr_slave_0 entered promiscuous mode [ 3913.056701][T25115] device hsr_slave_1 entered promiscuous mode [ 3913.123567][T25115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3913.147448][T25115] Cannot create hsr debugfs directory [ 3913.199856][T25012] 8021q: adding VLAN 0 to HW filter on device team0 [ 3913.225791][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3913.251608][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3913.417025][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3913.441934][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3913.471752][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 3913.478918][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3913.524669][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3913.543558][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3913.556490][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3913.577398][T30817] bridge0: port 2(bridge_slave_1) entered blocking state [ 3913.584585][T30817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3913.605266][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3913.685838][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3913.701849][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3913.733071][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3913.833968][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3913.843044][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3913.862073][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3913.870666][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3913.901569][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3913.912763][T25012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3913.985373][T25096] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3914.134591][T25096] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3914.305522][T25096] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3914.401844][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3914.412155][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3914.421014][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3914.429509][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3914.439047][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3914.446798][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3914.563242][T25096] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3914.771442][T31933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3914.782384][T31933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3914.791483][T31933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3914.806059][T31933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3914.813841][T31933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3915.011515][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3915.019142][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3915.089109][T25012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3915.101280][T10157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3915.114689][T10157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3915.127584][T10157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3915.135511][T10157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3915.143397][T10157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3915.402131][T25115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3915.454042][T25096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3915.503852][T25096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3915.563981][T25181] chnl_net:caif_netlink_parms(): no params data found [ 3915.633800][T25115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3915.651052][T25096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3915.769203][T25096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3915.831896][T25115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3916.047339][T25115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3916.265179][T25181] bridge0: port 1(bridge_slave_0) entered blocking state [ 3916.273343][T25181] bridge0: port 1(bridge_slave_0) entered disabled state [ 3916.291985][T25181] device bridge_slave_0 entered promiscuous mode [ 3916.367208][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3916.382376][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3916.392192][T25181] bridge0: port 2(bridge_slave_1) entered blocking state [ 3916.399288][T25181] bridge0: port 2(bridge_slave_1) entered disabled state [ 3916.407869][T25181] device bridge_slave_1 entered promiscuous mode [ 3916.511760][T10157] Bluetooth: hci2: command 0x0409 tx timeout [ 3916.521249][T25181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3916.571239][T25115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3916.596779][T25012] device veth0_vlan entered promiscuous mode [ 3916.635452][T25181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3916.649005][T25187] chnl_net:caif_netlink_parms(): no params data found [ 