entered disabled state [ 3470.966106][T30042] device bridge_slave_1 entered promiscuous mode 22:16:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000006e8fd00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3471.027514][T30046] device veth0_to_hsr left promiscuous mode [ 3471.034490][T30046] bridge3648: port 1(veth0_to_hsr) entered disabled state [ 3471.055093][T30046] bridge3649: port 1(veth0_to_hsr) entered blocking state [ 3471.063377][T30046] bridge3649: port 1(veth0_to_hsr) entered disabled state [ 3471.077478][T30046] device veth0_to_hsr entered promiscuous mode [ 3471.092915][T30047] device bridge_slave_1 left promiscuous mode [ 3471.100922][T30047] bridge3648: port 2(bridge_slave_1) entered disabled state 22:16:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3471.122479][T30047] bridge3649: port 2(bridge_slave_1) entered blocking state [ 3471.130560][T30047] bridge3649: port 2(bridge_slave_1) entered disabled state [ 3471.139610][T30047] device bridge_slave_1 entered promiscuous mode [ 3471.159736][T30049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000267a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3471.256450][T30050] device bridge_slave_1 left promiscuous mode [ 3471.262757][T30050] bridge3906: port 1(bridge_slave_1) entered disabled state [ 3471.278891][T30050] bridge3907: port 1(bridge_slave_1) entered blocking state [ 3471.286408][T30050] bridge3907: port 1(bridge_slave_1) entered disabled state [ 3471.295192][T30050] device bridge_slave_1 entered promiscuous mode [ 3471.384658][T30053] bridge4258: port 1(veth0_to_hsr) entered disabled state [ 3471.400480][T30053] bridge4259: port 1(veth0_to_hsr) entered blocking state [ 3471.407964][T30053] bridge4259: port 1(veth0_to_hsr) entered disabled state 22:16:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000020a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3471.431728][T30054] device bridge_slave_1 left promiscuous mode [ 3471.438897][T30054] bridge4258: port 2(bridge_slave_1) entered disabled state [ 3471.456455][T30054] bridge4259: port 2(bridge_slave_1) entered blocking state [ 3471.464170][T30054] bridge4259: port 2(bridge_slave_1) entered disabled state [ 3471.475664][T30054] device bridge_slave_1 entered promiscuous mode [ 3471.533043][T30057] bridge4569: port 1(veth0_to_hsr) entered disabled state [ 3471.557755][T30057] bridge4570: port 1(veth0_to_hsr) entered blocking state [ 3471.566022][T30057] bridge4570: port 1(veth0_to_hsr) entered disabled state 22:16:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000023ad0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3471.593276][T30058] device bridge_slave_1 left promiscuous mode [ 3471.600196][T30058] bridge4569: port 2(bridge_slave_1) entered disabled state [ 3471.617941][T30058] bridge4570: port 2(bridge_slave_1) entered blocking state [ 3471.625824][T30058] bridge4570: port 2(bridge_slave_1) entered disabled state [ 3471.634627][T30058] device bridge_slave_1 entered promiscuous mode [ 3471.711219][T30061] bridge4223: port 1(veth0_to_hsr) entered disabled state [ 3471.723640][T30061] bridge4224: port 1(veth0_to_hsr) entered blocking state [ 3471.731801][T30061] bridge4224: port 1(veth0_to_hsr) entered disabled state 22:16:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000002a0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3471.756841][T30062] device bridge_slave_1 left promiscuous mode [ 3471.763431][T30062] bridge4223: port 2(bridge_slave_1) entered disabled state [ 3471.784406][T30062] bridge4224: port 2(bridge_slave_1) entered blocking state [ 3471.792550][T30062] bridge4224: port 2(bridge_slave_1) entered disabled state [ 3471.801947][T30062] device bridge_slave_1 entered promiscuous mode [ 3471.854629][T30065] bridge4341: port 1(veth0_to_hsr) entered disabled state [ 3471.871620][T30065] bridge4342: port 1(veth0_to_hsr) entered blocking state [ 3471.881907][T30065] bridge4342: port 1(veth0_to_hsr) entered disabled state [ 3471.906705][T30066] device bridge_slave_1 left promiscuous mode [ 3471.913349][T30066] bridge4341: port 2(bridge_slave_1) entered disabled state [ 3471.933084][T30066] bridge4342: port 2(bridge_slave_1) entered blocking state [ 3471.941740][T30066] bridge4342: port 2(bridge_slave_1) entered disabled state [ 3471.950820][T30066] device bridge_slave_1 entered promiscuous mode 22:16:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000006e8fe00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3471.964575][T30069] device veth0_to_hsr left promiscuous mode [ 3471.971086][T30069] bridge3649: port 1(veth0_to_hsr) entered disabled state [ 3471.987847][T30069] bridge3650: port 1(veth0_to_hsr) entered blocking state [ 3471.997982][T30069] bridge3650: port 1(veth0_to_hsr) entered disabled state [ 3472.020044][T30069] device veth0_to_hsr entered promiscuous mode [ 3472.034464][T30070] device bridge_slave_1 left promiscuous mode [ 3472.041165][T30070] bridge3649: port 2(bridge_slave_1) entered disabled state [ 3472.059043][T30070] bridge3650: port 2(bridge_slave_1) entered blocking state 22:16:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3472.066608][T30070] bridge3650: port 2(bridge_slave_1) entered disabled state [ 3472.075646][T30070] device bridge_slave_1 entered promiscuous mode [ 3472.092118][T30072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3472.163008][T30073] device bridge_slave_1 left promiscuous mode [ 3472.170473][T30073] bridge3907: port 1(bridge_slave_1) entered disabled state [ 3472.192938][T30073] bridge3908: port 1(bridge_slave_1) entered blocking state [ 3472.200763][T30073] bridge3908: port 1(bridge_slave_1) entered disabled state 22:16:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000277a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3472.209962][T30073] device bridge_slave_1 entered promiscuous mode [ 3472.280130][T30076] bridge4259: port 1(veth0_to_hsr) entered disabled state [ 3472.296612][T30076] bridge4260: port 1(veth0_to_hsr) entered blocking state [ 3472.304128][T30076] bridge4260: port 1(veth0_to_hsr) entered disabled state 22:16:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000c00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3472.325934][T30077] device bridge_slave_1 left promiscuous mode [ 3472.332680][T30077] bridge4259: port 2(bridge_slave_1) entered disabled state [ 3472.350177][T30077] bridge4260: port 2(bridge_slave_1) entered blocking state [ 3472.357609][T30077] bridge4260: port 2(bridge_slave_1) entered disabled state [ 3472.366281][T30077] device bridge_slave_1 entered promiscuous mode [ 3472.439878][T30080] bridge4570: port 1(veth0_to_hsr) entered disabled state [ 3472.459709][T30080] bridge4571: port 1(veth0_to_hsr) entered blocking state [ 3472.467065][T30080] bridge4571: port 1(veth0_to_hsr) entered disabled state [ 3472.487748][T30081] device bridge_slave_1 left promiscuous mode [ 3472.496667][T30081] bridge4570: port 2(bridge_slave_1) entered disabled state [ 3472.517938][T30081] bridge4571: port 2(bridge_slave_1) entered blocking state [ 3472.525915][T30081] bridge4571: port 2(bridge_slave_1) entered disabled state 22:16:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000023ae0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3472.535409][T30081] device bridge_slave_1 entered promiscuous mode [ 3472.605791][T30084] bridge4224: port 1(veth0_to_hsr) entered disabled state [ 3472.617050][T30084] bridge4225: port 1(veth0_to_hsr) entered blocking state [ 3472.624847][T30084] bridge4225: port 1(veth0_to_hsr) entered disabled state [ 3472.651059][T30085] device bridge_slave_1 left promiscuous mode [ 3472.657393][T30085] bridge4224: port 2(bridge_slave_1) entered disabled state [ 3472.677464][T30085] bridge4225: port 2(bridge_slave_1) entered blocking state [ 3472.685716][T30085] bridge4225: port 2(bridge_slave_1) entered disabled state [ 3472.694947][T30085] device bridge_slave_1 entered promiscuous mode 22:16:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000320100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3472.764491][T30088] bridge4342: port 1(veth0_to_hsr) entered disabled state [ 3472.774872][T30088] bridge4343: port 1(veth0_to_hsr) entered blocking state [ 3472.782887][T30088] bridge4343: port 1(veth0_to_hsr) entered disabled state [ 3472.812379][T30090] device bridge_slave_1 left promiscuous mode [ 3472.818897][T30090] bridge4342: port 2(bridge_slave_1) entered disabled state [ 3472.838617][T30090] bridge4343: port 2(bridge_slave_1) entered blocking state [ 3472.846194][T30090] bridge4343: port 2(bridge_slave_1) entered disabled state [ 3472.855340][T30090] device bridge_slave_1 entered promiscuous mode 22:16:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000fffffffe00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3472.928681][T30093] device veth0_to_hsr left promiscuous mode [ 3472.935914][T30093] bridge3650: port 1(veth0_to_hsr) entered disabled state [ 3472.946244][T30093] bridge3651: port 1(veth0_to_hsr) entered blocking state [ 3472.954065][T30093] bridge3651: port 1(veth0_to_hsr) entered disabled state [ 3472.967287][T30093] device veth0_to_hsr entered promiscuous mode [ 3472.985005][T30094] device bridge_slave_1 left promiscuous mode [ 3472.991488][T30094] bridge3650: port 2(bridge_slave_1) entered disabled state [ 3473.009417][T30094] bridge3651: port 2(bridge_slave_1) entered blocking state [ 3473.016850][T30094] bridge3651: port 2(bridge_slave_1) entered disabled state [ 3473.027514][T30094] device bridge_slave_1 entered promiscuous mode 22:16:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000c000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3473.046619][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3473.109064][T30097] device bridge_slave_1 left promiscuous mode [ 3473.115834][T30097] bridge3908: port 1(bridge_slave_1) entered disabled state [ 3473.136429][T30097] bridge3909: port 1(bridge_slave_1) entered blocking state [ 3473.144755][T30097] bridge3909: port 1(bridge_slave_1) entered disabled state 22:16:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000287a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3473.154187][T30097] device bridge_slave_1 entered promiscuous mode [ 3473.234482][T30100] bridge4260: port 1(veth0_to_hsr) entered disabled state [ 3473.251838][T30100] bridge4261: port 1(veth0_to_hsr) entered blocking state [ 3473.261877][T30100] bridge4261: port 1(veth0_to_hsr) entered disabled state [ 3473.288257][T30101] device bridge_slave_1 left promiscuous mode [ 3473.295519][T30101] bridge4260: port 2(bridge_slave_1) entered disabled state [ 3473.315543][T30101] bridge4261: port 2(bridge_slave_1) entered blocking state [ 3473.323715][T30101] bridge4261: port 2(bridge_slave_1) entered disabled state 22:16:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000e00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3473.332422][T30101] device bridge_slave_1 entered promiscuous mode [ 3473.406598][T30104] bridge4571: port 1(veth0_to_hsr) entered disabled state [ 3473.425930][T30104] bridge4572: port 1(veth0_to_hsr) entered blocking state [ 3473.434383][T30104] bridge4572: port 1(veth0_to_hsr) entered disabled state 22:16:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000023af0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3473.458520][T30105] device bridge_slave_1 left promiscuous mode [ 3473.466280][T30105] bridge4571: port 2(bridge_slave_1) entered disabled state [ 3473.482711][T30105] bridge4572: port 2(bridge_slave_1) entered blocking state [ 3473.491416][T30105] bridge4572: port 2(bridge_slave_1) entered disabled state [ 3473.501517][T30105] device bridge_slave_1 entered promiscuous mode [ 3473.554859][T30108] bridge4225: port 1(veth0_to_hsr) entered disabled state [ 3473.572674][T30108] bridge4226: port 1(veth0_to_hsr) entered blocking state [ 3473.580247][T30108] bridge4226: port 1(veth0_to_hsr) entered disabled state [ 3473.598991][T30109] device bridge_slave_1 left promiscuous mode [ 3473.606498][T30109] bridge4225: port 2(bridge_slave_1) entered disabled state [ 3473.628198][T30109] bridge4226: port 2(bridge_slave_1) entered blocking state [ 3473.637587][T30109] bridge4226: port 2(bridge_slave_1) entered disabled state [ 3473.649914][T30109] device bridge_slave_1 entered promiscuous mode 22:16:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000420100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3473.702693][T30112] bridge4343: port 1(veth0_to_hsr) entered disabled state [ 3473.713313][T30112] bridge4344: port 1(veth0_to_hsr) entered blocking state [ 3473.727294][T30112] bridge4344: port 1(veth0_to_hsr) entered disabled state [ 3473.760381][T30113] device bridge_slave_1 left promiscuous mode [ 3473.766726][T30113] bridge4343: port 2(bridge_slave_1) entered disabled state [ 3473.783685][T30113] bridge4344: port 2(bridge_slave_1) entered blocking state [ 3473.791161][T30113] bridge4344: port 2(bridge_slave_1) entered disabled state [ 3473.801328][T30113] device bridge_slave_1 entered promiscuous mode 22:16:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000006e8ff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3473.862548][T30117] device veth0_to_hsr left promiscuous mode [ 3473.879053][T30117] bridge3651: port 1(veth0_to_hsr) entered disabled state [ 3473.888512][T30117] bridge3652: port 1(veth0_to_hsr) entered blocking state [ 3473.896239][T30117] bridge3652: port 1(veth0_to_hsr) entered disabled state [ 3473.908203][T30117] device veth0_to_hsr entered promiscuous mode [ 3473.924493][T30118] device bridge_slave_1 left promiscuous mode [ 3473.939530][T30118] bridge3651: port 2(bridge_slave_1) entered disabled state 22:16:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3473.956218][T30118] bridge3652: port 2(bridge_slave_1) entered blocking state [ 3473.963967][T30118] bridge3652: port 2(bridge_slave_1) entered disabled state [ 3473.974117][T30118] device bridge_slave_1 entered promiscuous mode [ 3473.993828][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3474.055603][T30121] device bridge_slave_1 left promiscuous mode [ 3474.067214][T30121] bridge3909: port 1(bridge_slave_1) entered disabled state [ 3474.085121][T30121] bridge3910: port 1(bridge_slave_1) entered blocking state [ 3474.093906][T30121] bridge3910: port 1(bridge_slave_1) entered disabled state 22:16:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000297a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3474.103639][T30121] device bridge_slave_1 entered promiscuous mode [ 3474.165122][T30124] bridge4261: port 1(veth0_to_hsr) entered disabled state [ 3474.185794][T30124] bridge4262: port 1(veth0_to_hsr) entered blocking state [ 3474.193322][T30124] bridge4262: port 1(veth0_to_hsr) entered disabled state 22:16:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000f00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3474.212891][T30125] device bridge_slave_1 left promiscuous mode [ 3474.219765][T30125] bridge4261: port 2(bridge_slave_1) entered disabled state [ 3474.240302][T30125] bridge4262: port 2(bridge_slave_1) entered blocking state [ 3474.247707][T30125] bridge4262: port 2(bridge_slave_1) entered disabled state [ 3474.256898][T30125] device bridge_slave_1 entered promiscuous mode [ 3474.325926][T30128] bridge4572: port 1(veth0_to_hsr) entered disabled state [ 3474.348707][T30128] bridge4573: port 1(veth0_to_hsr) entered blocking state [ 3474.356319][T30128] bridge4573: port 1(veth0_to_hsr) entered disabled state [ 3474.385579][T30129] device bridge_slave_1 left promiscuous mode [ 3474.393515][T30129] bridge4572: port 2(bridge_slave_1) entered disabled state [ 3474.417146][T30129] bridge4573: port 2(bridge_slave_1) entered blocking state [ 3474.425722][T30129] bridge4573: port 2(bridge_slave_1) entered disabled state 22:16:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000023b00000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3474.438983][T30129] device bridge_slave_1 entered promiscuous mode [ 3474.516490][T30132] bridge4226: port 1(veth0_to_hsr) entered disabled state [ 3474.527906][T30132] bridge4227: port 1(veth0_to_hsr) entered blocking state [ 3474.535892][T30132] bridge4227: port 1(veth0_to_hsr) entered disabled state [ 3474.557539][T30133] device bridge_slave_1 left promiscuous mode 22:16:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000004a0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3474.564766][T30133] bridge4226: port 2(bridge_slave_1) entered disabled state [ 3474.586132][T30133] bridge4227: port 2(bridge_slave_1) entered blocking state [ 3474.594115][T30133] bridge4227: port 2(bridge_slave_1) entered disabled state [ 3474.603255][T30133] device bridge_slave_1 entered promiscuous mode [ 3474.683252][T30136] bridge4344: port 1(veth0_to_hsr) entered disabled state [ 3474.693033][T30136] bridge4345: port 1(veth0_to_hsr) entered blocking state [ 3474.701003][T30136] bridge4345: port 1(veth0_to_hsr) entered disabled state 22:16:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000088a8ffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3474.728170][T30137] device bridge_slave_1 left promiscuous mode [ 3474.734745][T30137] bridge4344: port 2(bridge_slave_1) entered disabled state [ 3474.752683][T30137] bridge4345: port 2(bridge_slave_1) entered blocking state [ 3474.760382][T30137] bridge4345: port 2(bridge_slave_1) entered disabled state [ 3474.769833][T30137] device bridge_slave_1 entered promiscuous mode [ 3474.832298][T30141] device veth0_to_hsr left promiscuous mode [ 3474.838864][T30141] bridge3652: port 1(veth0_to_hsr) entered disabled state [ 3474.857414][T30141] bridge3653: port 1(veth0_to_hsr) entered blocking state [ 3474.865665][T30141] bridge3653: port 1(veth0_to_hsr) entered disabled state [ 3474.877784][T30141] device veth0_to_hsr entered promiscuous mode [ 3474.894660][T30142] device bridge_slave_1 left promiscuous mode [ 3474.901619][T30142] bridge3652: port 2(bridge_slave_1) entered disabled state [ 3474.921511][T30142] bridge3653: port 2(bridge_slave_1) entered blocking state 22:16:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3474.929294][T30142] bridge3653: port 2(bridge_slave_1) entered disabled state [ 3474.938115][T30142] device bridge_slave_1 entered promiscuous mode [ 3474.959671][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3475.020714][T30145] device bridge_slave_1 left promiscuous mode [ 3475.027514][T30145] bridge3910: port 1(bridge_slave_1) entered disabled state [ 3475.044817][T30145] bridge3911: port 1(bridge_slave_1) entered blocking state [ 3475.058706][T30145] bridge3911: port 1(bridge_slave_1) entered disabled state [ 3475.067557][T30145] device bridge_slave_1 entered promiscuous mode 22:16:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002a7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3475.143268][T30148] bridge4262: port 1(veth0_to_hsr) entered disabled state [ 3475.162477][T30148] bridge4263: port 1(veth0_to_hsr) entered blocking state [ 3475.173473][T30148] bridge4263: port 1(veth0_to_hsr) entered disabled state [ 3475.202425][T30149] device bridge_slave_1 left promiscuous mode [ 3475.208982][T30149] bridge4262: port 2(bridge_slave_1) entered disabled state [ 3475.227980][T30149] bridge4263: port 2(bridge_slave_1) entered blocking state [ 3475.236272][T30149] bridge4263: port 2(bridge_slave_1) entered disabled state [ 3475.247698][T30149] device bridge_slave_1 entered promiscuous mode 22:16:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000001000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3475.330658][T30152] bridge4573: port 1(veth0_to_hsr) entered disabled state [ 3475.345736][T30152] bridge4574: port 1(veth0_to_hsr) entered blocking state [ 3475.353684][T30152] bridge4574: port 1(veth0_to_hsr) entered disabled state 22:16:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000023b10000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3475.376440][T30153] device bridge_slave_1 left promiscuous mode [ 3475.383515][T30153] bridge4573: port 2(bridge_slave_1) entered disabled state [ 3475.403917][T30153] bridge4574: port 2(bridge_slave_1) entered blocking state [ 3475.411832][T30153] bridge4574: port 2(bridge_slave_1) entered disabled state [ 3475.421482][T30153] device bridge_slave_1 entered promiscuous mode [ 3475.482713][T30156] bridge4227: port 1(veth0_to_hsr) entered disabled state [ 3475.497314][T30156] bridge4228: port 1(veth0_to_hsr) entered blocking state [ 3475.505421][T30156] bridge4228: port 1(veth0_to_hsr) entered disabled state [ 3475.530757][T30157] device bridge_slave_1 left promiscuous mode [ 3475.537144][T30157] bridge4227: port 2(bridge_slave_1) entered disabled state [ 3475.555527][T30157] bridge4228: port 2(bridge_slave_1) entered blocking state [ 3475.568685][T30157] bridge4228: port 2(bridge_slave_1) entered disabled state 22:16:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000580100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3475.580236][T30157] device bridge_slave_1 entered promiscuous mode [ 3475.653274][T30160] bridge4345: port 1(veth0_to_hsr) entered disabled state [ 3475.664698][T30160] bridge4346: port 1(veth0_to_hsr) entered blocking state [ 3475.673672][T30160] bridge4346: port 1(veth0_to_hsr) entered disabled state [ 3475.693229][T30161] device bridge_slave_1 left promiscuous mode 22:16:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000f0ffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3475.701934][T30161] bridge4345: port 2(bridge_slave_1) entered disabled state [ 3475.718911][T30161] bridge4346: port 2(bridge_slave_1) entered blocking state [ 3475.726421][T30161] bridge4346: port 2(bridge_slave_1) entered disabled state [ 3475.740462][T30161] device bridge_slave_1 entered promiscuous mode [ 3475.791052][T30165] device veth0_to_hsr left promiscuous mode [ 3475.805699][T30165] bridge3653: port 1(veth0_to_hsr) entered disabled state [ 3475.820895][T30165] bridge3654: port 1(veth0_to_hsr) entered blocking state [ 3475.828313][T30165] bridge3654: port 1(veth0_to_hsr) entered disabled state [ 3475.844465][T30165] device veth0_to_hsr entered promiscuous mode [ 3475.858413][T30166] device bridge_slave_1 left promiscuous mode [ 3475.865612][T30166] bridge3653: port 2(bridge_slave_1) entered disabled state [ 3475.882859][T30166] bridge3654: port 2(bridge_slave_1) entered blocking state 22:16:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000024000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3475.890584][T30166] bridge3654: port 2(bridge_slave_1) entered disabled state [ 3475.898994][T30166] device bridge_slave_1 entered promiscuous mode [ 3475.913625][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3475.978131][T30169] device bridge_slave_1 left promiscuous mode [ 3475.989257][T30169] bridge3911: port 1(bridge_slave_1) entered disabled state [ 3476.012254][T30169] bridge3912: port 1(bridge_slave_1) entered blocking state [ 3476.020276][T30169] bridge3912: port 1(bridge_slave_1) entered disabled state 22:16:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002b7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3476.028670][T30169] device bridge_slave_1 entered promiscuous mode [ 3476.091642][T30172] bridge4263: port 1(veth0_to_hsr) entered disabled state [ 3476.114890][T30172] bridge4264: port 1(veth0_to_hsr) entered blocking state [ 3476.122471][T30172] bridge4264: port 1(veth0_to_hsr) entered disabled state [ 3476.141782][T30173] device bridge_slave_1 left promiscuous mode [ 3476.148089][T30173] bridge4263: port 2(bridge_slave_1) entered disabled state [ 3476.169953][T30173] bridge4264: port 2(bridge_slave_1) entered blocking state [ 3476.177345][T30173] bridge4264: port 2(bridge_slave_1) entered disabled state 22:16:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000001a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3476.191467][T30173] device bridge_slave_1 entered promiscuous mode [ 3476.266025][T30176] bridge4574: port 1(veth0_to_hsr) entered disabled state [ 3476.279851][T30176] bridge4575: port 1(veth0_to_hsr) entered blocking state [ 3476.287652][T30176] bridge4575: port 1(veth0_to_hsr) entered disabled state [ 3476.314218][T30177] device bridge_slave_1 left promiscuous mode [ 3476.329605][T30177] bridge4574: port 2(bridge_slave_1) entered disabled state [ 3476.348324][T30177] bridge4575: port 2(bridge_slave_1) entered blocking state [ 3476.355969][T30177] bridge4575: port 2(bridge_slave_1) entered disabled state 22:16:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000001b20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3476.365244][T30177] device bridge_slave_1 entered promiscuous mode [ 3476.416337][T30180] bridge4228: port 1(veth0_to_hsr) entered disabled state [ 3476.430728][T30180] bridge4229: port 1(veth0_to_hsr) entered blocking state [ 3476.438075][T30180] bridge4229: port 1(veth0_to_hsr) entered disabled state [ 3476.469812][T30181] device bridge_slave_1 left promiscuous mode [ 3476.476182][T30181] bridge4228: port 2(bridge_slave_1) entered disabled state [ 3476.495387][T30181] bridge4229: port 2(bridge_slave_1) entered blocking state [ 3476.502977][T30181] bridge4229: port 2(bridge_slave_1) entered disabled state 22:16:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000006a0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3476.516574][T30181] device bridge_slave_1 entered promiscuous mode [ 3476.569910][T30184] bridge4346: port 1(veth0_to_hsr) entered disabled state [ 3476.590193][T30184] bridge4347: port 1(veth0_to_hsr) entered blocking state [ 3476.597441][T30184] bridge4347: port 1(veth0_to_hsr) entered disabled state [ 3476.624708][T30185] device bridge_slave_1 left promiscuous mode [ 3476.635619][T30185] bridge4346: port 2(bridge_slave_1) entered disabled state [ 3476.654836][T30185] bridge4347: port 2(bridge_slave_1) entered blocking state [ 3476.663838][T30185] bridge4347: port 2(bridge_slave_1) entered disabled state [ 3476.672900][T30185] device bridge_slave_1 entered promiscuous mode 22:16:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000007fffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3476.724907][T30189] device veth0_to_hsr left promiscuous mode [ 3476.734195][T30189] bridge3654: port 1(veth0_to_hsr) entered disabled state [ 3476.743926][T30189] bridge3655: port 1(veth0_to_hsr) entered blocking state [ 3476.751366][T30189] bridge3655: port 1(veth0_to_hsr) entered disabled state [ 3476.763568][T30189] device veth0_to_hsr entered promiscuous mode [ 3476.783825][T30190] device bridge_slave_1 left promiscuous mode [ 3476.790663][T30190] bridge3654: port 2(bridge_slave_1) entered disabled state [ 3476.816489][T30190] bridge3655: port 2(bridge_slave_1) entered blocking state [ 3476.824667][T30190] bridge3655: port 2(bridge_slave_1) entered disabled state 22:16:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000003c000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3476.834711][T30190] device bridge_slave_1 entered promiscuous mode [ 3476.856714][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3476.919751][T30193] device bridge_slave_1 left promiscuous mode [ 3476.926764][T30193] bridge3912: port 1(bridge_slave_1) entered disabled state [ 3476.944259][T30193] bridge3913: port 1(bridge_slave_1) entered blocking state [ 3476.953820][T30193] bridge3913: port 1(bridge_slave_1) entered disabled state [ 3476.963525][T30193] device bridge_slave_1 entered promiscuous mode 22:16:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002c7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3477.025365][T30196] bridge4264: port 1(veth0_to_hsr) entered disabled state [ 3477.055611][T30196] bridge4265: port 1(veth0_to_hsr) entered blocking state [ 3477.063553][T30196] bridge4265: port 1(veth0_to_hsr) entered disabled state [ 3477.086205][T30197] device bridge_slave_1 left promiscuous mode [ 3477.092868][T30197] bridge4264: port 2(bridge_slave_1) entered disabled state [ 3477.113292][T30197] bridge4265: port 2(bridge_slave_1) entered blocking state [ 3477.121362][T30197] bridge4265: port 2(bridge_slave_1) entered disabled state [ 3477.130280][T30197] device bridge_slave_1 entered promiscuous mode 22:16:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000001f00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3477.200899][T30200] bridge4575: port 1(veth0_to_hsr) entered disabled state [ 3477.214257][T30200] bridge4576: port 1(veth0_to_hsr) entered blocking state [ 3477.221951][T30200] bridge4576: port 1(veth0_to_hsr) entered disabled state [ 3477.242602][T30201] device bridge_slave_1 left promiscuous mode 22:16:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003b20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3477.249113][T30201] bridge4575: port 2(bridge_slave_1) entered disabled state [ 3477.267181][T30201] bridge4576: port 2(bridge_slave_1) entered blocking state [ 3477.275002][T30201] bridge4576: port 2(bridge_slave_1) entered disabled state [ 3477.284638][T30201] device bridge_slave_1 entered promiscuous mode [ 3477.371666][T30204] bridge4229: port 1(veth0_to_hsr) entered disabled state [ 3477.382172][T30204] bridge4230: port 1(veth0_to_hsr) entered blocking state [ 3477.390994][T30204] bridge4230: port 1(veth0_to_hsr) entered disabled state [ 3477.416613][T30205] device bridge_slave_1 left promiscuous mode [ 3477.428094][T30205] bridge4229: port 2(bridge_slave_1) entered disabled state [ 3477.449371][T30205] bridge4230: port 2(bridge_slave_1) entered blocking state [ 3477.456778][T30205] bridge4230: port 2(bridge_slave_1) entered disabled state 22:16:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000820100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3477.466072][T30205] device bridge_slave_1 entered promiscuous mode [ 3477.531651][T30208] bridge4347: port 1(veth0_to_hsr) entered disabled state [ 3477.545824][T30208] bridge4348: port 1(veth0_to_hsr) entered blocking state [ 3477.553281][T30208] bridge4348: port 1(veth0_to_hsr) entered disabled state [ 3477.573984][T30209] device bridge_slave_1 left promiscuous mode [ 3477.582018][T30209] bridge4347: port 2(bridge_slave_1) entered disabled state [ 3477.604576][T30209] bridge4348: port 2(bridge_slave_1) entered blocking state [ 3477.613730][T30209] bridge4348: port 2(bridge_slave_1) entered disabled state [ 3477.623644][T30209] device bridge_slave_1 entered promiscuous mode 22:16:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000009effffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3477.688025][T30213] device veth0_to_hsr left promiscuous mode [ 3477.694415][T30213] bridge3655: port 1(veth0_to_hsr) entered disabled state [ 3477.711335][T30213] bridge3656: port 1(veth0_to_hsr) entered blocking state [ 3477.720142][T30213] bridge3656: port 1(veth0_to_hsr) entered disabled state [ 3477.732183][T30213] device veth0_to_hsr entered promiscuous mode [ 3477.745793][T30214] device bridge_slave_1 left promiscuous mode [ 3477.754755][T30214] bridge3655: port 2(bridge_slave_1) entered disabled state [ 3477.777792][T30214] bridge3656: port 2(bridge_slave_1) entered blocking state [ 3477.786262][T30214] bridge3656: port 2(bridge_slave_1) entered disabled state 22:16:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000048000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3477.795043][T30214] device bridge_slave_1 entered promiscuous mode [ 3477.809128][T30216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3477.870207][T30217] device bridge_slave_1 left promiscuous mode [ 3477.876961][T30217] bridge3913: port 1(bridge_slave_1) entered disabled state [ 3477.900403][T30217] bridge3914: port 1(bridge_slave_1) entered blocking state [ 3477.907979][T30217] bridge3914: port 1(bridge_slave_1) entered disabled state [ 3477.917563][T30217] device bridge_slave_1 entered promiscuous mode 22:16:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002d7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3477.987845][T30220] bridge4265: port 1(veth0_to_hsr) entered disabled state [ 3478.004382][T30220] bridge4266: port 1(veth0_to_hsr) entered blocking state [ 3478.012008][T30220] bridge4266: port 1(veth0_to_hsr) entered disabled state [ 3478.037446][T30221] device bridge_slave_1 left promiscuous mode [ 3478.044087][T30221] bridge4265: port 2(bridge_slave_1) entered disabled state [ 3478.066017][T30221] bridge4266: port 2(bridge_slave_1) entered blocking state [ 3478.074264][T30221] bridge4266: port 2(bridge_slave_1) entered disabled state 22:16:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3478.084097][T30221] device bridge_slave_1 entered promiscuous mode [ 3478.157724][T30224] bridge4576: port 1(veth0_to_hsr) entered disabled state [ 3478.171725][T30224] bridge4577: port 1(veth0_to_hsr) entered blocking state [ 3478.179002][T30224] bridge4577: port 1(veth0_to_hsr) entered disabled state [ 3478.198535][T30225] device bridge_slave_1 left promiscuous mode 22:16:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000002ba0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3478.205076][T30225] bridge4576: port 2(bridge_slave_1) entered disabled state [ 3478.223358][T30225] bridge4577: port 2(bridge_slave_1) entered blocking state [ 3478.232598][T30225] bridge4577: port 2(bridge_slave_1) entered disabled state [ 3478.242683][T30225] device bridge_slave_1 entered promiscuous mode [ 3478.288150][T30228] bridge4230: port 1(veth0_to_hsr) entered disabled state [ 3478.304526][T30228] bridge4231: port 1(veth0_to_hsr) entered blocking state [ 3478.323309][T30228] bridge4231: port 1(veth0_to_hsr) entered disabled state [ 3478.350549][T30229] device bridge_slave_1 left promiscuous mode [ 3478.356872][T30229] bridge4230: port 2(bridge_slave_1) entered disabled state [ 3478.373335][T30229] bridge4231: port 2(bridge_slave_1) entered blocking state [ 3478.382744][T30229] bridge4231: port 2(bridge_slave_1) entered disabled state [ 3478.392877][T30229] device bridge_slave_1 entered promiscuous mode 22:16:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000008a0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3478.472662][T30232] bridge4348: port 1(veth0_to_hsr) entered disabled state [ 3478.482679][T30232] bridge4349: port 1(veth0_to_hsr) entered blocking state [ 3478.490176][T30232] bridge4349: port 1(veth0_to_hsr) entered disabled state [ 3478.511723][T30233] device bridge_slave_1 left promiscuous mode [ 3478.518025][T30233] bridge4348: port 2(bridge_slave_1) entered disabled state [ 3478.538673][T30233] bridge4349: port 2(bridge_slave_1) entered blocking state [ 3478.546652][T30233] bridge4349: port 2(bridge_slave_1) entered disabled state [ 3478.555520][T30233] device bridge_slave_1 entered promiscuous mode 22:16:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000a1ffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3478.624149][T30237] device veth0_to_hsr left promiscuous mode [ 3478.635395][T30237] bridge3656: port 1(veth0_to_hsr) entered disabled state [ 3478.647895][T30237] bridge3657: port 1(veth0_to_hsr) entered blocking state [ 3478.655159][T30237] bridge3657: port 1(veth0_to_hsr) entered disabled state [ 3478.666917][T30237] device veth0_to_hsr entered promiscuous mode [ 3478.681085][T30238] device bridge_slave_1 left promiscuous mode [ 3478.694872][T30238] bridge3656: port 2(bridge_slave_1) entered disabled state [ 3478.717318][T30238] bridge3657: port 2(bridge_slave_1) entered blocking state 22:16:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000004c000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3478.726022][T30238] bridge3657: port 2(bridge_slave_1) entered disabled state [ 3478.735023][T30238] device bridge_slave_1 entered promiscuous mode [ 3478.752624][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3478.821916][T30241] device bridge_slave_1 left promiscuous mode [ 3478.828446][T30241] bridge3914: port 1(bridge_slave_1) entered disabled state [ 3478.848171][T30241] bridge3915: port 1(bridge_slave_1) entered blocking state [ 3478.856227][T30241] bridge3915: port 1(bridge_slave_1) entered disabled state [ 3478.865234][T30241] device bridge_slave_1 entered promiscuous mode 22:16:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002e7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3478.941206][T30244] bridge4266: port 1(veth0_to_hsr) entered disabled state [ 3478.956438][T30244] bridge4267: port 1(veth0_to_hsr) entered blocking state [ 3478.964172][T30244] bridge4267: port 1(veth0_to_hsr) entered disabled state [ 3478.990588][T30245] device bridge_slave_1 left promiscuous mode [ 3478.997532][T30245] bridge4266: port 2(bridge_slave_1) entered disabled state [ 3479.018053][T30245] bridge4267: port 2(bridge_slave_1) entered blocking state [ 3479.025661][T30245] bridge4267: port 2(bridge_slave_1) entered disabled state [ 3479.035156][T30245] device bridge_slave_1 entered promiscuous mode 22:16:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3479.083735][T30248] bridge4577: port 1(veth0_to_hsr) entered disabled state [ 3479.108194][T30248] bridge4578: port 1(veth0_to_hsr) entered blocking state [ 3479.120411][T30248] bridge4578: port 1(veth0_to_hsr) entered disabled state 22:16:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003c20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3479.144332][T30249] device bridge_slave_1 left promiscuous mode [ 3479.151224][T30249] bridge4577: port 2(bridge_slave_1) entered disabled state [ 3479.168508][T30249] bridge4578: port 2(bridge_slave_1) entered blocking state [ 3479.177578][T30249] bridge4578: port 2(bridge_slave_1) entered disabled state [ 3479.186773][T30249] device bridge_slave_1 entered promiscuous mode [ 3479.255630][T30252] bridge4231: port 1(veth0_to_hsr) entered disabled state [ 3479.266336][T30252] bridge4232: port 1(veth0_to_hsr) entered blocking state [ 3479.274615][T30252] bridge4232: port 1(veth0_to_hsr) entered disabled state [ 3479.294705][T30253] device bridge_slave_1 left promiscuous mode 22:16:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000009a0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3479.302944][T30253] bridge4231: port 2(bridge_slave_1) entered disabled state [ 3479.321103][T30253] bridge4232: port 2(bridge_slave_1) entered blocking state [ 3479.328506][T30253] bridge4232: port 2(bridge_slave_1) entered disabled state [ 3479.337370][T30253] device bridge_slave_1 entered promiscuous mode [ 3479.400391][T30256] bridge4349: port 1(veth0_to_hsr) entered disabled state [ 3479.415599][T30256] bridge4350: port 1(veth0_to_hsr) entered blocking state [ 3479.423764][T30256] bridge4350: port 1(veth0_to_hsr) entered disabled state [ 3479.442958][T30257] device bridge_slave_1 left promiscuous mode [ 3479.449700][T30257] bridge4349: port 2(bridge_slave_1) entered disabled state [ 3479.479003][T30257] bridge4350: port 2(bridge_slave_1) entered blocking state [ 3479.487733][T30257] bridge4350: port 2(bridge_slave_1) entered disabled state 22:16:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000c3ffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3479.496708][T30257] device bridge_slave_1 entered promiscuous mode [ 3479.566460][T30261] device veth0_to_hsr left promiscuous mode [ 3479.573046][T30261] bridge3657: port 1(veth0_to_hsr) entered disabled state [ 3479.587032][T30261] bridge3658: port 1(veth0_to_hsr) entered blocking state [ 3479.595165][T30261] bridge3658: port 1(veth0_to_hsr) entered disabled state [ 3479.608351][T30261] device veth0_to_hsr entered promiscuous mode [ 3479.625021][T30263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3479.674327][T30264] device bridge_slave_1 left promiscuous mode [ 3479.682453][T30264] bridge3657: port 2(bridge_slave_1) entered disabled state [ 3479.703828][T30264] bridge3658: port 2(bridge_slave_1) entered blocking state [ 3479.711382][T30264] bridge3658: port 2(bridge_slave_1) entered disabled state 22:16:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000060000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3479.720828][T30264] device bridge_slave_1 entered promiscuous mode [ 3479.735825][T30265] device bridge_slave_1 left promiscuous mode [ 3479.742321][T30265] bridge3915: port 1(bridge_slave_1) entered disabled state 22:16:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002f7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3479.775198][T30265] bridge3916: port 1(bridge_slave_1) entered blocking state [ 3479.783360][T30265] bridge3916: port 1(bridge_slave_1) entered disabled state [ 3479.792665][T30265] device bridge_slave_1 entered promiscuous mode [ 3479.871187][T30268] bridge4267: port 1(veth0_to_hsr) entered disabled state [ 3479.886008][T30268] bridge4268: port 1(veth0_to_hsr) entered blocking state [ 3479.893876][T30268] bridge4268: port 1(veth0_to_hsr) entered disabled state [ 3479.920591][T30269] device bridge_slave_1 left promiscuous mode [ 3479.927479][T30269] bridge4267: port 2(bridge_slave_1) entered disabled state [ 3479.949946][T30269] bridge4268: port 2(bridge_slave_1) entered blocking state [ 3479.957591][T30269] bridge4268: port 2(bridge_slave_1) entered disabled state 22:16:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000012200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3479.966867][T30269] device bridge_slave_1 entered promiscuous mode [ 3480.024315][T30272] bridge4578: port 1(veth0_to_hsr) entered disabled state [ 3480.049947][T30272] bridge4579: port 1(veth0_to_hsr) entered blocking state [ 3480.057381][T30272] bridge4579: port 1(veth0_to_hsr) entered disabled state 22:16:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000001c80000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3480.080767][T30273] device bridge_slave_1 left promiscuous mode [ 3480.087128][T30273] bridge4578: port 2(bridge_slave_1) entered disabled state [ 3480.104177][T30273] bridge4579: port 2(bridge_slave_1) entered blocking state [ 3480.112029][T30273] bridge4579: port 2(bridge_slave_1) entered disabled state [ 3480.121523][T30273] device bridge_slave_1 entered promiscuous mode [ 3480.199219][T30276] bridge4232: port 1(veth0_to_hsr) entered disabled state [ 3480.209161][T30276] bridge4233: port 1(veth0_to_hsr) entered blocking state [ 3480.217375][T30276] bridge4233: port 1(veth0_to_hsr) entered disabled state [ 3480.239075][T30277] device bridge_slave_1 left promiscuous mode 22:16:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000b20100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3480.252446][T30277] bridge4232: port 2(bridge_slave_1) entered disabled state [ 3480.274752][T30277] bridge4233: port 2(bridge_slave_1) entered blocking state [ 3480.283378][T30277] bridge4233: port 2(bridge_slave_1) entered disabled state [ 3480.292590][T30277] device bridge_slave_1 entered promiscuous mode [ 3480.361672][T30280] bridge4350: port 1(veth0_to_hsr) entered disabled state [ 3480.375968][T30280] bridge4351: port 1(veth0_to_hsr) entered blocking state [ 3480.385867][T30280] bridge4351: port 1(veth0_to_hsr) entered disabled state [ 3480.406060][T30281] device bridge_slave_1 left promiscuous mode 22:16:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000e4ffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3480.412620][T30281] bridge4350: port 2(bridge_slave_1) entered disabled state [ 3480.431026][T30281] bridge4351: port 2(bridge_slave_1) entered blocking state [ 3480.438519][T30281] bridge4351: port 2(bridge_slave_1) entered disabled state [ 3480.447439][T30281] device bridge_slave_1 entered promiscuous mode [ 3480.503510][T30285] device veth0_to_hsr left promiscuous mode [ 3480.510011][T30285] bridge3658: port 1(veth0_to_hsr) entered disabled state [ 3480.523488][T30285] bridge3659: port 1(veth0_to_hsr) entered blocking state [ 3480.534395][T30285] bridge3659: port 1(veth0_to_hsr) entered disabled state [ 3480.547498][T30285] device veth0_to_hsr entered promiscuous mode [ 3480.563111][T30287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3480.610342][T30288] device bridge_slave_1 left promiscuous mode [ 3480.616675][T30288] bridge3658: port 2(bridge_slave_1) entered disabled state [ 3480.634620][T30288] bridge3659: port 2(bridge_slave_1) entered blocking state [ 3480.643345][T30288] bridge3659: port 2(bridge_slave_1) entered disabled state [ 3480.653057][T30288] device bridge_slave_1 entered promiscuous mode 22:16:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000068000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3480.667165][T30289] device bridge_slave_1 left promiscuous mode [ 3480.673675][T30289] bridge3916: port 1(bridge_slave_1) entered disabled state 22:16:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000307a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3480.716980][T30289] bridge3917: port 1(bridge_slave_1) entered blocking state [ 3480.730726][T30289] bridge3917: port 1(bridge_slave_1) entered disabled state [ 3480.739981][T30289] device bridge_slave_1 entered promiscuous mode [ 3480.808689][T30292] bridge4268: port 1(veth0_to_hsr) entered disabled state [ 3480.824627][T30292] bridge4269: port 1(veth0_to_hsr) entered blocking state [ 3480.832291][T30292] bridge4269: port 1(veth0_to_hsr) entered disabled state [ 3480.859298][T30293] device bridge_slave_1 left promiscuous