3916.659240][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3916.667888][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3916.677183][T25115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3916.690597][T25115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3916.707722][T25115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3916.744259][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3916.756815][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3916.765575][T25194] chnl_net:caif_netlink_parms(): no params data found [ 3916.787432][T25096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3916.795812][T25012] device veth1_vlan entered promiscuous mode [ 3916.831046][T10157] Bluetooth: hci4: command 0x0409 tx timeout [ 3916.897976][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3916.906561][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3916.916096][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3916.925022][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3916.940387][T25181] team0: Port device team_slave_0 added [ 3916.951723][T25181] team0: Port device team_slave_1 added [ 3916.968871][T25096] 8021q: adding VLAN 0 to HW filter on device team0 [ 3917.055346][T25187] bridge0: port 1(bridge_slave_0) entered blocking state [ 3917.062927][T25187] bridge0: port 1(bridge_slave_0) entered disabled state [ 3917.071364][T25187] device bridge_slave_0 entered promiscuous mode [ 3917.111520][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3917.120203][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3917.129199][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 3917.136389][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3917.146007][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3917.155089][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3917.164946][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3917.174150][T25012] device veth0_macvtap entered promiscuous mode [ 3917.189012][T25187] bridge0: port 2(bridge_slave_1) entered blocking state [ 3917.201511][T25187] bridge0: port 2(bridge_slave_1) entered disabled state [ 3917.214677][T25187] device bridge_slave_1 entered promiscuous mode [ 3917.222826][T25181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3917.229825][T25181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3917.235001][T10157] Bluetooth: hci5: command 0x0409 tx timeout [ 3917.264796][T25181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3917.305254][T25012] device veth1_macvtap entered promiscuous mode [ 3917.367304][T27309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3917.450491][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3917.458698][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3917.502556][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3917.511528][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3917.519933][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 3917.527077][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3917.537946][T25181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3917.561022][T25181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3917.605888][T25181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3917.635404][T25194] bridge0: port 1(bridge_slave_0) entered blocking state [ 3917.645389][T25194] bridge0: port 1(bridge_slave_0) entered disabled state [ 3917.654224][T25194] device bridge_slave_0 entered promiscuous mode [ 3917.680710][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3917.707838][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3917.730794][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3917.747929][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3917.758142][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3917.781855][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3917.800915][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3917.821639][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3917.840870][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3917.866911][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3917.898118][T25012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3917.962801][T27309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3917.980648][T25187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3917.996746][T25187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3918.078048][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3918.087764][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3918.096729][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3918.131730][T25194] bridge0: port 2(bridge_slave_1) entered blocking state [ 3918.138876][T25194] bridge0: port 2(bridge_slave_1) entered disabled state [ 3918.172210][T25194] device bridge_slave_1 entered promiscuous mode [ 