mode [ 3480.865615][T30293] bridge4268: port 2(bridge_slave_1) entered disabled state [ 3480.888089][T30293] bridge4269: port 2(bridge_slave_1) entered blocking state [ 3480.896110][T30293] bridge4269: port 2(bridge_slave_1) entered disabled state 22:16:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000022200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3480.904998][T30293] device bridge_slave_1 entered promiscuous mode [ 3480.961043][T30296] bridge4579: port 1(veth0_to_hsr) entered disabled state [ 3480.981803][T30296] bridge4580: port 1(veth0_to_hsr) entered blocking state [ 3480.993037][T30296] bridge4580: port 1(veth0_to_hsr) entered disabled state [ 3481.013209][T30297] device bridge_slave_1 left promiscuous mode [ 3481.019757][T30297] bridge4579: port 2(bridge_slave_1) entered disabled state [ 3481.037528][T30297] bridge4580: port 2(bridge_slave_1) entered blocking state [ 3481.045086][T30297] bridge4580: port 2(bridge_slave_1) entered disabled state [ 3481.054158][T30297] device bridge_slave_1 entered promiscuous mode 22:16:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000ca0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3481.101504][T30300] bridge4233: port 1(veth0_to_hsr) entered disabled state [ 3481.120147][T30300] bridge4234: port 1(veth0_to_hsr) entered blocking state [ 3481.127400][T30300] bridge4234: port 1(veth0_to_hsr) entered disabled state [ 3481.151375][T30301] device bridge_slave_1 left promiscuous mode [ 3481.157795][T30301] bridge4233: port 2(bridge_slave_1) entered disabled state [ 3481.173951][T30301] bridge4234: port 2(bridge_slave_1) entered blocking state [ 3481.181696][T30301] bridge4234: port 2(bridge_slave_1) entered disabled state [ 3481.192387][T30301] device bridge_slave_1 entered promiscuous mode 22:16:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000c80100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3481.271020][T30304] bridge4351: port 1(veth0_to_hsr) entered disabled state [ 3481.286604][T30304] bridge4352: port 1(veth0_to_hsr) entered blocking state [ 3481.294348][T30304] bridge4352: port 1(veth0_to_hsr) entered disabled state [ 3481.318587][T30305] device bridge_slave_1 left promiscuous mode [ 3481.325349][T30305] bridge4351: port 2(bridge_slave_1) entered disabled state [ 3481.347345][T30305] bridge4352: port 2(bridge_slave_1) entered blocking state [ 3481.355187][T30305] bridge4352: port 2(bridge_slave_1) entered disabled state 22:16:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000f0ffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3481.366407][T30305] device bridge_slave_1 entered promiscuous mode [ 3481.448641][T30309] device veth0_to_hsr left promiscuous mode [ 3481.454981][T30309] bridge3659: port 1(veth0_to_hsr) entered disabled state [ 3481.466113][T30309] bridge3660: port 1(veth0_to_hsr) entered blocking state [ 3481.474899][T30309] bridge3660: port 1(veth0_to_hsr) entered disabled state [ 3481.488605][T30309] device veth0_to_hsr entered promiscuous mode [ 3481.506322][T30311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3481.558698][T30312] device bridge_slave_1 left promiscuous mode [ 3481.565262][T30312] bridge3659: port 2(bridge_slave_1) entered disabled state [ 3481.581927][T30312] bridge3660: port 2(bridge_slave_1) entered blocking state [ 3481.589642][T30312] bridge3660: port 2(bridge_slave_1) entered disabled state 22:16:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000006c000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3481.603373][T30312] device bridge_slave_1 entered promiscuous mode [ 3481.618875][T30313] device bridge_slave_1 left promiscuous mode [ 3481.627070][T30313] bridge3917: port 1(bridge_slave_1) entered disabled state [ 3481.656643][T30313] bridge3918: port 1(bridge_slave_1) entered blocking state [ 3481.668048][T30313] bridge3918: port 1(bridge_slave_1) entered disabled state [ 3481.677367][T30313] device bridge_slave_1 entered promiscuous mode 22:16:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000317a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3481.753035][T30316] bridge4269: port 1(veth0_to_hsr) entered disabled state [ 3481.773411][T30316] bridge4270: port 1(veth0_to_hsr) entered blocking state [ 3481.781366][T30316] bridge4270: port 1(veth0_to_hsr) entered disabled state 22:16:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000032200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3481.804150][T30317] device bridge_slave_1 left promiscuous mode [ 3481.813275][T30317] bridge4269: port 2(bridge_slave_1) entered disabled state [ 3481.832117][T30317] bridge4270: port 2(bridge_slave_1) entered blocking state [ 3481.839770][T30317] bridge4270: port 2(bridge_slave_1) entered disabled state [ 3481.848149][T30317] device bridge_slave_1 entered promiscuous mode [ 3481.900751][T30320] bridge4580: port 1(veth0_to_hsr) entered disabled state [ 3481.918769][T30320] bridge4581: port 1(veth0_to_hsr) entered blocking state [ 3481.926192][T30320] bridge4581: port 1(veth0_to_hsr) entered disabled state [ 3481.946304][T30321] device bridge_slave_1 left promiscuous mode [ 3481.952858][T30321] bridge4580: port 2(bridge_slave_1) entered disabled state [ 3481.974043][T30321] bridge4581: port 2(bridge_slave_1) entered blocking state [ 3481.985241][T30321] bridge4581: port 2(bridge_slave_1) entered disabled state 22:16:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003ca0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3481.995889][T30321] device bridge_slave_1 entered promiscuous mode [ 3482.057656][T30324] bridge4234: port 1(veth0_to_hsr) entered disabled state [ 3482.071156][T30324] bridge4235: port 1(veth0_to_hsr) entered blocking state [ 3482.079052][T30324] bridge4235: port 1(veth0_to_hsr) entered disabled state [ 3482.107083][T30325] device bridge_slave_1 left promiscuous mode [ 3482.114532][T30325] bridge4234: port 2(bridge_slave_1) entered disabled state [ 3482.135401][T30325] bridge4235: port 2(bridge_slave_1) entered blocking state [ 3482.142970][T30325] bridge4235: port 2(bridge_slave_1) entered disabled state 22:16:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000d20100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3482.152127][T30325] device bridge_slave_1 entered promiscuous mode [ 3482.202367][T30328] bridge4352: port 1(veth0_to_hsr) entered disabled state [ 3482.211922][T30328] bridge4353: port 1(veth0_to_hsr) entered blocking state [ 3482.224183][T30328] bridge4353: port 1(veth0_to_hsr) entered disabled state [ 3482.245253][T30329] device bridge_slave_1 left promiscuous mode 22:16:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3482.256633][T30329] bridge4352: port 2(bridge_slave_1) entered disabled state [ 3482.276551][T30329] bridge4353: port 2(bridge_slave_1) entered blocking state [ 3482.284129][T30329] bridge4353: port 2(bridge_slave_1) entered disabled state [ 3482.292735][T30329] device bridge_slave_1 entered promiscuous mode [ 3482.375451][T30333] device veth0_to_hsr left promiscuous mode [ 3482.381924][T30333] bridge3660: port 1(veth0_to_hsr) entered disabled state [ 3482.392496][T30333] bridge3661: port 1(veth0_to_hsr) entered blocking state [ 3482.400146][T30333] bridge3661: port 1(veth0_to_hsr) entered disabled state [ 3482.412693][T30333] device veth0_to_hsr entered promiscuous mode [ 3482.431360][T30335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3482.474277][T30336] device bridge_slave_1 left promiscuous mode [ 3482.481117][T30336] bridge3660: port 2(bridge_slave_1) entered disabled state [ 3482.504940][T30336] bridge3661: port 2(bridge_slave_1) entered blocking state [ 3482.514418][T30336] bridge3661: port 2(bridge_slave_1) entered disabled state 22:16:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000074000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3482.523234][T30336] device bridge_slave_1 entered promiscuous mode [ 3482.544744][T30337] device bridge_slave_1 left promiscuous mode [ 3482.553663][T30337] bridge3918: port 1(bridge_slave_1) entered disabled state 22:16:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000327a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3482.594124][T30337] bridge3919: port 1(bridge_slave_1) entered blocking state [ 3482.602087][T30337] bridge3919: port 1(bridge_slave_1) entered disabled state [ 3482.613365][T30337] device bridge_slave_1 entered promiscuous mode [ 3482.690508][T30340] bridge4270: port 1(veth0_to_hsr) entered disabled state [ 3482.708638][T30340] bridge4271: port 1(veth0_to_hsr) entered blocking state [ 3482.716443][T30340] bridge4271: port 1(veth0_to_hsr) entered disabled state [ 3482.737139][T30342] device bridge_slave_1 left promiscuous mode [ 3482.745701][T30342] bridge4270: port 2(bridge_slave_1) entered disabled state [ 3482.762143][T30342] bridge4271: port 2(bridge_slave_1) entered blocking state [ 3482.770696][T30342] bridge4271: port 2(bridge_slave_1) entered disabled state [ 3482.781117][T30342] device bridge_slave_1 entered promiscuous mode 22:16:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002400000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3482.843848][T30344] bridge4581: port 1(veth0_to_hsr) entered disabled state [ 3482.870453][T30344] bridge4582: port 1(veth0_to_hsr) entered blocking state [ 3482.877893][T30344] bridge4582: port 1(veth0_to_hsr) entered disabled state [ 3482.902233][T30345] device bridge_slave_1 left promiscuous mode [ 3482.908734][T30345] bridge4581: port 2(bridge_slave_1) entered disabled state [ 3482.926301][T30345] bridge4582: port 2(bridge_slave_1) entered blocking state [ 3482.934070][T30345] bridge4582: port 2(bridge_slave_1) entered disabled state [ 3482.944557][T30345] device bridge_slave_1 entered promiscuous mode 22:16:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000001d20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3483.047686][T30348] bridge4235: port 1(veth0_to_hsr) entered disabled state [ 3483.064397][T30348] bridge4236: port 1(veth0_to_hsr) entered blocking state [ 3483.071822][T30348] bridge4236: port 1(veth0_to_hsr) entered disabled state [ 3483.126862][T30351] device bridge_slave_1 left promiscuous mode [ 3483.134313][T30351] bridge4235: port 2(bridge_slave_1) entered disabled state [ 3483.152863][T30351] bridge4236: port 2(bridge_slave_1) entered blocking state [ 3483.160434][T30351] bridge4236: port 2(bridge_slave_1) entered disabled state [ 3483.170688][T30351] device bridge_slave_1 entered promiscuous mode 22:16:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000da0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3483.189651][T30352] bridge4353: port 1(veth0_to_hsr) entered disabled state [ 3483.201649][T30352] bridge4354: port 1(veth0_to_hsr) entered blocking state [ 3483.208888][T30352] bridge4354: port 1(veth0_to_hsr) entered disabled state 22:16:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000ffffffff8a400000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3483.245390][T30353] device bridge_slave_1 left promiscuous mode [ 3483.252787][T30353] bridge4353: port 2(bridge_slave_1) entered disabled state [ 3483.272063][T30353] bridge4354: port 2(bridge_slave_1) entered blocking state [ 3483.279780][T30353] bridge4354: port 2(bridge_slave_1) entered disabled state [ 3483.288430][T30353] device bridge_slave_1 entered promiscuous mode [ 3483.356803][T30357] device veth0_to_hsr left promiscuous mode [ 3483.365305][T30357] bridge3661: port 1(veth0_to_hsr) entered disabled state [ 3483.377637][T30357] bridge3662: port 1(veth0_to_hsr) entered blocking state [ 3483.385133][T30357] bridge3662: port 1(veth0_to_hsr) entered disabled state [ 3483.398476][T30357] device veth0_to_hsr entered promiscuous mode [ 3483.412691][T30359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3483.465425][T30360] device bridge_slave_1 left promiscuous mode [ 3483.472029][T30360] bridge3661: port 2(bridge_slave_1) entered disabled state [ 3483.487427][T30360] bridge3662: port 2(bridge_slave_1) entered blocking state [ 3483.494928][T30360] bridge3662: port 2(bridge_slave_1) entered disabled state [ 3483.503657][T30360] device bridge_slave_1 entered promiscuous mode 22:16:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007a000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3483.517497][T30361] device bridge_slave_1 left promiscuous mode [ 3483.529576][T30361] bridge3919: port 1(bridge_slave_1) entered disabled state [ 3483.561325][T30361] bridge3920: port 1(bridge_slave_1) entered blocking state [ 3483.568880][T30361] bridge3920: port 1(bridge_slave_1) entered disabled state [ 3483.578355][T30361] device bridge_slave_1 entered promiscuous mode 22:16:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000337a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3483.656331][T30364] bridge4271: port 1(veth0_to_hsr) entered disabled state [ 3483.673736][T30364] bridge4272: port 1(veth0_to_hsr) entered blocking state [ 3483.681127][T30364] bridge4272: port 1(veth0_to_hsr) entered disabled state 22:16:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000122500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3483.701070][T30365] device bridge_slave_1 left promiscuous mode [ 3483.707395][T30365] bridge4271: port 2(bridge_slave_1) entered disabled state [ 3483.727776][T30365] bridge4272: port 2(bridge_slave_1) entered blocking state [ 3483.735562][T30365] bridge4272: port 2(bridge_slave_1) entered disabled state [ 3483.744889][T30365] device bridge_slave_1 entered promiscuous mode [ 3483.810145][T30368] bridge4582: port 1(veth0_to_hsr) entered disabled state [ 3483.834198][T30368] bridge4583: port 1(veth0_to_hsr) entered blocking state [ 3483.841691][T30368] bridge4583: port 1(veth0_to_hsr) entered disabled state [ 3483.866393][T30369] device bridge_slave_1 left promiscuous mode [ 3483.873065][T30369] bridge4582: port 2(bridge_slave_1) entered disabled state [ 3483.894437][T30369] bridge4583: port 2(bridge_slave_1) entered blocking state [ 3483.902190][T30369] bridge4583: port 2(bridge_slave_1) entered disabled state 22:16:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003d20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3483.911887][T30369] device bridge_slave_1 entered promiscuous mode [ 3483.978636][T30372] bridge4236: port 1(veth0_to_hsr) entered disabled state [ 3483.988649][T30372] bridge4237: port 1(veth0_to_hsr) entered blocking state [ 3483.996764][T30372] bridge4237: port 1(veth0_to_hsr) entered disabled state [ 3484.057503][T30375] device bridge_slave_1 left promiscuous mode [ 3484.068634][T30375] bridge4236: port 2(bridge_slave_1) entered disabled state [ 3484.097045][T30375] bridge4237: port 2(bridge_slave_1) entered blocking state 22:16:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000e20100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3484.107215][T30375] bridge4237: port 2(bridge_slave_1) entered disabled state [ 3484.120759][T30375] device bridge_slave_1 entered promiscuous mode [ 3484.140274][T30376] bridge4354: port 1(veth0_to_hsr) entered disabled state [ 3484.164650][T30376] bridge4355: port 1(veth0_to_hsr) entered blocking state [ 3484.182378][T30376] bridge4355: port 1(veth0_to_hsr) entered disabled state [ 3484.206496][T30377] device bridge_slave_1 left promiscuous mode [ 3484.213185][T30377] bridge4354: port 2(bridge_slave_1) entered disabled state [ 3484.232730][T30377] bridge4355: port 2(bridge_slave_1) entered blocking state [ 3484.240428][T30377] bridge4355: port 2(bridge_slave_1) entered disabled state [ 3484.248980][T30377] device bridge_slave_1 entered promiscuous mode 22:16:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3484.327620][T30381] device veth0_to_hsr left promiscuous mode [ 3484.337301][T30381] bridge3662: port 1(veth0_to_hsr) entered disabled state [ 3484.348925][T30381] bridge3663: port 1(veth0_to_hsr) entered blocking state [ 3484.356486][T30381] bridge3663: port 1(veth0_to_hsr) entered disabled state [ 3484.368420][T30381] device veth0_to_hsr entered promiscuous mode [ 3484.394586][T30383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3484.441447][T30384] device bridge_slave_1 left promiscuous mode [ 3484.447907][T30384] bridge3662: port 2(bridge_slave_1) entered disabled state [ 3484.468203][T30384] bridge3663: port 2(bridge_slave_1) entered blocking state [ 3484.476139][T30384] bridge3663: port 2(bridge_slave_1) entered disabled state 22:16:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000aa000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3484.490534][T30384] device bridge_slave_1 entered promiscuous mode [ 3484.504918][T30385] device bridge_slave_1 left promiscuous mode [ 3484.517602][T30385] bridge3920: port 1(bridge_slave_1) entered disabled state 22:16:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000347a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3484.537682][T30385] bridge3921: port 1(bridge_slave_1) entered blocking state [ 3484.545746][T30385] bridge3921: port 1(bridge_slave_1) entered disabled state [ 3484.555316][T30385] device bridge_slave_1 entered promiscuous mode [ 3484.614362][T30388] bridge4272: port 1(veth0_to_hsr) entered disabled state [ 3484.641393][T30388] bridge4273: port 1(veth0_to_hsr) entered blocking state [ 3484.653841][T30388] bridge4273: port 1(veth0_to_hsr) entered disabled state [ 3484.674219][T30389] device bridge_slave_1 left promiscuous mode [ 3484.681632][T30389] bridge4272: port 2(bridge_slave_1) entered disabled state [ 3484.698823][T30389] bridge4273: port 2(bridge_slave_1) entered blocking state [ 3484.707878][T30389] bridge4273: port 2(bridge_slave_1) entered disabled state 22:16:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000012a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3484.719771][T30389] device bridge_slave_1 entered promiscuous mode [ 3484.770834][T30392] bridge4583: port 1(veth0_to_hsr) entered disabled state [ 3484.793862][T30392] bridge4584: port 1(veth0_to_hsr) entered blocking state [ 3484.801329][T30392] bridge4584: port 1(veth0_to_hsr) entered disabled state [ 3484.824472][T30393] device bridge_slave_1 left promiscuous mode [ 3484.830826][T30393] bridge4583: port 2(bridge_slave_1) entered disabled state [ 3484.855362][T30393] bridge4584: port 2(bridge_slave_1) entered blocking state [ 3484.863621][T30393] bridge4584: port 2(bridge_slave_1) entered disabled state 22:16:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003d40000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3484.874235][T30393] device bridge_slave_1 entered promiscuous mode [ 3484.938206][T30396] bridge4237: port 1(veth0_to_hsr) entered disabled state [ 3484.958411][T30396] bridge4238: port 1(veth0_to_hsr) entered blocking state [ 3484.966008][T30396] bridge4238: port 1(veth0_to_hsr) entered disabled state [ 3484.990198][T30397] device bridge_slave_1 left promiscuous mode [ 3484.996533][T30397] bridge4237: port 2(bridge_slave_1) entered disabled state [ 3485.014769][T30397] bridge4238: port 2(bridge_slave_1) entered blocking state [ 3485.022657][T30397] bridge4238: port 2(bridge_slave_1) entered disabled state [ 3485.032069][T30397] device bridge_slave_1 entered promiscuous mode 22:16:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000fa0100000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3485.110457][T30400] bridge4355: port 1(veth0_to_hsr) entered disabled state [ 3485.123576][T30400] bridge4356: port 1(veth0_to_hsr) entered blocking state [ 3485.134688][T30400] bridge4356: port 1(veth0_to_hsr) entered disabled state [ 3485.165450][T30401] device bridge_slave_1 left promiscuous mode [ 3485.178303][T30401] bridge4355: port 2(bridge_slave_1) entered disabled state [ 3485.198426][T30401] bridge4356: port 2(bridge_slave_1) entered blocking state 22:16:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3485.219407][T30401] bridge4356: port 2(bridge_slave_1) entered disabled state [ 3485.227687][T30401] device bridge_slave_1 entered promiscuous mode [ 3485.280708][T30405] device veth0_to_hsr left promiscuous mode [ 3485.287032][T30405] bridge3663: port 1(veth0_to_hsr) entered disabled state [ 3485.313044][T30405] bridge3664: port 1(veth0_to_hsr) entered blocking state [ 3485.320412][T30405] bridge3664: port 1(veth0_to_hsr) entered disabled state [ 3485.333989][T30405] device veth0_to_hsr entered promiscuous mode [ 3485.348595][T30407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3485.399999][T30408] device bridge_slave_1 left promiscuous mode [ 3485.406684][T30408] bridge3663: port 2(bridge_slave_1) entered disabled state [ 3485.432629][T30408] bridge3664: port 2(bridge_slave_1) entered blocking state [ 3485.440512][T30408] bridge3664: port 2(bridge_slave_1) entered disabled state 22:16:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000ba000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3485.450861][T30408] device bridge_slave_1 entered promiscuous mode [ 3485.465675][T30409] device bridge_slave_1 left promiscuous mode [ 3485.473878][T30409] bridge3921: port 1(bridge_slave_1) entered disabled state [ 3485.493799][T30409] bridge3922: port 1(bridge_slave_1) entered blocking state 22:16:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000357a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3485.504373][T30409] bridge3922: port 1(bridge_slave_1) entered disabled state [ 3485.525411][T30409] device bridge_slave_1 entered promiscuous mode [ 3485.608018][T30412] bridge4273: port 1(veth0_to_hsr) entered disabled state [ 3485.622856][T30412] bridge4274: port 1(veth0_to_hsr) entered blocking state [ 3485.633025][T30412] bridge4274: port 1(veth0_to_hsr) entered disabled state [ 3485.656926][T30413] device bridge_slave_1 left promiscuous mode [ 3485.664875][T30413] bridge4273: port 2(bridge_slave_1) entered disabled state [ 3485.690607][T30413] bridge4274: port 2(bridge_slave_1) entered blocking state [ 3485.698224][T30413] bridge4274: port 2(bridge_slave_1) entered disabled state 22:16:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000002c00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3485.708458][T30413] device bridge_slave_1 entered promiscuous mode [ 3485.770977][T30416] bridge4584: port 1(veth0_to_hsr) entered disabled state [ 3485.791627][T30416] bridge4585: port 1(veth0_to_hsr) entered blocking state [ 3485.798975][T30416] bridge4585: port 1(veth0_to_hsr) entered disabled state 22:16:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000002da0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3485.824199][T30417] device bridge_slave_1 left promiscuous mode [ 3485.830551][T30417] bridge4584: port 2(bridge_slave_1) entered disabled state [ 3485.847759][T30417] bridge4585: port 2(bridge_slave_1) entered blocking state [ 3485.856225][T30417] bridge4585: port 2(bridge_slave_1) entered disabled state [ 3485.864976][T30417] device bridge_slave_1 entered promiscuous mode [ 3485.946108][T30420] bridge4238: port 1(veth0_to_hsr) entered disabled state [ 3485.956201][T30420] bridge4239: port 1(veth0_to_hsr) entered blocking state [ 3485.964885][T30420] bridge4239: port 1(veth0_to_hsr) entered disabled state [ 3485.984722][T30421] device bridge_slave_1 left promiscuous mode [ 3485.992124][T30421] bridge4238: port 2(bridge_slave_1) entered disabled state [ 3486.015468][T30421] bridge4239: port 2(bridge_slave_1) entered blocking state [ 3486.031243][T30421] bridge4239: port 2(bridge_slave_1) entered disabled state [ 3486.040198][T30421] device bridge_slave_1 entered promiscuous mode 22:16:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3486.124737][T30424] bridge4356: port 1(veth0_to_hsr) entered disabled state [ 3486.135654][T30424] bridge4357: port 1(veth0_to_hsr) entered blocking state [ 3486.143753][T30424] bridge4357: port 1(veth0_to_hsr) entered disabled state [ 3486.168817][T30425] device bridge_slave_1 left promiscuous mode [ 3486.175787][T30425] bridge4356: port 2(bridge_slave_1) entered disabled state [ 3486.198152][T30425] bridge4357: port 2(bridge_slave_1) entered blocking state [ 3486.206217][T30425] bridge4357: port 2(bridge_slave_1) entered disabled state [ 3486.218045][T30425] device bridge_slave_1 entered promiscuous mode 22:16:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3486.286384][T30429] device veth0_to_hsr left promiscuous mode [ 3486.295456][T30429] bridge3664: port 1(veth0_to_hsr) entered disabled state [ 3486.306263][T30429] bridge3665: port 1(veth0_to_hsr) entered blocking state [ 3486.316495][T30429] bridge3665: port 1(veth0_to_hsr) entered disabled state [ 3486.332451][T30429] device veth0_to_hsr entered promiscuous mode [ 3486.347046][T30431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3486.393039][T30432] device bridge_slave_1 left promiscuous mode [ 3486.400910][T30432] bridge3664: port 2(bridge_slave_1) entered disabled state [ 3486.421136][T30432] bridge3665: port 2(bridge_slave_1) entered blocking state [ 3486.428644][T30432] bridge3665: port 2(bridge_slave_1) entered disabled state 22:16:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000bc000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3486.440351][T30432] device bridge_slave_1 entered promiscuous mode [ 3486.454904][T30433] device bridge_slave_1 left promiscuous mode [ 3486.462712][T30433] bridge3922: port 1(bridge_slave_1) entered disabled state [ 3486.486016][T30433] bridge3923: port 1(bridge_slave_1) entered blocking state 22:16:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000367a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3486.493962][T30433] bridge3923: port 1(bridge_slave_1) entered disabled state [ 3486.503893][T30433] device bridge_slave_1 entered promiscuous mode [ 3486.581697][T30436] bridge4274: port 1(veth0_to_hsr) entered disabled state [ 3486.595456][T30436] bridge4275: port 1(veth0_to_hsr) entered blocking state [ 3486.603458][T30436] bridge4275: port 1(veth0_to_hsr) entered disabled state 22:16:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3486.629154][T30437] device bridge_slave_1 left promiscuous mode [ 3486.636644][T30437] bridge4274: port 2(bridge_slave_1) entered disabled state [ 3486.653830][T30437] bridge4275: port 2(bridge_slave_1) entered blocking state [ 3486.664188][T30437] bridge4275: port 2(bridge_slave_1) entered disabled state [ 3486.673308][T30437] device bridge_slave_1 entered promiscuous mode [ 3486.753698][T30439] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 3486.773701][T30439] CPU: 0 PID: 30439 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3486.784200][T30439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3486.794302][T30439] Call Trace: [ 3486.797613][T30439] [ 3486.800577][T30439] dump_stack_lvl+0xd1/0x138 [ 3486.805229][T30439] dump_header+0x10b/0x85f [ 3486.809740][T30439] oom_kill_process.cold+0x10/0x15 [ 3486.814895][T30439] out_of_memory+0x35c/0x14a0 [ 3486.819687][T30439] ? find_held_lock+0x2d/0x110 [ 3486.824513][T30439] ? oom_killer_disable+0x280/0x280 [ 3486.829764][T30439] ? find_held_lock+0x2d/0x110 [ 3486.834574][T30439] mem_cgroup_out_of_memory+0x206/0x270 [ 3486.840225][T30439] ? mem_cgroup_margin+0x130/0x130 [ 3486.845367][T30439] ? lock_downgrade+0x6e0/0x6e0 [ 3486.850258][T30439] try_charge_memcg+0xefb/0x12f0 [ 3486.855226][T30439] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3486.861320][T30439] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3486.867075][T30439] ? lock_downgrade+0x6e0/0x6e0 [ 3486.871965][T30439] obj_cgroup_charge+0x2af/0x5e0 [ 3486.876935][T30439] __kmem_cache_alloc_node+0xb2/0x430 [ 3486.882329][T30439] ? neigh_sysctl_register+0x9e/0x5f0 [ 3486.887728][T30439] ? neigh_sysctl_register+0x9e/0x5f0 [ 3486.893124][T30439] __kmalloc_node_track_caller+0x4b/0xc0 [ 3486.898790][T30439] kmemdup+0x2c/0x60 [ 3486.902790][T30439] neigh_sysctl_register+0x9e/0x5f0 [ 3486.908026][T30439] ? neigh_stat_seq_show+0x420/0x420 [ 3486.913344][T30439] ? inetdev_init+0x23d/0x580 [ 3486.918091][T30439] ? inetdev_event+0xe20/0x16c0 [ 3486.922972][T30439] ? notifier_call_chain+0xb5/0x200 [ 3486.928255][T30439] ? call_netdevice_notifiers_info+0xb5/0x130 [ 3486.934427][T30439] ? register_netdevice+0xfb4/0x1640 [ 3486.939741][T30439] ? br_dev_newlink+0x27/0x110 [ 3486.944592][T30439] ? __rtnl_newlink+0x10c2/0x1840 [ 3486.949647][T30439] ? rtnl_newlink+0x68/0xa0 [ 3486.954200][T30439] ? rtnetlink_rcv_msg+0x43e/0xca0 [ 3486.959340][T30439] ? netlink_rcv_skb+0x165/0x440 [ 3486.964402][T30439] ? netlink_unicast+0x547/0x7f0 [ 3486.969369][T30439] ? netlink_sendmsg+0x91b/0xe10 [ 3486.974332][T30439] ? sock_sendmsg+0xde/0x190 [ 3486.978956][T30439] ? ____sys_sendmsg+0x71c/0x900 [ 3486.983921][T30439] ? ___sys_sendmsg+0x110/0x1b0 [ 3486.988805][T30439] devinet_sysctl_register+0xb1/0x230 [ 3486.994297][T30439] inetdev_init+0x286/0x580 [ 3486.999091][T30439] inetdev_event+0xe20/0x16c0 [ 3487.003787][T30439] ? del_default_gids+0xe0/0xe0 [ 3487.008786][T30439] ? is_ndev_for_default_gid_filter.part.0+0x2e0/0x2e0 [ 3487.015685][T30439] ? devinet_init_net+0x650/0x650 [ 3487.020732][T30439] ? skb_dequeue+0x129/0x180 [ 3487.025351][T30439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3487.031336][T30439] notifier_call_chain+0xb5/0x200 [ 3487.036395][T30439] call_netdevice_notifiers_info+0xb5/0x130 [ 3487.042322][T30439] register_netdevice+0xfb4/0x1640 [ 3487.047471][T30439] ? unregister_netdevice_queue+0x3c0/0x3c0 [ 3487.053413][T30439] br_dev_newlink+0x27/0x110 [ 3487.058037][T30439] ? br_changelink+0x1620/0x1620 [ 3487.063008][T30439] __rtnl_newlink+0x10c2/0x1840 [ 3487.068944][T30439] ? find_held_lock+0x2d/0x110 [ 3487.073742][T30439] ? rtnl_link_unregister+0x250/0x250 [ 3487.079146][T30439] ? __kmem_cache_alloc_node+0x48/0x430 [ 3487.084749][T30439] rtnl_newlink+0x68/0xa0 [ 3487.089109][T30439] ? __rtnl_newlink+0x1840/0x1840 [ 3487.094164][T30439] rtnetlink_rcv_msg+0x43e/0xca0 [ 3487.099140][T30439] ? rtnl_getlink+0xae0/0xae0 [ 3487.103879][T30439] ? __dev_queue_xmit+0xb54/0x3ba0 [ 3487.109138][T30439] netlink_rcv_skb+0x165/0x440 [ 3487.113943][T30439] ? rtnl_getlink+0xae0/0xae0 [ 3487.118665][T30439] ? netlink_ack+0x1370/0x1370 [ 3487.123491][T30439] ? netlink_deliver_tap+0x1b1/0xc50 [ 3487.128828][T30439] netlink_unicast+0x547/0x7f0 [ 3487.133633][T30439] ? netlink_attachskb+0x890/0x890 [ 3487.138787][T30439] ? __virt_addr_valid+0x61/0x2e0 [ 3487.143840][T30439] ? __phys_addr_symbol+0x30/0x70 [ 3487.148891][T30439] ? __check_object_size+0x2e2/0x5a0 [ 3487.154210][T30439] netlink_sendmsg+0x91b/0xe10 [ 3487.159102][T30439] ? netlink_unicast+0x7f0/0x7f0 [ 3487.164081][T30439] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3487.169404][T30439] ? netlink_unicast+0x7f0/0x7f0 [ 3487.174402][T30439] sock_sendmsg+0xde/0x190 [ 3487.178853][T30439] ____sys_sendmsg+0x71c/0x900 [ 3487.183660][T30439] ? copy_msghdr_from_user+0xfc/0x150 [ 3487.189053][T30439] ? kernel_sendmsg+0x50/0x50 [ 3487.193778][T30439] ___sys_sendmsg+0x110/0x1b0 [ 3487.198476][T30439] ? do_recvmmsg+0x6e0/0x6e0 [ 3487.203088][T30439] ? __fget_files+0x248/0x440 [ 3487.207783][T30439] ? lock_downgrade+0x6e0/0x6e0 [ 3487.212662][T30439] ? futex_wake_mark+0x1a0/0x1a0 [ 3487.217706][T30439] ? __fget_files+0x26a/0x440 [ 3487.222415][T30439] ? __fget_light+0xe5/0x270 [ 3487.227035][T30439] __sys_sendmsg+0xf7/0x1c0 [ 3487.231564][T30439] ? __sys_sendmsg_sock+0x40/0x40 [ 3487.236615][T30439] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3487.242553][T30439] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3487.248473][T30439] ? lockdep_hardirqs_on+0x7d/0x100 [ 3487.253696][T30439] do_syscall_64+0x39/0xb0 [ 3487.258139][T30439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3487.264058][T30439] RIP: 0033:0x7f7e1f28c0c9 [ 3487.268494][T30439] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3487.288215][T30439] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3487.296665][T30439] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3487.304671][T30439] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 3487.312672][T30439] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3487.320660][T30439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3487.328664][T30439] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3487.336687][T30439] [ 3487.352009][T30439] memory: usage 307156kB, limit 307200kB, failcnt 176 [ 3487.366636][T30439] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3487.374122][T30439] Memory cgroup stats for /syz5: [ 3487.376011][T30439] anon 139264 [ 3487.376011][T30439] file 315392 [ 3487.376011][T30439] kernel 314064896 [ 3487.376011][T30439] kernel_stack 98304 [ 3487.376011][T30439] pagetables 81920 [ 3487.376011][T30439] sec_pagetables 0 [ 3487.376011][T30439] percpu 5433440 [ 3487.376011][T30439] sock 0 [ 3487.376011][T30439] vmalloc 8192 [ 3487.376011][T30439] shmem 315392 [ 3487.376011][T30439] zswap 0 [ 3487.376011][T30439] zswapped 0 [ 3487.376011][T30439] file_mapped 290816 [ 3487.376011][T30439] file_dirty 0 [ 3487.376011][T30439] file_writeback 0 [ 3487.376011][T30439] swapcached 0 [ 3487.376011][T30439] anon_thp 0 [ 3487.376011][T30439] file_thp 0 [ 3487.376011][T30439] shmem_thp 0 [ 3487.376011][T30439] inactive_anon 147456 [ 3487.376011][T30439] active_anon 307200 [ 3487.376011][T30439] inactive_file 0 [ 3487.376011][T30439] active_file 0 [ 3487.376011][T30439] unevictable 0 [ 3487.376011][T30439] slab_reclaimable 22576 [ 3487.376011][T30439] slab_unreclaimable 308389672 [ 3487.472359][T30439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30438,uid=0 [ 3487.491315][T30439] Memory cgroup out of memory: Killed process 30439 (syz-executor.5) total-vm:54804kB, anon-rss:452kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3487.523395][T30440] bridge4585: port 1(veth0_to_hsr) entered disabled state [ 3487.535730][T30440] bridge4586: port 1(veth0_to_hsr) entered blocking state [ 3487.543569][T30440] bridge4586: port 1(veth0_to_hsr) entered disabled state 22:16:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003da0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3487.562714][T30441] device bridge_slave_1 left promiscuous mode [ 3487.568972][T30441] bridge4585: port 2(bridge_slave_1) entered disabled state [ 3487.585259][T30441] bridge4586: port 2(bridge_slave_1) entered blocking state [ 3487.593861][T30441] bridge4586: port 2(bridge_slave_1) entered disabled state [ 3487.605595][T30441] device bridge_slave_1 entered promiscuous mode [ 3487.658709][T30444] bridge4239: port 1(veth0_to_hsr) entered disabled state [ 3487.674859][T30444] bridge4240: port 1(veth0_to_hsr) entered blocking state [ 3487.682481][T30444] bridge4240: port 1(veth0_to_hsr) entered disabled state [ 3487.707575][T30445] device bridge_slave_1 left promiscuous mode [ 3487.714163][T30445] bridge4239: port 2(bridge_slave_1) entered disabled state [ 3487.733290][T30445] bridge4240: port 2(bridge_slave_1) entered blocking state [ 3487.741201][T30445] bridge4240: port 2(bridge_slave_1) entered disabled state [ 3487.749940][T30445] device bridge_slave_1 entered promiscuous mode 22:16:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000220200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3487.778222][T30462] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3487.813920][T30462] CPU: 0 PID: 30462 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3487.824842][T30462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3487.834939][T30462] Call Trace: [ 3487.838251][T30462] [ 3487.841218][T30462] dump_stack_lvl+0xd1/0x138 [ 3487.845876][T30462] dump_header+0x10b/0x85f [ 3487.850327][T30462] oom_kill_process.cold+0x10/0x15 [ 3487.855488][T30462] out_of_memory+0x35c/0x14a0 [ 3487.860232][T30462] ? find_held_lock+0x2d/0x110 [ 3487.865057][T30462] ? oom_killer_disable+0x280/0x280 [ 3487.870327][T30462] ? find_held_lock+0x2d/0x110 [ 3487.875150][T30462] mem_cgroup_out_of_memory+0x206/0x270 [ 3487.880751][T30462] ? mem_cgroup_margin+0x130/0x130 [ 3487.886271][T30462] ? lock_downgrade+0x6e0/0x6e0 [ 3487.891786][T30462] try_charge_memcg+0xefb/0x12f0 [ 3487.896778][T30462] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3487.902803][T30462] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3487.908575][T30462] ? lock_downgrade+0x6e0/0x6e0 [ 3487.913470][T30462] ? lock_downgrade+0x6e0/0x6e0 [ 3487.918374][T30462] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3487.923973][T30462] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3487.930185][T30462] copy_process+0x4e3/0x7520 [ 3487.934831][T30462] ? __lock_acquire+0xbc3/0x56d0 [ 3487.939830][T30462] ? __cleanup_sighand+0xb0/0xb0 [ 3487.944812][T30462] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3487.950841][T30462] ? psi_memstall_leave+0x174/0x250 [ 3487.956101][T30462] kernel_clone+0xeb/0x990 [ 3487.960569][T30462] ? create_io_thread+0xf0/0xf0 [ 3487.965472][T30462] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3487.969077][T30466] bridge4240: port 1(veth0_to_hsr) entered disabled state [ 3487.971742][T30462] ? lock_downgrade+0x6e0/0x6e0 [ 3487.971837][T30462] __do_sys_clone+0xba/0x100 [ 3487.971872][T30462] ? kernel_clone+0x990/0x990 [ 3487.993176][T30462] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3487.999134][T30462] do_syscall_64+0x39/0xb0 [ 3488.003593][T30462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3488.009531][T30462] RIP: 0033:0x7f7e1f28d4f1 [ 3488.013982][T30462] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3488.033628][T30462] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3488.042063][T30462] RAX: ffffffffffffffda RBX: 00007f7e1ff01700 RCX: 00007f7e1f28d4f1 [ 3488.050113][T30462] RDX: 00007f7e1ff019d0 RSI: 00007f7e1ff012f0 RDI: 00000000003d0f00 [ 3488.058212][T30462] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff01700 R09: 00007f7e1ff01700 [ 3488.066228][T30462] R10: 00007f7e1ff019d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3488.074488][T30462] R13: 00007ffc49b30a3f R14: 00007f7e1ff01300 R15: 0000000000022000 [ 3488.082526][T30462] [ 3488.091484][T30466] bridge4241: port 1(veth0_to_hsr) entered blocking state [ 3488.095704][T30462] memory: usage 307200kB, limit 307200kB, failcnt 280 [ 3488.107030][T30466] bridge4241: port 1(veth0_to_hsr) entered disabled state [ 3488.110612][T30462] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3488.121818][T30462] Memory cgroup stats for /syz5: [ 3488.122451][T30462] anon 135168 [ 3488.122451][T30462] file 315392 [ 3488.122451][T30462] kernel 314122240 [ 3488.122451][T30462] kernel_stack 65536 [ 3488.122451][T30462] pagetables 77824 [ 3488.122451][T30462] sec_pagetables 0 [ 3488.122451][T30462] percpu 5434688 [ 3488.122451][T30462] sock 0 [ 3488.122451][T30462] vmalloc 8192 [ 3488.122451][T30462] shmem 315392 [ 3488.122451][T30462] zswap 0 [ 3488.122451][T30462] zswapped 0 [ 3488.122451][T30462] file_mapped 290816 [ 3488.122451][T30462] file_dirty 0 [ 3488.122451][T30462] file_writeback 0 [ 3488.122451][T30462] swapcached 0 [ 3488.122451][T30462] anon_thp 0 [ 3488.122451][T30462] file_thp 0 [ 3488.122451][T30462] shmem_thp 0 [ 3488.122451][T30462] inactive_anon 139264 [ 3488.122451][T30462] active_anon 307200 [ 3488.122451][T30462] inactive_file 0 [ 3488.122451][T30462] active_file 0 [ 3488.122451][T30462] unevictable 0 [ 3488.122451][T30462] slab_reclaimable 26432 [ 3488.122451][T30462] slab_unreclaimable 308447344 [ 3488.223944][T30448] bridge4357: port 1(veth0_to_hsr) entered disabled state [ 3488.226287][T30462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30462,uid=0 [ 3488.251259][T30448] bridge4358: port 1(veth0_to_hsr) entered blocking state [ 3488.258885][T30448] bridge4358: port 1(veth0_to_hsr) entered disabled state [ 3488.259126][T30462] Memory cgroup out of memory: Killed process 30462 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3488.286288][T30449] device bridge_slave_1 left promiscuous mode [ 3488.293966][T30449] bridge4357: port 2(bridge_slave_1) entered disabled state [ 3488.315343][T30449] bridge4358: port 2(bridge_slave_1) entered blocking state [ 3488.323226][T30449] bridge4358: port 2(bridge_slave_1) entered disabled state 22:16:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3488.331939][T30449] device bridge_slave_1 entered promiscuous mode [ 3488.408822][T30453] device veth0_to_hsr left promiscuous mode [ 3488.415563][T30453] bridge3665: port 1(veth0_to_hsr) entered disabled state [ 3488.428138][T30453] bridge3666: port 1(veth0_to_hsr) entered blocking state [ 3488.435649][T30453] bridge3666: port 1(veth0_to_hsr) entered disabled state [ 3488.447059][T30453] device veth0_to_hsr entered promiscuous mode [ 3488.464933][T30455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3488.515937][T30456] device bridge_slave_1 left promiscuous mode [ 3488.522559][T30456] bridge3665: port 2(bridge_slave_1) entered disabled state [ 3488.541109][T30456] bridge3666: port 2(bridge_slave_1) entered blocking state [ 3488.548533][T30456] bridge3666: port 2(bridge_slave_1) entered disabled state [ 3488.557517][T30456] device bridge_slave_1 entered promiscuous mode 22:16:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3488.574732][T30457] device bridge_slave_1 left promiscuous mode [ 3488.582752][T30457] bridge3923: port 1(bridge_slave_1) entered disabled state [ 3488.609831][T30457] bridge3924: port 1(bridge_slave_1) entered blocking state [ 3488.617267][T30457] bridge3924: port 1(bridge_slave_1) entered disabled state 22:16:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000377a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3488.626262][T30457] device bridge_slave_1 entered promiscuous mode [ 3488.702847][T30460] bridge4275: port 1(veth0_to_hsr) entered disabled state [ 3488.716569][T30460] bridge4276: port 1(veth0_to_hsr) entered blocking state [ 3488.725359][T30460] bridge4276: port 1(veth0_to_hsr) entered disabled state [ 3488.744908][T30461] device bridge_slave_1 left promiscuous mode 22:16:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000013200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3488.752484][T30461] bridge4275: port 2(bridge_slave_1) entered disabled state [ 3488.769624][T30461] bridge4276: port 2(bridge_slave_1) entered blocking state [ 3488.777588][T30461] bridge4276: port 2(bridge_slave_1) entered disabled state [ 3488.788975][T30461] device bridge_slave_1 entered promiscuous mode [ 3488.912855][T30465] device bridge_slave_1 left promiscuous mode [ 3488.919718][T30465] bridge4240: port 2(bridge_slave_1) entered disabled state [ 3488.936663][T30465] bridge4241: port 2(bridge_slave_1) entered blocking state [ 3488.944322][T30465] bridge4241: port 2(bridge_slave_1) entered disabled state 22:16:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000e20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000420200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3488.963156][T30465] device bridge_slave_1 entered promiscuous mode [ 3489.071624][T30469] bridge4358: port 1(veth0_to_hsr) entered disabled state [ 3489.085082][T30469] bridge4359: port 1(veth0_to_hsr) entered blocking state [ 3489.092821][T30469] bridge4359: port 1(veth0_to_hsr) entered disabled state [ 3489.117007][T30470] device bridge_slave_1 left promiscuous mode [ 3489.138417][T30470] bridge4358: port 2(bridge_slave_1) entered disabled state [ 3489.148751][T30483] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3489.159663][T30483] CPU: 0 PID: 30483 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3489.170135][T30483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3489.180234][T30483] Call Trace: [ 3489.183551][T30483] [ 3489.186500][T30483] dump_stack_lvl+0xd1/0x138 [ 3489.191118][T30483] dump_header+0x10b/0x85f [ 3489.195608][T30483] oom_kill_process.cold+0x10/0x15 [ 3489.200746][T30483] out_of_memory+0x35c/0x14a0 [ 3489.205486][T30483] ? find_held_lock+0x2d/0x110 [ 3489.210285][T30483] ? oom_killer_disable+0x280/0x280 [ 3489.215542][T30483] ? find_held_lock+0x2d/0x110 [ 3489.220367][T30483] mem_cgroup_out_of_memory+0x206/0x270 [ 3489.225989][T30483] ? mem_cgroup_margin+0x130/0x130 [ 3489.231121][T30483] ? lock_downgrade+0x6e0/0x6e0 [ 3489.236049][T30483] try_charge_memcg+0xefb/0x12f0 [ 3489.241044][T30483] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3489.247074][T30483] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3489.252854][T30483] ? lock_downgrade+0x6e0/0x6e0 [ 3489.257735][T30483] ? lock_downgrade+0x6e0/0x6e0 [ 3489.262603][T30483] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3489.268437][T30483] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3489.274628][T30483] copy_process+0x1359/0x7520 [ 3489.279359][T30483] ? find_held_lock+0x2d/0x110 [ 3489.284196][T30483] ? __cleanup_sighand+0xb0/0xb0 [ 3489.289168][T30483] ? lock_downgrade+0x6e0/0x6e0 [ 3489.294064][T30483] ? folio_flags.constprop.0+0x53/0x150 [ 3489.299666][T30483] ? folio_add_lru+0x37b/0x680 [ 3489.304486][T30483] kernel_clone+0xeb/0x990 [ 3489.308927][T30483] ? create_io_thread+0xf0/0xf0 [ 3489.313819][T30483] ? find_held_lock+0x2d/0x110 [ 3489.318634][T30483] __do_sys_clone+0xba/0x100 [ 3489.323231][T30483] ? kernel_clone+0x990/0x990 [ 3489.327947][T30483] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3489.333897][T30483] do_syscall_64+0x39/0xb0 [ 3489.338380][T30483] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3489.344336][T30483] RIP: 0033:0x7f7e1f28d4f1 [ 3489.348877][T30483] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3489.368502][T30483] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3489.377012][T30483] RAX: ffffffffffffffda RBX: 00007f7e1ff01700 RCX: 00007f7e1f28d4f1 [ 3489.384997][T30483] RDX: 00007f7e1ff019d0 RSI: 00007f7e1ff012f0 RDI: 00000000003d0f00 [ 3489.393090][T30483] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff01700 R09: 00007f7e1ff01700 [ 3489.401123][T30483] R10: 00007f7e1ff019d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3489.409221][T30483] R13: 00007ffc49b30a3f R14: 00007f7e1ff01300 R15: 0000000000022000 [ 3489.417255][T30483] [ 3489.430130][T30483] memory: usage 307200kB, limit 307200kB, failcnt 419 [ 3489.439093][T30483] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3489.439880][T30470] bridge4359: port 2(bridge_slave_1) entered blocking state [ 3489.447192][T30483] Memory cgroup stats for /syz5: [ 3489.454603][T30483] anon 135168 [ 3489.454603][T30483] file 315392 [ 3489.454603][T30483] kernel 314122240 [ 3489.454603][T30483] kernel_stack 65536 [ 3489.454603][T30483] pagetables 77824 [ 3489.454603][T30483] sec_pagetables 0 [ 3489.454603][T30483] percpu 5434752 [ 3489.454603][T30483] sock 0 [ 3489.454603][T30483] vmalloc 8192 [ 3489.454603][T30483] shmem 315392 [ 3489.454603][T30483] zswap 0 [ 3489.454603][T30483] zswapped 0 [ 3489.454603][T30483] file_mapped 290816 [ 3489.454603][T30483] file_dirty 0 [ 3489.454603][T30483] file_writeback 0 [ 3489.454603][T30483] swapcached 0 [ 3489.454603][T30483] anon_thp 0 [ 3489.454603][T30483] file_thp 0 [ 3489.454603][T30483] shmem_thp 0 [ 3489.454603][T30483] inactive_anon 94208 [ 3489.454603][T30483] active_anon 307200 [ 3489.454603][T30483] inactive_file 0 [ 3489.454603][T30483] active_file 0 [ 3489.454603][T30483] unevictable 0 [ 3489.454603][T30483] slab_reclaimable 26432 [ 3489.454603][T30483] slab_unreclaimable 308467344 [ 3489.472262][T30470] bridge4359: port 2(bridge_slave_1) entered disabled state [ 3489.558100][T30483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30483,uid=0 [ 3489.577205][T30483] Memory cgroup out of memory: Killed process 30483 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 22:16:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000004000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3489.631442][T30470] device bridge_slave_1 entered promiscuous mode [ 3489.689560][T30474] device veth0_to_hsr left promiscuous mode [ 3489.699679][T30474] bridge3666: port 1(veth0_to_hsr) entered disabled state [ 3489.713058][T30474] bridge3667: port 1(veth0_to_hsr) entered blocking state [ 3489.721189][T30474] bridge3667: port 1(veth0_to_hsr) entered disabled state [ 3489.733286][T30474] device veth0_to_hsr entered promiscuous mode [ 3489.747463][T30476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3489.795938][T30477] device bridge_slave_1 left promiscuous mode [ 3489.804239][T30477] bridge3666: port 2(bridge_slave_1) entered disabled state [ 3489.823032][T30477] bridge3667: port 2(bridge_slave_1) entered blocking state [ 3489.830626][T30477] bridge3667: port 2(bridge_slave_1) entered disabled state [ 3489.838962][T30477] device bridge_slave_1 entered promiscuous mode 22:16:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000fe000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3489.855656][T30478] device bridge_slave_1 left promiscuous mode [ 3489.862557][T30478] bridge3924: port 1(bridge_slave_1) entered disabled state [ 3489.888158][T30478] bridge3925: port 1(bridge_slave_1) entered blocking state 22:16:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000387a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3489.907216][T30478] bridge3925: port 1(bridge_slave_1) entered disabled state [ 3489.916588][T30478] device bridge_slave_1 entered promiscuous mode [ 3489.972094][T30481] bridge4276: port 1(veth0_to_hsr) entered disabled state [ 3489.993375][T30481] bridge4277: port 1(veth0_to_hsr) entered blocking state [ 3490.001541][T30481] bridge4277: port 1(veth0_to_hsr) entered disabled state 22:16:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000033200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3490.030266][T30482] device bridge_slave_1 left promiscuous mode [ 3490.036759][T30482] bridge4276: port 2(bridge_slave_1) entered disabled state [ 3490.054996][T30482] bridge4277: port 2(bridge_slave_1) entered blocking state [ 3490.062708][T30482] bridge4277: port 2(bridge_slave_1) entered disabled state [ 3490.072334][T30482] device bridge_slave_1 entered promiscuous mode [ 3490.221556][T30487] bridge4241: port 1(veth0_to_hsr) entered disabled state [ 3490.231617][T30487] bridge4242: port 1(veth0_to_hsr) entered blocking state [ 3490.239161][T30487] bridge4242: port 1(veth0_to_hsr) entered disabled state [ 3490.260871][T30488] device bridge_slave_1 left promiscuous mode 22:16:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000001e20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3490.267179][T30488] bridge4241: port 2(bridge_slave_1) entered disabled state [ 3490.295761][T30488] bridge4242: port 2(bridge_slave_1) entered blocking state [ 3490.314929][T30488] bridge4242: port 2(bridge_slave_1) entered disabled state 22:16:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000004a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3490.339133][T30488] device bridge_slave_1 entered promiscuous mode [ 3490.435069][T30491] bridge4359: port 1(veth0_to_hsr) entered disabled state [ 3490.445107][T30491] bridge4360: port 1(veth0_to_hsr) entered blocking state [ 3490.455075][T30491] bridge4360: port 1(veth0_to_hsr) entered disabled state [ 3490.472585][T30505] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3490.486155][T30505] CPU: 0 PID: 30505 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3490.490904][T30492] device bridge_slave_1 left promiscuous mode [ 3490.496622][T30505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3490.496642][T30505] Call Trace: [ 3490.496651][T30505] [ 3490.496662][T30505] dump_stack_lvl+0xd1/0x138 [ 3490.496709][T30505] dump_header+0x10b/0x85f [ 3490.503296][T30492] bridge4359: port 2(bridge_slave_1) entered disabled state [ 3490.512815][T30505] oom_kill_process.cold+0x10/0x15 [ 3490.512860][T30505] out_of_memory+0x35c/0x14a0 [ 3490.512904][T30505] ? find_held_lock+0x2d/0x110 [ 3490.512942][T30505] ? oom_killer_disable+0x280/0x280 [ 3490.555192][T30505] ? find_held_lock+0x2d/0x110 [ 3490.559996][T30505] mem_cgroup_out_of_memory+0x206/0x270 [ 3490.565579][T30505] ? mem_cgroup_margin+0x130/0x130 [ 3490.570715][T30505] ? lock_downgrade+0x6e0/0x6e0 [ 3490.575604][T30505] try_charge_memcg+0xefb/0x12f0 [ 3490.580568][T30505] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3490.586569][T30505] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3490.592317][T30505] ? lock_downgrade+0x6e0/0x6e0 [ 3490.597184][T30505] ? lock_downgrade+0x6e0/0x6e0 [ 3490.602067][T30505] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3490.607641][T30505] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3490.613843][T30505] copy_process+0x1359/0x7520 [ 3490.618560][T30505] ? find_held_lock+0x2d/0x110 [ 3490.623386][T30505] ? __cleanup_sighand+0xb0/0xb0 [ 3490.628353][T30505] ? lock_downgrade+0x6e0/0x6e0 [ 3490.633228][T30505] ? folio_flags.constprop.0+0x53/0x150 [ 3490.638818][T30505] ? folio_add_lru+0x37b/0x680 [ 3490.643627][T30505] kernel_clone+0xeb/0x990 [ 3490.648067][T30505] ? create_io_thread+0xf0/0xf0 [ 3490.652956][T30505] ? find_held_lock+0x2d/0x110 [ 3490.657758][T30505] __do_sys_clone+0xba/0x100 [ 3490.662371][T30505] ? kernel_clone+0x990/0x990 [ 3490.667083][T30505] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3490.673003][T30505] do_syscall_64+0x39/0xb0 [ 3490.677436][T30505] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3490.683351][T30505] RIP: 0033:0x7f7e1f28d4f1 [ 3490.687777][T30505] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3490.707399][T30505] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3490.715828][T30505] RAX: ffffffffffffffda RBX: 00007f7e1ff01700 RCX: 00007f7e1f28d4f1 [ 3490.723814][T30505] RDX: 00007f7e1ff019d0 RSI: 00007f7e1ff012f0 RDI: 00000000003d0f00 [ 3490.731794][T30505] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff01700 R09: 00007f7e1ff01700 [ 3490.739798][T30505] R10: 00007f7e1ff019d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3490.747782][T30505] R13: 00007ffc49b30a3f R14: 00007f7e1ff01300 R15: 0000000000022000 [ 3490.755781][T30505] [ 3490.765639][T30505] memory: usage 307200kB, limit 307200kB, failcnt 597 [ 3490.788161][T30505] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3490.806123][T30492] bridge4360: port 2(bridge_slave_1) entered blocking state [ 3490.813840][T30505] Memory cgroup stats for /syz5: [ 3490.814105][T30505] anon 135168 [ 3490.814105][T30505] file 315392 [ 3490.814105][T30505] kernel 314122240 [ 3490.814105][T30505] kernel_stack 65536 [ 3490.814105][T30505] pagetables 77824 [ 3490.814105][T30505] sec_pagetables 0 [ 3490.814105][T30505] percpu 5434688 [ 3490.814105][T30505] sock 0 [ 3490.814105][T30505] vmalloc 8192 [ 3490.814105][T30505] shmem 315392 [ 3490.814105][T30505] zswap 0 [ 3490.814105][T30505] zswapped 0 [ 3490.814105][T30505] file_mapped 290816 [ 3490.814105][T30505] file_dirty 0 [ 3490.814105][T30505] file_writeback 0 [ 3490.814105][T30505] swapcached 0 [ 3490.814105][T30505] anon_thp 0 [ 3490.814105][T30505] file_thp 0 [ 3490.814105][T30505] shmem_thp 0 [ 3490.814105][T30505] inactive_anon 139264 [ 3490.814105][T30505] active_anon 307200 [ 3490.814105][T30505] inactive_file 0 [ 3490.814105][T30505] active_file 0 [ 3490.814105][T30505] unevictable 0 [ 3490.814105][T30505] slab_reclaimable 26432 [ 3490.814105][T30505] slab_unreclaimable 308463776 [ 3490.914840][T30492] bridge4360: port 2(bridge_slave_1) entered disabled state [ 3490.926355][T30492] device bridge_slave_1 entered promiscuous mode 22:16:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000080000000008000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3490.937892][T30505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30505,uid=0 [ 3490.971787][T30505] Memory cgroup out of memory: Killed process 30505 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3491.014617][T30496] device veth0_to_hsr left promiscuous mode [ 3491.021584][T30496] bridge3667: port 1(veth0_to_hsr) entered disabled state [ 3491.034296][T30496] bridge3668: port 1(veth0_to_hsr) entered blocking state [ 3491.042734][T30496] bridge3668: port 1(veth0_to_hsr) entered disabled state [ 3491.054522][T30496] device veth0_to_hsr entered promiscuous mode [ 3491.071761][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3491.110179][T30499] device bridge_slave_1 left promiscuous mode [ 3491.116789][T30499] bridge3667: port 2(bridge_slave_1) entered disabled state [ 3491.135292][T30499] bridge3668: port 2(bridge_slave_1) entered blocking state [ 3491.143348][T30499] bridge3668: port 2(bridge_slave_1) entered disabled state [ 3491.153202][T30499] device bridge_slave_1 entered promiscuous mode 22:16:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000004a010000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3491.168261][T30500] device bridge_slave_1 left promiscuous mode [ 3491.177881][T30500] bridge3925: port 1(bridge_slave_1) entered disabled state [ 3491.198533][T30500] bridge3926: port 1(bridge_slave_1) entered blocking state 22:16:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000397a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3491.216196][T30500] bridge3926: port 1(bridge_slave_1) entered disabled state [ 3491.225497][T30500] device bridge_slave_1 entered promiscuous mode [ 3491.297021][T30503] bridge4277: port 1(veth0_to_hsr) entered disabled state [ 3491.311697][T30503] bridge4278: port 1(veth0_to_hsr) entered blocking state [ 3491.319556][T30503] bridge4278: port 1(veth0_to_hsr) entered disabled state [ 3491.344130][T30504] device bridge_slave_1 left promiscuous mode [ 3491.353163][T30504] bridge4277: port 2(bridge_slave_1) entered disabled state [ 3491.375075][T30504] bridge4278: port 2(bridge_slave_1) entered blocking state [ 3491.382747][T30504] bridge4278: port 2(bridge_slave_1) entered disabled state 22:16:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000096a6213300000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3491.392304][T30504] device bridge_slave_1 entered promiscuous mode 22:16:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003e20000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3491.552997][T30510] bridge4242: port 1(veth0_to_hsr) entered disabled state [ 3491.574125][T30510] bridge4243: port 1(veth0_to_hsr) entered blocking state [ 3491.589886][T30510] bridge4243: port 1(veth0_to_hsr) entered disabled state [ 3491.608774][T30511] device bridge_slave_1 left promiscuous mode [ 3491.617007][T30511] bridge4242: port 2(bridge_slave_1) entered disabled state 22:16:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000005a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3491.650207][T30511] bridge4243: port 2(bridge_slave_1) entered blocking state [ 3491.658137][T30511] bridge4243: port 2(bridge_slave_1) entered disabled state [ 3491.667822][T30511] device bridge_slave_1 entered promiscuous mode [ 3491.737936][T30528] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3491.753914][T30528] CPU: 0 PID: 30528 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3491.764407][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3491.768026][T30514] bridge4360: port 1(veth0_to_hsr) entered disabled state [ 3491.774462][T30528] Call Trace: [ 3491.774476][T30528] [ 3491.774487][T30528] dump_stack_lvl+0xd1/0x138 [ 3491.774535][T30528] dump_header+0x10b/0x85f [ 3491.774569][T30528] oom_kill_process.cold+0x10/0x15 [ 3491.774600][T30528] out_of_memory+0x35c/0x14a0 [ 3491.806947][T30528] ? find_held_lock+0x2d/0x110 [ 3491.811740][T30528] ? oom_killer_disable+0x280/0x280 [ 3491.817020][T30528] ? find_held_lock+0x2d/0x110 [ 3491.821815][T30528] mem_cgroup_out_of_memory+0x206/0x270 [ 3491.827404][T30528] ? mem_cgroup_margin+0x130/0x130 [ 3491.832541][T30528] ? lock_downgrade+0x6e0/0x6e0 [ 3491.837434][T30528] try_charge_memcg+0xefb/0x12f0 [ 3491.842574][T30528] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3491.848604][T30528] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3491.854388][T30528] ? lock_downgrade+0x6e0/0x6e0 [ 3491.859286][T30528] ? lock_downgrade+0x6e0/0x6e0 [ 3491.864170][T30528] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3491.869754][T30528] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3491.875943][T30528] copy_process+0x4e3/0x7520 [ 3491.880557][T30528] ? find_held_lock+0x2d/0x110 [ 3491.885385][T30528] ? __cleanup_sighand+0xb0/0xb0 [ 3491.890361][T30528] ? lock_downgrade+0x6e0/0x6e0 [ 3491.895234][T30528] ? folio_flags.constprop.0+0x53/0x150 [ 3491.900807][T30528] ? folio_add_lru+0x37b/0x680 [ 3491.905619][T30528] kernel_clone+0xeb/0x990 [ 3491.910078][T30528] ? create_io_thread+0xf0/0xf0 [ 3491.914975][T30528] ? find_held_lock+0x2d/0x110 [ 3491.919811][T30528] __do_sys_clone+0xba/0x100 [ 3491.924431][T30528] ? kernel_clone+0x990/0x990 [ 3491.929139][T30528] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3491.935082][T30528] do_syscall_64+0x39/0xb0 [ 3491.939534][T30528] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3491.945461][T30528] RIP: 0033:0x7f7e1f28d4f1 [ 3491.949889][T30528] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3491.969549][T30528] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3491.978011][T30528] RAX: ffffffffffffffda RBX: 00007f7e1ff01700 RCX: 00007f7e1f28d4f1 [ 3491.986010][T30528] RDX: 00007f7e1ff019d0 RSI: 00007f7e1ff012f0 RDI: 00000000003d0f00 [ 3491.994027][T30528] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff01700 R09: 00007f7e1ff01700 [ 3492.002035][T30528] R10: 00007f7e1ff019d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3492.010045][T30528] R13: 00007ffc49b30a3f R14: 00007f7e1ff01300 R15: 0000000000022000 [ 3492.018061][T30528] [ 3492.030292][T30514] bridge4361: port 1(veth0_to_hsr) entered blocking state [ 3492.036543][T30528] memory: usage 307200kB, limit 307200kB, failcnt 751 [ 3492.043522][T30514] bridge4361: port 1(veth0_to_hsr) entered disabled state [ 3492.044456][T30528] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3492.058744][T30528] Memory cgroup stats for /syz5: [ 3492.058974][T30528] anon 135168 [ 3492.058974][T30528] file 315392 [ 3492.058974][T30528] kernel 314122240 [ 3492.058974][T30528] kernel_stack 65536 [ 3492.058974][T30528] pagetables 77824 [ 3492.058974][T30528] sec_pagetables 0 [ 3492.058974][T30528] percpu 5434688 [ 3492.058974][T30528] sock 0 [ 3492.058974][T30528] vmalloc 8192 [ 3492.058974][T30528] shmem 315392 [ 3492.058974][T30528] zswap 0 [ 3492.058974][T30528] zswapped 0 [ 3492.058974][T30528] file_mapped 290816 [ 3492.058974][T30528] file_dirty 0 [ 3492.058974][T30528] file_writeback 0 [ 3492.058974][T30528] swapcached 0 [ 3492.058974][T30528] anon_thp 0 [ 3492.058974][T30528] file_thp 0 [ 3492.058974][T30528] shmem_thp 0 [ 3492.058974][T30528] inactive_anon 139264 [ 3492.058974][T30528] active_anon 307200 [ 3492.058974][T30528] inactive_file 0 [ 3492.058974][T30528] active_file 0 [ 3492.058974][T30528] unevictable 0 [ 3492.058974][T30528] slab_reclaimable 26432 [ 3492.058974][T30528] slab_unreclaimable 308469936 [ 3492.104466][T30515] device bridge_slave_1 left promiscuous mode [ 3492.154051][T30528] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30528,uid=0 [ 3492.179455][T30528] Memory cgroup out of memory: Killed process 30528 (syz-executor.5) total-vm:54672kB, anon-rss:452kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3492.187230][T30515] bridge4360: port 2(bridge_slave_1) entered disabled state [ 3492.222188][T30515] bridge4361: port 2(bridge_slave_1) entered blocking state [ 3492.230335][T30515] bridge4361: port 2(bridge_slave_1) entered disabled state 22:16:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000006e900", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3492.238723][T30515] device bridge_slave_1 entered promiscuous mode [ 3492.310380][T30519] device veth0_to_hsr left promiscuous mode [ 3492.317052][T30519] bridge3668: port 1(veth0_to_hsr) entered disabled state [ 3492.332226][T30519] bridge3669: port 1(veth0_to_hsr) entered blocking state [ 3492.339851][T30519] bridge3669: port 1(veth0_to_hsr) entered disabled state [ 3492.352895][T30519] device veth0_to_hsr entered promiscuous mode [ 3492.366713][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3492.413889][T30522] device bridge_slave_1 left promiscuous mode [ 3492.420444][T30522] bridge3668: port 2(bridge_slave_1) entered disabled state [ 3492.438070][T30522] bridge3669: port 2(bridge_slave_1) entered blocking state [ 3492.445689][T30522] bridge3669: port 2(bridge_slave_1) entered disabled state [ 3492.455035][T30522] device bridge_slave_1 entered promiscuous mode 22:16:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000005a010000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3492.474932][T30523] device bridge_slave_1 left promiscuous mode [ 3492.488689][T30523] bridge3926: port 1(bridge_slave_1) entered disabled state [ 3492.513173][T30523] bridge3927: port 1(bridge_slave_1) entered blocking state 22:16:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003a7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3492.521298][T30523] bridge3927: port 1(bridge_slave_1) entered disabled state [ 3492.531541][T30523] device bridge_slave_1 entered promiscuous mode [ 3492.604461][T30526] bridge4278: port 1(veth0_to_hsr) entered disabled state [ 3492.621705][T30526] bridge4279: port 1(veth0_to_hsr) entered blocking state [ 3492.629043][T30526] bridge4279: port 1(veth0_to_hsr) entered disabled state 22:16:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003c00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3492.652240][T30527] device bridge_slave_1 left promiscuous mode [ 3492.658693][T30527] bridge4278: port 2(bridge_slave_1) entered disabled state [ 3492.677874][T30527] bridge4279: port 2(bridge_slave_1) entered blocking state [ 3492.685611][T30527] bridge4279: port 2(bridge_slave_1) entered disabled state [ 3492.695197][T30527] device bridge_slave_1 entered promiscuous mode 22:16:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000ea0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3492.852037][T30532] bridge4243: port 1(veth0_to_hsr) entered disabled state [ 3492.864037][T30532] bridge4244: port 1(veth0_to_hsr) entered blocking state [ 3492.884386][T30532] bridge4244: port 1(veth0_to_hsr) entered disabled state [ 3492.918190][T30533] device bridge_slave_1 left promiscuous mode [ 3492.932294][T30533] bridge4243: port 2(bridge_slave_1) entered disabled state 22:16:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000620200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3492.961884][T30533] bridge4244: port 2(bridge_slave_1) entered blocking state [ 3492.969804][T30533] bridge4244: port 2(bridge_slave_1) entered disabled state [ 3492.980075][T30533] device bridge_slave_1 entered promiscuous mode [ 3493.036460][T30550] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3493.058932][T30550] CPU: 0 PID: 30550 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3493.069429][T30550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3493.079544][T30550] Call Trace: [ 3493.082846][T30550] [ 3493.085793][T30550] dump_stack_lvl+0xd1/0x138 [ 3493.090434][T30550] dump_header+0x10b/0x85f [ 3493.094896][T30550] oom_kill_process.cold+0x10/0x15 [ 3493.100066][T30550] out_of_memory+0x35c/0x14a0 [ 3493.104805][T30550] ? find_held_lock+0x2d/0x110 [ 3493.109611][T30550] ? oom_killer_disable+0x280/0x280 [ 3493.114848][T30550] ? find_held_lock+0x2d/0x110 [ 3493.119643][T30550] mem_cgroup_out_of_memory+0x206/0x270 [ 3493.125223][T30550] ? mem_cgroup_margin+0x130/0x130 [ 3493.130360][T30550] ? lock_downgrade+0x6e0/0x6e0 [ 3493.135332][T30550] try_charge_memcg+0xefb/0x12f0 [ 3493.140651][T30550] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3493.146759][T30550] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3493.152513][T30550] ? lock_downgrade+0x6e0/0x6e0 [ 3493.157408][T30550] ? lock_downgrade+0x6e0/0x6e0 [ 3493.162309][T30550] ? rcu_read_unlock+0x9/0x60 [ 3493.167162][T30550] obj_cgroup_charge+0x2af/0x5e0 [ 3493.172164][T30550] ? copy_process+0x3aa/0x7520 [ 3493.176969][T30550] kmem_cache_alloc_node+0xb7/0x460 [ 3493.182228][T30550] copy_process+0x3aa/0x7520 [ 3493.186888][T30550] ? find_held_lock+0x2d/0x110 [ 3493.191761][T30550] ? __cleanup_sighand+0xb0/0xb0 [ 3493.196745][T30550] ? lock_downgrade+0x6e0/0x6e0 [ 3493.201655][T30550] ? folio_flags.constprop.0+0x53/0x150 [ 3493.207267][T30550] ? folio_add_lru+0x37b/0x680 [ 3493.212098][T30550] kernel_clone+0xeb/0x990 [ 3493.216595][T30550] ? create_io_thread+0xf0/0xf0 [ 3493.221486][T30550] ? find_held_lock+0x2d/0x110 [ 3493.226299][T30550] __do_sys_clone+0xba/0x100 [ 3493.230999][T30550] ? kernel_clone+0x990/0x990 [ 3493.235737][T30550] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3493.241849][T30550] do_syscall_64+0x39/0xb0 [ 3493.246316][T30550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3493.252247][T30550] RIP: 0033:0x7f7e1f28d4f1 [ 3493.256683][T30550] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3493.276323][T30550] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3493.284756][T30550] RAX: ffffffffffffffda RBX: 00007f7e1ff01700 RCX: 00007f7e1f28d4f1 [ 3493.292746][T30550] RDX: 00007f7e1ff019d0 RSI: 00007f7e1ff012f0 RDI: 00000000003d0f00 [ 3493.300730][T30550] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff01700 R09: 00007f7e1ff01700 [ 3493.308715][T30550] R10: 00007f7e1ff019d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3493.316699][T30550] R13: 00007ffc49b30a3f R14: 00007f7e1ff01300 R15: 0000000000022000 [ 3493.324713][T30550] [ 3493.334068][T30550] memory: usage 307184kB, limit 307200kB, failcnt 867 [ 3493.350387][T30550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3493.358849][T30550] Memory cgroup stats for /syz5: [ 3493.359122][T30550] anon 135168 [ 3493.359122][T30550] file 315392 [ 3493.359122][T30550] kernel 314101760 [ 3493.359122][T30550] kernel_stack 65536 [ 3493.359122][T30550] pagetables 77824 [ 3493.359122][T30550] sec_pagetables 0 [ 3493.359122][T30550] percpu 5434688 [ 3493.359122][T30550] sock 0 [ 3493.359122][T30550] vmalloc 8192 [ 3493.359122][T30550] shmem 315392 [ 3493.359122][T30550] zswap 0 [ 3493.359122][T30550] zswapped 0 [ 3493.359122][T30550] file_mapped 290816 [ 3493.359122][T30550] file_dirty 0 [ 3493.359122][T30550] file_writeback 0 [ 3493.359122][T30550] swapcached 0 [ 3493.359122][T30550] anon_thp 0 [ 3493.359122][T30550] file_thp 0 [ 3493.359122][T30550] shmem_thp 0 [ 3493.359122][T30550] inactive_anon 143360 [ 3493.359122][T30550] active_anon 307200 [ 3493.359122][T30550] inactive_file 0 [ 3493.359122][T30550] active_file 0 [ 3493.359122][T30550] unevictable 0 [ 3493.359122][T30550] slab_reclaimable 26432 [ 3493.359122][T30550] slab_unreclaimable 308456280 [ 3493.478598][T30550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30550,uid=0 [ 3493.495309][T30550] Memory cgroup out of memory: Killed process 30550 (syz-executor.5) total-vm:54672kB, anon-rss:452kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3493.499508][T30536] bridge4361: port 1(veth0_to_hsr) entered disabled state [ 3493.535937][T30536] bridge4362: port 1(veth0_to_hsr) entered blocking state [ 3493.547386][T30536] bridge4362: port 1(veth0_to_hsr) entered disabled state [ 3493.568949][T30537] device bridge_slave_1 left promiscuous mode [ 3493.575705][T30537] bridge4361: port 2(bridge_slave_1) entered disabled state 22:16:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000fffffffffffff000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3493.602274][T30537] bridge4362: port 2(bridge_slave_1) entered blocking state [ 3493.610137][T30537] bridge4362: port 2(bridge_slave_1) entered disabled state [ 3493.618491][T30537] device bridge_slave_1 entered promiscuous mode [ 3493.675034][T30542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3493.721848][T30543] device veth0_to_hsr left promiscuous mode [ 3493.728396][T30543] bridge3669: port 1(veth0_to_hsr) entered disabled state [ 3493.738055][T30543] bridge3670: port 1(veth0_to_hsr) entered blocking state [ 3493.745784][T30543] bridge3670: port 1(veth0_to_hsr) entered disabled state [ 3493.759584][T30543] device veth0_to_hsr entered promiscuous mode [ 3493.775290][T30544] device bridge_slave_1 left promiscuous mode [ 3493.781801][T30544] bridge3927: port 1(bridge_slave_1) entered disabled state [ 3493.805413][T30544] bridge3928: port 1(bridge_slave_1) entered blocking state [ 3493.816085][T30544] bridge3928: port 1(bridge_slave_1) entered disabled state 22:16:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003b7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3493.825585][T30544] device bridge_slave_1 entered promiscuous mode [ 3493.843779][T30545] device bridge_slave_1 left promiscuous mode [ 3493.851409][T30545] bridge3669: port 2(bridge_slave_1) entered disabled state 22:16:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000ba010000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3493.871229][T30545] bridge3670: port 2(bridge_slave_1) entered blocking state [ 3493.878941][T30545] bridge3670: port 2(bridge_slave_1) entered disabled state [ 3493.888925][T30545] device bridge_slave_1 entered promiscuous mode [ 3493.960181][T30565] device bridge_slave_1 left promiscuous mode [ 3493.966613][T30565] bridge3928: port 1(bridge_slave_1) entered disabled state [ 3493.982513][T30548] bridge4279: port 1(veth0_to_hsr) entered disabled state [ 3493.999606][T30548] bridge4280: port 1(veth0_to_hsr) entered blocking state [ 3494.007087][T30548] bridge4280: port 1(veth0_to_hsr) entered disabled state [ 3494.029406][T30549] device bridge_slave_1 left promiscuous mode [ 3494.036041][T30549] bridge4279: port 2(bridge_slave_1) entered disabled state 22:16:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003f00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3494.060192][T30549] bridge4280: port 2(bridge_slave_1) entered blocking state [ 3494.067634][T30549] bridge4280: port 2(bridge_slave_1) entered disabled state [ 3494.076891][T30549] device bridge_slave_1 entered promiscuous mode 22:16:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003ea0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3494.202585][T30554] bridge4244: port 1(veth0_to_hsr) entered disabled state [ 3494.213305][T30554] bridge4245: port 1(veth0_to_hsr) entered blocking state [ 3494.220770][T30554] bridge4245: port 1(veth0_to_hsr) entered disabled state [ 3494.276385][T30555] device bridge_slave_1 left promiscuous mode [ 3494.283752][T30555] bridge4244: port 2(bridge_slave_1) entered disabled state [ 3494.296615][T30572] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3494.307947][T30555] bridge4245: port 2(bridge_slave_1) entered blocking state [ 3494.313812][T30572] CPU: 0 PID: 30572 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3494.315770][T30555] bridge4245: port 2(bridge_slave_1) entered disabled state [ 3494.325669][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3494.325692][T30572] Call Trace: [ 3494.325702][T30572] [ 3494.325713][T30572] dump_stack_lvl+0xd1/0x138 [ 3494.325760][T30572] dump_header+0x10b/0x85f [ 3494.325793][T30572] oom_kill_process.cold+0x10/0x15 [ 3494.325827][T30572] out_of_memory+0x35c/0x14a0 [ 3494.325871][T30572] ? find_held_lock+0x2d/0x110 [ 3494.325910][T30572] ? oom_killer_disable+0x280/0x280 [ 3494.325951][T30572] ? find_held_lock+0x2d/0x110 [ 3494.325990][T30572] mem_cgroup_out_of_memory+0x206/0x270 [ 3494.337976][T30555] device bridge_slave_1 entered promiscuous mode [ 3494.343347][T30572] ? mem_cgroup_margin+0x130/0x130 [ 3494.343397][T30572] ? lock_downgrade+0x6e0/0x6e0 [ 3494.343446][T30572] try_charge_memcg+0xefb/0x12f0 [ 3494.343481][T30572] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3494.343520][T30572] ? lock_downgrade+0x6e0/0x6e0 [ 3494.343561][T30572] charge_memcg+0x90/0x3b0 [ 3494.343593][T30572] __mem_cgroup_charge+0x2b/0x90 [ 3494.343626][T30572] do_wp_page+0x7ec/0x3370 [ 3494.343670][T30572] ? lock_release+0x810/0x810 [ 3494.343697][T30572] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3494.343733][T30572] ? do_raw_spin_lock+0x124/0x2b0 [ 3494.450522][T30572] ? rwlock_bug.part.0+0x90/0x90 [ 3494.455508][T30572] ? lock_chain_count+0x20/0x20 [ 3494.460406][T30572] __handle_mm_fault+0x1f58/0x3c90 [ 3494.465581][T30572] ? vm_iomap_memory+0x190/0x190 [ 3494.470580][T30572] handle_mm_fault+0x1b6/0x850 [ 3494.475381][T30572] do_user_addr_fault+0x475/0x1210 [ 3494.480585][T30572] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3494.486481][T30572] exc_page_fault+0x98/0x170 [ 3494.491132][T30572] asm_exc_page_fault+0x26/0x30 [ 3494.496109][T30572] RIP: 0033:0x7f7e1f239570 [ 3494.500554][T30572] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3494.520298][T30572] RSP: 002b:00007ffc49b309e0 EFLAGS: 00010246 [ 3494.526399][T30572] RAX: 00000000618f290d RBX: 00007f7e1f3ac018 RCX: 0000001b32520000 [ 3494.535713][T30572] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000911c206 [ 3494.543998][T30572] RBP: 00000000618f290d R08: 000000000000090d R09: 00000000618f2911 [ 3494.552024][T30572] R10: 00007ffc49b30ba0 R11: 0000000000000246 R12: 00007f7e1f3a0000 [ 3494.560280][T30572] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81e628e6 [ 3494.568384][T30572] ? alloc_fd+0x26/0x6d0 [ 3494.572793][T30572] 22:16:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000006a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3494.578996][T30558] bridge4362: port 1(veth0_to_hsr) entered disabled state [ 3494.609748][T30558] bridge4363: port 1(veth0_to_hsr) entered blocking state [ 3494.619011][T30558] bridge4363: port 1(veth0_to_hsr) entered disabled state [ 3494.630510][T30572] memory: usage 307160kB, limit 307200kB, failcnt 977 [ 3494.637329][T30572] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3494.645283][T30559] device bridge_slave_1 left promiscuous mode [ 3494.652331][T30559] bridge4362: port 2(bridge_slave_1) entered disabled state [ 3494.662011][T30572] Memory cgroup stats for /syz5: [ 3494.663432][T30572] anon 114688 [ 3494.663432][T30572] file 315392 [ 3494.663432][T30572] kernel 314101760 [ 3494.663432][T30572] kernel_stack 65536 [ 3494.663432][T30572] pagetables 77824 [ 3494.663432][T30572] sec_pagetables 0 [ 3494.663432][T30572] percpu 5434688 [ 3494.663432][T30572] sock 0 [ 3494.663432][T30572] vmalloc 8192 [ 3494.663432][T30572] shmem 315392 [ 3494.663432][T30572] zswap 0 [ 3494.663432][T30572] zswapped 0 [ 3494.663432][T30572] file_mapped 290816 [ 3494.663432][T30572] file_dirty 0 [ 3494.663432][T30572] file_writeback 0 [ 3494.663432][T30572] swapcached 0 [ 3494.663432][T30572] anon_thp 0 [ 3494.663432][T30572] file_thp 0 [ 3494.663432][T30572] shmem_thp 0 [ 3494.663432][T30572] inactive_anon 122880 [ 3494.663432][T30572] active_anon 307200 [ 3494.663432][T30572] inactive_file 0 [ 3494.663432][T30572] active_file 0 [ 3494.663432][T30572] unevictable 0 [ 3494.663432][T30572] slab_reclaimable 20648 [ 3494.663432][T30572] slab_unreclaimable 308459632 [ 3494.764386][T30572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30572,uid=0 [ 3494.792240][T30559] bridge4363: port 2(bridge_slave_1) entered blocking state [ 3494.794286][T30572] Memory cgroup out of memory: Killed process 30572 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3494.800302][T30559] bridge4363: port 2(bridge_slave_1) entered disabled state [ 3494.828991][T30559] device bridge_slave_1 entered promiscuous mode 22:16:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003ec0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3494.845586][T30562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003c7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3494.978156][T30566] device veth0_to_hsr left promiscuous mode [ 3494.993934][T30566] bridge3670: port 1(veth0_to_hsr) entered disabled state [ 3495.008884][T30566] bridge3671: port 1(veth0_to_hsr) entered blocking state [ 3495.017263][T30566] bridge3671: port 1(veth0_to_hsr) entered disabled state [ 3495.030603][T30566] device veth0_to_hsr entered promiscuous mode [ 3495.044226][T30567] device bridge_slave_1 left promiscuous mode [ 3495.062341][T30567] bridge3670: port 2(bridge_slave_1) entered disabled state [ 3495.070697][T30578] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3495.086029][T30578] CPU: 0 PID: 30578 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3495.096507][T30578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3495.106582][T30578] Call Trace: [ 3495.109891][T30578] [ 3495.112849][T30578] dump_stack_lvl+0xd1/0x138 [ 3495.117482][T30578] dump_header+0x10b/0x85f [ 3495.121924][T30578] oom_kill_process.cold+0x10/0x15 [ 3495.127097][T30578] out_of_memory+0x35c/0x14a0 [ 3495.131844][T30578] ? find_held_lock+0x2d/0x110 [ 3495.136647][T30578] ? oom_killer_disable+0x280/0x280 [ 3495.141874][T30578] ? find_held_lock+0x2d/0x110 [ 3495.146719][T30578] mem_cgroup_out_of_memory+0x206/0x270 [ 3495.152411][T30578] ? mem_cgroup_margin+0x130/0x130 [ 3495.157536][T30578] ? lock_downgrade+0x6e0/0x6e0 [ 3495.162427][T30578] try_charge_memcg+0xefb/0x12f0 [ 3495.167423][T30578] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3495.173533][T30578] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3495.179303][T30578] ? lock_downgrade+0x6e0/0x6e0 [ 3495.184221][T30578] obj_cgroup_charge+0x2af/0x5e0 [ 3495.189225][T30578] ? vm_area_dup+0x7d/0x380 [ 3495.193870][T30578] kmem_cache_alloc+0xb5/0x430 [ 3495.198683][T30578] vm_area_dup+0x7d/0x380 [ 3495.203036][T30578] ? mt_slot+0xa1/0x170 [ 3495.207271][T30578] ? mas_next_nentry+0x610/0xab0 [ 3495.212251][T30578] ? mas_next_node+0x547/0xa00 [ 3495.217101][T30578] ? mas_find+0x211/0xd10 [ 3495.221471][T30578] ? vm_area_alloc+0x100/0x100 [ 3495.226294][T30578] ? validate_mm_mt+0x149/0x1b0 [ 3495.231281][T30578] ? remove_vma+0x130/0x130 [ 3495.235815][T30578] ? can_vma_merge_before+0x390/0x390 [ 3495.241212][T30578] __split_vma+0xae/0x5e0 [ 3495.245586][T30578] ? vma_merge+0x2cf/0x870 [ 3495.250046][T30578] split_vma+0xa3/0xe0 [ 3495.254173][T30578] mprotect_fixup+0x686/0x960 [ 3495.258895][T30578] ? mas_find+0x211/0xd10 [ 3495.263271][T30578] ? change_protection+0x3b30/0x3b30 [ 3495.268601][T30578] do_mprotect_pkey+0x6fd/0xa70 [ 3495.273488][T30578] ? mprotect_fixup+0x960/0x960 [ 3495.278375][T30578] ? up_write+0x1b0/0x520 [ 3495.282939][T30578] __x64_sys_mprotect+0x78/0xb0 [ 3495.287919][T30578] do_syscall_64+0x39/0xb0 [ 3495.292365][T30578] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3495.298431][T30578] RIP: 0033:0x7f7e1f28c1d7 [ 3495.302901][T30578] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3495.322586][T30578] RSP: 002b:00007ffc49b309d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 3495.331170][T30578] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f7e1f28c1d7 [ 3495.339170][T30578] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7e1fee2000 [ 3495.347175][T30578] RBP: 00007ffc49b30ab0 R08: 00000000ffffffff R09: 00007f7e1ff01700 [ 3495.355182][T30578] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc49b30bd0 [ 3495.363194][T30578] R13: 00007f7e1ff01700 R14: 0000000000000000 R15: 0000000000022000 [ 3495.371230][T30578] [ 3495.378970][T30578] memory: usage 307200kB, limit 307200kB, failcnt 1067 [ 3495.386023][T30578] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3495.393174][T30578] Memory cgroup stats for /syz5: [ 3495.393781][T30578] anon 131072 [ 3495.393781][T30578] file 315392 [ 3495.393781][T30578] kernel 314126336 [ 3495.393781][T30578] kernel_stack 65536 [ 3495.393781][T30578] pagetables 77824 [ 3495.393781][T30578] sec_pagetables 0 [ 3495.393781][T30578] percpu 5434752 [ 3495.393781][T30578] sock 0 [ 3495.393781][T30578] vmalloc 8192 [ 3495.393781][T30578] shmem 315392 [ 3495.393781][T30578] zswap 0 [ 3495.393781][T30578] zswapped 0 [ 3495.393781][T30578] file_mapped 290816 [ 3495.393781][T30578] file_dirty 0 [ 3495.393781][T30578] file_writeback 0 [ 3495.393781][T30578] swapcached 0 [ 3495.393781][T30578] anon_thp 0 [ 3495.393781][T30578] file_thp 0 [ 3495.393781][T30578] shmem_thp 0 [ 3495.393781][T30578] inactive_anon 110592 [ 3495.393781][T30578] active_anon 307200 [ 3495.393781][T30578] inactive_file 0 [ 3495.393781][T30578] active_file 0 [ 3495.393781][T30578] unevictable 0 [ 3495.393781][T30578] slab_reclaimable 26432 [ 3495.393781][T30578] slab_unreclaimable 308473360 [ 3495.400141][T30567] bridge3671: port 2(bridge_slave_1) entered blocking state [ 3495.487908][T30578] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30578,uid=0 [ 3495.490667][T30578] Memory cgroup out of memory: Killed process 30578 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3495.531165][T30567] bridge3671: port 2(bridge_slave_1) entered disabled state 22:16:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000a020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3495.551712][T30567] device bridge_slave_1 entered promiscuous mode [ 3495.610593][T30570] bridge4280: port 1(veth0_to_hsr) entered disabled state [ 3495.634874][T30570] bridge4281: port 1(veth0_to_hsr) entered blocking state [ 3495.646326][T30570] bridge4281: port 1(veth0_to_hsr) entered disabled state [ 3495.665970][T30571] device bridge_slave_1 left promiscuous mode [ 3495.682059][T30571] bridge4280: port 2(bridge_slave_1) entered disabled state [ 3495.703547][T30571] bridge4281: port 2(bridge_slave_1) entered blocking state 22:16:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000004000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3495.711391][T30571] bridge4281: port 2(bridge_slave_1) entered disabled state [ 3495.720393][T30571] device bridge_slave_1 entered promiscuous mode [ 3495.781960][T30576] bridge4245: port 1(veth0_to_hsr) entered disabled state [ 3495.791995][T30576] bridge4246: port 1(veth0_to_hsr) entered blocking state [ 3495.799483][T30576] bridge4246: port 1(veth0_to_hsr) entered disabled state [ 3495.819008][T30577] device bridge_slave_1 left promiscuous mode 22:16:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000780200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3495.825961][T30577] bridge4245: port 2(bridge_slave_1) entered disabled state [ 3495.848616][T30577] bridge4246: port 2(bridge_slave_1) entered blocking state [ 3495.856286][T30577] bridge4246: port 2(bridge_slave_1) entered disabled state [ 3495.867152][T30577] device bridge_slave_1 entered promiscuous mode [ 3495.925131][T30582] bridge4363: port 1(veth0_to_hsr) entered disabled state [ 3495.935392][T30582] bridge4364: port 1(veth0_to_hsr) entered blocking state [ 3495.943842][T30582] bridge4364: port 1(veth0_to_hsr) entered disabled state 22:16:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000f00000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3495.998571][T30584] device bridge_slave_1 left promiscuous mode [ 3496.012186][T30584] bridge4363: port 2(bridge_slave_1) entered disabled state [ 3496.030279][T30584] bridge4364: port 2(bridge_slave_1) entered blocking state [ 3496.038753][T30584] bridge4364: port 2(bridge_slave_1) entered disabled state 22:16:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000006e901", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3496.048134][T30584] device bridge_slave_1 entered promiscuous mode [ 3496.062921][T30585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3496.146637][T30602] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3496.157487][T30587] bridge3930: port 1(bridge_slave_1) entered blocking state [ 3496.157954][T30602] CPU: 1 PID: 30602 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3496.170366][T30587] bridge3930: port 1(bridge_slave_1) entered disabled state [ 3496.175194][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3496.175215][T30602] Call Trace: [ 3496.175224][T30602] [ 3496.175236][T30602] dump_stack_lvl+0xd1/0x138 [ 3496.175293][T30602] dump_header+0x10b/0x85f [ 3496.206436][T30587] device bridge_slave_1 entered promiscuous mode [ 3496.207936][T30602] oom_kill_process.cold+0x10/0x15 [ 3496.207982][T30602] out_of_memory+0x35c/0x14a0 [ 3496.224328][T30602] ? find_held_lock+0x2d/0x110 [ 3496.229140][T30602] ? oom_killer_disable+0x280/0x280 [ 3496.234403][T30602] ? find_held_lock+0x2d/0x110 [ 3496.239221][T30602] mem_cgroup_out_of_memory+0x206/0x270 [ 3496.244840][T30602] ? mem_cgroup_margin+0x130/0x130 [ 3496.250008][T30602] ? lock_downgrade+0x6e0/0x6e0 [ 3496.254923][T30602] try_charge_memcg+0xefb/0x12f0 [ 3496.259910][T30602] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3496.265936][T30602] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3496.271719][T30602] ? lock_downgrade+0x6e0/0x6e0 [ 3496.276600][T30602] ? lock_downgrade+0x6e0/0x6e0 [ 3496.279801][T30590] device veth0_to_hsr left promiscuous mode [ 3496.281459][T30602] ? rcu_read_unlock+0x9/0x60 [ 3496.281518][T30602] obj_cgroup_charge+0x2af/0x5e0 [ 3496.287711][T30590] bridge3671: port 1(veth0_to_hsr) entered disabled state [ 3496.292064][T30602] ? sk_prot_alloc+0x5f/0x290 [ 3496.292102][T30602] kmem_cache_alloc+0xb5/0x430 [ 3496.292135][T30602] sk_prot_alloc+0x5f/0x290 [ 3496.292168][T30602] sk_alloc+0x3a/0x7a0 [ 3496.322351][T30602] ? __sock_create+0x300/0x790 [ 3496.327163][T30602] unix_create1+0xaa/0x920 [ 3496.331879][T30602] unix_create+0x114/0x220 [ 3496.337789][T30602] __sock_create+0x359/0x790 [ 3496.342581][T30602] __sys_socketpair+0x246/0x570 [ 3496.347510][T30602] ? __ia32_sys_socket+0xb0/0xb0 [ 3496.352518][T30602] __x64_sys_socketpair+0x97/0x100 [ 3496.358318][T30602] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3496.364258][T30602] do_syscall_64+0x39/0xb0 [ 3496.368677][T30602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3496.374592][T30602] RIP: 0033:0x7f7e1f28c0c9 [ 3496.379005][T30602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3496.398793][T30602] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3496.407235][T30602] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3496.415247][T30602] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3496.423227][T30602] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3496.431211][T30602] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3496.439193][T30602] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 22:16:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003d7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3496.447197][T30602] [ 3496.460700][T30590] bridge3672: port 1(veth0_to_hsr) entered blocking state [ 3496.474281][T30590] bridge3672: port 1(veth0_to_hsr) entered disabled state [ 3496.476004][T30602] memory: usage 307200kB, limit 307200kB, failcnt 1199 [ 3496.495523][T30602] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3496.500482][T30590] device veth0_to_hsr entered promiscuous mode [ 3496.513838][T30602] Memory cgroup stats