3918.185679][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3918.201191][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3918.212587][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3918.223210][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3918.234264][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3918.245190][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3918.255457][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3918.268138][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3918.279217][T25012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3918.290080][T25012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3918.302302][T25012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3918.314905][T27309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3918.402823][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3918.412003][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3918.420524][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3918.429502][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3918.439037][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3918.467221][T25012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3918.490813][T25012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3918.499569][T25012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3918.508932][T25012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3918.538425][T25187] team0: Port device team_slave_0 added [ 3918.564480][T27309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3918.591098][T10157] Bluetooth: hci2: command 0x041b tx timeout [ 3918.602853][T25181] device hsr_slave_0 entered promiscuous mode [ 3918.621262][T25181] device hsr_slave_1 entered promiscuous mode [ 3918.631044][T25181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3918.638650][T25181] Cannot create hsr debugfs directory [ 3918.667200][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3918.701714][T25187] team0: Port device team_slave_1 added [ 3918.744481][T25194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3918.784798][T25096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3918.798859][T25096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3918.843844][T25194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3918.864194][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3918.876079][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3918.885338][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3918.894677][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3918.908130][T25187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3918.921233][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3918.947734][T10157] Bluetooth: hci4: command 0x041b tx timeout [ 3918.975771][T25187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3919.024857][T25115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3919.134733][T30817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3919.146064][T25187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3919.153668][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3919.180349][T25187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3919.226167][T25194] team0: Port device team_slave_0 added [ 3919.303233][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3919.311199][T10157] Bluetooth: hci5: command 0x041b tx timeout [ 3919.314905][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3919.335939][T25115] 8021q: adding VLAN 0 to HW filter on device team0 [ 3919.359336][T25194] team0: Port device team_slave_1 added [ 3919.422036][T27309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3919.583651][T27309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3919.614942][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3919.631700][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3919.640261][T22308] bridge0: port 1(bridge_slave_0) entered blocking state [ 3919.647459][T22308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3919.670129][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3919.692231][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3919.711673][T22308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3919.718900][T22308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3919.741317][T22308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3919.841808][T27309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3919.860185][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3919.881770][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3919.901032][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3919.928129][T25187] device hsr_slave_0 entered promiscuous mode [ 3919.950351][T25187] device hsr_slave_1 entered promiscuous mode [ 3919.975134][T25187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3919.997918][T25187] Cannot create hsr debugfs directory [ 