for /syz5: [ 3496.514117][T30602] anon 94208 [ 3496.514117][T30602] file 315392 [ 3496.514117][T30602] kernel 314163200 [ 3496.514117][T30602] kernel_stack 65536 [ 3496.514117][T30602] pagetables 77824 [ 3496.514117][T30602] sec_pagetables 0 [ 3496.514117][T30602] percpu 5435936 [ 3496.514117][T30602] sock 0 [ 3496.514117][T30602] vmalloc 8192 [ 3496.514117][T30602] shmem 315392 [ 3496.514117][T30602] zswap 0 [ 3496.514117][T30602] zswapped 0 [ 3496.514117][T30602] file_mapped 290816 [ 3496.514117][T30602] file_dirty 0 [ 3496.514117][T30602] file_writeback 0 [ 3496.514117][T30602] swapcached 0 [ 3496.514117][T30602] anon_thp 0 [ 3496.514117][T30602] file_thp 0 [ 3496.514117][T30602] shmem_thp 0 [ 3496.514117][T30602] inactive_anon 102400 [ 3496.514117][T30602] active_anon 307200 [ 3496.514117][T30602] inactive_file 0 [ 3496.514117][T30602] active_file 0 [ 3496.514117][T30602] unevictable 0 [ 3496.514117][T30602] slab_reclaimable 19880 [ 3496.514117][T30602] slab_unreclaimable 308515576 [ 3496.533793][T30591] device bridge_slave_1 left promiscuous mode [ 3496.618254][T30602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30600,uid=0 [ 3496.629897][T30591] bridge3671: port 2(bridge_slave_1) entered disabled state 22:16:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000002f00000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3496.643571][T30602] Memory cgroup out of memory: Killed process 30600 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3496.698105][T30591] bridge3672: port 2(bridge_slave_1) entered blocking state [ 3496.714068][T30591] bridge3672: port 2(bridge_slave_1) entered disabled state [ 3496.747237][T30591] device bridge_slave_1 entered promiscuous mode 22:16:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000001a020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3496.806771][T30611] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3496.838209][T30611] CPU: 0 PID: 30611 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3496.850362][T30611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3496.860464][T30611] Call Trace: [ 3496.863780][T30611] [ 3496.866455][T30594] bridge4281: port 1(veth0_to_hsr) entered disabled state [ 3496.866723][T30611] dump_stack_lvl+0xd1/0x138 [ 3496.878463][T30611] dump_header+0x10b/0x85f [ 3496.882936][T30611] oom_kill_process.cold+0x10/0x15 [ 3496.888111][T30611] out_of_memory+0x35c/0x14a0 [ 3496.892842][T30611] ? find_held_lock+0x2d/0x110 [ 3496.897645][T30611] ? oom_killer_disable+0x280/0x280 [ 3496.903476][T30611] ? find_held_lock+0x2d/0x110 [ 3496.908284][T30611] mem_cgroup_out_of_memory+0x206/0x270 [ 3496.913869][T30611] ? mem_cgroup_margin+0x130/0x130 [ 3496.919098][T30611] ? lock_downgrade+0x6e0/0x6e0 [ 3496.923989][T30611] try_charge_memcg+0xefb/0x12f0 [ 3496.930871][T30611] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3496.937050][T30611] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3496.942831][T30611] ? lock_downgrade+0x6e0/0x6e0 [ 3496.947711][T30611] ? lock_downgrade+0x6e0/0x6e0 [ 3496.952631][T30611] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3496.958208][T30611] __alloc_pages+0x1f3/0x5b0 [ 3496.962875][T30611] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3496.969684][T30611] ? find_held_lock+0x2d/0x110 [ 3496.974501][T30611] alloc_pages+0x1aa/0x270 [ 3496.979026][T30611] pte_alloc_one+0x1a/0x230 [ 3496.983563][T30611] __pte_alloc+0x6d/0x260 [ 3496.988180][T30611] ? pmd_install+0x160/0x160 [ 3496.992795][T30611] ? hugepage_vma_check+0x24e/0x830 [ 3496.998016][T30611] ? _raw_spin_unlock+0x28/0x40 [ 3497.002953][T30611] ? __pmd_alloc+0x30c/0x5d0 [ 3497.007578][T30611] __handle_mm_fault+0x38cf/0x3c90 [ 3497.012727][T30611] ? vm_iomap_memory+0x190/0x190 [ 3497.017726][T30611] handle_mm_fault+0x1b6/0x850 [ 3497.022533][T30611] do_user_addr_fault+0x475/0x1210 [ 3497.027677][T30611] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3497.033261][T30611] exc_page_fault+0x98/0x170 [ 3497.037880][T30611] asm_exc_page_fault+0x26/0x30 [ 3497.042756][T30611] RIP: 0010:__put_user_4+0x16/0x20 [ 3497.047919][T30611] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3497.067545][T30611] RSP: 0018:ffffc9000388fe40 EFLAGS: 00050293 [ 3497.073631][T30611] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3497.081620][T30611] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3497.089606][T30611] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3497.097601][T30611] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3497.105585][T30611] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3497.113582][T30611] ? __sys_socketpair+0xff/0x570 [ 3497.118561][T30611] __sys_socketpair+0x10b/0x570 [ 3497.123482][T30611] ? __ia32_sys_socket+0xb0/0xb0 [ 3497.128489][T30611] __x64_sys_socketpair+0x97/0x100 [ 3497.133646][T30611] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3497.139578][T30611] do_syscall_64+0x39/0xb0 [ 3497.144022][T30611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3497.149945][T30611] RIP: 0033:0x7f7e1f28c0c9 [ 3497.154390][T30611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3497.174017][T30611] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3497.182450][T30611] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3497.190443][T30611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3497.198428][T30611] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3497.206410][T30611] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3497.214394][T30611] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3497.222402][T30611] [ 3497.244136][T30594] bridge4282: port 1(veth0_to_hsr) entered blocking state [ 3497.248747][T30611] memory: usage 307184kB, limit 307200kB, failcnt 1318 [ 3497.251700][T30594] bridge4282: port 1(veth0_to_hsr) entered disabled state [ 3497.259844][T30611] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3497.275505][T30611] Memory cgroup stats for /syz5: [ 3497.275794][T30611] anon 90112 [ 3497.275794][T30611] file 315392 [ 3497.275794][T30611] kernel 314150912 [ 3497.275794][T30611] kernel_stack 65536 [ 3497.275794][T30611] pagetables 73728 [ 3497.275794][T30611] sec_pagetables 0 [ 3497.275794][T30611] percpu 5435936 [ 3497.275794][T30611] sock 0 [ 3497.275794][T30611] vmalloc 8192 [ 3497.275794][T30611] shmem 315392 [ 3497.275794][T30611] zswap 0 [ 3497.275794][T30611] zswapped 0 [ 3497.275794][T30611] file_mapped 290816 [ 3497.275794][T30611] file_dirty 0 [ 3497.275794][T30611] file_writeback 0 [ 3497.275794][T30611] swapcached 0 [ 3497.275794][T30611] anon_thp 0 [ 3497.275794][T30611] file_thp 0 [ 3497.275794][T30611] shmem_thp 0 [ 3497.275794][T30611] inactive_anon 98304 [ 3497.275794][T30611] active_anon 307200 [ 3497.275794][T30611] inactive_file 0 [ 3497.275794][T30611] active_file 0 [ 3497.275794][T30611] unevictable 0 [ 3497.275794][T30611] slab_reclaimable 16792 [ 3497.275794][T30611] slab_unreclaimable 308512560 [ 3497.304023][T30595] device bridge_slave_1 left promiscuous mode [ 3497.373138][T30611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30610,uid=0 22:16:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000003f40000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3497.394503][T30611] Memory cgroup out of memory: Killed process 30610 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3497.399889][T30595] bridge4281: port 2(bridge_slave_1) entered disabled state [ 3497.444130][T30595] bridge4282: port 2(bridge_slave_1) entered blocking state [ 3497.452249][T30595] bridge4282: port 2(bridge_slave_1) entered disabled state 22:16:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000004200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3497.461586][T30595] device bridge_slave_1 entered promiscuous mode [ 3497.507624][T30616] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3497.518839][T30616] CPU: 0 PID: 30616 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3497.529309][T30616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3497.539402][T30616] Call Trace: [ 3497.542717][T30616] [ 3497.545688][T30616] dump_stack_lvl+0xd1/0x138 [ 3497.550339][T30616] dump_header+0x10b/0x85f [ 3497.554809][T30616] oom_kill_process.cold+0x10/0x15 [ 3497.559970][T30616] out_of_memory+0x35c/0x14a0 [ 3497.564708][T30616] ? find_held_lock+0x2d/0x110 [ 3497.569527][T30616] ? oom_killer_disable+0x280/0x280 [ 3497.574781][T30616] ? find_held_lock+0x2d/0x110 [ 3497.579609][T30616] mem_cgroup_out_of_memory+0x206/0x270 [ 3497.585230][T30616] ? mem_cgroup_margin+0x130/0x130 [ 3497.589709][T30598] bridge4246: port 1(veth0_to_hsr) entered disabled state [ 3497.590373][T30616] ? lock_downgrade+0x6e0/0x6e0 [ 3497.590427][T30616] try_charge_memcg+0xefb/0x12f0 [ 3497.607383][T30616] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3497.613416][T30616] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3497.619282][T30616] ? lock_downgrade+0x6e0/0x6e0 [ 3497.624178][T30616] ? lock_downgrade+0x6e0/0x6e0 [ 3497.629089][T30616] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3497.634681][T30616] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3497.640954][T30616] copy_process+0x4e3/0x7520 [ 3497.645592][T30616] ? page_remove_rmap+0x435/0x1210 [ 3497.650762][T30616] ? folio_flags.constprop.0+0x53/0x150 [ 3497.656368][T30616] ? put_page+0xd9/0x280 [ 3497.660662][T30616] ? do_wp_page+0x844/0x3370 [ 3497.665311][T30616] ? __cleanup_sighand+0xb0/0xb0 [ 3497.670464][T30616] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3497.675876][T30616] ? rwlock_bug.part.0+0x90/0x90 [ 3497.680834][T30616] ? lock_chain_count+0x20/0x20 [ 3497.685738][T30616] kernel_clone+0xeb/0x990 [ 3497.690204][T30616] ? create_io_thread+0xf0/0xf0 [ 3497.695104][T30616] ? find_held_lock+0x2d/0x110 [ 3497.699938][T30616] __do_sys_clone+0xba/0x100 [ 3497.704562][T30616] ? kernel_clone+0x990/0x990 [ 3497.709360][T30616] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3497.715311][T30616] do_syscall_64+0x39/0xb0 [ 3497.719772][T30616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3497.725802][T30616] RIP: 0033:0x7f7e1f28d4f1 [ 3497.730273][T30616] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3497.749927][T30616] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3497.758490][T30616] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3497.766469][T30616] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3497.774459][T30616] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3497.782466][T30616] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3497.791258][T30616] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3497.799378][T30616] [ 3497.811741][T30598] bridge4247: port 1(veth0_to_hsr) entered blocking state [ 3497.816079][T30616] memory: usage 307200kB, limit 307200kB, failcnt 1391 [ 3497.824941][T30598] bridge4247: port 1(veth0_to_hsr) entered disabled state [ 3497.825915][T30616] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3497.842361][T30616] Memory cgroup stats for /syz5: [ 3497.842561][T30616] anon 81920 [ 3497.842561][T30616] file 315392 [ 3497.842561][T30616] kernel 314138624 [ 3497.842561][T30616] kernel_stack 32768 [ 3497.842561][T30616] pagetables 69632 [ 3497.842561][T30616] sec_pagetables 0 [ 3497.842561][T30616] percpu 5435936 [ 3497.842561][T30616] sock 0 [ 3497.842561][T30616] vmalloc 8192 [ 3497.842561][T30616] shmem 315392 [ 3497.842561][T30616] zswap 0 [ 3497.842561][T30616] zswapped 0 [ 3497.842561][T30616] file_mapped 290816 [ 3497.842561][T30616] file_dirty 0 [ 3497.842561][T30616] file_writeback 0 [ 3497.842561][T30616] swapcached 0 [ 3497.842561][T30616] anon_thp 0 [ 3497.842561][T30616] file_thp 0 [ 3497.842561][T30616] shmem_thp 0 [ 3497.842561][T30616] inactive_anon 49152 [ 3497.842561][T30616] active_anon 307200 [ 3497.842561][T30616] inactive_file 0 [ 3497.842561][T30616] active_file 0 [ 3497.842561][T30616] unevictable 0 [ 3497.842561][T30616] slab_reclaimable 16792 [ 3497.842561][T30616] slab_unreclaimable 308511792 [ 3497.939458][T30599] device bridge_slave_1 left promiscuous mode [ 3497.947001][T30599] bridge4246: port 2(bridge_slave_1) entered disabled state [ 3497.959094][T30616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30616,uid=0 [ 3497.979883][T30616] Memory cgroup out of memory: Killed process 30616 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8944kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3497.983254][T30599] bridge4247: port 2(bridge_slave_1) entered blocking state 22:16:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000001fa0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3498.007772][T30599] bridge4247: port 2(bridge_slave_1) entered disabled state [ 3498.022425][T30599] device bridge_slave_1 entered promiscuous mode 22:16:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000007a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3498.114812][T30604] bridge4364: port 1(veth0_to_hsr) entered disabled state [ 3498.120887][T30623] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3498.134190][T30623] CPU: 1 PID: 30623 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3498.144671][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3498.154754][T30623] Call Trace: [ 3498.158038][T30623] [ 3498.160972][T30623] dump_stack_lvl+0xd1/0x138 [ 3498.165577][T30623] dump_header+0x10b/0x85f [ 3498.170000][T30623] oom_kill_process.cold+0x10/0x15 [ 3498.175133][T30623] out_of_memory+0x35c/0x14a0 [ 3498.179879][T30623] ? find_held_lock+0x2d/0x110 [ 3498.184690][T30623] ? oom_killer_disable+0x280/0x280 [ 3498.189955][T30623] ? find_held_lock+0x2d/0x110 [ 3498.194785][T30623] mem_cgroup_out_of_memory+0x206/0x270 [ 3498.200397][T30623] ? mem_cgroup_margin+0x130/0x130 [ 3498.205560][T30623] ? lock_downgrade+0x6e0/0x6e0 [ 3498.210456][T30623] try_charge_memcg+0xefb/0x12f0 [ 3498.215425][T30623] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3498.221420][T30623] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3498.227214][T30623] ? lock_downgrade+0x6e0/0x6e0 [ 3498.232114][T30623] obj_cgroup_charge+0x2af/0x5e0 [ 3498.237061][T30623] ? __anon_vma_prepare+0x64/0x580 [ 3498.242203][T30623] kmem_cache_alloc+0xb5/0x430 [ 3498.247086][T30623] __anon_vma_prepare+0x64/0x580 [ 3498.252037][T30623] ? __pmd_alloc+0x30c/0x5d0 [ 3498.256663][T30623] __handle_mm_fault+0x392f/0x3c90 [ 3498.261818][T30623] ? vm_iomap_memory+0x190/0x190 [ 3498.266808][T30623] handle_mm_fault+0x1b6/0x850 [ 3498.272413][T30623] do_user_addr_fault+0x475/0x1210 [ 3498.277561][T30623] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3498.283127][T30623] exc_page_fault+0x98/0x170 [ 3498.287726][T30623] asm_exc_page_fault+0x26/0x30 [ 3498.292608][T30623] RIP: 0010:__put_user_4+0x16/0x20 [ 3498.297780][T30623] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3498.317441][T30623] RSP: 0018:ffffc900036c7e40 EFLAGS: 00050293 [ 3498.323551][T30623] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3498.331543][T30623] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3498.339546][T30623] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3498.347662][T30623] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3498.355664][T30623] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3498.363657][T30623] ? __sys_socketpair+0xff/0x570 [ 3498.368622][T30623] __sys_socketpair+0x10b/0x570 [ 3498.373505][T30623] ? __ia32_sys_socket+0xb0/0xb0 [ 3498.378495][T30623] __x64_sys_socketpair+0x97/0x100 [ 3498.383663][T30623] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3498.389598][T30623] do_syscall_64+0x39/0xb0 [ 3498.394064][T30623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3498.400182][T30623] RIP: 0033:0x7f7e1f28c0c9 [ 3498.404628][T30623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3498.424528][T30623] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3498.432974][T30623] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3498.440993][T30623] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3498.449008][T30623] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3498.457026][T30623] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3498.465035][T30623] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3498.473025][T30623] [ 3498.478925][T30604] bridge4365: port 1(veth0_to_hsr) entered blocking state [ 3498.480905][T30623] memory: usage 307200kB, limit 307200kB, failcnt 1486 [ 3498.493103][T30623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3498.500721][T30623] Memory cgroup stats for /syz5: [ 3498.500992][T30623] anon 90112 [ 3498.500992][T30623] file 315392 [ 3498.500992][T30623] kernel 314167296 [ 3498.500992][T30623] kernel_stack 65536 [ 3498.500992][T30623] pagetables 77824 [ 3498.500992][T30623] sec_pagetables 0 [ 3498.500992][T30623] percpu 5436000 [ 3498.500992][T30623] sock 0 [ 3498.500992][T30623] vmalloc 8192 [ 3498.500992][T30623] shmem 315392 [ 3498.500992][T30623] zswap 0 [ 3498.500992][T30623] zswapped 0 [ 3498.500992][T30623] file_mapped 290816 [ 3498.500992][T30623] file_dirty 0 [ 3498.500992][T30623] file_writeback 0 [ 3498.500992][T30623] swapcached 0 [ 3498.500992][T30623] anon_thp 0 [ 3498.500992][T30623] file_thp 0 [ 3498.500992][T30623] shmem_thp 0 [ 3498.500992][T30623] inactive_anon 98304 [ 3498.500992][T30623] active_anon 307200 [ 3498.500992][T30623] inactive_file 0 [ 3498.500992][T30623] active_file 0 [ 3498.500992][T30623] unevictable 0 [ 3498.500992][T30623] slab_reclaimable 16792 [ 3498.500992][T30623] slab_unreclaimable 308521984 [ 3498.504629][T30604] bridge4365: port 1(veth0_to_hsr) entered disabled state 22:16:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3498.508168][T30623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30622,uid=0 [ 3498.625873][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3498.631932][T30623] Memory cgroup out of memory: Killed process 30622 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3498.707438][T30608] device bridge_slave_1 left promiscuous mode [ 3498.713086][T30628] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3498.717621][T30608] bridge3930: port 1(bridge_slave_1) entered disabled state [ 3498.731986][T30628] CPU: 1 PID: 30628 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3498.742627][T30628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3498.752698][T30628] Call Trace: [ 3498.755988][T30628] [ 3498.758930][T30628] dump_stack_lvl+0xd1/0x138 [ 3498.763554][T30628] dump_header+0x10b/0x85f [ 3498.767993][T30628] oom_kill_process.cold+0x10/0x15 [ 3498.773140][T30628] out_of_memory+0x35c/0x14a0 [ 3498.777854][T30628] ? find_held_lock+0x2d/0x110 [ 3498.782669][T30628] ? oom_killer_disable+0x280/0x280 [ 3498.787918][T30628] ? find_held_lock+0x2d/0x110 [ 3498.792725][T30628] mem_cgroup_out_of_memory+0x206/0x270 [ 3498.798306][T30628] ? mem_cgroup_margin+0x130/0x130 [ 3498.803450][T30628] ? lock_downgrade+0x6e0/0x6e0 [ 3498.808338][T30628] try_charge_memcg+0xefb/0x12f0 [ 3498.813304][T30628] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3498.819315][T30628] ? lock_downgrade+0x6e0/0x6e0 [ 3498.824197][T30628] charge_memcg+0x90/0x3b0 [ 3498.828638][T30628] __mem_cgroup_charge+0x2b/0x90 [ 3498.833685][T30628] ? copy_mc_to_kernel+0x3e/0x90 [ 3498.838649][T30628] do_wp_page+0x7ec/0x3370 [ 3498.843110][T30628] ? lock_release+0x810/0x810 [ 3498.847803][T30628] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3498.853201][T30628] ? do_raw_spin_lock+0x124/0x2b0 [ 3498.858246][T30628] ? rwlock_bug.part.0+0x90/0x90 [ 3498.863212][T30628] ? lock_chain_count+0x20/0x20 [ 3498.868087][T30628] __handle_mm_fault+0x1f58/0x3c90 [ 3498.873319][T30628] ? vm_iomap_memory+0x190/0x190 [ 3498.878326][T30628] handle_mm_fault+0x1b6/0x850 [ 3498.883145][T30628] do_user_addr_fault+0x475/0x1210 [ 3498.888308][T30628] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3498.894011][T30628] exc_page_fault+0x98/0x170 [ 3498.898645][T30628] asm_exc_page_fault+0x26/0x30 [ 3498.903521][T30628] RIP: 0033:0x7f7e1f236cc0 [ 3498.907951][T30628] Code: 0f 84 b4 00 00 00 80 3d 09 ea c9 00 00 75 1b 80 3d 01 ea c9 00 00 75 12 80 3d f3 e9 c9 00 00 0f 84 95 00 00 00 0f 1f 44 00 00 <41> c6 44 24 f8 01 45 89 6c 24 f4 41 c6 44 24 14 00 8b 93 8c 00 00 [ 3498.927581][T30628] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010202 [ 3498.933666][T30628] RAX: 0000000000000000 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3498.941650][T30628] RDX: 00007ffc49b30c30 RSI: ffff8081e0c54074 RDI: 00007ffc49b30c58 [ 3498.949634][T30628] RBP: 00007ffc49b30b78 R08: 0000000000000000 R09: 0000000000000000 [ 3498.957619][T30628] R10: 00007f7e1ee00010 R11: 00000000000aa168 R12: 00007f7e1f3abf8c [ 3498.965700][T30628] R13: 0000000000000000 R14: 00007f7e1f3abf80 R15: 00007ffc49b30d60 [ 3498.973702][T30628] [ 3499.006580][T30608] bridge3931: port 1(bridge_slave_1) entered blocking state [ 3499.014721][T30608] bridge3931: port 1(bridge_slave_1) entered disabled state [ 3499.024428][T30608] device bridge_slave_1 entered promiscuous mode [ 3499.042906][T30606] device bridge_slave_1 left promiscuous mode 22:16:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003e7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3499.050442][T30606] bridge4364: port 2(bridge_slave_1) entered disabled state [ 3499.052945][T30628] memory: usage 307200kB, limit 307200kB, failcnt 1538 [ 3499.074531][T30628] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3499.084196][T30628] Memory cgroup stats for /syz5: [ 3499.084448][T30628] anon 69632 [ 3499.084448][T30628] file 315392 [ 3499.084448][T30628] kernel 314118144 [ 3499.084448][T30628] kernel_stack 32768 [ 3499.084448][T30628] pagetables 69632 [ 3499.084448][T30628] sec_pagetables 0 [ 3499.084448][T30628] percpu 5436000 [ 3499.084448][T30628] sock 0 [ 3499.084448][T30628] vmalloc 8192 [ 3499.084448][T30628] shmem 315392 [ 3499.084448][T30628] zswap 0 [ 3499.084448][T30628] zswapped 0 [ 3499.084448][T30628] file_mapped 290816 [ 3499.084448][T30628] file_dirty 0 [ 3499.084448][T30628] file_writeback 0 [ 3499.084448][T30628] swapcached 0 [ 3499.084448][T30628] anon_thp 0 [ 3499.084448][T30628] file_thp 0 [ 3499.084448][T30628] shmem_thp 0 [ 3499.084448][T30628] inactive_anon 49152 [ 3499.084448][T30628] active_anon 307200 [ 3499.084448][T30628] inactive_file 0 [ 3499.084448][T30628] active_file 0 [ 3499.084448][T30628] unevictable 0 [ 3499.084448][T30628] slab_reclaimable 19752 [ 3499.084448][T30628] slab_unreclaimable 308514760 [ 3499.086172][T30606] bridge4365: port 2(bridge_slave_1) entered blocking state [ 3499.101260][T30628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3499.182627][T30606] bridge4365: port 2(bridge_slave_1) entered disabled state 22:16:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000006ced0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3499.205094][T30628] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30628,uid=0 [ 3499.210780][T30606] device bridge_slave_1 entered promiscuous mode [ 3499.217330][T30628] Memory cgroup out of memory: Killed process 30628 (syz-executor.5) total-vm:54408kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3499.323648][T30614] device veth0_to_hsr left promiscuous mode [ 3499.330728][T30614] bridge3672: port 1(veth0_to_hsr) entered disabled state [ 3499.341248][T30614] bridge3673: port 1(veth0_to_hsr) entered blocking state [ 3499.350622][T30614] bridge3673: port 1(veth0_to_hsr) entered disabled state [ 3499.364755][T30614] device veth0_to_hsr entered promiscuous mode [ 3499.381642][T30615] device bridge_slave_1 left promiscuous mode [ 3499.385906][T30634] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3499.388775][T30615] bridge3672: port 2(bridge_slave_1) entered disabled state [ 3499.407219][T30634] CPU: 1 PID: 30634 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3499.417687][T30634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3499.427955][T30634] Call Trace: [ 3499.431258][T30634] [ 3499.434220][T30634] dump_stack_lvl+0xd1/0x138 [ 3499.438941][T30634] dump_header+0x10b/0x85f [ 3499.443391][T30634] oom_kill_process.cold+0x10/0x15 [ 3499.448532][T30634] out_of_memory+0x35c/0x14a0 [ 3499.453246][T30634] ? find_held_lock+0x2d/0x110 [ 3499.458041][T30634] ? oom_killer_disable+0x280/0x280 [ 3499.463404][T30634] ? find_held_lock+0x2d/0x110 [ 3499.468288][T30634] mem_cgroup_out_of_memory+0x206/0x270 [ 3499.473863][T30634] ? mem_cgroup_margin+0x130/0x130 [ 3499.479000][T30634] ? lock_downgrade+0x6e0/0x6e0 [ 3499.483885][T30634] try_charge_memcg+0xefb/0x12f0 [ 3499.488852][T30634] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3499.494865][T30634] ? lock_downgrade+0x6e0/0x6e0 [ 3499.499752][T30634] charge_memcg+0x90/0x3b0 [ 3499.504193][T30634] __mem_cgroup_charge+0x2b/0x90 [ 3499.509173][T30634] ? copy_mc_to_kernel+0x3e/0x90 [ 3499.514148][T30634] do_wp_page+0x7ec/0x3370 [ 3499.518658][T30634] ? lock_release+0x810/0x810 [ 3499.523547][T30634] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3499.528959][T30634] ? do_raw_spin_lock+0x124/0x2b0 [ 3499.534010][T30634] ? rwlock_bug.part.0+0x90/0x90 [ 3499.538974][T30634] ? lock_chain_count+0x20/0x20 [ 3499.543860][T30634] __handle_mm_fault+0x1f58/0x3c90 [ 3499.549010][T30634] ? vm_iomap_memory+0x190/0x190 [ 3499.554021][T30634] handle_mm_fault+0x1b6/0x850 [ 3499.558817][T30634] do_user_addr_fault+0x475/0x1210 [ 3499.563965][T30634] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3499.569647][T30634] exc_page_fault+0x98/0x170 [ 3499.574353][T30634] asm_exc_page_fault+0x26/0x30 [ 3499.579405][T30634] RIP: 0033:0x7f7e1f236ede [ 3499.583835][T30634] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3499.603467][T30634] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3499.609556][T30634] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3499.617540][T30634] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3499.625525][T30634] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3499.633512][T30634] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3499.641497][T30634] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3499.649499][T30634] [ 3499.668686][T30634] memory: usage 307200kB, limit 307200kB, failcnt 1627 [ 3499.675639][T30615] bridge3673: port 2(bridge_slave_1) entered blocking state [ 3499.675714][T30615] bridge3673: port 2(bridge_slave_1) entered disabled state [ 3499.677233][T30615] device bridge_slave_1 entered promiscuous mode [ 3499.698111][T30634] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3499.706664][T30634] Memory cgroup stats for /syz5: [ 3499.706882][T30634] anon 81920 [ 3499.706882][T30634] file 315392 [ 3499.706882][T30634] kernel 314159104 [ 3499.706882][T30634] kernel_stack 65536 [ 3499.706882][T30634] pagetables 69632 [ 3499.706882][T30634] sec_pagetables 0 [ 3499.706882][T30634] percpu 5436000 [ 3499.706882][T30634] sock 0 [ 3499.706882][T30634] vmalloc 8192 [ 3499.706882][T30634] shmem 315392 [ 3499.706882][T30634] zswap 0 [ 3499.706882][T30634] zswapped 0 [ 3499.706882][T30634] file_mapped 290816 [ 3499.706882][T30634] file_dirty 0 [ 3499.706882][T30634] file_writeback 0 [ 3499.706882][T30634] swapcached 0 [ 3499.706882][T30634] anon_thp 0 [ 3499.706882][T30634] file_thp 0 [ 3499.706882][T30634] shmem_thp 0 [ 3499.706882][T30634] inactive_anon 49152 [ 3499.706882][T30634] active_anon 307200 22:16:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000003a020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3499.706882][T30634] inactive_file 0 [ 3499.706882][T30634] active_file 0 [ 3499.706882][T30634] unevictable 0 [ 3499.706882][T30634] slab_reclaimable 16792 [ 3499.706882][T30634] slab_unreclaimable 308524536 [ 3499.757963][T30620] device bridge_slave_1 left promiscuous mode [ 3499.814294][T30634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30634,uid=0 [ 3499.820701][T30620] bridge4282: port 2(bridge_slave_1) entered disabled state [ 3499.846983][T30634] Memory cgroup out of memory: Killed process 30634 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3499.866739][T30620] bridge4283: port 1(bridge_slave_1) entered blocking state [ 3499.874813][T30620] bridge4283: port 1(bridge_slave_1) entered disabled state 22:16:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000006ded0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000024200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3499.891577][T30620] device bridge_slave_1 entered promiscuous mode [ 3499.961491][T30626] bridge4247: port 1(veth0_to_hsr) entered disabled state [ 3499.981946][T30626] bridge4248: port 1(veth0_to_hsr) entered blocking state [ 3499.991865][T30626] bridge4248: port 1(veth0_to_hsr) entered disabled state [ 3500.016253][T30627] device bridge_slave_1 left promiscuous mode [ 3500.023542][T30627] bridge4247: port 2(bridge_slave_1) entered disabled state [ 3500.025690][T30643] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3500.046224][T30643] CPU: 0 PID: 30643 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3500.056712][T30643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3500.067059][T30643] Call Trace: [ 3500.070353][T30643] [ 3500.073318][T30643] dump_stack_lvl+0xd1/0x138 [ 3500.077966][T30643] dump_header+0x10b/0x85f [ 3500.082461][T30643] oom_kill_process.cold+0x10/0x15 [ 3500.087628][T30643] out_of_memory+0x35c/0x14a0 [ 3500.093154][T30643] ? find_held_lock+0x2d/0x110 [ 3500.097985][T30643] ? oom_killer_disable+0x280/0x280 [ 3500.103267][T30643] ? find_held_lock+0x2d/0x110 [ 3500.108243][T30643] mem_cgroup_out_of_memory+0x206/0x270 [ 3500.113823][T30643] ? mem_cgroup_margin+0x130/0x130 [ 3500.118961][T30643] ? lock_downgrade+0x6e0/0x6e0 [ 3500.123847][T30643] try_charge_memcg+0xefb/0x12f0 [ 3500.128816][T30643] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3500.134819][T30643] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3500.140575][T30643] ? lock_downgrade+0x6e0/0x6e0 [ 3500.146601][T30643] ? lock_downgrade+0x6e0/0x6e0 [ 3500.151502][T30643] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3500.157089][T30643] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3500.163278][T30643] copy_process+0x1359/0x7520 [ 3500.167990][T30643] ? __lock_acquire+0xbc3/0x56d0 [ 3500.172964][T30643] ? __cleanup_sighand+0xb0/0xb0 [ 3500.177929][T30643] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3500.183950][T30643] ? psi_memstall_leave+0x174/0x250 [ 3500.189269][T30643] kernel_clone+0xeb/0x990 [ 3500.193711][T30643] ? create_io_thread+0xf0/0xf0 [ 3500.198673][T30643] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3500.204951][T30643] ? lock_downgrade+0x6e0/0x6e0 [ 3500.209830][T30643] __do_sys_clone+0xba/0x100 [ 3500.214441][T30643] ? kernel_clone+0x990/0x990 [ 3500.219155][T30643] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3500.225083][T30643] do_syscall_64+0x39/0xb0 [ 3500.229514][T30643] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3500.235429][T30643] RIP: 0033:0x7f7e1f28d4f1 [ 3500.239859][T30643] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3500.259501][T30643] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3500.267936][T30643] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3500.275951][T30643] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3500.283957][T30643] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3500.291964][T30643] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3500.299963][T30643] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3500.308067][T30643] [ 3500.320944][T30643] memory: usage 307176kB, limit 307200kB, failcnt 1716 [ 3500.327902][T30643] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3500.356571][T30627] bridge4248: port 2(bridge_slave_1) entered blocking state [ 3500.364206][T30627] bridge4248: port 2(bridge_slave_1) entered disabled state [ 3500.372133][T30643] Memory cgroup stats for /syz5: [ 3500.372370][T30643] anon 81920 [ 3500.372370][T30643] file 315392 [ 3500.372370][T30643] kernel 314150912 [ 3500.372370][T30643] kernel_stack 32768 [ 3500.372370][T30643] pagetables 69632 [ 3500.372370][T30643] sec_pagetables 0 [ 3500.372370][T30643] percpu 5436000 [ 3500.372370][T30643] sock 0 [ 3500.372370][T30643] vmalloc 8192 [ 3500.372370][T30643] shmem 315392 [ 3500.372370][T30643] zswap 0 [ 3500.372370][T30643] zswapped 0 [ 3500.372370][T30643] file_mapped 290816 [ 3500.372370][T30643] file_dirty 0 [ 3500.372370][T30643] file_writeback 0 [ 3500.372370][T30643] swapcached 0 [ 3500.372370][T30643] anon_thp 0 [ 3500.372370][T30643] file_thp 0 [ 3500.372370][T30643] shmem_thp 0 [ 3500.372370][T30643] inactive_anon 86016 [ 3500.372370][T30643] active_anon 307200 [ 3500.372370][T30643] inactive_file 0 [ 3500.372370][T30643] active_file 0 [ 3500.372370][T30643] unevictable 0 [ 3500.372370][T30643] slab_reclaimable 16792 [ 3500.372370][T30643] slab_unreclaimable 308521520 22:16:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000009a0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3500.373756][T30627] device bridge_slave_1 entered promiscuous mode [ 3500.377774][T30643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3500.478191][T30630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3500.495200][T30643] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30643,uid=0 22:16:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000006eed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3500.529369][T30643] Memory cgroup out of memory: Killed process 30643 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3500.627651][T30633] device bridge_slave_1 left promiscuous mode [ 3500.634800][T30633] bridge3931: port 1(bridge_slave_1) entered disabled state [ 3500.644797][T30652] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3500.656111][T30652] CPU: 0 PID: 30652 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3500.666576][T30652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3500.676681][T30652] Call Trace: [ 3500.679993][T30652] [ 3500.682947][T30652] dump_stack_lvl+0xd1/0x138 [ 3500.685316][T30633] bridge3932: port 1(bridge_slave_1) entered blocking state [ 3500.687556][T30652] dump_header+0x10b/0x85f [ 3500.687597][T30652] oom_kill_process.cold+0x10/0x15 [ 3500.687631][T30652] out_of_memory+0x35c/0x14a0 [ 3500.705569][T30633] bridge3932: port 1(bridge_slave_1) entered disabled state [ 3500.709105][T30652] ? find_held_lock+0x2d/0x110 [ 3500.709155][T30652] ? oom_killer_disable+0x280/0x280 [ 3500.709201][T30652] ? find_held_lock+0x2d/0x110 [ 3500.709242][T30652] mem_cgroup_out_of_memory+0x206/0x270 [ 3500.709281][T30652] ? mem_cgroup_margin+0x130/0x130 [ 3500.709315][T30652] ? lock_downgrade+0x6e0/0x6e0 [ 3500.709358][T30652] try_charge_memcg+0xefb/0x12f0 [ 3500.709395][T30652] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3500.709424][T30652] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3500.709473][T30652] ? lock_downgrade+0x6e0/0x6e0 [ 3500.709504][T30652] ? lock_downgrade+0x6e0/0x6e0 [ 3500.709546][T30652] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3500.709579][T30652] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3500.709617][T30652] copy_process+0x4e3/0x7520 [ 3500.709648][T30652] ? __lock_acquire+0xbc3/0x56d0 [ 3500.709688][T30652] ? __cleanup_sighand+0xb0/0xb0 [ 3500.709715][T30652] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3500.709746][T30652] ? psi_memstall_leave+0x174/0x250 [ 3500.709789][T30652] kernel_clone+0xeb/0x990 [ 3500.709824][T30652] ? create_io_thread+0xf0/0xf0 [ 3500.709857][T30652] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 22:16:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000003f7a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3500.733855][T30633] device bridge_slave_1 entered promiscuous mode [ 3500.737409][T30652] ? lock_downgrade+0x6e0/0x6e0 [ 3500.737464][T30652] __do_sys_clone+0xba/0x100 [ 3500.837890][T30635] bridge4365: port 1(veth0_to_hsr) entered disabled state [ 3500.838527][T30652] ? kernel_clone+0x990/0x990 [ 3500.838586][T30652] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3500.860996][T30652] do_syscall_64+0x39/0xb0 [ 3500.865461][T30652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3500.871410][T30652] RIP: 0033:0x7f7e1f28d4f1 [ 3500.875874][T30652] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3500.895535][T30652] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3500.904085][T30652] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3500.912186][T30652] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3500.920202][T30652] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3500.928203][T30652] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3500.936196][T30652] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3500.944242][T30652] [ 3500.951223][T30635] bridge4366: port 1(veth0_to_hsr) entered blocking state [ 3500.954941][T30652] memory: usage 307172kB, limit 307200kB, failcnt 1799 [ 3500.967061][T30652] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3500.974476][T30652] Memory cgroup stats for /syz5: [ 3500.974728][T30652] anon 81920 [ 3500.974728][T30652] file 315392 [ 3500.974728][T30652] kernel 314146816 [ 3500.974728][T30652] kernel_stack 32768 [ 3500.974728][T30652] pagetables 69632 [ 3500.974728][T30652] sec_pagetables 0 [ 3500.974728][T30652] percpu 5436000 [ 3500.974728][T30652] sock 0 [ 3500.974728][T30652] vmalloc 8192 [ 3500.974728][T30652] shmem 315392 [ 3500.974728][T30652] zswap 0 [ 3500.974728][T30652] zswapped 0 [ 3500.974728][T30652] file_mapped 290816 [ 3500.974728][T30652] file_dirty 0 [ 3500.974728][T30652] file_writeback 0 [ 3500.974728][T30652] swapcached 0 [ 3500.974728][T30652] anon_thp 0 [ 3500.974728][T30652] file_thp 0 [ 3500.974728][T30652] shmem_thp 0 [ 3500.974728][T30652] inactive_anon 81920 [ 3500.974728][T30652] active_anon 307200 [ 3500.974728][T30652] inactive_file 0 [ 3500.974728][T30652] active_file 0 [ 3500.974728][T30652] unevictable 0 [ 3500.974728][T30652] slab_reclaimable 16792 [ 3500.974728][T30652] slab_unreclaimable 308521824 [ 3500.984555][T30635] bridge4366: port 1(veth0_to_hsr) entered disabled state 22:16:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000006fed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3501.073085][T30652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30652,uid=0 [ 3501.094479][T30652] Memory cgroup out of memory: Killed process 30652 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3501.145230][T30637] device bridge_slave_1 left promiscuous mode [ 3501.154613][T30637] bridge4365: port 2(bridge_slave_1) entered disabled state [ 3501.188725][T30637] bridge4366: port 2(bridge_slave_1) entered blocking state [ 3501.206728][T30661] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3501.207268][T30637] bridge4366: port 2(bridge_slave_1) entered disabled state [ 3501.219784][T30661] CPU: 0 PID: 30661 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3501.234890][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3501.244960][T30661] Call Trace: [ 3501.248246][T30661] [ 3501.251190][T30661] dump_stack_lvl+0xd1/0x138 [ 3501.255816][T30661] dump_header+0x10b/0x85f [ 3501.260254][T30661] oom_kill_process.cold+0x10/0x15 [ 3501.265412][T30661] out_of_memory+0x35c/0x14a0 [ 3501.270202][T30661] ? find_held_lock+0x2d/0x110 [ 3501.275004][T30661] ? oom_killer_disable+0x280/0x280 [ 3501.280242][T30661] ? find_held_lock+0x2d/0x110 [ 3501.285041][T30661] mem_cgroup_out_of_memory+0x206/0x270 [ 3501.290621][T30661] ? mem_cgroup_margin+0x130/0x130 [ 3501.295761][T30661] ? lock_downgrade+0x6e0/0x6e0 [ 3501.300661][T30661] try_charge_memcg+0xefb/0x12f0 [ 3501.305660][T30661] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3501.311673][T30661] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3501.317459][T30661] ? lock_downgrade+0x6e0/0x6e0 [ 3501.322431][T30661] ? lock_downgrade+0x6e0/0x6e0 [ 3501.327327][T30661] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3501.332986][T30661] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3501.339275][T30661] copy_process+0x4e3/0x7520 [ 3501.343901][T30661] ? page_remove_rmap+0x435/0x1210 [ 3501.349046][T30661] ? folio_flags.constprop.0+0x53/0x150 [ 3501.354621][T30661] ? put_page+0xd9/0x280 [ 3501.358890][T30661] ? do_wp_page+0x844/0x3370 [ 3501.363518][T30661] ? __cleanup_sighand+0xb0/0xb0 [ 3501.368474][T30661] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3501.373875][T30661] ? rwlock_bug.part.0+0x90/0x90 [ 3501.378832][T30661] ? lock_chain_count+0x20/0x20 [ 3501.383703][T30661] kernel_clone+0xeb/0x990 [ 3501.388148][T30661] ? create_io_thread+0xf0/0xf0 [ 3501.393032][T30661] ? find_held_lock+0x2d/0x110 [ 3501.397836][T30661] __do_sys_clone+0xba/0x100 [ 3501.402463][T30661] ? kernel_clone+0x990/0x990 [ 3501.407174][T30661] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3501.413096][T30661] do_syscall_64+0x39/0xb0 [ 3501.417551][T30661] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3501.423483][T30661] RIP: 0033:0x7f7e1f28d4f1 [ 3501.428022][T30661] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3501.447846][T30661] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3501.456284][T30661] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3501.464269][T30661] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3501.472251][T30661] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3501.480230][T30661] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3501.488299][T30661] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3501.496300][T30661] [ 3501.501942][T30637] device bridge_slave_1 entered promiscuous mode [ 3501.505482][T30661] memory: usage 307180kB, limit 307200kB, failcnt 1884 [ 3501.522158][T30661] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3501.529723][T30661] Memory cgroup stats for /syz5: [ 3501.529937][T30661] anon 81920 [ 3501.529937][T30661] file 315392 [ 3501.529937][T30661] kernel 314146816 [ 3501.529937][T30661] kernel_stack 32768 [ 3501.529937][T30661] pagetables 69632 [ 3501.529937][T30661] sec_pagetables 0 [ 3501.529937][T30661] percpu 5436000 [ 3501.529937][T30661] sock 0 [ 3501.529937][T30661] vmalloc 8192 [ 3501.529937][T30661] shmem 315392 [ 3501.529937][T30661] zswap 0 [ 3501.529937][T30661] zswapped 0 [ 3501.529937][T30661] file_mapped 290816 [ 3501.529937][T30661] file_dirty 0 [ 3501.529937][T30661] file_writeback 0 [ 3501.529937][T30661] swapcached 0 [ 3501.529937][T30661] anon_thp 0 [ 3501.529937][T30661] file_thp 0 [ 3501.529937][T30661] shmem_thp 0 [ 3501.529937][T30661] inactive_anon 65536 [ 3501.529937][T30661] active_anon 307200 [ 3501.529937][T30661] inactive_file 0 [ 3501.529937][T30661] active_file 0 [ 3501.529937][T30661] unevictable 0 [ 3501.529937][T30661] slab_reclaimable 16792 [ 3501.529937][T30661] slab_unreclaimable 308524072 [ 3501.611854][T30641] device veth0_to_hsr left promiscuous mode 22:16:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000006e902", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 22:16:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000070ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3501.628383][T30661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30661,uid=0 [ 3501.648487][T30661] Memory cgroup out of memory: Killed process 30661 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3501.658464][T30641] bridge3673: port 1(veth0_to_hsr) entered disabled state [ 3501.688607][T30641] bridge3674: port 1(veth0_to_hsr) entered blocking state [ 3501.696217][T30641] bridge3674: port 1(veth0_to_hsr) entered disabled state [ 3501.709050][T30641] device veth0_to_hsr entered promiscuous mode [ 3501.775531][T30665] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3501.787333][T30665] CPU: 1 PID: 30665 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3501.794503][T30645] device bridge_slave_1 left promiscuous mode [ 3501.797777][T30665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3501.797797][T30665] Call Trace: [ 3501.797807][T30665] [ 3501.797819][T30665] dump_stack_lvl+0xd1/0x138 [ 3501.804863][T30645] bridge3673: port 2(bridge_slave_1) entered disabled state [ 3501.813991][T30665] dump_header+0x10b/0x85f [ 3501.814033][T30665] oom_kill_process.cold+0x10/0x15 [ 3501.814068][T30665] out_of_memory+0x35c/0x14a0 [ 3501.814112][T30665] ? find_held_lock+0x2d/0x110 [ 3501.814152][T30665] ? oom_killer_disable+0x280/0x280 [ 3501.856331][T30665] ? find_held_lock+0x2d/0x110 [ 3501.861112][T30665] mem_cgroup_out_of_memory+0x206/0x270 [ 3501.866666][T30665] ? mem_cgroup_margin+0x130/0x130 [ 3501.871780][T30665] ? lock_downgrade+0x6e0/0x6e0 [ 3501.876635][T30665] try_charge_memcg+0xefb/0x12f0 [ 3501.881597][T30665] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3501.887592][T30665] ? lock_downgrade+0x6e0/0x6e0 [ 3501.892476][T30665] charge_memcg+0x90/0x3b0 [ 3501.896940][T30665] __mem_cgroup_charge+0x2b/0x90 [ 3501.901918][T30665] ? copy_mc_to_kernel+0x3e/0x90 [ 3501.906911][T30665] do_wp_page+0x7ec/0x3370 [ 3501.911340][T30665] ? lock_release+0x810/0x810 [ 3501.916361][T30665] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3501.921753][T30665] ? do_raw_spin_lock+0x124/0x2b0 [ 3501.926809][T30665] ? rwlock_bug.part.0+0x90/0x90 [ 3501.931750][T30665] ? lock_chain_count+0x20/0x20 [ 3501.936607][T30665] __handle_mm_fault+0x1f58/0x3c90 [ 3501.941750][T30665] ? vm_iomap_memory+0x190/0x190 [ 3501.946773][T30665] handle_mm_fault+0x1b6/0x850 [ 3501.951582][T30665] do_user_addr_fault+0x475/0x1210 [ 3501.956785][T30665] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3501.962351][T30665] exc_page_fault+0x98/0x170 [ 3501.966946][T30665] asm_exc_page_fault+0x26/0x30 [ 3501.971796][T30665] RIP: 0033:0x7f7e1f236ede [ 3501.976222][T30665] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3501.995859][T30665] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3502.001951][T30665] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3502.009934][T30665] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3502.017924][T30665] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3502.025897][T30665] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3502.033863][T30665] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3502.041874][T30665] [ 3502.051071][T30665] memory: usage 307192kB, limit 307200kB, failcnt 1971 [ 3502.058321][T30665] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3502.065438][T30665] Memory cgroup stats for /syz5: [ 3502.065676][T30665] anon 81920 [ 3502.065676][T30665] file 315392 [ 3502.065676][T30665] kernel 314163200 [ 3502.065676][T30665] kernel_stack 65536 [ 3502.065676][T30665] pagetables 69632 [ 3502.065676][T30665] sec_pagetables 0 [ 3502.065676][T30665] percpu 5436000 [ 3502.065676][T30665] sock 0 [ 3502.065676][T30665] vmalloc 8192 [ 3502.065676][T30665] shmem 315392 [ 3502.065676][T30665] zswap 0 [ 3502.065676][T30665] zswapped 0 [ 3502.065676][T30665] file_mapped 290816 [ 3502.065676][T30665] file_dirty 0 [ 3502.065676][T30665] file_writeback 0 [ 3502.065676][T30665] swapcached 0 [ 3502.065676][T30665] anon_thp 0 [ 3502.065676][T30665] file_thp 0 [ 3502.065676][T30665] shmem_thp 0 [ 3502.065676][T30665] inactive_anon 49152 [ 3502.065676][T30665] active_anon 307200 [ 3502.065676][T30665] inactive_file 0 [ 3502.065676][T30665] active_file 0 [ 3502.065676][T30665] unevictable 0 [ 3502.065676][T30665] slab_reclaimable 16792 [ 3502.065676][T30665] slab_unreclaimable 308524536 [ 3502.067874][T30645] bridge3674: port 2(bridge_slave_1) entered blocking state [ 3502.070934][T30665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3502.173574][T30645] bridge3674: port 2(bridge_slave_1) entered disabled state [ 3502.181594][T30665] ,cpuset= [ 3502.191564][T30645] device bridge_slave_1 entered promiscuous mode [ 3502.201192][T30665] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30665,uid=0 22:16:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000052020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000071ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3502.218558][T30665] Memory cgroup out of memory: Killed process 30665 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3502.234287][T30646] bridge4282: port 1(veth0_to_hsr) entered disabled state [ 3502.272714][T30646] bridge4284: port 1(veth0_to_hsr) entered blocking state [ 3502.294270][T30646] bridge4284: port 1(veth0_to_hsr) entered disabled state [ 3502.334585][T30647] device bridge_slave_1 left promiscuous mode [ 3502.341457][T30647] bridge4283: port 1(bridge_slave_1) entered disabled state [ 3502.343356][T30672] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3502.359451][T30672] CPU: 0 PID: 30672 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3502.369924][T30672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3502.380010][T30672] Call Trace: [ 3502.383325][T30672] [ 3502.386269][T30672] dump_stack_lvl+0xd1/0x138 [ 3502.390890][T30672] dump_header+0x10b/0x85f [ 3502.395356][T30672] oom_kill_process.cold+0x10/0x15 [ 3502.400613][T30672] out_of_memory+0x35c/0x14a0 [ 3502.405445][T30672] ? find_held_lock+0x2d/0x110 [ 3502.410260][T30672] ? oom_killer_disable+0x280/0x280 [ 3502.415590][T30672] ? find_held_lock+0x2d/0x110 [ 3502.420385][T30672] mem_cgroup_out_of_memory+0x206/0x270 [ 3502.425987][T30672] ? mem_cgroup_margin+0x130/0x130 [ 3502.431149][T30672] ? lock_downgrade+0x6e0/0x6e0 [ 3502.436032][T30672] try_charge_memcg+0xefb/0x12f0 [ 3502.441017][T30672] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3502.447040][T30672] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3502.452823][T30672] ? lock_downgrade+0x6e0/0x6e0 [ 3502.457722][T30672] ? lock_downgrade+0x6e0/0x6e0 [ 3502.462981][T30672] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3502.468587][T30672] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3502.475057][T30672] copy_process+0x1359/0x7520 [ 3502.479761][T30672] ? __lock_acquire+0xbc3/0x56d0 [ 3502.484755][T30672] ? __cleanup_sighand+0xb0/0xb0 [ 3502.489735][T30672] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3502.495760][T30672] ? psi_memstall_leave+0x174/0x250 [ 3502.501055][T30672] kernel_clone+0xeb/0x990 [ 3502.505524][T30672] ? create_io_thread+0xf0/0xf0 [ 3502.510430][T30672] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3502.516716][T30672] ? lock_downgrade+0x6e0/0x6e0 [ 3502.521603][T30672] __do_sys_clone+0xba/0x100 [ 3502.526233][T30672] ? kernel_clone+0x990/0x990 [ 3502.530957][T30672] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3502.536891][T30672] do_syscall_64+0x39/0xb0 [ 3502.541322][T30672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3502.547255][T30672] RIP: 0033:0x7f7e1f28d4f1 [ 3502.551703][T30672] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3502.571355][T30672] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3502.579814][T30672] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3502.587827][T30672] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3502.595827][T30672] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3502.603821][T30672] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3502.611838][T30672] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3502.619872][T30672] [ 3502.635118][T30672] memory: usage 307188kB, limit 307200kB, failcnt 2050 [ 3502.642162][T30672] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3502.646351][T30647] bridge4284: port 2(bridge_slave_1) entered blocking state [ 3502.649022][T30672] Memory cgroup stats for /syz5: [ 3502.649394][T30672] anon 81920 [ 3502.649394][T30672] file 315392 [ 3502.649394][T30672] kernel 314146816 [ 3502.649394][T30672] kernel_stack 32768 [ 3502.649394][T30672] pagetables 69632 [ 3502.649394][T30672] sec_pagetables 0 [ 3502.649394][T30672] percpu 5436000 [ 3502.649394][T30672] sock 0 [ 3502.649394][T30672] vmalloc 8192 [ 3502.649394][T30672] shmem 315392 [ 3502.649394][T30672] zswap 0 [ 3502.649394][T30672] zswapped 0 [ 3502.649394][T30672] file_mapped 290816 [ 3502.649394][T30672] file_dirty 0 [ 3502.649394][T30672] file_writeback 0 [ 3502.649394][T30672] swapcached 0 [ 3502.649394][T30672] anon_thp 0 [ 3502.649394][T30672] file_thp 0 [ 3502.649394][T30672] shmem_thp 0 [ 3502.649394][T30672] inactive_anon 49152 [ 3502.649394][T30672] active_anon 307200 [ 3502.649394][T30672] inactive_file 0 [ 3502.649394][T30672] active_file 0 [ 3502.649394][T30672] unevictable 0 [ 3502.649394][T30672] slab_reclaimable 16792 [ 3502.649394][T30672] slab_unreclaimable 308521824 [ 3502.727324][T30647] bridge4284: port 2(bridge_slave_1) entered disabled state [ 3502.753839][T30672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30672,uid=0 22:16:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000072ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000114200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3502.773813][T30672] Memory cgroup out of memory: Killed process 30672 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3502.783640][T30647] device bridge_slave_1 entered promiscuous mode [ 3502.868609][T30653] bridge4248: port 1(veth0_to_hsr) entered disabled state [ 3502.891895][T30653] bridge4249: port 1(veth0_to_hsr) entered blocking state [ 3502.900327][T30653] bridge4249: port 1(veth0_to_hsr) entered disabled state 22:16:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000a20200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3502.915285][T30676] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3502.929690][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3502.952435][T30676] CPU: 1 PID: 30676 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3502.962922][T30676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3502.973013][T30676] Call Trace: [ 3502.976314][T30676] [ 3502.979269][T30676] dump_stack_lvl+0xd1/0x138 [ 3502.983917][T30676] dump_header+0x10b/0x85f [ 3502.988380][T30676] oom_kill_process.cold+0x10/0x15 [ 3502.993548][T30676] out_of_memory+0x35c/0x14a0 [ 3502.998286][T30676] ? find_held_lock+0x2d/0x110 [ 3503.003105][T30676] ? oom_killer_disable+0x280/0x280 [ 3503.008363][T30676] ? find_held_lock+0x2d/0x110 [ 3503.013179][T30676] mem_cgroup_out_of_memory+0x206/0x270 [ 3503.018785][T30676] ? mem_cgroup_margin+0x130/0x130 [ 3503.019415][T30659] device bridge_slave_1 left promiscuous mode [ 3503.023914][T30676] ? lock_downgrade+0x6e0/0x6e0 [ 3503.023968][T30676] try_charge_memcg+0xefb/0x12f0 [ 3503.024009][T30676] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3503.031044][T30659] bridge3932: port 1(bridge_slave_1) entered disabled state [ 3503.034925][T30676] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3503.034977][T30676] ? lock_downgrade+0x6e0/0x6e0 [ 3503.035010][T30676] ? lock_downgrade+0x6e0/0x6e0 [ 3503.035051][T30676] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3503.074148][T30676] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3503.080336][T30676] copy_process+0x4e3/0x7520 [ 3503.084963][T30676] ? __lock_acquire+0xbc3/0x56d0 [ 3503.089919][T30676] ? __cleanup_sighand+0xb0/0xb0 [ 3503.094874][T30676] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3503.100899][T30676] ? psi_memstall_leave+0x174/0x250 [ 3503.106141][T30676] kernel_clone+0xeb/0x990 [ 3503.110593][T30676] ? create_io_thread+0xf0/0xf0 [ 3503.115453][T30676] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3503.121736][T30676] ? lock_downgrade+0x6e0/0x6e0 [ 3503.126795][T30676] __do_sys_clone+0xba/0x100 [ 3503.131400][T30676] ? kernel_clone+0x990/0x990 [ 3503.136290][T30676] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3503.142196][T30676] do_syscall_64+0x39/0xb0 [ 3503.146610][T30676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3503.152523][T30676] RIP: 0033:0x7f7e1f28d4f1 [ 3503.156974][T30676] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3503.176613][T30676] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3503.185049][T30676] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3503.193047][T30676] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3503.201033][T30676] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3503.209017][T30676] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3503.217001][T30676] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3503.224994][T30676] [ 3503.233248][T30676] memory: usage 307200kB, limit 307200kB, failcnt 2129 [ 3503.240304][T30676] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3503.247255][T30676] Memory cgroup stats for /syz5: [ 3503.247452][T30676] anon 81920 [ 3503.247452][T30676] file 315392 [ 3503.247452][T30676] kernel 314146816 [ 3503.247452][T30676] kernel_stack 32768 [ 3503.247452][T30676] pagetables 69632 [ 3503.247452][T30676] sec_pagetables 0 [ 3503.247452][T30676] percpu 5436000 [ 3503.247452][T30676] sock 0 [ 3503.247452][T30676] vmalloc 8192 [ 3503.247452][T30676] shmem 315392 [ 3503.247452][T30676] zswap 0 [ 3503.247452][T30676] zswapped 0 [ 3503.247452][T30676] file_mapped 290816 [ 3503.247452][T30676] file_dirty 0 [ 3503.247452][T30676] file_writeback 0 [ 3503.247452][T30676] swapcached 0 [ 3503.247452][T30676] anon_thp 0 [ 3503.247452][T30676] file_thp 0 [ 3503.247452][T30676] shmem_thp 0 [ 3503.247452][T30676] inactive_anon 69632 [ 3503.247452][T30676] active_anon 307200 [ 3503.247452][T30676] inactive_file 0 [ 3503.247452][T30676] active_file 0 [ 3503.247452][T30676] unevictable 0 [ 3503.247452][T30676] slab_reclaimable 16792 [ 3503.247452][T30676] slab_unreclaimable 308522472 [ 3503.265315][T30659] bridge3933: port 1(bridge_slave_1) entered blocking state [ 3503.349411][T30676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg= 22:16:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000407a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3503.353232][T30659] bridge3933: port 1(bridge_slave_1) entered disabled state [ 3503.356364][T30676] /syz5 [ 3503.368602][T30659] device bridge_slave_1 entered promiscuous mode [ 3503.395517][T30676] ,task=syz-executor.5,pid=30676,uid=0 22:16:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000073ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3503.415265][T30676] Memory cgroup out of memory: Killed process 30676 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3503.476588][T30666] bridge4366: port 1(veth0_to_hsr) entered disabled state [ 3503.493069][T30666] bridge4367: port 1(veth0_to_hsr) entered blocking state [ 3503.509856][T30666] bridge4367: port 1(veth0_to_hsr) entered disabled state [ 3503.542678][T30688] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3503.545033][T30668] device bridge_slave_1 left promiscuous mode [ 3503.554004][T30688] CPU: 1 PID: 30688 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3503.568398][T30668] bridge4366: port 2(bridge_slave_1) entered disabled state [ 3503.569962][T30688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3503.569981][T30688] Call Trace: [ 3503.569990][T30688] [ 3503.570001][T30688] dump_stack_lvl+0xd1/0x138 [ 3503.570043][T30688] dump_header+0x10b/0x85f [ 3503.570084][T30688] oom_kill_process.cold+0x10/0x15 [ 3503.570118][T30688] out_of_memory+0x35c/0x14a0 [ 3503.612601][T30688] ? find_held_lock+0x2d/0x110 [ 3503.617384][T30688] ? oom_killer_disable+0x280/0x280 [ 3503.622625][T30688] ? find_held_lock+0x2d/0x110 [ 3503.627400][T30688] mem_cgroup_out_of_memory+0x206/0x270 [ 3503.632953][T30688] ? mem_cgroup_margin+0x130/0x130 [ 3503.638069][T30688] ? lock_downgrade+0x6e0/0x6e0 [ 3503.642928][T30688] try_charge_memcg+0xefb/0x12f0 [ 3503.647883][T30688] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3503.653903][T30688] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3503.659765][T30688] ? lock_downgrade+0x6e0/0x6e0 [ 3503.664654][T30688] ? lock_downgrade+0x6e0/0x6e0 [ 3503.669539][T30688] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3503.675089][T30688] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3503.681249][T30688] copy_process+0x4e3/0x7520 [ 3503.685858][T30688] ? __lock_acquire+0xbc3/0x56d0 [ 3503.690809][T30688] ? __cleanup_sighand+0xb0/0xb0 [ 3503.695765][T30688] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3503.701857][T30688] ? psi_memstall_leave+0x174/0x250 [ 3503.707110][T30688] kernel_clone+0xeb/0x990 [ 3503.711572][T30688] ? create_io_thread+0xf0/0xf0 [ 3503.716464][T30688] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3503.722771][T30688] ? lock_downgrade+0x6e0/0x6e0 [ 3503.727882][T30688] __do_sys_clone+0xba/0x100 [ 3503.732679][T30688] ? kernel_clone+0x990/0x990 [ 3503.737390][T30688] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3503.743319][T30688] do_syscall_64+0x39/0xb0 [ 3503.747756][T30688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3503.753771][T30688] RIP: 0033:0x7f7e1f28d4f1 [ 3503.758300][T30688] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3503.778468][T30688] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3503.786915][T30688] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3503.794903][T30688] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3503.802891][T30688] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3503.810884][T30688] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3503.818869][T30688] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3503.826890][T30688] [ 3503.836118][T30688] memory: usage 307188kB, limit 307200kB, failcnt 2239 [ 3503.844206][T30688] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3503.851341][T30688] Memory cgroup stats for /syz5: [ 3503.851572][T30688] anon 81920 [ 3503.851572][T30688] file 315392 [ 3503.851572][T30688] kernel 314155008 [ 3503.851572][T30688] kernel_stack 32768 [ 3503.851572][T30688] pagetables 69632 [ 3503.851572][T30688] sec_pagetables 0 [ 3503.851572][T30688] percpu 5436000 [ 3503.851572][T30688] sock 0 [ 3503.851572][T30688] vmalloc 8192 [ 3503.851572][T30688] shmem 315392 [ 3503.851572][T30688] zswap 0 [ 3503.851572][T30688] zswapped 0 [ 3503.851572][T30688] file_mapped 290816 [ 3503.851572][T30688] file_dirty 0 [ 3503.851572][T30688] file_writeback 0 [ 3503.851572][T30688] swapcached 0 [ 3503.851572][T30688] anon_thp 0 [ 3503.851572][T30688] file_thp 0 [ 3503.851572][T30688] shmem_thp 0 [ 3503.851572][T30688] inactive_anon 73728 [ 3503.851572][T30688] active_anon 307200 [ 3503.851572][T30688] inactive_file 0 [ 3503.851572][T30688] active_file 0 [ 3503.851572][T30688] unevictable 0 [ 3503.851572][T30688] slab_reclaimable 16792 [ 3503.851572][T30688] slab_unreclaimable 308521824 [ 3503.950818][T30668] bridge4367: port 2(bridge_slave_1) entered blocking state [ 3503.951565][T30688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30688,uid=0 [ 3503.964827][T30668] bridge4367: port 2(bridge_slave_1) entered disabled state [ 3503.976745][T30688] Memory cgroup out of memory: Killed process 30688 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000074ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3504.004179][T30668] device bridge_slave_1 entered promiscuous mode [ 3504.088244][T30691] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3504.098952][T30691] CPU: 0 PID: 30691 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3504.109426][T30691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3504.119785][T30691] Call Trace: [ 3504.123085][T30691] [ 3504.126035][T30691] dump_stack_lvl+0xd1/0x138 [ 3504.128987][T30673] device veth0_to_hsr left promiscuous mode [ 3504.130647][T30691] dump_header+0x10b/0x85f [ 3504.130685][T30691] oom_kill_process.cold+0x10/0x15 [ 3504.130720][T30691] out_of_memory+0x35c/0x14a0 [ 3504.130767][T30691] ? find_held_lock+0x2d/0x110 [ 3504.130808][T30691] ? oom_killer_disable+0x280/0x280 [ 3504.130852][T30691] ? find_held_lock+0x2d/0x110 [ 3504.130892][T30691] mem_cgroup_out_of_memory+0x206/0x270 [ 3504.148086][T30673] bridge3674: port 1(veth0_to_hsr) entered disabled state [ 3504.150973][T30691] ? mem_cgroup_margin+0x130/0x130 [ 3504.151019][T30691] ? lock_downgrade+0x6e0/0x6e0 [ 3504.151062][T30691] try_charge_memcg+0xefb/0x12f0 [ 3504.151100][T30691] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3504.199625][T30691] ? lock_downgrade+0x6e0/0x6e0 [ 3504.204539][T30691] charge_memcg+0x90/0x3b0 [ 3504.208984][T30691] __mem_cgroup_charge+0x2b/0x90 [ 3504.213927][T30691] ? copy_mc_to_kernel+0x3e/0x90 [ 3504.219312][T30691] do_wp_page+0x7ec/0x3370 [ 3504.223781][T30691] ? lock_release+0x810/0x810 [ 3504.228490][T30691] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3504.233908][T30691] ? do_raw_spin_lock+0x124/0x2b0 [ 3504.239046][T30691] ? rwlock_bug.part.0+0x90/0x90 [ 3504.244026][T30691] ? lock_chain_count+0x20/0x20 [ 3504.248905][T30691] __handle_mm_fault+0x1f58/0x3c90 [ 3504.254032][T30691] ? vm_iomap_memory+0x190/0x190 [ 3504.258992][T30691] handle_mm_fault+0x1b6/0x850 [ 3504.263788][T30691] do_user_addr_fault+0x475/0x1210 [ 3504.269209][T30691] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3504.274796][T30691] exc_page_fault+0x98/0x170 [ 3504.279405][T30691] asm_exc_page_fault+0x26/0x30 [ 3504.284368][T30691] RIP: 0033:0x7f7e1f236ede [ 3504.288854][T30691] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3504.308503][T30691] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3504.314597][T30691] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3504.322612][T30691] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3504.330651][T30691] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3504.338662][T30691] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3504.346848][T30691] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3504.354858][T30691] [ 3504.363261][T30673] bridge3675: port 1(veth0_to_hsr) entered blocking state [ 3504.363369][T30691] memory: usage 307188kB, limit 307200kB, failcnt 2311 [ 3504.377774][T30691] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3504.385012][T30673] bridge3675: port 1(veth0_to_hsr) entered disabled state [ 3504.392595][T30691] Memory cgroup stats for /syz5: [ 3504.392843][T30691] anon 81920 [ 3504.392843][T30691] file 315392 [ 3504.392843][T30691] kernel 314163200 [ 3504.392843][T30691] kernel_stack 65536 [ 3504.392843][T30691] pagetables 69632 [ 3504.392843][T30691] sec_pagetables 0 [ 3504.392843][T30691] percpu 5436000 [ 3504.392843][T30691] sock 0 [ 3504.392843][T30691] vmalloc 8192 [ 3504.392843][T30691] shmem 315392 [ 3504.392843][T30691] zswap 0 [ 3504.392843][T30691] zswapped 0 [ 3504.392843][T30691] file_mapped 290816 [ 3504.392843][T30691] file_dirty 0 [ 3504.392843][T30691] file_writeback 0 [ 3504.392843][T30691] swapcached 0 [ 3504.392843][T30691] anon_thp 0 [ 3504.392843][T30691] file_thp 0 [ 3504.392843][T30691] shmem_thp 0 [ 3504.392843][T30691] inactive_anon 49152 [ 3504.392843][T30691] active_anon 307200 [ 3504.392843][T30691] inactive_file 0 [ 3504.392843][T30691] active_file 0 [ 3504.392843][T30691] unevictable 0 [ 3504.392843][T30691] slab_reclaimable 16792 [ 3504.392843][T30691] slab_unreclaimable 308522288 [ 3504.493910][T30673] device veth0_to_hsr entered promiscuous mode [ 3504.512574][T30674] device bridge_slave_1 left promiscuous mode [ 3504.519718][T30674] bridge3674: port 2(bridge_slave_1) entered disabled state [ 3504.522632][T30691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30691,uid=0 22:16:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000075ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3504.545572][T30691] Memory cgroup out of memory: Killed process 30691 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3504.587021][T30674] bridge3675: port 2(bridge_slave_1) entered blocking state [ 3504.603782][T30674] bridge3675: port 2(bridge_slave_1) entered disabled state [ 3504.626047][T30674] device bridge_slave_1 entered promiscuous mode [ 3504.627667][T30698] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3504.643620][T30698] CPU: 0 PID: 30698 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3504.654082][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3504.664178][T30698] Call Trace: [ 3504.667490][T30698] [ 3504.670450][T30698] dump_stack_lvl+0xd1/0x138 [ 3504.675108][T30698] dump_header+0x10b/0x85f [ 3504.679583][T30698] oom_kill_process.cold+0x10/0x15 [ 3504.684748][T30698] out_of_memory+0x35c/0x14a0 [ 3504.689572][T30698] ? find_held_lock+0x2d/0x110 [ 3504.694381][T30698] ? oom_killer_disable+0x280/0x280 [ 3504.699731][T30698] ? find_held_lock+0x2d/0x110 [ 3504.704558][T30698] mem_cgroup_out_of_memory+0x206/0x270 [ 3504.710165][T30698] ? mem_cgroup_margin+0x130/0x130 [ 3504.715356][T30698] ? lock_downgrade+0x6e0/0x6e0 [ 3504.720280][T30698] try_charge_memcg+0xefb/0x12f0 [ 3504.725285][T30698] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3504.731314][T30698] ? get_mem_cgroup_from_objcg+0xa1/0x260 22:16:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008a020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3504.737108][T30698] ? lock_downgrade+0x6e0/0x6e0 [ 3504.742010][T30698] ? lock_downgrade+0x6e0/0x6e0 [ 3504.746998][T30698] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3504.752625][T30698] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3504.758858][T30698] copy_process+0x4e3/0x7520 [ 3504.763673][T30698] ? folio_flags.constprop.0+0x53/0x150 [ 3504.769378][T30698] ? put_page+0xd9/0x280 [ 3504.773770][T30698] ? do_wp_page+0x844/0x3370 [ 3504.778418][T30698] ? __cleanup_sighand+0xb0/0xb0 [ 3504.783495][T30698] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3504.789016][T30698] ? rwlock_bug.part.0+0x90/0x90 [ 3504.794013][T30698] ? lock_chain_count+0x20/0x20 [ 3504.798995][T30698] kernel_clone+0xeb/0x990 [ 3504.803459][T30698] ? create_io_thread+0xf0/0xf0 [ 3504.808448][T30698] ? find_held_lock+0x2d/0x110 [ 3504.813276][T30698] __do_sys_clone+0xba/0x100 [ 3504.817912][T30698] ? kernel_clone+0x990/0x990 [ 3504.822653][T30698] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3504.828609][T30698] do_syscall_64+0x39/0xb0 [ 3504.833064][T30698] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3504.839011][T30698] RIP: 0033:0x7f7e1f28d4f1 [ 3504.843447][T30698] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3504.847386][T30681] device bridge_slave_1 left promiscuous mode [ 3504.863067][T30698] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3504.863108][T30698] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3504.863124][T30698] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3504.863141][T30698] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3504.863158][T30698] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3504.863174][T30698] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3504.863210][T30698] [ 3504.879916][T30698] memory: usage 307200kB, limit 307200kB, failcnt 2363 [ 3504.918847][T30681] bridge4284: port 2(bridge_slave_1) entered disabled state [ 3504.930980][T30698] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3504.946135][T30698] Memory cgroup stats for /syz5: [ 3504.946372][T30698] anon 81920 [ 3504.946372][T30698] file 315392 [ 3504.946372][T30698] kernel 314134528 [ 3504.946372][T30698] kernel_stack 32768 [ 3504.946372][T30698] pagetables 69632 [ 3504.946372][T30698] sec_pagetables 0 [ 3504.946372][T30698] percpu 5436000 [ 3504.946372][T30698] sock 0 [ 3504.946372][T30698] vmalloc 8192 [ 3504.946372][T30698] shmem 315392 [ 3504.946372][T30698] zswap 0 [ 3504.946372][T30698] zswapped 0 [ 3504.946372][T30698] file_mapped 290816 [ 3504.946372][T30698] file_dirty 0 [ 3504.946372][T30698] file_writeback 0 [ 3504.946372][T30698] swapcached 0 [ 3504.946372][T30698] anon_thp 0 [ 3504.946372][T30698] file_thp 0 [ 3504.946372][T30698] shmem_thp 0 [ 3504.946372][T30698] inactive_anon 49152 [ 3504.946372][T30698] active_anon 307200 [ 3504.946372][T30698] inactive_file 0 [ 3504.946372][T30698] active_file 0 [ 3504.946372][T30698] unevictable 0 [ 3504.946372][T30698] slab_reclaimable 16792 [ 3504.946372][T30698] slab_unreclaimable 308524072 [ 3505.041579][T30681] bridge4285: port 1(bridge_slave_1) entered blocking state [ 3505.043317][T30698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg= [ 3505.048963][T30681] bridge4285: port 1(bridge_slave_1) entered disabled state [ 3505.067692][T30698] /syz5,task_memcg=/syz5,task=syz-executor.5,pid=30698,uid=0 [ 3505.072475][T30681] device bridge_slave_1 entered promiscuous mode 22:16:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000004800000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3505.085499][T30698] Memory cgroup out of memory: Killed process 30698 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000076ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3505.156877][T30683] bridge4249: port 1(veth0_to_hsr) entered disabled state [ 3505.196286][T30683] bridge4250: port 1(veth0_to_hsr) entered blocking state [ 3505.211035][T30683] bridge4250: port 1(veth0_to_hsr) entered disabled state [ 3505.237073][T30684] device bridge_slave_1 left promiscuous mode [ 3505.244542][T30684] bridge4248: port 2(bridge_slave_1) entered disabled state [ 3505.274556][T30705] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3505.274768][T30684] bridge4250: port 2(bridge_slave_1) entered blocking state [ 3505.285575][T30705] CPU: 1 PID: 30705 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3505.300738][T30684] bridge4250: port 2(bridge_slave_1) entered disabled state [ 3505.303174][T30705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3505.303192][T30705] Call Trace: [ 3505.303200][T30705] [ 3505.303211][T30705] dump_stack_lvl+0xd1/0x138 [ 3505.313744][T30684] device bridge_slave_1 entered promiscuous mode [ 3505.320534][T30705] dump_header+0x10b/0x85f [ 3505.320581][T30705] oom_kill_process.cold+0x10/0x15 [ 3505.320615][T30705] out_of_memory+0x35c/0x14a0 [ 3505.332318][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3505.338010][T30705] ? find_held_lock+0x2d/0x110 [ 3505.338060][T30705] ? oom_killer_disable+0x280/0x280 [ 3505.371801][T30705] ? find_held_lock+0x2d/0x110 [ 3505.376615][T30705] mem_cgroup_out_of_memory+0x206/0x270 [ 3505.382203][T30705] ? mem_cgroup_margin+0x130/0x130 [ 3505.387362][T30705] ? lock_downgrade+0x6e0/0x6e0 [ 3505.392262][T30705] try_charge_memcg+0xefb/0x12f0 [ 3505.397249][T30705] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3505.403272][T30705] ? lock_downgrade+0x6e0/0x6e0 [ 3505.406362][T30689] device bridge_slave_1 left promiscuous mode [ 3505.408199][T30705] charge_memcg+0x90/0x3b0 [ 3505.414585][T30689] bridge3933: port 1(bridge_slave_1) entered disabled state [ 3505.418672][T30705] __mem_cgroup_charge+0x2b/0x90 [ 3505.418709][T30705] ? copy_mc_to_kernel+0x3e/0x90 [ 3505.435853][T30705] do_wp_page+0x7ec/0x3370 [ 3505.440300][T30705] ? lock_release+0x810/0x810 [ 3505.445011][T30705] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3505.450416][T30705] ? do_raw_spin_lock+0x124/0x2b0 [ 3505.455448][T30705] ? rwlock_bug.part.0+0x90/0x90 [ 3505.460423][T30705] ? lock_chain_count+0x20/0x20 [ 3505.465279][T30705] __handle_mm_fault+0x1f58/0x3c90 [ 3505.470400][T30705] ? vm_iomap_memory+0x190/0x190 [ 3505.475473][T30705] handle_mm_fault+0x1b6/0x850 [ 3505.480255][T30705] do_user_addr_fault+0x475/0x1210 [ 3505.485403][T30705] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3505.490989][T30705] exc_page_fault+0x98/0x170 [ 3505.495624][T30705] asm_exc_page_fault+0x26/0x30 [ 3505.500511][T30705] RIP: 0033:0x7f7e1f236ede [ 3505.504926][T30705] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 22:16:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000aa0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3505.524621][T30705] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3505.530683][T30705] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3505.538648][T30705] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3505.546637][T30705] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3505.554651][T30705] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3505.562646][T30705] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3505.570631][T30705] [ 3505.589350][T30705] memory: usage 307188kB, limit 307200kB, failcnt 2467 [ 3505.593973][T30689] bridge3934: port 1(bridge_slave_1) entered blocking state [ 3505.603950][T30689] bridge3934: port 1(bridge_slave_1) entered disabled state [ 3505.604831][T30705] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3505.615079][T30689] device bridge_slave_1 entered promiscuous mode [ 3505.632419][T30705] Memory cgroup stats for /syz5: 22:16:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000417a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3505.632663][T30705] anon 81920 [ 3505.632663][T30705] file 315392 [ 3505.632663][T30705] kernel 314159104 [ 3505.632663][T30705] kernel_stack 65536 [ 3505.632663][T30705] pagetables 69632 [ 3505.632663][T30705] sec_pagetables 0 [ 3505.632663][T30705] percpu 5436000 [ 3505.632663][T30705] sock 0 [ 3505.632663][T30705] vmalloc 8192 [ 3505.632663][T30705] shmem 315392 [ 3505.632663][T30705] zswap 0 [ 3505.632663][T30705] zswapped 0 [ 3505.632663][T30705] file_mapped 290816 [ 3505.632663][T30705] file_dirty 0 [ 3505.632663][T30705] file_writeback 0 [ 3505.632663][T30705] swapcached 0 [ 3505.632663][T30705] anon_thp 0 [ 3505.632663][T30705] file_thp 0 [ 3505.632663][T30705] shmem_thp 0 [ 3505.632663][T30705] inactive_anon 90112 [ 3505.632663][T30705] active_anon 307200 [ 3505.632663][T30705] inactive_file 0 [ 3505.632663][T30705] active_file 0 [ 3505.632663][T30705] unevictable 0 [ 3505.632663][T30705] slab_reclaimable 16792 [ 3505.632663][T30705] slab_unreclaimable 308521984 [ 3505.688623][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000077ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3505.742043][T30705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30705,uid=0 [ 3505.758919][T30705] Memory cgroup out of memory: Killed process 30705 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3505.856135][T30716] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3505.867094][T30716] CPU: 1 PID: 30716 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3505.877578][T30716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3505.887647][T30716] Call Trace: [ 3505.890932][T30716] [ 3505.893872][T30716] dump_stack_lvl+0xd1/0x138 [ 3505.898492][T30716] dump_header+0x10b/0x85f [ 3505.902930][T30716] oom_kill_process.cold+0x10/0x15 [ 3505.908062][T30716] out_of_memory+0x35c/0x14a0 [ 3505.912776][T30716] ? find_held_lock+0x2d/0x110 [ 3505.917570][T30716] ? oom_killer_disable+0x280/0x280 [ 3505.922800][T30716] ? find_held_lock+0x2d/0x110 [ 3505.927598][T30716] mem_cgroup_out_of_memory+0x206/0x270 [ 3505.933173][T30716] ? mem_cgroup_margin+0x130/0x130 [ 3505.938309][T30716] ? lock_downgrade+0x6e0/0x6e0 [ 3505.943196][T30716] try_charge_memcg+0xefb/0x12f0 [ 3505.948162][T30716] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3505.954161][T30716] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3505.959912][T30716] ? lock_downgrade+0x6e0/0x6e0 [ 3505.964780][T30716] ? lock_downgrade+0x6e0/0x6e0 [ 3505.969661][T30716] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3505.975229][T30716] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3505.981411][T30716] copy_process+0x1359/0x7520 [ 3505.986194][T30716] ? page_remove_rmap+0x435/0x1210 [ 3505.991336][T30716] ? folio_flags.constprop.0+0x53/0x150 [ 3505.996911][T30716] ? put_page+0xd9/0x280 [ 3506.001176][T30716] ? do_wp_page+0x844/0x3370 [ 3506.005802][T30716] ? __cleanup_sighand+0xb0/0xb0 [ 3506.010759][T30716] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3506.016161][T30716] ? rwlock_bug.part.0+0x90/0x90 [ 3506.021119][T30716] ? lock_chain_count+0x20/0x20 [ 3506.025988][T30716] kernel_clone+0xeb/0x990 [ 3506.030427][T30716] ? create_io_thread+0xf0/0xf0 [ 3506.035303][T30716] ? find_held_lock+0x2d/0x110 [ 3506.040121][T30716] __do_sys_clone+0xba/0x100 [ 3506.044731][T30716] ? kernel_clone+0x990/0x990 [ 3506.049442][T30716] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3506.055369][T30716] do_syscall_64+0x39/0xb0 [ 3506.059801][T30716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3506.065718][T30716] RIP: 0033:0x7f7e1f28d4f1 [ 3506.070148][T30716] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3506.089771][T30716] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3506.098203][T30716] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3506.106189][T30716] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3506.114171][T30716] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3506.122155][T30716] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3506.130136][T30716] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3506.138139][T30716] [ 3506.158449][T30695] bridge4367: port 1(veth0_to_hsr) entered disabled state [ 3506.168816][T30695] bridge4368: port 1(veth0_to_hsr) entered blocking state [ 3506.176599][T30716] memory: usage 307156kB, limit 307200kB, failcnt 2537 [ 3506.180767][T30695] bridge4368: port 1(veth0_to_hsr) entered disabled state [ 3506.184548][T30716] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3506.199621][T30716] Memory cgroup stats for /syz5: [ 3506.199903][T30716] anon 81920 [ 3506.199903][T30716] file 315392 [ 3506.199903][T30716] kernel 314126336 [ 3506.199903][T30716] kernel_stack 32768 [ 3506.199903][T30716] pagetables 69632 [ 3506.199903][T30716] sec_pagetables 0 [ 3506.199903][T30716] percpu 5436000 [ 3506.199903][T30716] sock 0 [ 3506.199903][T30716] vmalloc 8192 [ 3506.199903][T30716] shmem 315392 [ 3506.199903][T30716] zswap 0 [ 3506.199903][T30716] zswapped 0 [ 3506.199903][T30716] file_mapped 290816 [ 3506.199903][T30716] file_dirty 0 [ 3506.199903][T30716] file_writeback 0 [ 3506.199903][T30716] swapcached 0 [ 3506.199903][T30716] anon_thp 0 [ 3506.199903][T30716] file_thp 0 [ 3506.199903][T30716] shmem_thp 0 [ 3506.199903][T30716] inactive_anon 77824 [ 3506.199903][T30716] active_anon 307200 [ 3506.199903][T30716] inactive_file 0 [ 3506.199903][T30716] active_file 0 [ 3506.199903][T30716] unevictable 0 [ 3506.199903][T30716] slab_reclaimable 16792 [ 3506.199903][T30716] slab_unreclaimable 308521520 [ 3506.230666][T30696] device bridge_slave_1 left promiscuous mode 22:16:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000078ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3506.307144][T30716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30716,uid=0 [ 3506.312142][T30696] bridge4367: port 2(bridge_slave_1) entered disabled state [ 3506.324411][T30716] Memory cgroup out of memory: Killed process 30716 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3506.372138][T30696] bridge4368: port 2(bridge_slave_1) entered blocking state [ 3506.388173][T30696] bridge4368: port 2(bridge_slave_1) entered disabled state [ 3506.398629][T30696] device bridge_slave_1 entered promiscuous mode 22:16:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3506.423593][T30701] device veth0_to_hsr left promiscuous mode [ 3506.431300][T30701] bridge3675: port 1(veth0_to_hsr) entered disabled state [ 3506.446094][T30718] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3506.459388][T30701] bridge3676: port 1(veth0_to_hsr) entered blocking state [ 3506.466853][T30718] CPU: 1 PID: 30718 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3506.471330][T30701] bridge3676: port 1(veth0_to_hsr) entered disabled state [ 3506.477298][T30718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3506.477319][T30718] Call Trace: [ 3506.477328][T30718] [ 3506.477340][T30718] dump_stack_lvl+0xd1/0x138 [ 3506.477385][T30718] dump_header+0x10b/0x85f [ 3506.497913][T30701] device veth0_to_hsr entered promiscuous mode [ 3506.500737][T30718] oom_kill_process.cold+0x10/0x15 [ 3506.500782][T30718] out_of_memory+0x35c/0x14a0 [ 3506.500829][T30718] ? find_held_lock+0x2d/0x110 [ 3506.500870][T30718] ? oom_killer_disable+0x280/0x280 [ 3506.515792][T30700] device bridge_slave_1 left promiscuous mode [ 3506.516008][T30718] ? find_held_lock+0x2d/0x110 [ 3506.526296][T30700] bridge3675: port 2(bridge_slave_1) entered disabled state [ 3506.530558][T30718] mem_cgroup_out_of_memory+0x206/0x270 [ 3506.530611][T30718] ? mem_cgroup_margin+0x130/0x130 [ 3506.530647][T30718] ? lock_downgrade+0x6e0/0x6e0 [ 3506.530692][T30718] try_charge_memcg+0xefb/0x12f0 [ 3506.577358][T30718] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3506.583351][T30718] ? lock_downgrade+0x6e0/0x6e0 [ 3506.588233][T30718] charge_memcg+0x90/0x3b0 [ 3506.592701][T30718] __mem_cgroup_charge+0x2b/0x90 [ 3506.597771][T30718] ? copy_mc_to_kernel+0x3e/0x90 [ 3506.602746][T30718] do_wp_page+0x7ec/0x3370 [ 3506.607200][T30718] ? lock_release+0x810/0x810 [ 3506.611896][T30718] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3506.617303][T30718] ? do_raw_spin_lock+0x124/0x2b0 [ 3506.622329][T30718] ? rwlock_bug.part.0+0x90/0x90 [ 3506.627272][T30718] ? lock_chain_count+0x20/0x20 [ 3506.632124][T30718] __handle_mm_fault+0x1f58/0x3c90 [ 3506.637244][T30718] ? vm_iomap_memory+0x190/0x190 [ 3506.642287][T30718] handle_mm_fault+0x1b6/0x850 [ 3506.647074][T30718] do_user_addr_fault+0x475/0x1210 [ 3506.652211][T30718] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3506.658728][T30718] exc_page_fault+0x98/0x170 [ 3506.665064][T30718] asm_exc_page_fault+0x26/0x30 [ 3506.669938][T30718] RIP: 0033:0x7f7e1f236ede [ 3506.674387][T30718] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3506.694123][T30718] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3506.700282][T30718] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3506.708272][T30718] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3506.716271][T30718] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3506.724278][T30718] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3506.732270][T30718] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3506.742344][T30718] [ 3506.751855][T30718] memory: usage 307188kB, limit 307200kB, failcnt 2613 [ 3506.760054][T30718] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3506.765301][T30700] bridge3676: port 2(bridge_slave_1) entered blocking state [ 3506.767147][T30718] Memory cgroup stats for /syz5: [ 3506.774870][T30718] anon 81920 [ 3506.774870][T30718] file 315392 [ 3506.774870][T30718] kernel 314163200 [ 3506.774870][T30718] kernel_stack 65536 [ 3506.774870][T30718] pagetables 69632 [ 3506.774870][T30718] sec_pagetables 0 [ 3506.774870][T30718] percpu 5436000 [ 3506.774870][T30718] sock 0 [ 3506.774870][T30718] vmalloc 8192 [ 3506.774870][T30718] shmem 315392 [ 3506.774870][T30718] zswap 0 [ 3506.774870][T30718] zswapped 0 [ 3506.774870][T30718] file_mapped 290816 [ 3506.774870][T30718] file_dirty 0 [ 3506.774870][T30718] file_writeback 0 [ 3506.774870][T30718] swapcached 0 [ 3506.774870][T30718] anon_thp 0 [ 3506.774870][T30718] file_thp 0 [ 3506.774870][T30718] shmem_thp 0 [ 3506.774870][T30718] inactive_anon 49152 [ 3506.774870][T30718] active_anon 307200 [ 3506.774870][T30718] inactive_file 0 [ 3506.774870][T30718] active_file 0 [ 3506.774870][T30718] unevictable 0 [ 3506.774870][T30718] slab_reclaimable 16792 [ 3506.774870][T30718] slab_unreclaimable 308522288 [ 3506.782692][T30700] bridge3676: port 2(bridge_slave_1) entered disabled state [ 3506.872726][T30718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30718,uid=0 [ 3506.905722][T30700] device bridge_slave_1 entered promiscuous mode 22:16:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000f2020000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000079ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3506.916417][T30718] Memory cgroup out of memory: Killed process 30718 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3506.978616][T30706] bridge4284: port 1(veth0_to_hsr) entered disabled state [ 3507.022580][T30706] bridge4286: port 1(veth0_to_hsr) entered blocking state [ 3507.042430][T30706] bridge4286: port 1(veth0_to_hsr) entered disabled state [ 3507.046310][T30726] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3507.060729][T30726] CPU: 0 PID: 30726 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3507.071189][T30726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3507.075482][T30707] device bridge_slave_1 left promiscuous mode [ 3507.081255][T30726] Call Trace: [ 3507.081268][T30726] [ 3507.081279][T30726] dump_stack_lvl+0xd1/0x138 [ 3507.081322][T30726] dump_header+0x10b/0x85f [ 3507.100021][T30707] bridge4285: port 1(bridge_slave_1) entered disabled state [ 3507.102620][T30726] oom_kill_process.cold+0x10/0x15 [ 3507.115066][T30726] out_of_memory+0x35c/0x14a0 [ 3507.120234][T30726] ? find_held_lock+0x2d/0x110 [ 3507.125034][T30726] ? oom_killer_disable+0x280/0x280 [ 3507.130256][T30726] ? find_held_lock+0x2d/0x110 [ 3507.135074][T30726] mem_cgroup_out_of_memory+0x206/0x270 [ 3507.140858][T30726] ? mem_cgroup_margin+0x130/0x130 [ 3507.146054][T30726] ? lock_downgrade+0x6e0/0x6e0 [ 3507.150936][T30726] try_charge_memcg+0xefb/0x12f0 [ 3507.156184][T30726] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3507.162190][T30726] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3507.167948][T30726] ? lock_downgrade+0x6e0/0x6e0 [ 3507.172938][T30726] ? lock_downgrade+0x6e0/0x6e0 [ 3507.177829][T30726] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3507.183402][T30726] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3507.189586][T30726] copy_process+0x4e3/0x7520 [ 3507.194203][T30726] ? __lock_acquire+0xbc3/0x56d0 [ 3507.199198][T30726] ? __cleanup_sighand+0xb0/0xb0 [ 3507.204161][T30726] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3507.210168][T30726] ? psi_memstall_leave+0x174/0x250 [ 3507.215403][T30726] kernel_clone+0xeb/0x990 [ 3507.220104][T30726] ? create_io_thread+0xf0/0xf0 [ 3507.224978][T30726] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3507.231251][T30726] ? lock_downgrade+0x6e0/0x6e0 [ 3507.236131][T30726] __do_sys_clone+0xba/0x100 [ 3507.240741][T30726] ? kernel_clone+0x990/0x990 [ 3507.245458][T30726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3507.251381][T30726] do_syscall_64+0x39/0xb0 [ 3507.255817][T30726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3507.261734][T30726] RIP: 0033:0x7f7e1f28d4f1 [ 3507.266168][T30726] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3507.285881][T30726] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3507.294315][T30726] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3507.302299][T30726] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3507.310281][T30726] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3507.318288][T30726] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3507.326288][T30726] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3507.334303][T30726] [ 3507.353254][T30707] bridge4286: port 2(bridge_slave_1) entered blocking state [ 3507.353983][T30726] memory: usage 307200kB, limit 307200kB, failcnt 2691 [ 