3920.021862][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3920.030037][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3920.081102][T25194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3920.088103][T25194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3920.160832][T25194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3920.202471][T27309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3920.231455][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3920.241373][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3920.261213][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3920.268915][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3920.302254][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3920.321450][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3920.329984][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3920.371914][T25096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3920.395129][T25194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3920.410860][T25194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3920.447238][T25194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3920.476660][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3920.486260][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3920.508793][T25115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3920.624092][T25181] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3920.647868][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3920.658186][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3920.671204][T10157] Bluetooth: hci2: command 0x040f tx timeout [ 3920.741833][T25181] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3920.782697][T31962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3920.793943][T31962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3920.841847][T30819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3920.869792][T25096] device veth0_vlan entered promiscuous mode [ 3920.944969][T25194] device hsr_slave_0 entered promiscuous mode [ 3920.981604][T25194] device hsr_slave_1 entered promiscuous mode [ 3920.990924][T10157] Bluetooth: hci4: command 0x040f tx timeout [ 3920.998435][T25194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3921.026024][T25194] Cannot create hsr debugfs directory [ 3921.081446][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3921.091448][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3921.113809][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3921.124740][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3921.232412][T25181] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3921.389483][T25096] device veth1_vlan entered promiscuous mode [ 3921.392662][T10157] Bluetooth: hci5: command 0x040f tx timeout [ 3921.464095][T25181] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3921.648585][T25232] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3921.704919][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3921.721215][T25232] CPU: 1 PID: 25232 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3921.723212][T12353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3921.731688][T25232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3921.731705][T25232] Call Trace: [ 3921.731713][T25232] [ 3921.731723][T25232] dump_stack_lvl+0xd1/0x138 [ 3921.731762][T25232] dump_header+0x10b/0x85f [ 3921.731803][T25232] oom_kill_process.cold+0x10/0x15 [ 3921.731847][T25232] out_of_memory+0x35c/0x14a0 [ 3921.731894][T25232] ? oom_killer_disable+0x280/0x280 [ 3921.731933][T25232] ? find_held_lock+0x2d/0x110 [ 3921.731972][T25232] mem_cgroup_out_of_memory+0x206/0x270 [ 3921.732010][T25232] ? mem_cgroup_margin+0x130/0x130 [ 3921.795434][T25232] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3921.801395][T25232] memory_max_write+0x2f9/0x3c0 [ 3921.806997][T25232] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3921.813098][T25232] ? lock_release+0x810/0x810 [ 3921.817797][T25232] cgroup_file_write+0x1e2/0x770 [ 3921.822758][T25232] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3921.828841][T25232] ? kill_css+0x370/0x370 [ 3921.833188][T25232] ? __virt_addr_valid+0x61/0x2e0 [ 3921.838422][T25232] ? kill_css+0x370/0x370 [ 3921.842773][T25232] kernfs_fop_write_iter+0x3f1/0x600 [ 3921.848175][T25232] vfs_write+0x9ed/0xdd0 [ 3921.852611][T25232] ? kernel_write+0x630/0x630 [ 3921.857311][T25232] ? __fget_files+0x26a/0x440 [ 3921.862050][T25232] ksys_write+0x12b/0x250 [ 3921.866952][T25232] ? __ia32_sys_read+0xb0/0xb0 [ 3921.871924][T25232] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3921.877845][T25232] do_syscall_64+0x39/0xb0 [ 3921.882980][T25232] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3921.889322][T25232] RIP: 0033:0x7f0a7ee8c0c9 [ 3921.893780][T25232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3921.913485][T25232] RSP: 002b:00007f0a7fb88168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3921.922174][T25232] RAX: ffffffffffffffda RBX: 00007f0a7efabf80 RCX: 00007f0a7ee8c0c9 [ 3921.930292][T25232] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 3921.938300][T25232] RBP: 00007f0a7eee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3921.946391][T25232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3921.954411][T25232] R13: 