3507.360830][T30707] bridge4286: port 2(bridge_slave_1) entered disabled state [ 3507.377170][T30707] device bridge_slave_1 entered promiscuous mode [ 3507.380056][T30726] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3507.404378][T30726] Memory cgroup stats for /syz5: [ 3507.404753][T30726] anon 81920 [ 3507.404753][T30726] file 315392 [ 3507.404753][T30726] kernel 314142720 [ 3507.404753][T30726] kernel_stack 32768 [ 3507.404753][T30726] pagetables 69632 [ 3507.404753][T30726] sec_pagetables 0 [ 3507.404753][T30726] percpu 5436000 [ 3507.404753][T30726] sock 0 [ 3507.404753][T30726] vmalloc 8192 [ 3507.404753][T30726] shmem 315392 [ 3507.404753][T30726] zswap 0 [ 3507.404753][T30726] zswapped 0 [ 3507.404753][T30726] file_mapped 290816 [ 3507.404753][T30726] file_dirty 0 [ 3507.404753][T30726] file_writeback 0 [ 3507.404753][T30726] swapcached 0 [ 3507.404753][T30726] anon_thp 0 [ 3507.404753][T30726] file_thp 0 [ 3507.404753][T30726] shmem_thp 0 22:16:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000034a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3507.404753][T30726] inactive_anon 49152 [ 3507.404753][T30726] active_anon 307200 [ 3507.404753][T30726] inactive_file 0 [ 3507.404753][T30726] active_file 0 [ 3507.404753][T30726] unevictable 0 [ 3507.404753][T30726] slab_reclaimable 16792 [ 3507.404753][T30726] slab_unreclaimable 308521520 [ 3507.442339][T30713] bridge4250: port 1(veth0_to_hsr) entered disabled state [ 3507.508111][T30726] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30726,uid=0 22:16:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007aed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3507.532483][T30713] bridge4251: port 1(veth0_to_hsr) entered blocking state [ 3507.538258][T30726] Memory cgroup out of memory: Killed process 30726 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3507.543934][T30713] bridge4251: port 1(veth0_to_hsr) entered disabled state [ 3507.580751][T30714] device bridge_slave_1 left promiscuous mode [ 3507.587867][T30714] bridge3934: port 1(bridge_slave_1) entered disabled state [ 3507.631009][T30714] bridge3935: port 1(bridge_slave_1) entered blocking state [ 3507.643220][T30734] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3507.647204][T30714] bridge3935: port 1(bridge_slave_1) entered disabled state [ 3507.654496][T30734] CPU: 1 PID: 30734 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3507.666146][T30714] device bridge_slave_1 entered promiscuous mode [ 3507.672027][T30734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3507.672046][T30734] Call Trace: [ 3507.672056][T30734] [ 3507.672068][T30734] dump_stack_lvl+0xd1/0x138 [ 3507.672112][T30734] dump_header+0x10b/0x85f [ 3507.672143][T30734] oom_kill_process.cold+0x10/0x15 [ 3507.672176][T30734] out_of_memory+0x35c/0x14a0 [ 3507.713964][T30734] ? find_held_lock+0x2d/0x110 [ 3507.718795][T30734] ? oom_killer_disable+0x280/0x280 [ 3507.724062][T30734] ? find_held_lock+0x2d/0x110 [ 3507.728886][T30734] mem_cgroup_out_of_memory+0x206/0x270 [ 3507.734483][T30734] ? mem_cgroup_margin+0x130/0x130 [ 3507.739659][T30734] ? lock_downgrade+0x6e0/0x6e0 [ 3507.744672][T30734] try_charge_memcg+0xefb/0x12f0 [ 3507.749679][T30734] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3507.755711][T30734] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3507.761495][T30734] ? lock_downgrade+0x6e0/0x6e0 [ 3507.766395][T30734] ? lock_downgrade+0x6e0/0x6e0 [ 3507.771490][T30734] __memcg_kmem_charge_page+0x16e/0x3b0 22:16:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000427a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3507.777126][T30734] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3507.779700][T30715] device bridge_slave_1 left promiscuous mode [ 3507.783312][T30734] copy_process+0x4e3/0x7520 [ 3507.783356][T30734] ? __lock_acquire+0xbc3/0x56d0 [ 3507.783400][T30734] ? __cleanup_sighand+0xb0/0xb0 [ 3507.790306][T30715] bridge4250: port 2(bridge_slave_1) entered disabled state [ 3507.794392][T30734] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3507.794432][T30734] ? psi_memstall_leave+0x174/0x250 [ 3507.794481][T30734] kernel_clone+0xeb/0x990 [ 3507.827342][T30734] ? create_io_thread+0xf0/0xf0 [ 3507.832217][T30734] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3507.838511][T30734] ? lock_downgrade+0x6e0/0x6e0 [ 3507.843392][T30734] __do_sys_clone+0xba/0x100 [ 3507.847987][T30734] ? kernel_clone+0x990/0x990 [ 3507.852703][T30734] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3507.858638][T30734] do_syscall_64+0x39/0xb0 [ 3507.863066][T30734] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3507.869001][T30734] RIP: 0033:0x7f7e1f28d4f1 [ 3507.873677][T30734] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3507.893298][T30734] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3507.901759][T30734] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3507.909773][T30734] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3507.917774][T30734] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3507.925753][T30734] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3507.933745][T30734] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3507.941766][T30734] [ 3507.950781][T30734] memory: usage 307188kB, limit 307200kB, failcnt 2758 [ 3507.958770][T30734] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3507.966139][T30734] Memory cgroup stats for /syz5: [ 3507.966396][T30734] anon 81920 [ 3507.966396][T30734] file 315392 [ 3507.966396][T30734] kernel 314146816 [ 3507.966396][T30734] kernel_stack 32768 [ 3507.966396][T30734] pagetables 69632 [ 3507.966396][T30734] sec_pagetables 0 [ 3507.966396][T30734] percpu 5436000 [ 3507.966396][T30734] sock 0 [ 3507.966396][T30734] vmalloc 8192 [ 3507.966396][T30734] shmem 315392 [ 3507.966396][T30734] zswap 0 [ 3507.966396][T30734] zswapped 0 [ 3507.966396][T30734] file_mapped 290816 [ 3507.966396][T30734] file_dirty 0 [ 3507.966396][T30734] file_writeback 0 [ 3507.966396][T30734] swapcached 0 [ 3507.966396][T30734] anon_thp 0 [ 3507.966396][T30734] file_thp 0 [ 3507.966396][T30734] shmem_thp 0 [ 3507.966396][T30734] inactive_anon 49152 [ 3507.966396][T30734] active_anon 307200 [ 3507.966396][T30734] inactive_file 0 [ 3507.966396][T30734] active_file 0 [ 3507.966396][T30734] unevictable 0 [ 3507.966396][T30734] slab_reclaimable 19368 [ 3507.966396][T30734] slab_unreclaimable 308522472 [ 3508.063576][T30734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30734,uid=0 22:16:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007bed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3508.067107][T30715] bridge4251: port 2(bridge_slave_1) entered blocking state [ 3508.080155][T30734] Memory cgroup out of memory: Killed process 30734 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3508.095684][T30715] bridge4251: port 2(bridge_slave_1) entered disabled state [ 3508.123000][T30715] device bridge_slave_1 entered promiscuous mode 22:16:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000b20200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3508.228800][T30722] bridge4368: port 1(veth0_to_hsr) entered disabled state [ 3508.242918][T30722] bridge4369: port 1(veth0_to_hsr) entered blocking state [ 3508.257315][T30741] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3508.259815][T30722] bridge4369: port 1(veth0_to_hsr) entered disabled state [ 3508.267972][T30741] CPU: 0 PID: 30741 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3508.285310][T30741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3508.295403][T30741] Call Trace: [ 3508.298696][T30741] [ 3508.301639][T30741] dump_stack_lvl+0xd1/0x138 [ 3508.306264][T30741] dump_header+0x10b/0x85f [ 3508.310703][T30741] oom_kill_process.cold+0x10/0x15 [ 3508.315841][T30741] out_of_memory+0x35c/0x14a0 [ 3508.320554][T30741] ? find_held_lock+0x2d/0x110 [ 3508.325352][T30741] ? oom_killer_disable+0x280/0x280 [ 3508.330584][T30741] ? find_held_lock+0x2d/0x110 [ 3508.335421][T30741] mem_cgroup_out_of_memory+0x206/0x270 [ 3508.341022][T30741] ? mem_cgroup_margin+0x130/0x130 [ 3508.346180][T30741] ? lock_downgrade+0x6e0/0x6e0 [ 3508.351072][T30741] try_charge_memcg+0xefb/0x12f0 [ 3508.356061][T30741] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3508.362094][T30741] ? lock_downgrade+0x6e0/0x6e0 [ 3508.366992][T30741] charge_memcg+0x90/0x3b0 [ 3508.371437][T30741] __mem_cgroup_charge+0x2b/0x90 [ 3508.376397][T30741] ? copy_mc_to_kernel+0x3e/0x90 [ 3508.381360][T30741] do_wp_page+0x7ec/0x3370 [ 3508.386594][T30741] ? lock_release+0x810/0x810 [ 3508.391289][T30741] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3508.396688][T30741] ? do_raw_spin_lock+0x124/0x2b0 [ 3508.401732][T30741] ? rwlock_bug.part.0+0x90/0x90 [ 3508.406692][T30741] ? lock_chain_count+0x20/0x20 [ 3508.411568][T30741] __handle_mm_fault+0x1f58/0x3c90 [ 3508.416715][T30741] ? vm_iomap_memory+0x190/0x190 [ 3508.421704][T30741] handle_mm_fault+0x1b6/0x850 [ 3508.426503][T30741] do_user_addr_fault+0x475/0x1210 [ 3508.431644][T30741] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3508.437226][T30741] exc_page_fault+0x98/0x170 [ 3508.441842][T30741] asm_exc_page_fault+0x26/0x30 [ 3508.446716][T30741] RIP: 0033:0x7f7e1f236ede [ 3508.451147][T30741] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3508.470797][T30741] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3508.477736][T30741] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3508.485720][T30741] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3508.493731][T30741] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3508.501715][T30741] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3508.509701][T30741] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3508.517716][T30741] [ 3508.549576][T30741] memory: usage 307188kB, limit 307200kB, failcnt 2869 [ 3508.556900][T30741] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3508.562925][T30723] device bridge_slave_1 left promiscuous mode [ 3508.565232][T30741] Memory cgroup stats for /syz5: [ 3508.570523][T30741] anon 81920 [ 3508.570523][T30741] file 315392 [ 3508.570523][T30741] kernel 314159104 [ 3508.570523][T30741] kernel_stack 65536 [ 3508.570523][T30741] pagetables 69632 [ 3508.570523][T30741] sec_pagetables 0 [ 3508.570523][T30741] percpu 5436000 [ 3508.570523][T30741] sock 0 [ 3508.570523][T30741] vmalloc 8192 [ 3508.570523][T30741] shmem 315392 [ 3508.570523][T30741] zswap 0 [ 3508.570523][T30741] zswapped 0 [ 3508.570523][T30741] file_mapped 290816 [ 3508.570523][T30741] file_dirty 0 [ 3508.570523][T30741] file_writeback 0 [ 3508.570523][T30741] swapcached 0 [ 3508.570523][T30741] anon_thp 0 [ 3508.570523][T30741] file_thp 0 [ 3508.570523][T30741] shmem_thp 0 [ 3508.570523][T30741] inactive_anon 49152 [ 3508.570523][T30741] active_anon 307200 [ 3508.570523][T30741] inactive_file 0 [ 3508.570523][T30741] active_file 0 [ 3508.570523][T30741] unevictable 0 [ 3508.570523][T30741] slab_reclaimable 16792 [ 3508.570523][T30741] slab_unreclaimable 308522288 [ 3508.588012][T30723] bridge4368: port 2(bridge_slave_1) entered disabled state [ 3508.669062][T30741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30741,uid=0 22:16:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007ced0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3508.701929][T30723] bridge4369: port 2(bridge_slave_1) entered blocking state [ 3508.703221][T30741] Memory cgroup out of memory: Killed process 30741 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3508.709938][T30723] bridge4369: port 2(bridge_slave_1) entered disabled state [ 3508.737140][T30723] device bridge_slave_1 entered promiscuous mode 22:16:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3508.817626][T30728] device veth0_to_hsr left promiscuous mode [ 3508.832488][T30728] bridge3676: port 1(veth0_to_hsr) entered disabled state [ 3508.843100][T30728] bridge3677: port 1(veth0_to_hsr) entered blocking state [ 3508.852805][T30728] bridge3677: port 1(veth0_to_hsr) entered disabled state [ 3508.865597][T30728] device veth0_to_hsr entered promiscuous mode [ 3508.876921][T30747] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3508.885619][T30729] device bridge_slave_1 left promiscuous mode [ 3508.894318][T30729] bridge3676: port 2(bridge_slave_1) entered disabled state [ 3508.895959][T30747] CPU: 0 PID: 30747 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3508.912070][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3508.922126][T30747] Call Trace: [ 3508.925401][T30747] [ 3508.928331][T30747] dump_stack_lvl+0xd1/0x138 [ 3508.932929][T30747] dump_header+0x10b/0x85f [ 3508.937361][T30747] oom_kill_process.cold+0x10/0x15 [ 3508.942477][T30747] out_of_memory+0x35c/0x14a0 [ 3508.947183][T30747] ? find_held_lock+0x2d/0x110 [ 3508.951981][T30747] ? oom_killer_disable+0x280/0x280 [ 3508.957192][T30747] ? find_held_lock+0x2d/0x110 [ 3508.961966][T30747] mem_cgroup_out_of_memory+0x206/0x270 [ 3508.967517][T30747] ? mem_cgroup_margin+0x130/0x130 [ 3508.972630][T30747] ? lock_downgrade+0x6e0/0x6e0 [ 3508.977488][T30747] try_charge_memcg+0xefb/0x12f0 [ 3508.982430][T30747] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3508.988429][T30747] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3508.994198][T30747] ? lock_downgrade+0x6e0/0x6e0 [ 3508.999053][T30747] ? lock_downgrade+0x6e0/0x6e0 [ 3509.003938][T30747] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3509.009513][T30747] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3509.015689][T30747] copy_process+0x4e3/0x7520 [ 3509.020281][T30747] ? __lock_acquire+0xbc3/0x56d0 [ 3509.025226][T30747] ? __cleanup_sighand+0xb0/0xb0 [ 3509.030166][T30747] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3509.036146][T30747] ? psi_memstall_leave+0x174/0x250 [ 3509.041358][T30747] kernel_clone+0xeb/0x990 [ 3509.045776][T30747] ? create_io_thread+0xf0/0xf0 [ 3509.050645][T30747] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3509.056926][T30747] ? lock_downgrade+0x6e0/0x6e0 [ 3509.061783][T30747] __do_sys_clone+0xba/0x100 [ 3509.066388][T30747] ? kernel_clone+0x990/0x990 [ 3509.071111][T30747] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3509.077038][T30747] do_syscall_64+0x39/0xb0 [ 3509.081453][T30747] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3509.087347][T30747] RIP: 0033:0x7f7e1f28d4f1 [ 3509.091758][T30747] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3509.111388][T30747] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3509.119848][T30747] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3509.127832][T30747] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3509.135908][T30747] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3509.143895][T30747] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3509.151905][T30747] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3509.159924][T30747] [ 3509.169812][T30747] memory: usage 307180kB, limit 307200kB, failcnt 2962 [ 3509.176987][T30747] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3509.184162][T30747] Memory cgroup stats for /syz5: [ 3509.184400][T30747] anon 81920 [ 3509.184400][T30747] file 315392 [ 3509.184400][T30747] kernel 314155008 [ 3509.184400][T30747] kernel_stack 32768 [ 3509.184400][T30747] pagetables 69632 [ 3509.184400][T30747] sec_pagetables 0 [ 3509.184400][T30747] percpu 5436000 [ 3509.184400][T30747] sock 0 [ 3509.184400][T30747] vmalloc 8192 [ 3509.184400][T30747] shmem 315392 [ 3509.184400][T30747] zswap 0 [ 3509.184400][T30747] zswapped 0 [ 3509.184400][T30747] file_mapped 290816 [ 3509.184400][T30747] file_dirty 0 [ 3509.184400][T30747] file_writeback 0 [ 3509.184400][T30747] swapcached 0 [ 3509.184400][T30747] anon_thp 0 [ 3509.184400][T30747] file_thp 0 [ 3509.184400][T30747] shmem_thp 0 [ 3509.184400][T30747] inactive_anon 73728 [ 3509.184400][T30747] active_anon 307200 [ 3509.184400][T30747] inactive_file 0 [ 3509.184400][T30747] active_file 0 [ 3509.184400][T30747] unevictable 0 [ 3509.184400][T30747] slab_reclaimable 16792 [ 3509.184400][T30747] slab_unreclaimable 308521824 [ 3509.201957][T30729] bridge3677: port 2(bridge_slave_1) entered blocking state [ 3509.281949][T30747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30747,uid=0 [ 3509.302562][T30747] Memory cgroup out of memory: Killed process 30747 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007ded0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3509.324752][T30729] bridge3677: port 2(bridge_slave_1) entered disabled state [ 3509.343788][T30729] device bridge_slave_1 entered promiscuous mode 22:16:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3509.442935][T30754] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3509.448802][T30733] bridge4286: port 1(veth0_to_hsr) entered disabled state [ 3509.453626][T30754] CPU: 0 PID: 30754 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3509.470841][T30754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3509.480952][T30754] Call Trace: [ 3509.484285][T30754] [ 3509.487212][T30754] dump_stack_lvl+0xd1/0x138 [ 3509.491842][T30754] dump_header+0x10b/0x85f [ 3509.496307][T30754] oom_kill_process.cold+0x10/0x15 [ 3509.501531][T30754] out_of_memory+0x35c/0x14a0 [ 3509.506263][T30754] ? find_held_lock+0x2d/0x110 [ 3509.511051][T30754] ? oom_killer_disable+0x280/0x280 [ 3509.516307][T30754] ? find_held_lock+0x2d/0x110 [ 3509.521102][T30754] mem_cgroup_out_of_memory+0x206/0x270 [ 3509.526692][T30754] ? mem_cgroup_margin+0x130/0x130 [ 3509.531820][T30754] ? lock_downgrade+0x6e0/0x6e0 [ 3509.536795][T30754] try_charge_memcg+0xefb/0x12f0 [ 3509.541753][T30754] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3509.547768][T30754] ? lock_downgrade+0x6e0/0x6e0 [ 3509.552697][T30754] charge_memcg+0x90/0x3b0 [ 3509.557142][T30754] __mem_cgroup_charge+0x2b/0x90 [ 3509.562100][T30754] ? copy_mc_to_kernel+0x3e/0x90 [ 3509.567066][T30754] do_wp_page+0x7ec/0x3370 [ 3509.571520][T30754] ? lock_release+0x810/0x810 [ 3509.576219][T30754] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3509.581619][T30754] ? do_raw_spin_lock+0x124/0x2b0 [ 3509.586662][T30754] ? rwlock_bug.part.0+0x90/0x90 [ 3509.591705][T30754] ? lock_chain_count+0x20/0x20 [ 3509.596577][T30754] __handle_mm_fault+0x1f58/0x3c90 [ 3509.601808][T30754] ? vm_iomap_memory+0x190/0x190 [ 3509.606808][T30754] handle_mm_fault+0x1b6/0x850 [ 3509.611603][T30754] do_user_addr_fault+0x475/0x1210 [ 3509.616743][T30754] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3509.622338][T30754] exc_page_fault+0x98/0x170 [ 3509.626966][T30754] asm_exc_page_fault+0x26/0x30 [ 3509.631853][T30754] RIP: 0033:0x7f7e1f236ede [ 3509.636295][T30754] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3509.656016][T30754] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3509.662104][T30754] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3509.670087][T30754] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3509.678071][T30754] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3509.686053][T30754] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3509.694038][T30754] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3509.702038][T30754] [ 3509.717697][T30754] memory: usage 307188kB, limit 307200kB, failcnt 3031 [ 3509.726130][T30733] bridge4287: port 1(veth0_to_hsr) entered blocking state [ 3509.733683][T30733] bridge4287: port 1(veth0_to_hsr) entered disabled state [ 3509.738702][T30754] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3509.752193][T30754] Memory cgroup stats for /syz5: [ 3509.752445][T30754] anon 81920 [ 3509.752445][T30754] file 315392 [ 3509.752445][T30754] kernel 314159104 [ 3509.752445][T30754] kernel_stack 65536 [ 3509.752445][T30754] pagetables 69632 [ 3509.752445][T30754] sec_pagetables 0 [ 3509.752445][T30754] percpu 5436000 [ 3509.752445][T30754] sock 0 [ 3509.752445][T30754] vmalloc 8192 [ 3509.752445][T30754] shmem 315392 [ 3509.752445][T30754] zswap 0 [ 3509.752445][T30754] zswapped 0 [ 3509.752445][T30754] file_mapped 290816 [ 3509.752445][T30754] file_dirty 0 [ 3509.752445][T30754] file_writeback 0 [ 3509.752445][T30754] swapcached 0 [ 3509.752445][T30754] anon_thp 0 [ 3509.752445][T30754] file_thp 0 [ 3509.752445][T30754] shmem_thp 0 [ 3509.752445][T30754] inactive_anon 49152 [ 3509.752445][T30754] active_anon 307200 [ 3509.752445][T30754] inactive_file 0 [ 3509.752445][T30754] active_file 0 [ 3509.752445][T30754] unevictable 0 [ 3509.752445][T30754] slab_reclaimable 16792 22:16:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000004c00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3509.752445][T30754] slab_unreclaimable 308521984 [ 3509.756351][T30738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3509.764369][T30754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3509.892920][T30739] device bridge_slave_1 left promiscuous mode [ 3509.906238][T30754] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30754,uid=0 [ 3509.918764][T30739] bridge3935: port 1(bridge_slave_1) entered disabled state 22:16:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007eed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3509.927483][T30754] Memory cgroup out of memory: Killed process 30754 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3509.956670][T30739] bridge3936: port 1(bridge_slave_1) entered blocking state [ 3509.965187][T30739] bridge3936: port 1(bridge_slave_1) entered disabled state [ 3509.977853][T30739] device bridge_slave_1 entered promiscuous mode 22:16:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000437a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3510.074532][T30745] bridge4251: port 1(veth0_to_hsr) entered disabled state [ 3510.075491][T30763] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3510.096343][T30763] CPU: 0 PID: 30763 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3510.106817][T30763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3510.116961][T30763] Call Trace: [ 3510.120253][T30763] [ 3510.123205][T30763] dump_stack_lvl+0xd1/0x138 [ 3510.127840][T30763] dump_header+0x10b/0x85f [ 3510.132278][T30763] oom_kill_process.cold+0x10/0x15 [ 3510.137484][T30763] out_of_memory+0x35c/0x14a0 [ 3510.142219][T30763] ? find_held_lock+0x2d/0x110 [ 3510.147077][T30763] ? oom_killer_disable+0x280/0x280 [ 3510.152312][T30763] ? find_held_lock+0x2d/0x110 [ 3510.157112][T30763] mem_cgroup_out_of_memory+0x206/0x270 [ 3510.162692][T30763] ? mem_cgroup_margin+0x130/0x130 [ 3510.167855][T30763] ? lock_downgrade+0x6e0/0x6e0 [ 3510.172761][T30763] try_charge_memcg+0xefb/0x12f0 [ 3510.177757][T30763] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3510.183813][T30763] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3510.189595][T30763] ? lock_downgrade+0x6e0/0x6e0 [ 3510.194487][T30763] ? lock_downgrade+0x6e0/0x6e0 [ 3510.199397][T30763] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3510.204980][T30763] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3510.211168][T30763] copy_process+0x4e3/0x7520 [ 3510.215780][T30763] ? __lock_acquire+0xbc3/0x56d0 [ 3510.220747][T30763] ? __cleanup_sighand+0xb0/0xb0 [ 3510.225705][T30763] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3510.231711][T30763] ? psi_memstall_leave+0x174/0x250 [ 3510.236942][T30763] kernel_clone+0xeb/0x990 [ 3510.241468][T30763] ? create_io_thread+0xf0/0xf0 [ 3510.246866][T30763] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3510.253147][T30763] ? lock_downgrade+0x6e0/0x6e0 [ 3510.258048][T30763] __do_sys_clone+0xba/0x100 [ 3510.262692][T30763] ? kernel_clone+0x990/0x990 [ 3510.267419][T30763] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3510.273413][T30763] do_syscall_64+0x39/0xb0 [ 3510.277853][T30763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3510.283778][T30763] RIP: 0033:0x7f7e1f28d4f1 [ 3510.288214][T30763] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3510.307929][T30763] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3510.316359][T30763] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3510.324450][T30763] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3510.332481][T30763] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3510.340818][T30763] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3510.348811][T30763] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3510.356818][T30763] [ 3510.365851][T30763] memory: usage 307200kB, limit 307200kB, failcnt 3115 [ 3510.376670][T30763] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3510.377238][T30745] bridge4252: port 1(veth0_to_hsr) entered blocking state [ 3510.387679][T30763] Memory cgroup stats for [ 3510.395619][T30745] bridge4252: port 1(veth0_to_hsr) entered disabled state [ 3510.398969][T30763] /syz5: [ 3510.410525][T30763] anon 81920 [ 3510.410525][T30763] file 315392 [ 3510.410525][T30763] kernel 314146816 [ 3510.410525][T30763] kernel_stack 32768 [ 3510.410525][T30763] pagetables 69632 [ 3510.410525][T30763] sec_pagetables 0 [ 3510.410525][T30763] percpu 5436000 [ 3510.410525][T30763] sock 0 [ 3510.410525][T30763] vmalloc 8192 [ 3510.410525][T30763] shmem 315392 [ 3510.410525][T30763] zswap 0 [ 3510.410525][T30763] zswapped 0 [ 3510.410525][T30763] file_mapped 290816 [ 3510.410525][T30763] file_dirty 0 [ 3510.410525][T30763] file_writeback 0 [ 3510.410525][T30763] swapcached 0 [ 3510.410525][T30763] anon_thp 0 [ 3510.410525][T30763] file_thp 0 [ 3510.410525][T30763] shmem_thp 0 [ 3510.410525][T30763] inactive_anon 49152 [ 3510.410525][T30763] active_anon 307200 [ 3510.410525][T30763] inactive_file 0 [ 3510.410525][T30763] active_file 0 [ 3510.410525][T30763] unevictable 0 [ 3510.410525][T30763] slab_reclaimable 19752 [ 3510.410525][T30763] slab_unreclaimable 308524072 [ 3510.419083][T30746] device bridge_slave_1 left promiscuous mode 22:16:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000007fed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3510.505503][T30763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30763,uid=0 [ 3510.521542][T30746] bridge4251: port 2(bridge_slave_1) entered disabled state [ 3510.531489][T30763] Memory cgroup out of memory: Killed process 30763 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3510.564256][T30746] bridge4252: port 2(bridge_slave_1) entered blocking state 22:16:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000ba0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3510.572837][T30746] bridge4252: port 2(bridge_slave_1) entered disabled state [ 3510.591153][T30746] device bridge_slave_1 entered promiscuous mode [ 3510.681683][T30769] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3510.686466][T30750] bridge4369: port 1(veth0_to_hsr) entered disabled state [ 3510.704323][T30769] CPU: 0 PID: 30769 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3510.714785][T30769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3510.724936][T30769] Call Trace: [ 3510.728478][T30769] [ 3510.731409][T30769] dump_stack_lvl+0xd1/0x138 [ 3510.736014][T30769] dump_header+0x10b/0x85f [ 3510.740454][T30769] oom_kill_process.cold+0x10/0x15 [ 3510.745601][T30769] out_of_memory+0x35c/0x14a0 [ 3510.750297][T30769] ? find_held_lock+0x2d/0x110 [ 3510.755102][T30769] ? oom_killer_disable+0x280/0x280 [ 3510.760343][T30769] ? find_held_lock+0x2d/0x110 [ 3510.765124][T30769] mem_cgroup_out_of_memory+0x206/0x270 [ 3510.770680][T30769] ? mem_cgroup_margin+0x130/0x130 [ 3510.775826][T30769] ? lock_downgrade+0x6e0/0x6e0 [ 3510.780689][T30769] try_charge_memcg+0xefb/0x12f0 [ 3510.785908][T30769] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3510.792088][T30769] ? lock_downgrade+0x6e0/0x6e0 [ 3510.797128][T30769] charge_memcg+0x90/0x3b0 [ 3510.801568][T30769] __mem_cgroup_charge+0x2b/0x90 [ 3510.806523][T30769] ? copy_mc_to_kernel+0x3e/0x90 [ 3510.811497][T30769] do_wp_page+0x7ec/0x3370 [ 3510.815925][T30769] ? lock_release+0x810/0x810 [ 3510.820606][T30769] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3510.826016][T30769] ? do_raw_spin_lock+0x124/0x2b0 [ 3510.831054][T30769] ? rwlock_bug.part.0+0x90/0x90 [ 3510.835990][T30769] ? lock_chain_count+0x20/0x20 [ 3510.840845][T30769] __handle_mm_fault+0x1f58/0x3c90 [ 3510.845967][T30769] ? vm_iomap_memory+0x190/0x190 [ 3510.850950][T30769] handle_mm_fault+0x1b6/0x850 [ 3510.855768][T30769] do_user_addr_fault+0x475/0x1210 [ 3510.860915][T30769] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3510.866473][T30769] exc_page_fault+0x98/0x170 [ 3510.871092][T30769] asm_exc_page_fault+0x26/0x30 [ 3510.875947][T30769] RIP: 0033:0x7f7e1f236ede [ 3510.880360][T30769] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3510.900079][T30769] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3510.906176][T30769] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3510.914148][T30769] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3510.922119][T30769] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3510.930103][T30769] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3510.938078][T30769] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3510.947637][T30769] [ 3510.962779][T30769] memory: usage 307188kB, limit 307200kB, failcnt 3180 [ 3510.962932][T30750] bridge4370: port 1(veth0_to_hsr) entered blocking state [ 3510.973489][T30769] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3510.984318][T30769] Memory cgroup stats for /syz5: [ 3510.984572][T30769] anon 81920 [ 3510.984572][T30769] file 315392 [ 3510.984572][T30769] kernel 314163200 [ 3510.984572][T30769] kernel_stack 65536 [ 3510.984572][T30769] pagetables 69632 [ 3510.984572][T30769] sec_pagetables 0 [ 3510.984572][T30769] percpu 5436000 [ 3510.984572][T30769] sock 0 [ 3510.984572][T30769] vmalloc 8192 [ 3510.984572][T30769] shmem 315392 [ 3510.984572][T30769] zswap 0 [ 3510.984572][T30769] zswapped 0 [ 3510.984572][T30769] file_mapped 290816 [ 3510.984572][T30769] file_dirty 0 [ 3510.984572][T30769] file_writeback 0 [ 3510.984572][T30769] swapcached 0 [ 3510.984572][T30769] anon_thp 0 [ 3510.984572][T30769] file_thp 0 [ 3510.984572][T30769] shmem_thp 0 [ 3510.984572][T30769] inactive_anon 81920 [ 3510.984572][T30769] active_anon 307200 [ 3510.984572][T30769] inactive_file 0 [ 3510.984572][T30769] active_file 0 [ 3510.984572][T30769] unevictable 0 [ 3510.984572][T30769] slab_reclaimable 16792 [ 3510.984572][T30769] slab_unreclaimable 308522288 [ 3511.079468][T30750] bridge4370: port 1(veth0_to_hsr) entered disabled state [ 3511.081720][T30769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30769,uid=0 [ 3511.105322][T30769] Memory cgroup out of memory: Killed process 30769 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000080ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3511.130091][T30751] device bridge_slave_1 left promiscuous mode [ 3511.137126][T30751] bridge4369: port 2(bridge_slave_1) entered disabled state [ 3511.156468][T30751] bridge4370: port 2(bridge_slave_1) entered blocking state [ 3511.164310][T30751] bridge4370: port 2(bridge_slave_1) entered disabled state [ 3511.173988][T30751] device bridge_slave_1 entered promiscuous mode 22:16:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3511.258914][T30775] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3511.272787][T30758] device veth0_to_hsr left promiscuous mode [ 3511.273374][T30775] CPU: 0 PID: 30775 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3511.286802][T30758] bridge3677: port 1(veth0_to_hsr) entered disabled state [ 3511.289124][T30775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3511.289145][T30775] Call Trace: [ 3511.289154][T30775] [ 3511.289165][T30775] dump_stack_lvl+0xd1/0x138 [ 3511.317178][T30775] dump_header+0x10b/0x85f [ 3511.321628][T30775] oom_kill_process.cold+0x10/0x15 [ 3511.326772][T30775] out_of_memory+0x35c/0x14a0 [ 3511.331479][T30775] ? find_held_lock+0x2d/0x110 [ 3511.336355][T30775] ? oom_killer_disable+0x280/0x280 [ 3511.341682][T30775] ? find_held_lock+0x2d/0x110 [ 3511.346498][T30775] mem_cgroup_out_of_memory+0x206/0x270 [ 3511.352073][T30775] ? mem_cgroup_margin+0x130/0x130 [ 3511.357208][T30775] ? lock_downgrade+0x6e0/0x6e0 [ 3511.362115][T30775] try_charge_memcg+0xefb/0x12f0 [ 3511.367362][T30775] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3511.373380][T30775] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3511.379300][T30775] ? lock_downgrade+0x6e0/0x6e0 [ 3511.384189][T30775] ? lock_downgrade+0x6e0/0x6e0 [ 3511.389072][T30775] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3511.394630][T30775] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3511.400898][T30775] copy_process+0x4e3/0x7520 [ 3511.405545][T30775] ? __lock_acquire+0xbc3/0x56d0 [ 3511.410545][T30775] ? __cleanup_sighand+0xb0/0xb0 [ 3511.415515][T30775] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3511.421525][T30775] ? psi_memstall_leave+0x174/0x250 [ 3511.426767][T30775] kernel_clone+0xeb/0x990 [ 3511.431209][T30775] ? create_io_thread+0xf0/0xf0 [ 3511.436095][T30775] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3511.442363][T30775] ? lock_downgrade+0x6e0/0x6e0 [ 3511.447272][T30775] __do_sys_clone+0xba/0x100 [ 3511.451892][T30775] ? kernel_clone+0x990/0x990 [ 3511.456611][T30775] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3511.462536][T30775] do_syscall_64+0x39/0xb0 [ 3511.466980][T30775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3511.472900][T30775] RIP: 0033:0x7f7e1f28d4f1 [ 3511.477373][T30775] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3511.497014][T30775] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3511.505471][T30775] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3511.513492][T30775] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3511.521600][T30775] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3511.529613][T30775] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3511.537632][T30775] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3511.545628][T30775] [ 3511.552780][T30775] memory: usage 307200kB, limit 307200kB, failcnt 3258 [ 3511.559813][T30775] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3511.560919][T30758] bridge3678: port 1(veth0_to_hsr) entered blocking state [ 3511.566671][T30775] Memory cgroup stats for /syz5: [ 3511.566903][T30775] anon 81920 [ 3511.566903][T30775] file 315392 [ 3511.566903][T30775] kernel 314150912 [ 3511.566903][T30775] kernel_stack 32768 [ 3511.566903][T30775] pagetables 69632 [ 3511.566903][T30775] sec_pagetables 0 [ 3511.566903][T30775] percpu 5436000 [ 3511.566903][T30775] sock 0 [ 3511.566903][T30775] vmalloc 8192 [ 3511.566903][T30775] shmem 315392 [ 3511.566903][T30775] zswap 0 [ 3511.566903][T30775] zswapped 0 [ 3511.566903][T30775] file_mapped 290816 [ 3511.566903][T30775] file_dirty 0 [ 3511.566903][T30775] file_writeback 0 [ 3511.566903][T30775] swapcached 0 [ 3511.566903][T30775] anon_thp 0 [ 3511.566903][T30775] file_thp 0 [ 3511.566903][T30775] shmem_thp 0 [ 3511.566903][T30775] inactive_anon 65536 [ 3511.566903][T30775] active_anon 307200 [ 3511.566903][T30775] inactive_file 0 [ 3511.566903][T30775] active_file 0 [ 3511.566903][T30775] unevictable 0 [ 3511.566903][T30775] slab_reclaimable 16792 [ 3511.566903][T30775] slab_unreclaimable 308524072 [ 3511.594746][T30758] bridge3678: port 1(veth0_to_hsr) entered disabled state [ 3511.671804][T30775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30775,uid=0 [ 3511.693578][T30775] Memory cgroup out of memory: Killed process 30775 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000081ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3511.705104][T30758] device veth0_to_hsr entered promiscuous mode [ 3511.737394][T30759] device bridge_slave_1 left promiscuous mode [ 3511.753229][T30759] bridge3677: port 2(bridge_slave_1) entered disabled state [ 3511.775290][T30759] bridge3678: port 2(bridge_slave_1) entered blocking state [ 3511.787668][T30759] bridge3678: port 2(bridge_slave_1) entered disabled state [ 3511.797308][T30759] device bridge_slave_1 entered promiscuous mode 22:16:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000002e030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3511.824792][T30782] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3511.848052][T30782] CPU: 1 PID: 30782 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3511.858542][T30782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3511.868637][T30782] Call Trace: [ 3511.871946][T30782] [ 3511.874911][T30782] dump_stack_lvl+0xd1/0x138 [ 3511.879559][T30782] dump_header+0x10b/0x85f [ 3511.884136][T30782] oom_kill_process.cold+0x10/0x15 [ 3511.889437][T30782] out_of_memory+0x35c/0x14a0 [ 3511.890555][T30762] bridge4287: port 1(veth0_to_hsr) entered disabled state [ 3511.894235][T30782] ? find_held_lock+0x2d/0x110 [ 3511.894285][T30782] ? oom_killer_disable+0x280/0x280 [ 3511.894332][T30782] ? find_held_lock+0x2d/0x110 [ 3511.916250][T30782] mem_cgroup_out_of_memory+0x206/0x270 [ 3511.921850][T30782] ? mem_cgroup_margin+0x130/0x130 [ 3511.927100][T30782] ? lock_downgrade+0x6e0/0x6e0 [ 3511.931992][T30782] try_charge_memcg+0xefb/0x12f0 [ 3511.936939][T30782] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3511.942941][T30782] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3511.948728][T30782] ? lock_downgrade+0x6e0/0x6e0 [ 3511.952366][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.953580][T30782] ? lock_downgrade+0x6e0/0x6e0 [ 3511.953615][T30782] ? rcu_read_unlock+0x9/0x60 [ 3511.953668][T30782] obj_cgroup_charge+0x2af/0x5e0 [ 3511.960007][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.964759][T30782] __kmem_cache_alloc_node+0xb2/0x430 [ 3511.986153][T30782] ? copy_semundo+0x18b/0x300 [ 3511.990911][T30782] kmalloc_trace+0x26/0x60 [ 3511.995354][T30782] copy_semundo+0x18b/0x300 [ 3511.999883][T30782] copy_process+0x2457/0x7520 [ 3512.004598][T30782] ? page_remove_rmap+0x435/0x1210 [ 3512.009829][T30782] ? folio_flags.constprop.0+0x53/0x150 [ 3512.015396][T30782] ? __cleanup_sighand+0xb0/0xb0 [ 3512.020341][T30782] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3512.025752][T30782] ? rwlock_bug.part.0+0x90/0x90 [ 3512.030723][T30782] ? lock_chain_count+0x20/0x20 [ 3512.035585][T30782] kernel_clone+0xeb/0x990 [ 3512.040012][T30782] ? create_io_thread+0xf0/0xf0 [ 3512.044873][T30782] ? find_held_lock+0x2d/0x110 [ 3512.049670][T30782] __do_sys_clone+0xba/0x100 [ 3512.054306][T30782] ? kernel_clone+0x990/0x990 [ 3512.059024][T30782] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3512.064948][T30782] do_syscall_64+0x39/0xb0 [ 3512.069388][T30782] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3512.075329][T30782] RIP: 0033:0x7f7e1f28d4f1 [ 3512.079775][T30782] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3512.099428][T30782] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3512.107886][T30782] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3512.115866][T30782] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3512.123843][T30782] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3512.131904][T30782] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3512.139903][T30782] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3512.147924][T30782] [ 3512.154699][T30782] memory: usage 307184kB, limit 307200kB, failcnt 3359 [ 3512.162025][T30782] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3512.169007][T30782] Memory cgroup stats for /syz5: [ 3512.169328][T30782] anon 81920 [ 3512.169328][T30782] file 315392 [ 3512.169328][T30782] kernel 314159104 [ 3512.169328][T30782] kernel_stack 65536 [ 3512.169328][T30782] pagetables 69632 [ 3512.169328][T30782] sec_pagetables 0 [ 3512.169328][T30782] percpu 5436000 [ 3512.169328][T30782] sock 0 [ 3512.169328][T30782] vmalloc 8192 [ 3512.169328][T30782] shmem 315392 [ 3512.169328][T30782] zswap 0 [ 3512.169328][T30782] zswapped 0 [ 3512.169328][T30782] file_mapped 290816 [ 3512.169328][T30782] file_dirty 0 [ 3512.169328][T30782] file_writeback 0 [ 3512.169328][T30782] swapcached 0 [ 3512.169328][T30782] anon_thp 0 [ 3512.169328][T30782] file_thp 0 [ 3512.169328][T30782] shmem_thp 0 [ 3512.169328][T30782] inactive_anon 69632 [ 3512.169328][T30782] active_anon 307200 [ 3512.169328][T30782] inactive_file 0 [ 3512.169328][T30782] active_file 0 [ 3512.169328][T30782] unevictable 0 [ 3512.169328][T30782] slab_reclaimable 16792 [ 3512.169328][T30782] slab_unreclaimable 308521824 [ 3512.186002][T30762] bridge4288: port 1(veth0_to_hsr) entered blocking state 22:16:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000082ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3512.270538][T30782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30782,uid=0 [ 3512.286657][T30782] Memory cgroup out of memory: Killed process 30782 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3512.313732][T30762] bridge4288: port 1(veth0_to_hsr) entered disabled state [ 3512.341554][T30764] device bridge_slave_1 left promiscuous mode [ 3512.348558][T30764] bridge4286: port 2(bridge_slave_1) entered disabled state [ 3512.376410][T30764] bridge4288: port 2(bridge_slave_1) entered blocking state [ 3512.384163][T30764] bridge4288: port 2(bridge_slave_1) entered disabled state 22:16:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000035200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3512.395135][T30764] device bridge_slave_1 entered promiscuous mode [ 3512.397697][T30788] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3512.407733][T30766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3512.427240][T30788] CPU: 0 PID: 30788 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3512.437815][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3512.447911][T30788] Call Trace: [ 3512.451222][T30788] [ 3512.454197][T30788] dump_stack_lvl+0xd1/0x138 [ 3512.458847][T30788] dump_header+0x10b/0x85f [ 3512.463312][T30788] oom_kill_process.cold+0x10/0x15 [ 3512.468485][T30788] out_of_memory+0x35c/0x14a0 [ 3512.473224][T30788] ? find_held_lock+0x2d/0x110 [ 3512.478052][T30788] ? oom_killer_disable+0x280/0x280 [ 3512.483308][T30788] ? find_held_lock+0x2d/0x110 [ 3512.488128][T30788] mem_cgroup_out_of_memory+0x206/0x270 [ 3512.493728][T30788] ? mem_cgroup_margin+0x130/0x130 [ 3512.498979][T30788] ? lock_downgrade+0x6e0/0x6e0 [ 3512.502934][T30767] device bridge_slave_1 left promiscuous mode [ 3512.503863][T30788] try_charge_memcg+0xefb/0x12f0 [ 3512.511084][T30767] bridge3936: port 1(bridge_slave_1) entered disabled state [ 3512.514897][T30788] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3512.514938][T30788] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3512.514982][T30788] ? lock_downgrade+0x6e0/0x6e0 [ 3512.515013][T30788] ? lock_downgrade+0x6e0/0x6e0 [ 3512.543696][T30788] ? rcu_read_unlock+0x9/0x60 [ 3512.548394][T30788] obj_cgroup_charge+0x2af/0x5e0 [ 3512.553360][T30788] ? copy_process+0x3aa/0x7520 [ 3512.558149][T30788] kmem_cache_alloc_node+0xb7/0x460 [ 3512.563363][T30788] copy_process+0x3aa/0x7520 [ 3512.568001][T30788] ? __lock_acquire+0xbc3/0x56d0 [ 3512.572986][T30788] ? __cleanup_sighand+0xb0/0xb0 [ 3512.577948][T30788] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3512.583966][T30788] ? psi_memstall_leave+0x174/0x250 [ 3512.589203][T30788] kernel_clone+0xeb/0x990 [ 3512.593759][T30788] ? create_io_thread+0xf0/0xf0 [ 3512.598639][T30788] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3512.605081][T30788] ? lock_downgrade+0x6e0/0x6e0 [ 3512.609979][T30788] __do_sys_clone+0xba/0x100 [ 3512.614572][T30788] ? kernel_clone+0x990/0x990 [ 3512.619277][T30788] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3512.625234][T30788] do_syscall_64+0x39/0xb0 [ 3512.629682][T30788] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3512.635627][T30788] RIP: 0033:0x7f7e1f28d4f1 [ 3512.640068][T30788] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3512.661789][T30788] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3512.670238][T30788] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3512.678244][T30788] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3512.686329][T30788] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3512.694301][T30788] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3512.702377][T30788] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3512.710398][T30788] [ 3512.718697][T30788] memory: usage 307200kB, limit 307200kB, failcnt 3429 [ 3512.726533][T30788] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3512.733849][T30788] Memory cgroup stats for /syz5: [ 3512.734085][T30788] anon 81920 [ 3512.734085][T30788] file 315392 [ 3512.734085][T30788] kernel 314122240 [ 3512.734085][T30788] kernel_stack 32768 [ 3512.734085][T30788] pagetables 69632 [ 3512.734085][T30788] sec_pagetables 0 [ 3512.734085][T30788] percpu 5436000 [ 3512.734085][T30788] sock 0 [ 3512.734085][T30788] vmalloc 8192 [ 3512.734085][T30788] shmem 315392 [ 3512.734085][T30788] zswap 0 [ 3512.734085][T30788] zswapped 0 [ 3512.734085][T30788] file_mapped 290816 [ 3512.734085][T30788] file_dirty 0 [ 3512.734085][T30788] file_writeback 0 [ 3512.734085][T30788] swapcached 0 [ 3512.734085][T30788] anon_thp 0 [ 3512.734085][T30788] file_thp 0 [ 3512.734085][T30788] shmem_thp 0 [ 3512.734085][T30788] inactive_anon 81920 [ 3512.734085][T30788] active_anon 307200 [ 3512.734085][T30788] inactive_file 0 [ 3512.734085][T30788] active_file 0 [ 3512.734085][T30788] unevictable 0 [ 3512.734085][T30788] slab_reclaimable 19752 [ 3512.734085][T30788] slab_unreclaimable 308516576 [ 3512.751100][T30767] bridge3937: port 1(bridge_slave_1) entered blocking state 22:16:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000083ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000447a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3512.840676][T30767] bridge3937: port 1(bridge_slave_1) entered disabled state [ 3512.846564][T30788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30788,uid=0 [ 3512.850316][T30767] device bridge_slave_1 entered promiscuous mode [ 3512.872478][T30788] Memory cgroup out of memory: Killed process 30788 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3512.972708][T30794] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3512.983535][T30794] CPU: 0 PID: 30794 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3512.987955][T30773] bridge4252: port 1(veth0_to_hsr) entered disabled state [ 3512.993977][T30794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3512.993999][T30794] Call Trace: [ 3512.994007][T30794] [ 3512.994017][T30794] dump_stack_lvl+0xd1/0x138 [ 3512.994062][T30794] dump_header+0x10b/0x85f [ 3513.026476][T30794] oom_kill_process.cold+0x10/0x15 [ 3513.031641][T30794] out_of_memory+0x35c/0x14a0 [ 3513.036376][T30794] ? find_held_lock+0x2d/0x110 [ 3513.041194][T30794] ? oom_killer_disable+0x280/0x280 [ 3513.046453][T30794] ? find_held_lock+0x2d/0x110 [ 3513.051274][T30794] mem_cgroup_out_of_memory+0x206/0x270 [ 3513.056866][T30794] ? mem_cgroup_margin+0x130/0x130 [ 3513.061998][T30794] ? lock_downgrade+0x6e0/0x6e0 [ 3513.066888][T30794] try_charge_memcg+0xefb/0x12f0 [ 3513.071872][T30794] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3513.077899][T30794] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3513.083675][T30794] ? lock_downgrade+0x6e0/0x6e0 [ 3513.088568][T30794] ? lock_downgrade+0x6e0/0x6e0 [ 3513.093449][T30794] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3513.099078][T30794] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3513.105251][T30794] copy_process+0x4e3/0x7520 [ 3513.109879][T30794] ? page_remove_rmap+0x435/0x1210 [ 3513.115198][T30794] ? folio_flags.constprop.0+0x53/0x150 [ 3513.120763][T30794] ? put_page+0xd9/0x280 [ 3513.125045][T30794] ? do_wp_page+0x844/0x3370 [ 3513.129688][T30794] ? __cleanup_sighand+0xb0/0xb0 [ 3513.134825][T30794] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3513.140227][T30794] ? rwlock_bug.part.0+0x90/0x90 [ 3513.145395][T30794] ? lock_chain_count+0x20/0x20 [ 3513.150557][T30794] kernel_clone+0xeb/0x990 [ 3513.155005][T30794] ? create_io_thread+0xf0/0xf0 [ 3513.159886][T30794] ? find_held_lock+0x2d/0x110 [ 3513.164811][T30794] __do_sys_clone+0xba/0x100 [ 3513.169442][T30794] ? kernel_clone+0x990/0x990 [ 3513.174164][T30794] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3513.180440][T30794] do_syscall_64+0x39/0xb0 [ 3513.184893][T30794] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.190834][T30794] RIP: 0033:0x7f7e1f28d4f1 [ 3513.195280][T30794] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3513.214926][T30794] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3513.223361][T30794] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3513.231373][T30794] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3513.239392][T30794] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3513.247399][T30794] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3513.255403][T30794] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3513.263438][T30794] [ 3513.276472][T30794] memory: usage 307200kB, limit 307200kB, failcnt 3508 [ 3513.278912][T30773] bridge4253: port 1(veth0_to_hsr) entered blocking state [ 3513.287100][T30794] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3513.298172][T30794] Memory cgroup stats for /syz5: [ 3513.298377][T30794] anon 81920 [ 3513.298377][T30794] file 315392 [ 3513.298377][T30794] kernel 314159104 [ 3513.298377][T30794] kernel_stack 32768 [ 3513.298377][T30794] pagetables 69632 [ 3513.298377][T30794] sec_pagetables 0 [ 3513.298377][T30794] percpu 5436000 [ 3513.298377][T30794] sock 0 [ 3513.298377][T30794] vmalloc 8192 [ 3513.298377][T30794] shmem 315392 [ 3513.298377][T30794] zswap 0 [ 3513.298377][T30794] zswapped 0 [ 3513.298377][T30794] file_mapped 290816 [ 3513.298377][T30794] file_dirty 0 [ 3513.298377][T30794] file_writeback 0 [ 3513.298377][T30794] swapcached 0 [ 3513.298377][T30794] anon_thp 0 [ 3513.298377][T30794] file_thp 0 [ 3513.298377][T30794] shmem_thp 0 [ 3513.298377][T30794] inactive_anon 49152 [ 3513.298377][T30794] active_anon 307200 [ 3513.298377][T30794] inactive_file 0 [ 3513.298377][T30794] active_file 0 [ 3513.298377][T30794] unevictable 0 [ 3513.298377][T30794] slab_reclaimable 19368 [ 3513.298377][T30794] slab_unreclaimable 308521824 [ 3513.306657][T30773] bridge4253: port 1(veth0_to_hsr) entered disabled state [ 3513.406114][T30794] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30794,uid=0 22:16:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000084ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3513.422914][T30794] Memory cgroup out of memory: Killed process 30794 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3513.465384][T30774] device bridge_slave_1 left promiscuous mode [ 3513.472485][T30774] bridge4252: port 2(bridge_slave_1) entered disabled state [ 3513.503465][T30774] bridge4253: port 2(bridge_slave_1) entered blocking state [ 3513.508787][T30799] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3513.523907][T30774] bridge4253: port 2(bridge_slave_1) entered disabled state [ 3513.525335][T30799] CPU: 0 PID: 30799 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3513.539086][T30774] device bridge_slave_1 entered promiscuous mode [ 3513.541690][T30799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3513.541708][T30799] Call Trace: [ 3513.541717][T30799] [ 3513.541728][T30799] dump_stack_lvl+0xd1/0x138 [ 3513.541774][T30799] dump_header+0x10b/0x85f [ 3513.541809][T30799] oom_kill_process.cold+0x10/0x15 [ 3513.541842][T30799] out_of_memory+0x35c/0x14a0 [ 3513.541889][T30799] ? find_held_lock+0x2d/0x110 [ 3513.541929][T30799] ? oom_killer_disable+0x280/0x280 [ 3513.593332][T30799] ? find_held_lock+0x2d/0x110 [ 3513.598157][T30799] mem_cgroup_out_of_memory+0x206/0x270 [ 3513.603758][T30799] ? mem_cgroup_margin+0x130/0x130 [ 3513.608922][T30799] ? lock_downgrade+0x6e0/0x6e0 [ 3513.613832][T30799] try_charge_memcg+0xefb/0x12f0 [ 3513.618820][T30799] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3513.624854][T30799] ? lock_downgrade+0x6e0/0x6e0 [ 3513.629761][T30799] charge_memcg+0x90/0x3b0 [ 3513.634207][T30799] __mem_cgroup_charge+0x2b/0x90 [ 3513.639166][T30799] ? _compound_head+0x5d/0x150 [ 3513.643956][T30799] __handle_mm_fault+0x187d/0x3c90 [ 3513.649145][T30799] ? vm_iomap_memory+0x190/0x190 [ 3513.654231][T30799] handle_mm_fault+0x1b6/0x850 [ 3513.663550][T30799] do_user_addr_fault+0x475/0x1210 [ 3513.668691][T30799] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3513.674280][T30799] exc_page_fault+0x98/0x170 [ 3513.678907][T30799] asm_exc_page_fault+0x26/0x30 [ 3513.683782][T30799] RIP: 0033:0x7f7e1f23b8cf [ 3513.688213][T30799] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 3513.707842][T30799] RSP: 002b:00007ffc49b309e0 EFLAGS: 00010246 [ 3513.713927][T30799] RAX: 00007f7e1ff02000 RBX: 0000000000021000 RCX: 00007f7e1f28c1d7 [ 3513.721909][T30799] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7e1ff03000 [ 3513.729896][T30799] RBP: 00007ffc49b30ab0 R08: 00000000ffffffff R09: 00007f7e1ff22700 [ 3513.737877][T30799] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc49b30bd0 [ 3513.745861][T30799] R13: 00007f7e1ff22700 R14: 0000000000000000 R15: 0000000000022000 22:16:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000ca0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3513.753867][T30799] [ 3513.791174][T30799] memory: usage 307140kB, limit 307200kB, failcnt 3558 [ 3513.792513][T30778] bridge4370: port 1(veth0_to_hsr) entered disabled state [ 3513.798431][T30799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3513.812729][T30799] Memory cgroup stats for /syz5: [ 3513.812977][T30799] anon 73728 [ 3513.812977][T30799] file 315392 [ 3513.812977][T30799] kernel 314122240 [ 3513.812977][T30799] kernel_stack 32768 [ 3513.812977][T30799] pagetables 69632 [ 3513.812977][T30799] sec_pagetables 0 [ 3513.812977][T30799] percpu 5436000 [ 3513.812977][T30799] sock 0 [ 3513.812977][T30799] vmalloc 8192 [ 3513.812977][T30799] shmem 315392 [ 3513.812977][T30799] zswap 0 [ 3513.812977][T30799] zswapped 0 [ 3513.812977][T30799] file_mapped 290816 [ 3513.812977][T30799] file_dirty 0 [ 3513.812977][T30799] file_writeback 0 [ 3513.812977][T30799] swapcached 0 [ 3513.812977][T30799] anon_thp 0 [ 3513.812977][T30799] file_thp 0 [ 3513.812977][T30799] shmem_thp 0 [ 3513.812977][T30799] inactive_anon 81920 [ 3513.812977][T30799] active_anon 307200 [ 3513.812977][T30799] inactive_file 0 [ 3513.812977][T30799] active_file 0 [ 3513.812977][T30799] unevictable 0 [ 3513.812977][T30799] slab_reclaimable 16792 [ 3513.812977][T30799] slab_unreclaimable 308514024 [ 3513.913740][T30778] bridge4371: port 1(veth0_to_hsr) entered blocking state [ 3513.921083][T30799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30799,uid=0 22:16:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000085ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3513.929883][T30778] bridge4371: port 1(veth0_to_hsr) entered disabled state [ 3513.937078][T30799] Memory cgroup out of memory: Killed process 30799 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3513.979465][T30779] device bridge_slave_1 left promiscuous mode [ 3513.985923][T30779] bridge4370: port 2(bridge_slave_1) entered disabled state [ 3514.007241][T30779] bridge4371: port 2(bridge_slave_1) entered blocking state [ 3514.014926][T30779] bridge4371: port 2(bridge_slave_1) entered disabled state [ 3514.026965][T30779] device bridge_slave_1 entered promiscuous mode [ 3514.063186][T30804] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3514.076283][T30804] CPU: 1 PID: 30804 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3514.086777][T30804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3514.096956][T30804] Call Trace: [ 3514.100347][T30804] [ 3514.103310][T30804] dump_stack_lvl+0xd1/0x138 [ 3514.107953][T30804] dump_header+0x10b/0x85f 22:16:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000007", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3514.112432][T30804] oom_kill_process.cold+0x10/0x15 [ 3514.117620][T30804] out_of_memory+0x35c/0x14a0 [ 3514.122354][T30804] ? find_held_lock+0x2d/0x110 [ 3514.127014][T30785] device veth0_to_hsr left promiscuous mode [ 3514.127141][T30804] ? oom_killer_disable+0x280/0x280 [ 3514.133997][T30785] bridge3678: port 1(veth0_to_hsr) entered disabled state [ 3514.138238][T30804] ? find_held_lock+0x2d/0x110 [ 3514.138291][T30804] mem_cgroup_out_of_memory+0x206/0x270 [ 3514.138337][T30804] ? mem_cgroup_margin+0x130/0x130 [ 3514.138375][T30804] ? lock_downgrade+0x6e0/0x6e0 [ 3514.165757][T30804] try_charge_memcg+0xefb/0x12f0 [ 3514.170728][T30804] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3514.176755][T30804] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3514.182499][T30804] ? lock_downgrade+0x6e0/0x6e0 [ 3514.187371][T30804] ? lock_downgrade+0x6e0/0x6e0 [ 3514.192256][T30804] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3514.197824][T30804] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3514.203990][T30804] copy_process+0x4e3/0x7520 [ 3514.208961][T30804] ? folio_flags.constprop.0+0x53/0x150 [ 3514.214563][T30804] ? put_page+0xd9/0x280 [ 3514.218852][T30804] ? do_wp_page+0x844/0x3370 [ 3514.223501][T30804] ? __cleanup_sighand+0xb0/0xb0 [ 3514.228465][T30804] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3514.233843][T30804] ? rwlock_bug.part.0+0x90/0x90 [ 3514.238782][T30804] ? lock_chain_count+0x20/0x20 [ 3514.243653][T30804] kernel_clone+0xeb/0x990 [ 3514.248168][T30804] ? create_io_thread+0xf0/0xf0 [ 3514.253028][T30804] ? find_held_lock+0x2d/0x110 [ 3514.257829][T30804] __do_sys_clone+0xba/0x100 [ 3514.262434][T30804] ? kernel_clone+0x990/0x990 [ 3514.267176][T30804] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3514.273129][T30804] do_syscall_64+0x39/0xb0 [ 3514.277587][T30804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3514.283516][T30804] RIP: 0033:0x7f7e1f28d4f1 [ 3514.287928][T30804] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3514.307997][T30804] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3514.316426][T30804] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3514.324436][T30804] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3514.332442][T30804] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3514.340558][T30804] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3514.348565][T30804] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3514.356589][T30804] [ 3514.364014][T30804] memory: usage 307200kB, limit 307200kB, failcnt 3649 [ 3514.371158][T30804] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3514.380053][T30785] bridge3679: port 1(veth0_to_hsr) entered blocking state [ 3514.380083][T30804] Memory cgroup stats for /syz5: [ 3514.387434][T30804] anon 81920 [ 3514.387434][T30804] file 315392 [ 3514.387434][T30804] kernel 314155008 [ 3514.387434][T30804] kernel_stack 32768 [ 3514.387434][T30804] pagetables 69632 [ 3514.387434][T30804] sec_pagetables 0 [ 3514.387434][T30804] percpu 5436000 [ 3514.387434][T30804] sock 0 [ 3514.387434][T30804] vmalloc 8192 [ 3514.387434][T30804] shmem 315392 [ 3514.387434][T30804] zswap 0 [ 3514.387434][T30804] zswapped 0 [ 3514.387434][T30804] file_mapped 290816 [ 3514.387434][T30804] file_dirty 0 [ 3514.387434][T30804] file_writeback 0 [ 3514.387434][T30804] swapcached 0 [ 3514.387434][T30804] anon_thp 0 [ 3514.387434][T30804] file_thp 0 [ 3514.387434][T30804] shmem_thp 0 [ 3514.387434][T30804] inactive_anon 90112 [ 3514.387434][T30804] active_anon 307200 [ 3514.387434][T30804] inactive_file 0 [ 3514.387434][T30804] active_file 0 [ 3514.387434][T30804] unevictable 0 [ 3514.387434][T30804] slab_reclaimable 16792 [ 3514.387434][T30804] slab_unreclaimable 308521824 [ 3514.392361][T30785] bridge3679: port 1(veth0_to_hsr) entered disabled state [ 3514.392863][T30804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3514.500701][T30785] device veth0_to_hsr entered promiscuous mode 22:16:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000086ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3514.509323][T30804] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30804,uid=0 [ 3514.525564][T30786] device bridge_slave_1 left promiscuous mode [ 3514.532941][T30786] bridge3678: port 2(bridge_slave_1) entered disabled state [ 3514.539383][T30804] Memory cgroup out of memory: Killed process 30804 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3514.577903][T30786] bridge3679: port 2(bridge_slave_1) entered blocking state [ 3514.586389][T30786] bridge3679: port 2(bridge_slave_1) entered disabled state [ 3514.610891][T30786] device bridge_slave_1 entered promiscuous mode 22:16:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000009a030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3514.627280][T30811] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3514.647451][T30811] CPU: 1 PID: 30811 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3514.657936][T30811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3514.668284][T30811] Call Trace: [ 3514.671589][T30811] [ 3514.674559][T30811] dump_stack_lvl+0xd1/0x138 [ 3514.679214][T30811] dump_header+0x10b/0x85f [ 3514.683679][T30811] oom_kill_process.cold+0x10/0x15 [ 3514.688834][T30811] out_of_memory+0x35c/0x14a0 [ 3514.693581][T30811] ? find_held_lock+0x2d/0x110 [ 3514.698395][T30811] ? oom_killer_disable+0x280/0x280 [ 3514.699612][T30791] bridge4288: port 1(veth0_to_hsr) entered disabled state [ 3514.703797][T30811] ? find_held_lock+0x2d/0x110 [ 3514.703849][T30811] mem_cgroup_out_of_memory+0x206/0x270 [ 3514.703895][T30811] ? mem_cgroup_margin+0x130/0x130 [ 3514.726461][T30811] ? lock_downgrade+0x6e0/0x6e0 [ 3514.731347][T30811] try_charge_memcg+0xefb/0x12f0 [ 3514.736302][T30811] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3514.742313][T30811] ? lock_downgrade+0x6e0/0x6e0 [ 3514.747221][T30811] charge_memcg+0x90/0x3b0 [ 3514.751669][T30811] __mem_cgroup_charge+0x2b/0x90 [ 3514.756626][T30811] ? _compound_head+0x5d/0x150 [ 3514.761412][T30811] __handle_mm_fault+0x187d/0x3c90 [ 3514.766564][T30811] ? vm_iomap_memory+0x190/0x190 [ 3514.771575][T30811] handle_mm_fault+0x1b6/0x850 [ 3514.776470][T30811] do_user_addr_fault+0x475/0x1210 [ 3514.781616][T30811] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3514.787372][T30811] exc_page_fault+0x98/0x170 [ 3514.791988][T30811] asm_exc_page_fault+0x26/0x30 [ 3514.796862][T30811] RIP: 0033:0x7f7e1f23b8cf [ 3514.801294][T30811] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 3514.820918][T30811] RSP: 002b:00007ffc49b309e0 EFLAGS: 00010246 [ 3514.827088][T30811] RAX: 00007f7e1ff02000 RBX: 0000000000021000 RCX: 00007f7e1f28c1d7 [ 3514.835074][T30811] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7e1ff03000 [ 3514.843058][T30811] RBP: 00007ffc49b30ab0 R08: 00000000ffffffff R09: 00007f7e1ff22700 [ 3514.851042][T30811] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc49b30bd0 [ 3514.859044][T30811] R13: 00007f7e1ff22700 R14: 0000000000000000 R15: 0000000000022000 [ 3514.867049][T30811] [ 3514.886672][T30811] memory: usage 307156kB, limit 307200kB, failcnt 3704 [ 3514.889305][T30791] bridge4289: port 1(veth0_to_hsr) entered blocking state [ 3514.898781][T30811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3514.905884][T30791] bridge4289: port 1(veth0_to_hsr) entered disabled state [ 3514.907986][T30811] Memory cgroup stats for /syz5: [ 3514.922919][T30811] anon 73728 [ 3514.922919][T30811] file 315392 [ 3514.922919][T30811] kernel 314138624 [ 3514.922919][T30811] kernel_stack 32768 [ 3514.922919][T30811] pagetables 69632 [ 3514.922919][T30811] sec_pagetables 0 [ 3514.922919][T30811] percpu 5436064 [ 3514.922919][T30811] sock 0 [ 3514.922919][T30811] vmalloc 8192 [ 3514.922919][T30811] shmem 315392 [ 3514.922919][T30811] zswap 0 [ 3514.922919][T30811] zswapped 0 [ 3514.922919][T30811] file_mapped 290816 [ 3514.922919][T30811] file_dirty 0 [ 3514.922919][T30811] file_writeback 0 [ 3514.922919][T30811] swapcached 0 [ 3514.922919][T30811] anon_thp 0 [ 3514.922919][T30811] file_thp 0 [ 3514.922919][T30811] shmem_thp 0 [ 3514.922919][T30811] inactive_anon 49152 [ 3514.922919][T30811] active_anon 307200 [ 3514.922919][T30811] inactive_file 0 [ 3514.922919][T30811] active_file 0 [ 3514.922919][T30811] unevictable 0 [ 3514.922919][T30811] slab_reclaimable 16792 [ 3514.922919][T30811] slab_unreclaimable 308525808 [ 3515.020055][T30792] device bridge_slave_1 left promiscuous mode [ 3515.026520][T30792] bridge4288: port 2(bridge_slave_1) entered disabled state [ 3515.043168][T30811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30811,uid=0 [ 3515.054578][T30792] bridge4289: port 2(bridge_slave_1) entered blocking state [ 3515.070096][T30792] bridge4289: port 2(bridge_slave_1) entered disabled state [ 3515.071249][T30811] Memory cgroup out of memory: Killed process 30811 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000087ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:16:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000035a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3515.078952][T30792] device bridge_slave_1 entered promiscuous mode [ 3515.108827][T30796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3515.181148][T30797] device bridge_slave_1 left promiscuous mode [ 3515.187675][T30797] bridge3937: port 1(bridge_slave_1) entered disabled state [ 3515.223618][T30797] bridge3938: port 1(bridge_slave_1) entered blocking state [ 3515.233305][T30818] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3515.238256][T30797] bridge3938: port 1(bridge_slave_1) entered disabled state [ 3515.244375][T30818] CPU: 1 PID: 30818 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3515.259884][T30797] device bridge_slave_1 entered promiscuous mode [ 3515.261787][T30818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3515.261807][T30818] Call Trace: [ 3515.261815][T30818] [ 3515.261827][T30818] dump_stack_lvl+0xd1/0x138 [ 3515.261873][T30818] dump_header+0x10b/0x85f [ 3515.294951][T30818] oom_kill_process.cold+0x10/0x15 [ 3515.300108][T30818] out_of_memory+0x35c/0x14a0 [ 3515.304824][T30818] ? find_held_lock+0x2d/0x110 [ 3515.309619][T30818] ? oom_killer_disable+0x280/0x280 [ 3515.314880][T30818] ? find_held_lock+0x2d/0x110 [ 3515.319787][T30818] mem_cgroup_out_of_memory+0x206/0x270 [ 3515.325379][T30818] ? mem_cgroup_margin+0x130/0x130 [ 3515.330520][T30818] ? lock_downgrade+0x6e0/0x6e0 [ 3515.335406][T30818] try_charge_memcg+0xefb/0x12f0 [ 3515.340374][T30818] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3515.346375][T30818] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3515.352160][T30818] ? lock_downgrade+0x6e0/0x6e0 [ 3515.357030][T30818] ? lock_downgrade+0x6e0/0x6e0 [ 3515.361922][T30818] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3515.367493][T30818] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3515.373671][T30818] copy_process+0x1359/0x7520 [ 3515.378455][T30818] ? __lock_acquire+0xbc3/0x56d0 [ 3515.383421][T30818] ? __cleanup_sighand+0xb0/0xb0 [ 3515.388381][T30818] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3515.394387][T30818] ? psi_memstall_leave+0x174/0x250 [ 3515.399621][T30818] kernel_clone+0xeb/0x990 [ 3515.404065][T30818] ? create_io_thread+0xf0/0xf0 [ 3515.408945][T30818] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3515.415219][T30818] ? lock_downgrade+0x6e0/0x6e0 [ 3515.420102][T30818] __do_sys_clone+0xba/0x100 [ 3515.424713][T30818] ? kernel_clone+0x990/0x990 [ 3515.429424][T30818] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3515.435347][T30818] do_syscall_64+0x39/0xb0 [ 3515.439779][T30818] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.445693][T30818] RIP: 0033:0x7f7e1f28d4f1 [ 3515.450125][T30818] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3515.469750][T30818] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3515.478266][T30818] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3515.486253][T30818] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3515.494249][T30818] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3515.502232][T30818] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3515.510240][T30818] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3515.518259][T30818] 22:16:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000457a0f0000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3515.524860][T30819] bridge4289: port 1(veth0_to_hsr) entered disabled state [ 3515.541046][T30818] memory: usage 307176kB, limit 307200kB, failcnt 3806 [ 3515.550786][T30818] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3515.565665][T30818] Memory cgroup stats for /syz5: [ 3515.565939][T30818] anon 81920 [ 3515.565939][T30818] file 315392 [ 3515.565939][T30818] kernel 314150912 [ 3515.565939][T30818] kernel_stack 32768 [ 3515.565939][T30818] pagetables 69632 [ 3515.565939][T30818] sec_pagetables 0 [ 3515.565939][T30818] percpu 5436000 [ 3515.565939][T30818] sock 0 [ 3515.565939][T30818] vmalloc 8192 [ 3515.565939][T30818] shmem 315392 [ 3515.565939][T30818] zswap 0 [ 3515.565939][T30818] zswapped 0 [ 3515.565939][T30818] file_mapped 290816 [ 3515.565939][T30818] file_dirty 0 [ 3515.565939][T30818] file_writeback 0 [ 3515.565939][T30818] swapcached 0 [ 3515.565939][T30818] anon_thp 0 [ 3515.565939][T30818] file_thp 0 [ 3515.565939][T30818] shmem_thp 0 [ 3515.565939][T30818] inactive_anon 90112 [ 3515.565939][T30818] active_anon 307200 [ 3515.565939][T30818] inactive_file 0 [ 3515.565939][T30818] active_file 0 [ 3515.565939][T30818] unevictable 0 [ 3515.565939][T30818] slab_reclaimable 16792 [ 3515.565939][T30818] slab_unreclaimable 308521824 [ 3515.624408][T30802] bridge4253: port 1(veth0_to_hsr) entered disabled state [ 3515.675830][T30802] bridge4254: port 1(veth0_to_hsr) entered blocking state [ 3515.684810][T30802] bridge4254: port 1(veth0_to_hsr) entered disabled state [ 3515.709252][T30803] device bridge_slave_1 left promiscuous mode [ 3515.715738][T30818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30818,uid=0 [ 3515.724506][T30803] bridge4253: port 2(bridge_slave_1) entered disabled state [ 3515.732505][T30818] Memory cgroup out of memory: Killed process 30818 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:16:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000088ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3515.770043][T30803] bridge4254: port 2(bridge_slave_1) entered blocking state [ 3515.792522][T30803] bridge4254: port 2(bridge_slave_1) entered disabled state [ 3515.801616][T30803] device bridge_slave_1 entered promiscuous mode 22:16:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000da0200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3515.864245][T30825] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3515.876293][T30825] CPU: 0 PID: 30825 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3515.886782][T30825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3515.896924][T30825] Call Trace: [ 3515.900232][T30825] [ 3515.903194][T30825] dump_stack_lvl+0xd1/0x138 [ 3515.906413][T30807] bridge4371: port 1(veth0_to_hsr) entered disabled state [ 3515.907819][T30825] dump_header+0x10b/0x85f [ 3515.907858][T30825] oom_kill_process.cold+0x10/0x15 [ 3515.924531][T30825] out_of_memory+0x35c/0x14a0 [ 3515.929290][T30825] ? find_held_lock+0x2d/0x110 [ 3515.934111][T30825] ? oom_killer_disable+0x280/0x280 [ 3515.939468][T30825] ? find_held_lock+0x2d/0x110 [ 3515.944290][T30825] mem_cgroup_out_of_memory+0x206/0x270 [ 3515.949891][T30825] ? mem_cgroup_margin+0x130/0x130 [ 3515.955048][T30825] ? lock_downgrade+0x6e0/0x6e0 [ 3515.959955][T30825] try_charge_memcg+0xefb/0x12f0 [ 3515.965804][T30825] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3515.971827][T30825] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3515.977567][T30825] ? lock_downgrade+0x6e0/0x6e0 [ 3515.982433][T30825] ? lock_downgrade+0x6e0/0x6e0 [ 3515.987338][T30825] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3515.992919][T30825] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3515.999080][T30825] copy_process+0x1359/0x7520 [ 3516.003771][T30825] ? page_remove_rmap+0x435/0x1210 [ 3516.008922][T30825] ? folio_flags.constprop.0+0x53/0x150 [ 3516.014505][T30825] ? put_page+0xd9/0x280 [ 3516.018773][T30825] ? do_wp_page+0x844/0x3370 [ 3516.023396][T30825] ? __cleanup_sighand+0xb0/0xb0 [ 3516.028389][T30825] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3516.033771][T30825] ? rwlock_bug.part.0+0x90/0x90 [ 3516.038735][T30825] ? lock_chain_count+0x20/0x20 [ 3516.043729][T30825] kernel_clone+0xeb/0x990 [ 3516.048218][T30825] ? create_io_thread+0xf0/0xf0 [ 3516.053107][T30825] ? find_held_lock+0x2d/0x110 [ 3516.057889][T30825] __do_sys_clone+0xba/0x100 [ 3516.062501][T30825] ? kernel_clone+0x990/0x990 [ 3516.067214][T30825] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3516.073141][T30825] do_syscall_64+0x39/0xb0 [ 3516.077559][T30825] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3516.083468][T30825] RIP: 0033:0x7f7e1f28d4f1 [ 3516.087908][T30825] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3516.107524][T30825] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3516.115963][T30825] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3516.123969][T30825] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3516.132527][T30825] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3516.140520][T30825] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3516.148519][T30825] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3516.156511][T30825] [ 3516.162158][T30825] memory: usage 307188kB, limit 307200kB, failcnt 3881 [ 3516.172814][T30807] bridge4372: port 1(veth0_to_hsr) entered blocking state [ 3516.175816][T30825] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3516.183061][T30807] bridge4372: port 1(veth0_to_hsr) entered disabled state [ 3516.189493][T30825] Memory cgroup stats for /syz5: [ 3516.195329][T30825] anon 81920 [ 3516.195329][T30825] file 315392 [ 3516.195329][T30825] kernel 314146816 [ 3516.195329][T30825] kernel_stack 32768 [ 3516.195329][T30825] pagetables 69632 [ 3516.195329][T30825] sec_pagetables 0 [ 3516.195329][T30825] percpu 5436000 [ 3516.195329][T30825] sock 0 [ 3516.195329][T30825] vmalloc 8192 [ 3516.195329][T30825] shmem 315392 [ 3516.195329][T30825] zswap 0 [ 3516.195329][T30825] zswapped 0 [ 3516.195329][T30825] file_mapped 290816 [ 3516.195329][T30825] file_dirty 0 [ 3516.195329][T30825] file_writeback 0 [ 3516.195329][T30825] swapcached 0 [ 3516.195329][T30825] anon_thp 0 [ 3516.195329][T30825] file_thp 0 [ 3516.195329][T30825] shmem_thp 0 [ 3516.195329][T30825] inactive_anon 49152 [ 3516.195329][T30825] active_anon 307200 [ 3516.195329][T30825] inactive_file 0 [ 3516.195329][T30825] active_file 0 [ 3516.195329][T30825] unevictable 0 [ 3516.195329][T30825] slab_reclaimable 16792 [ 3516.195329][T30825] slab_unreclaimable 308521824 [ 3516.210937][T30808] device bridge_slave_1 left promiscuous mode [ 3516.292785][T30825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30825,uid=0 22:16:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000089ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3516.314934][T30825] Memory cgroup out of memory: Killed process 30825 (syz-executor.5) total-vm:54540kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3516.320013][T30808] bridge4371: port 2(bridge_slave_1) entered disabled state [ 3516.357559][T30808] bridge4372: port 2(bridge_slave_1) entered blocking state [ 3516.373441][T30808] bridge4372: port 2(bridge_slave_1) entered disabled state [ 3516.388687][T30808] device bridge_slave_1 entered promiscuous mode 22:16:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3516.488838][T30831] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3516.492151][T30814] device veth0_to_hsr left promiscuous mode [ 3516.506131][T30814] bridge3679: port 1(veth0_to_hsr) entered disabled state [ 3516.508080][T30831] CPU: 1 PID: 30831 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3516.523695][T30831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3516.533761][T30831] Call Trace: [ 3516.537126][T30831] [ 3516.540068][T30831] dump_stack_lvl+0xd1/0x138 [ 3516.544704][T30831] dump_header+0x10b/0x85f [ 3516.549139][T30831] oom_kill_process.cold+0x10/0x15 [ 3516.554281][T30831] out_of_memory+0x35c/0x14a0 [ 3516.559270][T30831] ? find_held_lock+0x2d/0x110 [ 3516.564068][T30831] ? oom_killer_disable+0x280/0x280 [ 3516.569303][T30831] ? find_held_lock+0x2d/0x110 [ 3516.574271][T30831] mem_cgroup_out_of_memory+0x206/0x270 [ 3516.579864][T30831] ? mem_cgroup_margin+0x130/0x130 [ 3516.585000][T30831] ? lock_downgrade+0x6e0/0x6e0 [ 3516.589887][T30831] try_charge_memcg+0xefb/0x12f0 [ 3516.594853][T30831] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3516.600873][T30831] ? lock_downgrade+0x6e0/0x6e0 [ 3516.605930][T30831] charge_memcg+0x90/0x3b0 [ 3516.610375][T30831] __mem_cgroup_charge+0x2b/0x90 [ 3516.615332][T30831] ? copy_mc_to_kernel+0x3e/0x90 [ 3516.620290][T30831] do_wp_page+0x7ec/0x3370 [ 3516.624738][T30831] ? lock_release+0x810/0x810 [ 3516.629435][T30831] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3516.634835][T30831] ? do_raw_spin_lock+0x124/0x2b0 [ 3516.639884][T30831] ? rwlock_bug.part.0+0x90/0x90 [ 3516.644928][T30831] ? lock_chain_count+0x20/0x20 [ 3516.649816][T30831] __handle_mm_fault+0x1f58/0x3c90 [ 3516.654969][T30831] ? vm_iomap_memory+0x190/0x190 [ 3516.659956][T30831] handle_mm_fault+0x1b6/0x850 [ 3516.664757][T30831] do_user_addr_fault+0x475/0x1210 [ 3516.669912][T30831] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3516.675497][T30831] exc_page_fault+0x98/0x170 [ 3516.680109][T30831] asm_exc_page_fault+0x26/0x30 [ 3516.684989][T30831] RIP: 0033:0x7f7e1f236ede [ 3516.689416][T30831] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3516.709039][T30831] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3516.715130][T30831] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3516.723115][T30831] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3516.731111][T30831] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3516.739279][T30831] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3516.747596][T30831] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3516.755601][T30831] [ 3516.770444][T30814] bridge3680: port 1(veth0_to_hsr) entered blocking state [ 3516.778075][T30814] bridge3680: port 1(veth0_to_hsr) entered disabled state [ 3516.785537][T30831] memory: usage 307188kB, limit 307200kB, failcnt 4000 [ 3516.798079][T30814] device veth0_to_hsr entered promiscuous mode [ 3516.804698][T30831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3516.826161][T30815] device bridge_slave_1 left promiscuous mode [ 3516.826789][T30831] Memory cgroup stats for /syz5: [ 3516.834153][T30831] anon 81920 [ 3516.834153][T30831] file 315392 [ 3516.834153][T30831] kernel 314159104 [ 3516.834153][T30831] kernel_stack 65536 [ 3516.834153][T30831] pagetables 69632 [ 3516.834153][T30831] sec_pagetables 0 [ 3516.834153][T30831] percpu 5436000 [ 3516.834153][T30831] sock 0 [ 3516.834153][T30831] vmalloc 8192 [ 3516.834153][T30831] shmem 315392 [ 3516.834153][T30831] zswap 0 [ 3516.834153][T30831] zswapped 0 [ 3516.834153][T30831] file_mapped 290816 [ 3516.834153][T30831] file_dirty 0 [ 3516.834153][T30831] file_writeback 0 [ 3516.834153][T30831] swapcached 0 [ 3516.834153][T30831] anon_thp 0 [ 3516.834153][T30831] file_thp 0 [ 3516.834153][T30831] shmem_thp 0 [ 3516.834153][T30831] inactive_anon 90112 [ 3516.834153][T30831] active_anon 307200 [ 3516.834153][T30831] inactive_file 0 [ 3516.834153][T30831] active_file 0 [ 3516.834153][T30831] unevictable 0 [ 3516.834153][T30831] slab_reclaimable 16792 [ 3516.834153][T30831] slab_unreclaimable 308521984 [ 3516.845137][T30815] bridge3679: port 2(bridge_slave_1) entered disabled state 22:16:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008aed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3516.932421][T30831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30831,uid=0 [ 3516.954915][T30831] Memory cgroup out of memory: Killed process 30831 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3516.983652][T30815] bridge3680: port 2(bridge_slave_1) entered blocking state [ 3516.998915][T30815] bridge3680: port 2(bridge_slave_1) entered disabled state [ 3517.010310][T30815] device bridge_slave_1 entered promiscuous mode 22:16:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000ca030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3517.116032][T30838] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3517.124019][T30820] device bridge_slave_1 left promiscuous mode [ 3517.144853][T30820] bridge4289: port 2(bridge_slave_1) entered disabled state [ 3517.153922][T30838] CPU: 1 PID: 30838 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3517.164400][T30838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3517.175074][T30838] Call Trace: [ 3517.178353][T30838] [ 3517.181282][T30838] dump_stack_lvl+0xd1/0x138 [ 3517.185884][T30838] dump_header+0x10b/0x85f [ 3517.190306][T30838] oom_kill_process.cold+0x10/0x15 [ 3517.195421][T30838] out_of_memory+0x35c/0x14a0 [ 3517.201183][T30838] ? find_held_lock+0x2d/0x110 [ 3517.205985][T30838] ? oom_killer_disable+0x280/0x280 [ 3517.211219][T30838] ? find_held_lock+0x2d/0x110 [ 3517.216016][T30838] mem_cgroup_out_of_memory+0x206/0x270 [ 3517.221598][T30838] ? mem_cgroup_margin+0x130/0x130 [ 3517.226735][T30838] ? lock_downgrade+0x6e0/0x6e0 [ 3517.231617][T30838] try_charge_memcg+0xefb/0x12f0 [ 3517.236844][T30838] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3517.242854][T30838] ? lock_downgrade+0x6e0/0x6e0 [ 3517.247774][T30838] charge_memcg+0x90/0x3b0 [ 3517.252215][T30838] __mem_cgroup_charge+0x2b/0x90 [ 3517.257176][T30838] ? copy_mc_to_kernel+0x3e/0x90 [ 3517.262134][T30838] do_wp_page+0x7ec/0x3370 [ 3517.266612][T30838] ? lock_release+0x810/0x810 [ 3517.271304][T30838] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3517.276704][T30838] ? do_raw_spin_lock+0x124/0x2b0 [ 3517.281847][T30838] ? rwlock_bug.part.0+0x90/0x90 [ 3517.286805][T30838] ? lock_chain_count+0x20/0x20 [ 3517.291717][T30838] __handle_mm_fault+0x1f58/0x3c90 [ 3517.296863][T30838] ? vm_iomap_memory+0x190/0x190 [ 3517.301872][T30838] handle_mm_fault+0x1b6/0x850 [ 3517.306699][T30838] do_user_addr_fault+0x475/0x1210 [ 3517.311941][T30838] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3517.317527][T30838] exc_page_fault+0x98/0x170 [ 3517.322231][T30838] asm_exc_page_fault+0x26/0x30 [ 3517.327102][T30838] RIP: 0033:0x7f7e1f236ede [ 3517.331533][T30838] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3517.351175][T30838] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3517.357280][T30838] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3517.365265][T30838] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3517.373258][T30838] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3517.381249][T30838] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3517.389234][T30838] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3517.397239][T30838] [ 3517.427912][T30820] bridge4290: port 1(bridge_slave_1) entered blocking state [ 3517.445896][T30820] bridge4290: port 1(bridge_slave_1) entered disabled state [ 3517.464846][T30820] device bridge_slave_1 entered promiscuous mode 22:17:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3517.488086][T30822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3517.627195][T30823] device bridge_slave_1 left promiscuous mode [ 3517.644142][T30823] bridge3938: port 1(bridge_slave_1) entered disabled state [ 3517.668570][T30838] memory: usage 307184kB, limit 307200kB, failcnt 4082 [ 3517.700131][T30838] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3517.707483][T30823] bridge3939: port 1(bridge_slave_1) entered blocking state [ 3517.722892][T30823] bridge3939: port 1(bridge_slave_1) entered disabled state [ 3517.737116][T30838] Memory cgroup stats for /syz5: [ 3517.737461][T30838] anon 81920 [ 3517.737461][T30838] file 315392 [ 3517.737461][T30838] kernel 314159104 [ 3517.737461][T30838] kernel_stack 65536 [ 3517.737461][T30838] pagetables 69632 [ 3517.737461][T30838] sec_pagetables 0 [ 3517.737461][T30838] percpu 5436000 [ 3517.737461][T30838] sock 0 [ 3517.737461][T30838] vmalloc 8192 [ 3517.737461][T30838] shmem 315392 [ 3517.737461][T30838] zswap 0 [ 3517.737461][T30838] zswapped 0 [ 3517.737461][T30838] file_mapped 290816 [ 3517.737461][T30838] file_dirty 0 [ 3517.737461][T30838] file_writeback 0 [ 3517.737461][T30838] swapcached 0 [ 3517.737461][T30838] anon_thp 0 [ 3517.737461][T30838] file_thp 0 [ 3517.737461][T30838] shmem_thp 0 [ 3517.737461][T30838] inactive_anon 90112 [ 3517.737461][T30838] active_anon 307200 [ 3517.737461][T30838] inactive_file 0 [ 3517.737461][T30838] active_file 0 [ 3517.737461][T30838] unevictable 0 22:17:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000200000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3517.737461][T30838] slab_reclaimable 16792 [ 3517.737461][T30838] slab_unreclaimable 308521984 [ 3517.847549][T30823] device bridge_slave_1 entered promiscuous mode [ 3517.935661][T30828] bridge4254: port 1(veth0_to_hsr) entered disabled state [ 3517.948743][T30838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30838,uid=0 [ 3517.971783][T30828] bridge4255: port 1(veth0_to_hsr) entered blocking state [ 3517.987089][T30828] bridge4255: port 1(veth0_to_hsr) entered disabled state [ 3518.013523][T30838] Memory cgroup out of memory: Killed process 30838 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3518.023329][T30829] device bridge_slave_1 left promiscuous mode 22:17:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008bed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3518.038060][T30829] bridge4254: port 2(bridge_slave_1) entered disabled state [ 3518.081430][T30829] bridge4255: port 2(bridge_slave_1) entered blocking state [ 3518.088660][T30852] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3518.089145][T30829] bridge4255: port 2(bridge_slave_1) entered disabled state [ 3518.100335][T30852] CPU: 0 PID: 30852 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3518.117443][T30852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3518.128040][T30852] Call Trace: [ 3518.131327][T30852] [ 3518.134355][T30852] dump_stack_lvl+0xd1/0x138 [ 3518.138976][T30852] dump_header+0x10b/0x85f [ 3518.143415][T30852] oom_kill_process.cold+0x10/0x15 [ 3518.148558][T30852] out_of_memory+0x35c/0x14a0 [ 3518.153270][T30852] ? find_held_lock+0x2d/0x110 [ 3518.158061][T30852] ? oom_killer_disable+0x280/0x280 [ 3518.163293][T30852] ? find_held_lock+0x2d/0x110 [ 3518.168088][T30852] mem_cgroup_out_of_memory+0x206/0x270 [ 3518.173684][T30852] ? mem_cgroup_margin+0x130/0x130 [ 3518.178925][T30852] ? lock_downgrade+0x6e0/0x6e0 [ 3518.183826][T30852] try_charge_memcg+0xefb/0x12f0 [ 3518.188885][T30852] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3518.194888][T30852] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3518.200659][T30852] ? lock_downgrade+0x6e0/0x6e0 [ 3518.205537][T30852] ? lock_downgrade+0x6e0/0x6e0 [ 3518.210413][T30852] ? rcu_read_unlock+0x9/0x60 [ 3518.215131][T30852] obj_cgroup_charge+0x2af/0x5e0 [ 3518.220093][T30852] ? copy_process+0x3aa/0x7520 [ 3518.224878][T30852] kmem_cache_alloc_node+0xb7/0x460 [ 3518.230098][T30852] copy_process+0x3aa/0x7520 [ 3518.234712][T30852] ? __lock_acquire+0xbc3/0x56d0 [ 3518.239944][T30852] ? __cleanup_sighand+0xb0/0xb0 [ 3518.244897][T30852] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3518.250904][T30852] ? psi_memstall_leave+0x174/0x250 [ 3518.256134][T30852] kernel_clone+0xeb/0x990 [ 3518.260573][T30852] ? create_io_thread+0xf0/0xf0 [ 3518.265448][T30852] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3518.271721][T30852] ? lock_downgrade+0x6e0/0x6e0 [ 3518.276600][T30852] __do_sys_clone+0xba/0x100 [ 3518.281206][T30852] ? kernel_clone+0x990/0x990 [ 3518.285919][T30852] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3518.291839][T30852] do_syscall_64+0x39/0xb0 [ 3518.296271][T30852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3518.302185][T30852] RIP: 0033:0x7f7e1f28d4f1 [ 3518.306613][T30852] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3518.326264][T30852] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3518.334705][T30852] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3518.342692][T30852] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3518.350767][T30852] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3518.358748][T30852] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3518.366731][T30852] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3518.374736][T30852] [ 3518.381671][T30852] memory: usage 307196kB, limit 307200kB, failcnt 4135 [ 3518.381693][T30829] device bridge_slave_1 entered promiscuous mode [ 3518.395807][T30852] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3518.402962][T30852] Memory cgroup stats for /syz5: [ 3518.403190][T30852] anon 81920 [ 3518.403190][T30852] file 315392 [ 3518.403190][T30852] kernel 314105856 [ 3518.403190][T30852] kernel_stack 32768 [ 3518.403190][T30852] pagetables 69632 [ 3518.403190][T30852] sec_pagetables 0 [ 3518.403190][T30852] percpu 5435936 22:17:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000e20200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3518.403190][T30852] sock 0 [ 3518.403190][T30852] vmalloc 8192 [ 3518.403190][T30852] shmem 315392 [ 3518.403190][T30852] zswap 0 [ 3518.403190][T30852] zswapped 0 [ 3518.403190][T30852] file_mapped 290816 [ 3518.403190][T30852] file_dirty 0 [ 3518.403190][T30852] file_writeback 0 [ 3518.403190][T30852] swapcached 0 [ 3518.403190][T30852] anon_thp 0 [ 3518.403190][T30852] file_thp 0 [ 3518.403190][T30852] shmem_thp 0 [ 3518.403190][T30852] inactive_anon 77824 [ 3518.403190][T30852] active_anon 307200 [ 3518.403190][T30852] inactive_file 0 [ 3518.403190][T30852] active_file 0 [ 3518.403190][T30852] unevictable 0 [ 3518.403190][T30852] slab_reclaimable 16792 [ 3518.403190][T30852] slab_unreclaimable 308505440 [ 3518.501618][T30852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30852,uid=0 22:17:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008ced0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3518.521671][T30852] Memory cgroup out of memory: Killed process 30852 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3518.533405][T30835] bridge4372: port 1(veth0_to_hsr) entered disabled state [ 