00007ffd4bae8a0f R14: 00007f0a7fb88300 R15: 0000000000022000 [ 3921.962425][T25232] [ 3921.987472][T25115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3921.995918][T25232] memory: usage 8568kB, limit 0kB, failcnt 2586 [ 3922.004983][T25232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3922.013180][T25232] Memory cgroup stats for /syz4: [ 3922.018277][T25232] anon 110592 [ 3922.018277][T25232] file 8359936 [ 3922.018277][T25232] kernel 282624 [ 3922.018277][T25232] kernel_stack 65536 [ 3922.018277][T25232] pagetables 77824 [ 3922.018277][T25232] sec_pagetables 0 [ 3922.018277][T25232] percpu 64 [ 3922.018277][T25232] sock 0 [ 3922.018277][T25232] vmalloc 0 [ 3922.018277][T25232] shmem 8359936 [ 3922.018277][T25232] zswap 0 [ 3922.018277][T25232] zswapped 0 [ 3922.018277][T25232] file_mapped 176128 [ 3922.018277][T25232] file_dirty 0 [ 3922.018277][T25232] file_writeback 0 [ 3922.018277][T25232] swapcached 0 [ 3922.018277][T25232] anon_thp 0 [ 3922.018277][T25232] file_thp 0 [ 3922.018277][T25232] shmem_thp 0 [ 3922.018277][T25232] inactive_anon 110592 [ 3922.018277][T25232] active_anon 8359936 [ 3922.018277][T25232] inactive_file 0 [ 3922.018277][T25232] active_file 0 [ 3922.018277][T25232] unevictable 0 [ 3922.018277][T25232] slab_reclaimable 39128 [ 3922.018277][T25232] slab_unreclaimable 75048 [ 3922.018277][T25232] slab 114176 [ 3922.048418][T25096] device veth0_macvtap entered promiscuous mode [ 3922.146318][T27309] ------------[ cut here ]------------ [ 3922.151814][T27309] DEBUG_LOCKS_WARN_ON(1) [ 3922.151866][T27309] WARNING: CPU: 0 PID: 27309 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 3922.165904][T27309] Modules linked in: [ 3922.169781][T27309] CPU: 0 PID: 27309 Comm: kworker/u4:10 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3922.180096][T27309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3922.190135][T27309] Workqueue: netns cleanup_net [ 3922.194918][T27309] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 3922.200556][T27309] Code: a8 13 73 8e e8 92 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 3922.221376][T27309] RSP: 0018:ffffc9000384f518 EFLAGS: 00010082 [ 3922.227516][T27309] RAX: 0000000000000000 RBX: 0000000000000929 RCX: 0000000000000000 [ 3922.235490][T27309] RDX: ffff88813ff5ba80 RSI: ffffffff8166710c RDI: fffff52000709e95 [ 3922.243562][T27309] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 3922.251517][T27309] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 3922.259487][T27309] R13: ffff88813ff5ba80 R14: ffff88813ff5c4b8 R15: dffffc0000000000 [ 3922.267572][T27309] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3922.276507][T27309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3922.283186][T27309] CR2: 000055777ed81950 CR3: 0000000078503000 CR4: 00000000003506f0 [ 3922.291245][T27309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3922.299213][T27309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3922.307173][T27309] Call Trace: [ 3922.310456][T27309] [ 3922.313379][T27309] ? xfs_efi_copy_format+0x59c/0x5d0 [ 3922.318735][T27309] ? __lock_acquire+0x2567/0x56d0 [ 3922.323765][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.329729][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.335717][T27309] lock_acquire+0x1e3/0x630 [ 3922.340382][T27309] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 3922.346436][T27309] ? find_held_lock+0x2d/0x110 [ 3922.351195][T27309] ? lock_release+0x810/0x810 [ 3922.355885][T27309] ? psi_task_switch+0x2de/0x930 [ 3922.361867][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.366756][T27309] __perf_event_task_sched_in+0xe2/0x6c0 [ 3922.372375][T27309] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 3922.378200][T27309] ? ctx_sched_in+0x850/0x850 [ 3922.382920][T27309] ? __schedule+0xb02/0x5450 [ 3922.387519][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.392484][T27309] finish_task_switch.isra.0+0x5e5/0xc80 [ 3922.398166][T27309] ? __switch_to+0x5d0/0x10a0 [ 3922.402845][T27309] ? __switch_to_asm+0x3e/0x60 [ 3922.407602][T27309] __schedule+0xb92/0x5450 [ 3922.412013][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.418018][T27309] ? static_obj+0x22/0xc0 [ 3922.422342][T27309] ? io_schedule_timeout+0x150/0x150 [ 3922.427707][T27309] ? __mutex_lock+0xa43/0x1360 [ 3922.432460][T27309] schedule+0xde/0x1b0 [ 3922.436545][T27309] schedule_preempt_disabled+0x13/0x20 [ 3922.442001][T27309] __mutex_lock+0xa48/0x1360 [ 3922.446681][T27309] ? devlink_pernet_pre_exit+0x10a/0x220 [ 3922.452356][T27309] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3922.457886][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.462739][T27309] ? devlink_try_get+0x15d/0x1e0 [ 3922.467771][T27309] devlink_pernet_pre_exit+0x10a/0x220 [ 3922.473222][T27309] ? devlinks_xa_find_get+0x220/0x220 [ 3922.478601][T27309] ? cttimeout_net_pre_exit+0x10d/0x500 [ 3922.484167][T27309] ? devlinks_xa_find_get+0x220/0x220 [ 3922.489614][T27309] cleanup_net+0x455/0xb10 [ 3922.494019][T27309] ? unregister_pernet_device+0x80/0x80 [ 3922.499727][T27309] process_one_work+0x9bf/0x1710 [ 3922.504659][T27309] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3922.510038][T27309] ? rwlock_bug.part.0+0x90/0x90 [ 3922.515047][T27309] ? _raw_spin_lock_irq+0x45/0x50 [ 3922.520063][T27309] worker_thread+0x669/0x1090 [ 3922.525250][T27309] ? process_one_work+0x1710/0x1710 [ 3922.530434][T27309] kthread+0x2e8/0x3a0 [ 3922.534488][T27309] ? kthread_complete_and_exit+0x40/0x40 [ 3922.540125][T27309] ret_from_fork+0x1f/0x30 [ 3922.544538][T27309] [ 3922.547553][T27309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3922.554820][T27309] CPU: 0 PID: 27309 Comm: kworker/u4:10 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 3922.565130][T27309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3922.576312][T27309] Workqueue: netns cleanup_net [ 3922.581084][T27309] Call Trace: [ 3922.584438][T27309] [ 3922.587528][T27309] dump_stack_lvl+0xd1/0x138 [ 3922.592107][T27309] panic+0x2cc/0x626 [ 3922.596017][T27309] ? panic_print_sys_info.part.0+0x110/0x110 [ 3922.601993][T27309] ? __lock_acquire+0xecf/0x56d0 [ 3922.607007][T27309] check_panic_on_warn.cold+0x19/0x35 [ 3922.612372][T27309] __warn+0xf2/0x1a0 [ 3922.616257][T27309] ? __lock_acquire+0xecf/0x56d0 [ 3922.621186][T27309] report_bug+0x1c0/0x210 [ 3922.625523][T27309] handle_bug+0x3c/0x70 [ 3922.629671][T27309] exc_invalid_op+0x18/0x50 [ 3922.634167][T27309] asm_exc_invalid_op+0x1a/0x20 [ 3922.639274][T27309] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 3922.644808][T27309] Code: a8 13 73 8e e8 92 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 3922.668057][T27309] RSP: 0018:ffffc9000384f518 EFLAGS: 00010082 [ 3922.674142][T27309] RAX: 0000000000000000 RBX: 0000000000000929 RCX: 0000000000000000 [ 3922.682099][T27309] RDX: ffff88813ff5ba80 RSI: ffffffff8166710c RDI: fffff52000709e95 [ 3922.690094][T27309] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 3922.698052][T27309] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 3922.706007][T27309] R13: ffff88813ff5ba80 R14: ffff88813ff5c4b8 R15: dffffc0000000000 [ 3922.713976][T27309] ? vprintk+0x8c/0xa0 [ 3922.718061][T27309] ? __lock_acquire+0xecf/0x56d0 [ 3922.722989][T27309] ? xfs_efi_copy_format+0x59c/0x5d0 [ 3922.728347][T27309] ? __lock_acquire+0x2567/0x56d0 [ 3922.733356][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.739928][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.745938][T27309] lock_acquire+0x1e3/0x630 [ 3922.750432][T27309] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 3922.757097][T27309] ? find_held_lock+0x2d/0x110 [ 3922.761855][T27309] ? lock_release+0x810/0x810 [ 3922.766809][T27309] ? psi_task_switch+0x2de/0x930 [ 3922.771792][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.776754][T27309] __perf_event_task_sched_in+0xe2/0x6c0 [ 3922.782397][T27309] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 3922.788231][T27309] ? ctx_sched_in+0x850/0x850 [ 3922.792934][T27309] ? __schedule+0xb02/0x5450 [ 3922.797529][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.802385][T27309] finish_task_switch.isra.0+0x5e5/0xc80 [ 3922.808021][T27309] ? __switch_to+0x5d0/0x10a0 [ 3922.812687][T27309] ? __switch_to_asm+0x3e/0x60 [ 3922.817443][T27309] __schedule+0xb92/0x5450 [ 3922.821851][T27309] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3922.828967][T27309] ? static_obj+0x22/0xc0 [ 3922.834088][T27309] ? io_schedule_timeout+0x150/0x150 [ 3922.839383][T27309] ? __mutex_lock+0xa43/0x1360 [ 3922.844163][T27309] schedule+0xde/0x1b0 [ 3922.848269][T27309] schedule_preempt_disabled+0x13/0x20 [ 3922.853743][T27309] __mutex_lock+0xa48/0x1360 [ 3922.858419][T27309] ? devlink_pernet_pre_exit+0x10a/0x220 [ 3922.864146][T27309] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3922.869700][T27309] ? lock_downgrade+0x6e0/0x6e0 [ 3922.874637][T27309] ? devlink_try_get+0x15d/0x1e0 [ 3922.879581][T27309] devlink_pernet_pre_exit+0x10a/0x220 [ 3922.885056][T27309] ? devlinks_xa_find_get+0x220/0x220 [ 3922.890418][T27309] ? cttimeout_net_pre_exit+0x10d/0x500 [ 3922.896007][T27309] ? devlinks_xa_find_get+0x220/0x220 [ 3922.901451][T27309] cleanup_net+0x455/0xb10 [ 3922.905961][T27309] ? unregister_pernet_device+0x80/0x80 [ 3922.911512][T27309] process_one_work+0x9bf/0x1710 [ 3922.916465][T27309] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3922.921834][T27309] ? rwlock_bug.part.0+0x90/0x90 [ 3922.926873][T27309] ? _raw_spin_lock_irq+0x45/0x50 [ 3922.931935][T27309] worker_thread+0x669/0x1090 [ 3922.936712][T27309] ? process_one_work+0x1710/0x1710 [ 3922.942112][T27309] kthread+0x2e8/0x3a0 [ 3922.946266][T27309] ? kthread_complete_and_exit+0x40/0x40 [ 3922.951908][T27309] ret_from_fork+0x1f/0x30 [ 3922.956370][T27309] [ 3924.023471][T27309] Shutting down cpus with NMI [ 3924.028383][T27309] Kernel Offset: disabled [ 3924.032706][T27309] Rebooting in 86400 seconds..