3518.560789][T30835] bridge4373: port 1(veth0_to_hsr) entered blocking state [ 3518.568136][T30835] bridge4373: port 1(veth0_to_hsr) entered disabled state [ 3518.613742][T30855] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3518.614880][T30836] device bridge_slave_1 left promiscuous mode [ 3518.627951][T30855] CPU: 0 PID: 30855 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3518.640026][T30836] bridge4372: port 2(bridge_slave_1) entered disabled state [ 3518.640840][T30855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3518.640859][T30855] Call Trace: [ 3518.640868][T30855] [ 3518.640879][T30855] dump_stack_lvl+0xd1/0x138 [ 3518.669069][T30855] dump_header+0x10b/0x85f [ 3518.673516][T30855] oom_kill_process.cold+0x10/0x15 [ 3518.678653][T30855] out_of_memory+0x35c/0x14a0 [ 3518.683461][T30855] ? find_held_lock+0x2d/0x110 [ 3518.688257][T30855] ? oom_killer_disable+0x280/0x280 [ 3518.693490][T30855] ? find_held_lock+0x2d/0x110 [ 3518.698287][T30855] mem_cgroup_out_of_memory+0x206/0x270 [ 3518.703952][T30855] ? mem_cgroup_margin+0x130/0x130 [ 3518.709089][T30855] ? lock_downgrade+0x6e0/0x6e0 [ 3518.713973][T30855] try_charge_memcg+0xefb/0x12f0 [ 3518.718949][T30855] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3518.724947][T30855] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3518.730698][T30855] ? lock_downgrade+0x6e0/0x6e0 [ 3518.735662][T30855] ? lock_downgrade+0x6e0/0x6e0 [ 3518.740546][T30855] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3518.746115][T30855] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3518.752293][T30855] copy_process+0x4e3/0x7520 [ 3518.757340][T30855] ? __lock_acquire+0xbc3/0x56d0 [ 3518.762310][T30855] ? __cleanup_sighand+0xb0/0xb0 [ 3518.767268][T30855] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3518.773273][T30855] ? psi_memstall_leave+0x174/0x250 [ 3518.778505][T30855] kernel_clone+0xeb/0x990 [ 3518.782943][T30855] ? create_io_thread+0xf0/0xf0 [ 3518.787831][T30855] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3518.794105][T30855] ? lock_downgrade+0x6e0/0x6e0 [ 3518.798982][T30855] __do_sys_clone+0xba/0x100 [ 3518.803594][T30855] ? kernel_clone+0x990/0x990 [ 3518.808305][T30855] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3518.814248][T30855] do_syscall_64+0x39/0xb0 [ 3518.818681][T30855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3518.824595][T30855] RIP: 0033:0x7f7e1f28d4f1 [ 3518.829027][T30855] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3518.848652][T30855] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3518.857093][T30855] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3518.865075][T30855] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3518.873058][T30855] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3518.881051][T30855] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3518.889033][T30855] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3518.897121][T30855] [ 3518.904770][T30855] memory: usage 307200kB, limit 307200kB, failcnt 4215 [ 3518.912165][T30855] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3518.919281][T30855] Memory cgroup stats for /syz5: [ 3518.919520][T30855] anon 81920 [ 3518.919520][T30855] file 315392 [ 3518.919520][T30855] kernel 314155008 [ 3518.919520][T30855] kernel_stack 32768 [ 3518.919520][T30855] pagetables 69632 [ 3518.919520][T30855] sec_pagetables 0 [ 3518.919520][T30855] percpu 5436000 [ 3518.919520][T30855] sock 0 [ 3518.919520][T30855] vmalloc 8192 [ 3518.919520][T30855] shmem 315392 [ 3518.919520][T30855] zswap 0 [ 3518.919520][T30855] zswapped 0 [ 3518.919520][T30855] file_mapped 290816 [ 3518.919520][T30855] file_dirty 0 [ 3518.919520][T30855] file_writeback 0 [ 3518.919520][T30855] swapcached 0 [ 3518.919520][T30855] anon_thp 0 [ 3518.919520][T30855] file_thp 0 [ 3518.919520][T30855] shmem_thp 0 [ 3518.919520][T30855] inactive_anon 49152 [ 3518.919520][T30855] active_anon 307200 [ 3518.919520][T30855] inactive_file 0 [ 3518.919520][T30855] active_file 0 [ 3518.919520][T30855] unevictable 0 [ 3518.919520][T30855] slab_reclaimable 28632 [ 3518.919520][T30855] slab_unreclaimable 308522168 22:17:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008ded0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3519.017616][T30855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30855,uid=0 [ 3519.032629][T30836] bridge4373: port 2(bridge_slave_1) entered blocking state [ 3519.034017][T30855] Memory cgroup out of memory: Killed process 30855 (syz-executor.5) total-vm:54540kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3519.054427][T30836] bridge4373: port 2(bridge_slave_1) entered disabled state [ 3519.070781][T30836] device bridge_slave_1 entered promiscuous mode 22:17:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000009", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3519.176497][T30842] device veth0_to_hsr left promiscuous mode [ 3519.183036][T30860] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3519.190817][T30842] bridge3680: port 1(veth0_to_hsr) entered disabled state [ 3519.199102][T30860] CPU: 1 PID: 30860 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3519.210915][T30860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3519.221004][T30860] Call Trace: [ 3519.224295][T30860] [ 3519.227221][T30860] dump_stack_lvl+0xd1/0x138 [ 3519.231822][T30860] dump_header+0x10b/0x85f [ 3519.236241][T30860] oom_kill_process.cold+0x10/0x15 [ 3519.241363][T30860] out_of_memory+0x35c/0x14a0 [ 3519.246049][T30860] ? find_held_lock+0x2d/0x110 [ 3519.250849][T30860] ? oom_killer_disable+0x280/0x280 [ 3519.256115][T30860] ? find_held_lock+0x2d/0x110 [ 3519.260920][T30860] mem_cgroup_out_of_memory+0x206/0x270 [ 3519.266481][T30860] ? mem_cgroup_margin+0x130/0x130 [ 3519.271601][T30860] ? lock_downgrade+0x6e0/0x6e0 [ 3519.276477][T30860] try_charge_memcg+0xefb/0x12f0 [ 3519.281438][T30860] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3519.287430][T30860] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3519.293173][T30860] ? lock_downgrade+0x6e0/0x6e0 [ 3519.298039][T30860] obj_cgroup_charge+0x2af/0x5e0 [ 3519.303013][T30860] ? __anon_vma_prepare+0x64/0x580 [ 3519.308178][T30860] kmem_cache_alloc+0xb5/0x430 [ 3519.312986][T30860] __anon_vma_prepare+0x64/0x580 [ 3519.317934][T30860] ? __pmd_alloc+0x30c/0x5d0 [ 3519.322533][T30860] __handle_mm_fault+0x392f/0x3c90 [ 3519.327740][T30860] ? vm_iomap_memory+0x190/0x190 [ 3519.332712][T30860] handle_mm_fault+0x1b6/0x850 [ 3519.337522][T30860] do_user_addr_fault+0x475/0x1210 [ 3519.342649][T30860] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3519.348210][T30860] exc_page_fault+0x98/0x170 [ 3519.352830][T30860] asm_exc_page_fault+0x26/0x30 [ 3519.357744][T30860] RIP: 0010:__put_user_4+0x16/0x20 [ 3519.362913][T30860] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3519.382545][T30860] RSP: 0018:ffffc90006267e40 EFLAGS: 00050293 [ 3519.388620][T30860] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3519.396857][T30860] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3519.404882][T30860] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3519.412893][T30860] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3519.420882][T30860] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3519.428868][T30860] ? __sys_socketpair+0xff/0x570 [ 3519.433830][T30860] __sys_socketpair+0x10b/0x570 [ 3519.438693][T30860] ? __ia32_sys_socket+0xb0/0xb0 [ 3519.443659][T30860] __x64_sys_socketpair+0x97/0x100 [ 3519.448796][T30860] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3519.454728][T30860] do_syscall_64+0x39/0xb0 [ 3519.459195][T30860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.465132][T30860] RIP: 0033:0x7f7e1f28c0c9 [ 3519.469559][T30860] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3519.489267][T30860] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3519.497694][T30860] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3519.505698][T30860] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3519.513703][T30860] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3519.521685][T30860] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3519.529832][T30860] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3519.537953][T30860] [ 3519.547190][T30842] bridge3681: port 1(veth0_to_hsr) entered blocking state [ 3519.550515][T30860] memory: usage 307200kB, limit 307200kB, failcnt 4318 [ 3519.562559][T30842] bridge3681: port 1(veth0_to_hsr) entered disabled state [ 3519.571352][T30860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3519.577256][T30842] device veth0_to_hsr entered promiscuous mode [ 3519.578481][T30860] Memory cgroup stats for /syz5: [ 3519.585121][T30860] anon 90112 [ 3519.585121][T30860] file 315392 [ 3519.585121][T30860] kernel 314167296 [ 3519.585121][T30860] kernel_stack 65536 [ 3519.585121][T30860] pagetables 77824 [ 3519.585121][T30860] sec_pagetables 0 [ 3519.585121][T30860] percpu 5436000 [ 3519.585121][T30860] sock 0 [ 3519.585121][T30860] vmalloc 8192 [ 3519.585121][T30860] shmem 315392 [ 3519.585121][T30860] zswap 0 [ 3519.585121][T30860] zswapped 0 [ 3519.585121][T30860] file_mapped 290816 [ 3519.585121][T30860] file_dirty 0 [ 3519.585121][T30860] file_writeback 0 [ 3519.585121][T30860] swapcached 0 [ 3519.585121][T30860] anon_thp 0 [ 3519.585121][T30860] file_thp 0 [ 3519.585121][T30860] shmem_thp 0 [ 3519.585121][T30860] inactive_anon 77824 [ 3519.585121][T30860] active_anon 307200 [ 3519.585121][T30860] inactive_file 0 [ 3519.585121][T30860] active_file 0 [ 3519.585121][T30860] unevictable 0 [ 3519.585121][T30860] slab_reclaimable 16792 [ 3519.585121][T30860] slab_unreclaimable 308521984 [ 3519.602847][T30844] device bridge_slave_1 left promiscuous mode [ 3519.690466][T30844] bridge3680: port 2(bridge_slave_1) entered disabled state [ 3519.691884][T30860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30859,uid=0 22:17:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008eed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000da030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3519.717372][T30860] Memory cgroup out of memory: Killed process 30859 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3519.744298][T30844] bridge3681: port 2(bridge_slave_1) entered blocking state [ 3519.752439][T30844] bridge3681: port 2(bridge_slave_1) entered disabled state [ 3519.761552][T30844] device bridge_slave_1 entered promiscuous mode [ 3519.847766][T30847] bridge4291: port 1(veth0_to_hsr) entered blocking state [ 3519.855612][T30866] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3519.859039][T30847] bridge4291: port 1(veth0_to_hsr) entered disabled state [ 3519.875137][T30866] CPU: 0 PID: 30866 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3519.885603][T30866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3519.889704][T30848] device bridge_slave_1 left promiscuous mode [ 3519.895660][T30866] Call Trace: [ 3519.895673][T30866] [ 3519.895685][T30866] dump_stack_lvl+0xd1/0x138 [ 3519.895732][T30866] dump_header+0x10b/0x85f [ 3519.904911][T30848] bridge4290: port 1(bridge_slave_1) entered disabled state [ 3519.905086][T30866] oom_kill_process.cold+0x10/0x15 [ 3519.929440][T30866] out_of_memory+0x35c/0x14a0 [ 3519.934160][T30866] ? find_held_lock+0x2d/0x110 [ 3519.938940][T30866] ? oom_killer_disable+0x280/0x280 [ 3519.944174][T30866] ? find_held_lock+0x2d/0x110 [ 3519.948962][T30866] mem_cgroup_out_of_memory+0x206/0x270 [ 3519.954562][T30866] ? mem_cgroup_margin+0x130/0x130 [ 3519.959710][T30866] ? lock_downgrade+0x6e0/0x6e0 [ 3519.964598][T30866] try_charge_memcg+0xefb/0x12f0 [ 3519.969590][T30866] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3519.975584][T30866] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3519.981312][T30866] ? lock_downgrade+0x6e0/0x6e0 [ 3519.986175][T30866] ? lock_downgrade+0x6e0/0x6e0 [ 3519.991039][T30866] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3519.996590][T30866] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3520.002755][T30866] copy_process+0x4e3/0x7520 [ 3520.007380][T30866] ? __lock_acquire+0xbc3/0x56d0 [ 3520.012330][T30866] ? __cleanup_sighand+0xb0/0xb0 [ 3520.017290][T30866] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3520.023289][T30866] ? psi_memstall_leave+0x174/0x250 [ 3520.028501][T30866] kernel_clone+0xeb/0x990 [ 3520.032936][T30866] ? create_io_thread+0xf0/0xf0 [ 3520.037806][T30866] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3520.044059][T30866] ? lock_downgrade+0x6e0/0x6e0 [ 3520.048925][T30866] __do_sys_clone+0xba/0x100 [ 3520.053519][T30866] ? kernel_clone+0x990/0x990 [ 3520.058379][T30866] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3520.064296][T30866] do_syscall_64+0x39/0xb0 [ 3520.068717][T30866] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.074628][T30866] RIP: 0033:0x7f7e1f28d4f1 [ 3520.079060][T30866] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3520.098860][T30866] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3520.107299][T30866] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3520.115288][T30866] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3520.123271][T30866] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3520.131253][T30866] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3520.139327][T30866] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3520.147385][T30866] [ 3520.164665][T30866] memory: usage 307188kB, limit 307200kB, failcnt 4393 [ 3520.171813][T30866] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3520.177528][T30848] bridge4291: port 2(bridge_slave_1) entered blocking state [ 3520.179634][T30866] Memory cgroup stats for /syz5: [ 3520.187190][T30866] anon 81920 [ 3520.187190][T30866] file 315392 [ 3520.187190][T30866] kernel 314150912 [ 3520.187190][T30866] kernel_stack 32768 [ 3520.187190][T30866] pagetables 69632 [ 3520.187190][T30866] sec_pagetables 0 [ 3520.187190][T30866] percpu 5436000 [ 3520.187190][T30866] sock 0 [ 3520.187190][T30866] vmalloc 8192 [ 3520.187190][T30866] shmem 315392 [ 3520.187190][T30866] zswap 0 [ 3520.187190][T30866] zswapped 0 [ 3520.187190][T30866] file_mapped 290816 [ 3520.187190][T30866] file_dirty 0 [ 3520.187190][T30866] file_writeback 0 [ 3520.187190][T30866] swapcached 0 [ 3520.187190][T30866] anon_thp 0 22:17:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000008fed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3520.187190][T30866] file_thp 0 [ 3520.187190][T30866] shmem_thp 0 [ 3520.187190][T30866] inactive_anon 49152 [ 3520.187190][T30866] active_anon 307200 [ 3520.187190][T30866] inactive_file 0 [ 3520.187190][T30866] active_file 0 [ 3520.187190][T30866] unevictable 0 [ 3520.187190][T30866] slab_reclaimable 16792 [ 3520.187190][T30866] slab_unreclaimable 308521824 [ 3520.196450][T30848] bridge4291: port 2(bridge_slave_1) entered disabled state [ 3520.281672][T30866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30866,uid=0 [ 3520.281850][T30866] Memory cgroup out of memory: Killed process 30866 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3520.330813][T30848] device bridge_slave_1 entered promiscuous mode 22:17:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000026200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3520.347907][T30850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3520.377917][T30872] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3520.389072][T30872] CPU: 1 PID: 30872 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3520.399543][T30872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3520.409633][T30872] Call Trace: [ 3520.412937][T30872] [ 3520.415914][T30872] dump_stack_lvl+0xd1/0x138 [ 3520.420568][T30872] dump_header+0x10b/0x85f [ 3520.425026][T30872] oom_kill_process.cold+0x10/0x15 [ 3520.430199][T30872] out_of_memory+0x35c/0x14a0 [ 3520.434936][T30872] ? find_held_lock+0x2d/0x110 [ 3520.439740][T30872] ? oom_killer_disable+0x280/0x280 [ 3520.444985][T30872] ? find_held_lock+0x2d/0x110 [ 3520.449789][T30872] mem_cgroup_out_of_memory+0x206/0x270 [ 3520.455372][T30872] ? mem_cgroup_margin+0x130/0x130 [ 3520.460511][T30872] ? lock_downgrade+0x6e0/0x6e0 [ 3520.465396][T30872] try_charge_memcg+0xefb/0x12f0 [ 3520.470357][T30872] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3520.476371][T30872] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3520.482123][T30872] ? lock_downgrade+0x6e0/0x6e0 [ 3520.487167][T30872] ? lock_downgrade+0x6e0/0x6e0 [ 3520.492054][T30872] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3520.497641][T30872] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3520.503845][T30872] copy_process+0x1359/0x7520 [ 3520.508556][T30872] ? page_remove_rmap+0x435/0x1210 [ 3520.513721][T30872] ? folio_flags.constprop.0+0x53/0x150 [ 3520.519314][T30872] ? put_page+0xd9/0x280 [ 3520.523593][T30872] ? do_wp_page+0x844/0x3370 [ 3520.528225][T30872] ? __cleanup_sighand+0xb0/0xb0 [ 3520.533188][T30872] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3520.538592][T30872] ? rwlock_bug.part.0+0x90/0x90 [ 3520.543547][T30872] ? lock_chain_count+0x20/0x20 [ 3520.548422][T30872] kernel_clone+0xeb/0x990 [ 3520.552861][T30872] ? create_io_thread+0xf0/0xf0 [ 3520.557739][T30872] ? find_held_lock+0x2d/0x110 [ 3520.562542][T30872] __do_sys_clone+0xba/0x100 [ 3520.567151][T30872] ? kernel_clone+0x990/0x990 [ 3520.571868][T30872] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3520.577792][T30872] do_syscall_64+0x39/0xb0 [ 3520.582223][T30872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.588141][T30872] RIP: 0033:0x7f7e1f28d4f1 [ 3520.592575][T30872] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3520.612198][T30872] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3520.620662][T30872] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3520.628734][T30872] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3520.636716][T30872] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3520.644699][T30872] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3520.652679][T30872] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3520.660700][T30872] [ 3520.667482][T30872] memory: usage 307200kB, limit 307200kB, failcnt 4469 [ 3520.685642][T30872] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3520.694880][T30872] Memory cgroup stats for /syz5: [ 3520.695256][T30872] anon 81920 [ 3520.695256][T30872] file 315392 [ 3520.695256][T30872] kernel 314155008 [ 3520.695256][T30872] kernel_stack 32768 [ 3520.695256][T30872] pagetables 69632 [ 3520.695256][T30872] sec_pagetables 0 [ 3520.695256][T30872] percpu 5436000 [ 3520.695256][T30872] sock 0 [ 3520.695256][T30872] vmalloc 8192 [ 3520.695256][T30872] shmem 315392 [ 3520.695256][T30872] zswap 0 [ 3520.695256][T30872] zswapped 0 [ 3520.695256][T30872] file_mapped 290816 [ 3520.695256][T30872] file_dirty 0 [ 3520.695256][T30872] file_writeback 0 [ 3520.695256][T30872] swapcached 0 [ 3520.695256][T30872] anon_thp 0 [ 3520.695256][T30872] file_thp 0 [ 3520.695256][T30872] shmem_thp 0 [ 3520.695256][T30872] inactive_anon 61440 [ 3520.695256][T30872] active_anon 307200 [ 3520.695256][T30872] inactive_file 0 [ 3520.695256][T30872] active_file 0 [ 3520.695256][T30872] unevictable 0 [ 3520.695256][T30872] slab_reclaimable 16792 [ 3520.695256][T30872] slab_unreclaimable 308521824 [ 3520.790456][T30851] device bridge_slave_1 left promiscuous mode [ 3520.796748][T30851] bridge3939: port 1(bridge_slave_1) entered disabled state [ 3520.804238][T30872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30872,uid=0 [ 3520.828996][T30872] Memory cgroup out of memory: Killed process 30872 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000090ed0500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3520.830080][T30851] bridge3940: port 1(bridge_slave_1) entered blocking state [ 3520.854511][T30851] bridge3940: port 1(bridge_slave_1) entered disabled state [ 3520.866132][T30851] device bridge_slave_1 entered promiscuous mode 22:17:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000fffff00000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3520.966841][T30877] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3520.984375][T30877] CPU: 0 PID: 30877 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3520.994947][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3520.997956][T30856] bridge4255: port 1(veth0_to_hsr) entered disabled state [ 3521.005011][T30877] Call Trace: [ 3521.005027][T30877] [ 3521.005039][T30877] dump_stack_lvl+0xd1/0x138 [ 3521.005081][T30877] dump_header+0x10b/0x85f [ 3521.005111][T30877] oom_kill_process.cold+0x10/0x15 [ 3521.005144][T30877] out_of_memory+0x35c/0x14a0 [ 3521.037336][T30877] ? find_held_lock+0x2d/0x110 [ 3521.042159][T30877] ? oom_killer_disable+0x280/0x280 [ 3521.047393][T30877] ? find_held_lock+0x2d/0x110 [ 3521.052188][T30877] mem_cgroup_out_of_memory+0x206/0x270 [ 3521.057771][T30877] ? mem_cgroup_margin+0x130/0x130 [ 3521.062909][T30877] ? lock_downgrade+0x6e0/0x6e0 [ 3521.067795][T30877] try_charge_memcg+0xefb/0x12f0 [ 3521.072766][T30877] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3521.078800][T30877] ? lock_downgrade+0x6e0/0x6e0 [ 3521.083701][T30877] charge_memcg+0x90/0x3b0 [ 3521.088419][T30877] __mem_cgroup_charge+0x2b/0x90 [ 3521.093383][T30877] ? copy_mc_to_kernel+0x3e/0x90 [ 3521.098349][T30877] do_wp_page+0x7ec/0x3370 [ 3521.102809][T30877] ? lock_release+0x810/0x810 [ 3521.107523][T30877] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3521.112976][T30877] ? do_raw_spin_lock+0x124/0x2b0 [ 3521.118051][T30877] ? rwlock_bug.part.0+0x90/0x90 [ 3521.123024][T30877] ? lock_chain_count+0x20/0x20 [ 3521.127918][T30877] __handle_mm_fault+0x1f58/0x3c90 [ 3521.133085][T30877] ? vm_iomap_memory+0x190/0x190 [ 3521.138104][T30877] handle_mm_fault+0x1b6/0x850 [ 3521.142913][T30877] do_user_addr_fault+0x475/0x1210 [ 3521.148070][T30877] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3521.153666][T30877] exc_page_fault+0x98/0x170 [ 3521.158283][T30877] asm_exc_page_fault+0x26/0x30 [ 3521.163157][T30877] RIP: 0033:0x7f7e1f236ede [ 3521.167587][T30877] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3521.187209][T30877] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3521.193290][T30877] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3521.201360][T30877] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3521.209363][T30877] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3521.217356][T30877] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3521.225343][T30877] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3521.233348][T30877] [ 3521.250355][T30877] memory: usage 307188kB, limit 307200kB, failcnt 4571 [ 3521.257371][T30877] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3521.264802][T30877] Memory cgroup stats for /syz5: [ 3521.265044][T30877] anon 81920 [ 3521.265044][T30877] file 315392 [ 3521.265044][T30877] kernel 314163200 [ 3521.265044][T30877] kernel_stack 65536 [ 3521.265044][T30877] pagetables 69632 [ 3521.265044][T30877] sec_pagetables 0 [ 3521.265044][T30877] percpu 5436000 [ 3521.265044][T30877] sock 0 [ 3521.265044][T30877] vmalloc 8192 [ 3521.265044][T30877] shmem 315392 [ 3521.265044][T30877] zswap 0 [ 3521.265044][T30877] zswapped 0 [ 3521.265044][T30877] file_mapped 290816 [ 3521.265044][T30877] file_dirty 0 [ 3521.265044][T30877] file_writeback 0 [ 3521.265044][T30877] swapcached 0 [ 3521.265044][T30877] anon_thp 0 [ 3521.265044][T30877] file_thp 0 [ 3521.265044][T30877] shmem_thp 0 [ 3521.265044][T30877] inactive_anon 49152 [ 3521.265044][T30877] active_anon 307200 [ 3521.265044][T30877] inactive_file 0 [ 3521.265044][T30877] active_file 0 [ 3521.265044][T30877] unevictable 0 [ 3521.265044][T30877] slab_reclaimable 16792 [ 3521.265044][T30877] slab_unreclaimable 308522288 [ 3521.363919][T30856] bridge4256: port 1(veth0_to_hsr) entered blocking state [ 3521.371159][T30877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30877,uid=0 [ 3521.382275][T30856] bridge4256: port 1(veth0_to_hsr) entered disabled state [ 3521.395125][T30877] Memory cgroup out of memory: Killed process 30877 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000fffff000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3521.420561][T30857] device bridge_slave_1 left promiscuous mode [ 3521.427427][T30857] bridge4255: port 2(bridge_slave_1) entered disabled state [ 3521.448292][T30857] bridge4256: port 2(bridge_slave_1) entered blocking state [ 3521.456338][T30857] bridge4256: port 2(bridge_slave_1) entered disabled state [ 3521.465839][T30857] device bridge_slave_1 entered promiscuous mode 22:17:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000f00200000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3521.556810][T30883] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3521.571190][T30883] CPU: 0 PID: 30883 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3521.581673][T30883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3521.591763][T30883] Call Trace: [ 3521.595072][T30883] [ 3521.598217][T30883] dump_stack_lvl+0xd1/0x138 [ 3521.603126][T30883] dump_header+0x10b/0x85f [ 3521.607598][T30883] oom_kill_process.cold+0x10/0x15 [ 3521.612768][T30883] out_of_memory+0x35c/0x14a0 [ 3521.617504][T30883] ? find_held_lock+0x2d/0x110 [ 3521.622335][T30883] ? oom_killer_disable+0x280/0x280 [ 3521.627663][T30883] ? find_held_lock+0x2d/0x110 [ 3521.632461][T30883] mem_cgroup_out_of_memory+0x206/0x270 [ 3521.638037][T30883] ? mem_cgroup_margin+0x130/0x130 [ 3521.643178][T30883] ? lock_downgrade+0x6e0/0x6e0 [ 3521.648074][T30883] try_charge_memcg+0xefb/0x12f0 [ 3521.653044][T30883] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3521.659054][T30883] ? lock_downgrade+0x6e0/0x6e0 [ 3521.663939][T30883] charge_memcg+0x90/0x3b0 [ 3521.668500][T30883] __mem_cgroup_charge+0x2b/0x90 [ 3521.673640][T30883] ? copy_mc_to_kernel+0x3e/0x90 [ 3521.678613][T30883] do_wp_page+0x7ec/0x3370 [ 3521.683061][T30883] ? lock_release+0x810/0x810 [ 3521.687841][T30883] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3521.693273][T30883] ? do_raw_spin_lock+0x124/0x2b0 [ 3521.698318][T30883] ? rwlock_bug.part.0+0x90/0x90 [ 3521.703276][T30883] ? lock_chain_count+0x20/0x20 [ 3521.708149][T30883] __handle_mm_fault+0x1f58/0x3c90 [ 3521.713298][T30883] ? vm_iomap_memory+0x190/0x190 [ 3521.718289][T30883] handle_mm_fault+0x1b6/0x850 [ 3521.723089][T30883] do_user_addr_fault+0x475/0x1210 [ 3521.728226][T30883] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3521.733807][T30883] exc_page_fault+0x98/0x170 [ 3521.738419][T30883] asm_exc_page_fault+0x26/0x30 [ 3521.743295][T30883] RIP: 0033:0x7f7e1f236ede [ 3521.747982][T30883] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3521.768743][T30883] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3521.774827][T30883] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3521.782810][T30883] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3521.790861][T30883] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3521.798842][T30883] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3521.806826][T30883] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3521.814827][T30883] [ 3521.837546][T30883] memory: usage 307188kB, limit 307200kB, failcnt 4672 [ 3521.848058][T30883] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3521.856581][T30863] bridge4373: port 1(veth0_to_hsr) entered disabled state [ 3521.857902][T30883] Memory cgroup stats for /syz5: [ 3521.864494][T30883] anon 81920 [ 3521.864494][T30883] file 315392 [ 3521.864494][T30883] kernel 314159104 [ 3521.864494][T30883] kernel_stack 65536 [ 3521.864494][T30883] pagetables 69632 [ 3521.864494][T30883] sec_pagetables 0 [ 3521.864494][T30883] percpu 5436000 [ 3521.864494][T30883] sock 0 [ 3521.864494][T30883] vmalloc 8192 [ 3521.864494][T30883] shmem 315392 [ 3521.864494][T30883] zswap 0 [ 3521.864494][T30883] zswapped 0 [ 3521.864494][T30883] file_mapped 290816 [ 3521.864494][T30883] file_dirty 0 [ 3521.864494][T30883] file_writeback 0 [ 3521.864494][T30883] swapcached 0 [ 3521.864494][T30883] anon_thp 0 [ 3521.864494][T30883] file_thp 0 [ 3521.864494][T30883] shmem_thp 0 [ 3521.864494][T30883] inactive_anon 49152 [ 3521.864494][T30883] active_anon 307200 [ 3521.864494][T30883] inactive_file 0 [ 3521.864494][T30883] active_file 0 [ 3521.864494][T30883] unevictable 0 [ 3521.864494][T30883] slab_reclaimable 16792 22:17:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3521.864494][T30883] slab_unreclaimable 308521984 [ 3521.963426][T30883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30883,uid=0 [ 3521.979395][T30883] Memory cgroup out of memory: Killed process 30883 (syz-executor.5) total-vm:54540kB, anon-rss:412kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3521.980494][T30863] bridge4374: port 1(veth0_to_hsr) entered blocking state [ 3522.009517][T30863] bridge4374: port 1(veth0_to_hsr) entered disabled state [ 3522.045405][T30864] device bridge_slave_1 left promiscuous mode [ 3522.062017][T30864] bridge4373: port 2(bridge_slave_1) entered disabled state [ 3522.078709][T30888] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3522.093790][T30888] CPU: 0 PID: 30888 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3522.104280][T30888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3522.110546][T30864] bridge4374: port 2(bridge_slave_1) entered blocking state [ 3522.114434][T30888] Call Trace: [ 3522.114450][T30888] [ 3522.114461][T30888] dump_stack_lvl+0xd1/0x138 [ 3522.114507][T30888] dump_header+0x10b/0x85f [ 3522.130426][T30864] bridge4374: port 2(bridge_slave_1) entered disabled state [ 3522.132573][T30888] oom_kill_process.cold+0x10/0x15 [ 3522.132616][T30888] out_of_memory+0x35c/0x14a0 [ 3522.138526][T30864] device bridge_slave_1 entered promiscuous mode [ 3522.144305][T30888] ? find_held_lock+0x2d/0x110 [ 3522.144350][T30888] ? oom_killer_disable+0x280/0x280 [ 3522.144399][T30888] ? find_held_lock+0x2d/0x110 [ 3522.144439][T30888] mem_cgroup_out_of_memory+0x206/0x270 [ 3522.144480][T30888] ? mem_cgroup_margin+0x130/0x130 [ 3522.144519][T30888] ? lock_downgrade+0x6e0/0x6e0 [ 3522.144565][T30888] try_charge_memcg+0xefb/0x12f0 [ 3522.144605][T30888] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3522.202060][T30888] ? lock_downgrade+0x6e0/0x6e0 [ 3522.206980][T30888] charge_memcg+0x90/0x3b0 [ 3522.211442][T30888] __mem_cgroup_charge+0x2b/0x90 [ 3522.216424][T30888] ? copy_mc_to_kernel+0x3e/0x90 [ 3522.221420][T30888] do_wp_page+0x7ec/0x3370 [ 3522.225890][T30888] ? lock_release+0x810/0x810 [ 3522.230604][T30888] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3522.236037][T30888] ? do_raw_spin_lock+0x124/0x2b0 [ 3522.241292][T30888] ? rwlock_bug.part.0+0x90/0x90 [ 3522.246321][T30888] ? lock_chain_count+0x20/0x20 [ 3522.251224][T30888] __handle_mm_fault+0x1f58/0x3c90 [ 3522.256406][T30888] ? vm_iomap_memory+0x190/0x190 [ 3522.261413][T30888] handle_mm_fault+0x1b6/0x850 [ 3522.266232][T30888] do_user_addr_fault+0x475/0x1210 [ 3522.271401][T30888] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3522.274713][T30869] device veth0_to_hsr left promiscuous mode [ 3522.277164][T30888] exc_page_fault+0x98/0x170 [ 3522.277207][T30888] asm_exc_page_fault+0x26/0x30 [ 3522.292576][T30888] RIP: 0033:0x7f7e1f236ede [ 3522.295204][T30869] bridge3681: port 1(veth0_to_hsr) entered disabled state 22:17:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000a", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3522.297008][T30888] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3522.297043][T30888] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3522.297068][T30888] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3522.337883][T30888] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3522.345884][T30888] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3522.354137][T30888] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3522.362156][T30888] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3522.370199][T30888] [ 3522.377239][T30869] bridge3682: port 1(veth0_to_hsr) entered blocking state [ 3522.388187][T30869] bridge3682: port 1(veth0_to_hsr) entered disabled state [ 3522.393265][T30888] memory: usage 307192kB, limit 307200kB, failcnt 4760 [ 3522.404519][T30888] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3522.413092][T30888] Memory cgroup stats for /syz5: [ 3522.413294][T30888] anon 81920 [ 3522.413294][T30888] file 315392 [ 3522.413294][T30888] kernel 314159104 [ 3522.413294][T30888] kernel_stack 65536 [ 3522.413294][T30888] pagetables 69632 [ 3522.413294][T30888] sec_pagetables 0 [ 3522.413294][T30888] percpu 5436000 [ 3522.413294][T30888] sock 0 [ 3522.413294][T30888] vmalloc 8192 [ 3522.413294][T30888] shmem 315392 [ 3522.413294][T30888] zswap 0 [ 3522.413294][T30888] zswapped 0 [ 3522.413294][T30888] file_mapped 290816 [ 3522.413294][T30888] file_dirty 0 [ 3522.413294][T30888] file_writeback 0 [ 3522.413294][T30888] swapcached 0 [ 3522.413294][T30888] anon_thp 0 [ 3522.413294][T30888] file_thp 0 [ 3522.413294][T30888] shmem_thp 0 [ 3522.413294][T30888] inactive_anon 57344 [ 3522.413294][T30888] active_anon 307200 [ 3522.413294][T30888] inactive_file 0 [ 3522.413294][T30888] active_file 0 [ 3522.413294][T30888] unevictable 0 [ 3522.413294][T30888] slab_reclaimable 16792 [ 3522.413294][T30888] slab_unreclaimable 308521984 [ 3522.425423][T30869] device veth0_to_hsr entered promiscuous mode 22:17:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3522.521124][T30888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30888,uid=0 [ 3522.537462][T30888] Memory cgroup out of memory: Killed process 30888 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3522.581274][T30870] device bridge_slave_1 left promiscuous mode [ 3522.588577][T30870] bridge3681: port 2(bridge_slave_1) entered disabled state [ 3522.606997][T30870] bridge3682: port 2(bridge_slave_1) entered blocking state [ 3522.615784][T30870] bridge3682: port 2(bridge_slave_1) entered disabled state [ 3522.625279][T30870] device bridge_slave_1 entered promiscuous mode 22:17:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000dc030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3522.688168][T30895] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3522.700646][T30895] CPU: 1 PID: 30895 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3522.704266][T30876] bridge4291: port 1(veth0_to_hsr) entered disabled state [ 3522.711079][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3522.711102][T30895] Call Trace: [ 3522.711112][T30895] [ 3522.711123][T30895] dump_stack_lvl+0xd1/0x138 [ 3522.711166][T30895] dump_header+0x10b/0x85f [ 3522.711197][T30895] oom_kill_process.cold+0x10/0x15 [ 3522.748847][T30895] out_of_memory+0x35c/0x14a0 [ 3522.753543][T30895] ? find_held_lock+0x2d/0x110 [ 3522.758330][T30895] ? oom_killer_disable+0x280/0x280 [ 3522.763563][T30895] ? find_held_lock+0x2d/0x110 [ 3522.768377][T30895] mem_cgroup_out_of_memory+0x206/0x270 [ 3522.773962][T30895] ? mem_cgroup_margin+0x130/0x130 [ 3522.779104][T30895] ? lock_downgrade+0x6e0/0x6e0 [ 3522.783989][T30895] try_charge_memcg+0xefb/0x12f0 [ 3522.788955][T30895] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3522.794955][T30895] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3522.800703][T30895] ? lock_downgrade+0x6e0/0x6e0 [ 3522.805570][T30895] ? lock_downgrade+0x6e0/0x6e0 [ 3522.810435][T30895] ? rcu_read_unlock+0x9/0x60 [ 3522.815152][T30895] obj_cgroup_charge+0x2af/0x5e0 [ 3522.820115][T30895] __kmem_cache_alloc_node+0xb2/0x430 [ 3522.825504][T30895] ? copy_semundo+0x18b/0x300 [ 3522.830227][T30895] kmalloc_trace+0x26/0x60 [ 3522.834689][T30895] copy_semundo+0x18b/0x300 [ 3522.839248][T30895] copy_process+0x2457/0x7520 [ 3522.843972][T30895] ? page_remove_rmap+0x435/0x1210 [ 3522.849146][T30895] ? folio_flags.constprop.0+0x53/0x150 [ 3522.854751][T30895] ? __cleanup_sighand+0xb0/0xb0 [ 3522.859721][T30895] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3522.865137][T30895] ? rwlock_bug.part.0+0x90/0x90 [ 3522.870115][T30895] ? lock_chain_count+0x20/0x20 [ 3522.875003][T30895] kernel_clone+0xeb/0x990 [ 3522.879465][T30895] ? create_io_thread+0xf0/0xf0 [ 3522.884352][T30895] ? find_held_lock+0x2d/0x110 [ 3522.889156][T30895] __do_sys_clone+0xba/0x100 [ 3522.893773][T30895] ? kernel_clone+0x990/0x990 [ 3522.898485][T30895] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3522.904439][T30895] do_syscall_64+0x39/0xb0 [ 3522.908888][T30895] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3522.914813][T30895] RIP: 0033:0x7f7e1f28d4f1 [ 3522.919242][T30895] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3522.938863][T30895] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3522.947294][T30895] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3522.955287][T30895] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3522.963274][T30895] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3522.971255][T30895] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3522.979245][T30895] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3522.987245][T30895] [ 3523.001342][T30895] memory: usage 307192kB, limit 307200kB, failcnt 4837 [ 3523.013480][T30876] bridge4292: port 1(veth0_to_hsr) entered blocking state [ 3523.016023][T30895] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3523.021745][T30876] bridge4292: port 1(veth0_to_hsr) entered disabled state [ 3523.036942][T30895] Memory cgroup stats for /syz5: [ 3523.037145][T30895] anon 81920 [ 3523.037145][T30895] file 315392 [ 3523.037145][T30895] kernel 314159104 [ 3523.037145][T30895] kernel_stack 65536 [ 3523.037145][T30895] pagetables 69632 [ 3523.037145][T30895] sec_pagetables 0 [ 3523.037145][T30895] percpu 5436000 [ 3523.037145][T30895] sock 0 [ 3523.037145][T30895] vmalloc 8192 [ 3523.037145][T30895] shmem 315392 [ 3523.037145][T30895] zswap 0 [ 3523.037145][T30895] zswapped 0 [ 3523.037145][T30895] file_mapped 290816 [ 3523.037145][T30895] file_dirty 0 [ 3523.037145][T30895] file_writeback 0 [ 3523.037145][T30895] swapcached 0 [ 3523.037145][T30895] anon_thp 0 [ 3523.037145][T30895] file_thp 0 [ 3523.037145][T30895] shmem_thp 0 [ 3523.037145][T30895] inactive_anon 90112 [ 3523.037145][T30895] active_anon 307200 [ 3523.037145][T30895] inactive_file 0 [ 3523.037145][T30895] active_file 0 [ 3523.037145][T30895] unevictable 0 [ 3523.037145][T30895] slab_reclaimable 16792 [ 3523.037145][T30895] slab_unreclaimable 308524072 [ 3523.051995][T30878] device bridge_slave_1 left promiscuous mode 22:17:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3523.135470][T30895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30895,uid=0 [ 3523.154694][T30895] Memory cgroup out of memory: Killed process 30895 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3523.162001][T30878] bridge4291: port 2(bridge_slave_1) entered disabled state 22:17:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000586500000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3523.198814][T30878] bridge4292: port 2(bridge_slave_1) entered blocking state [ 3523.208225][T30878] bridge4292: port 2(bridge_slave_1) entered disabled state [ 3523.227270][T30878] device bridge_slave_1 entered promiscuous mode [ 3523.238892][T30881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3523.286479][T30901] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3523.304762][T30901] CPU: 0 PID: 30901 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3523.315427][T30901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3523.325513][T30901] Call Trace: [ 3523.328989][T30901] [ 3523.331959][T30901] dump_stack_lvl+0xd1/0x138 [ 3523.336657][T30901] dump_header+0x10b/0x85f [ 3523.341122][T30901] oom_kill_process.cold+0x10/0x15 [ 3523.346280][T30901] out_of_memory+0x35c/0x14a0 [ 3523.351284][T30901] ? find_held_lock+0x2d/0x110 [ 3523.354346][T30882] device bridge_slave_1 left promiscuous mode [ 3523.356088][T30901] ? oom_killer_disable+0x280/0x280 [ 3523.372181][T30901] ? find_held_lock+0x2d/0x110 [ 3523.377004][T30901] mem_cgroup_out_of_memory+0x206/0x270 [ 3523.380103][T30882] bridge3940: port 1(bridge_slave_1) entered disabled state [ 3523.382586][T30901] ? mem_cgroup_margin+0x130/0x130 [ 3523.382631][T30901] ? lock_downgrade+0x6e0/0x6e0 [ 3523.382677][T30901] try_charge_memcg+0xefb/0x12f0 [ 3523.404890][T30901] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3523.410924][T30901] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3523.416690][T30901] ? lock_downgrade+0x6e0/0x6e0 [ 3523.421564][T30901] ? lock_downgrade+0x6e0/0x6e0 [ 3523.426464][T30901] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3523.432060][T30901] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3523.438277][T30901] copy_process+0x4e3/0x7520 [ 3523.442927][T30901] ? __lock_acquire+0xbc3/0x56d0 [ 3523.447932][T30901] ? __cleanup_sighand+0xb0/0xb0 [ 3523.452926][T30901] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3523.458959][T30901] ? psi_memstall_leave+0x174/0x250 [ 3523.464204][T30901] kernel_clone+0xeb/0x990 [ 3523.468628][T30901] ? create_io_thread+0xf0/0xf0 [ 3523.473504][T30901] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3523.479822][T30901] ? lock_downgrade+0x6e0/0x6e0 [ 3523.484720][T30901] __do_sys_clone+0xba/0x100 [ 3523.489335][T30901] ? kernel_clone+0x990/0x990 [ 3523.494073][T30901] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3523.500021][T30901] do_syscall_64+0x39/0xb0 [ 3523.504508][T30901] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.510436][T30901] RIP: 0033:0x7f7e1f28d4f1 [ 3523.514891][T30901] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3523.534551][T30901] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3523.543005][T30901] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3523.551023][T30901] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3523.559017][T30901] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3523.566992][T30901] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3523.575078][T30901] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3523.583117][T30901] [ 3523.591758][T30901] memory: usage 307188kB, limit 307200kB, failcnt 4934 [ 3523.601865][T30901] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3523.609126][T30901] Memory cgroup stats for /syz5: [ 3523.609606][T30901] anon 81920 [ 3523.609606][T30901] file 315392 [ 3523.609606][T30901] kernel 314155008 [ 3523.609606][T30901] kernel_stack 32768 [ 3523.609606][T30901] pagetables 69632 [ 3523.609606][T30901] sec_pagetables 0 [ 3523.609606][T30901] percpu 5436000 [ 3523.609606][T30901] sock 0 [ 3523.609606][T30901] vmalloc 8192 [ 3523.609606][T30901] shmem 315392 [ 3523.609606][T30901] zswap 0 [ 3523.609606][T30901] zswapped 0 [ 3523.609606][T30901] file_mapped 290816 [ 3523.609606][T30901] file_dirty 0 [ 3523.609606][T30901] file_writeback 0 [ 3523.609606][T30901] swapcached 0 [ 3523.609606][T30901] anon_thp 0 [ 3523.609606][T30901] file_thp 0 [ 3523.609606][T30901] shmem_thp 0 [ 3523.609606][T30901] inactive_anon 90112 [ 3523.609606][T30901] active_anon 307200 [ 3523.609606][T30901] inactive_file 0 [ 3523.609606][T30901] active_file 0 [ 3523.609606][T30901] unevictable 0 [ 3523.609606][T30901] slab_reclaimable 16792 [ 3523.609606][T30901] slab_unreclaimable 308521824 [ 3523.624931][T30882] bridge3941: port 1(bridge_slave_1) entered blocking state [ 3523.703762][T30901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30901,uid=0 22:17:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3523.703947][T30901] Memory cgroup out of memory: Killed process 30901 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3523.750494][T30882] bridge3941: port 1(bridge_slave_1) entered disabled state [ 3523.770698][T30882] device bridge_slave_1 entered promiscuous mode 22:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3523.800200][T30887] bridge4256: port 1(veth0_to_hsr) entered disabled state [ 3523.816965][T30887] bridge4257: port 1(veth0_to_hsr) entered blocking state [ 3523.832537][T30887] bridge4257: port 1(veth0_to_hsr) entered disabled state [ 3523.864837][T30907] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3523.875543][T30907] CPU: 1 PID: 30907 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3523.886048][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3523.896124][T30907] Call Trace: [ 3523.899500][T30907] [ 3523.902446][T30907] dump_stack_lvl+0xd1/0x138 [ 3523.907067][T30907] dump_header+0x10b/0x85f [ 3523.911505][T30907] oom_kill_process.cold+0x10/0x15 [ 3523.916639][T30907] out_of_memory+0x35c/0x14a0 [ 3523.921350][T30907] ? find_held_lock+0x2d/0x110 [ 3523.926245][T30907] ? oom_killer_disable+0x280/0x280 [ 3523.931483][T30907] ? find_held_lock+0x2d/0x110 [ 3523.936281][T30907] mem_cgroup_out_of_memory+0x206/0x270 [ 3523.941857][T30907] ? mem_cgroup_margin+0x130/0x130 [ 3523.946995][T30907] ? lock_downgrade+0x6e0/0x6e0 [ 3523.951879][T30907] try_charge_memcg+0xefb/0x12f0 [ 3523.956842][T30907] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3523.962849][T30907] ? lock_downgrade+0x6e0/0x6e0 [ 3523.967728][T30907] charge_memcg+0x90/0x3b0 [ 3523.972165][T30907] __mem_cgroup_charge+0x2b/0x90 [ 3523.977122][T30907] ? copy_mc_to_kernel+0x3e/0x90 [ 3523.982081][T30907] do_wp_page+0x7ec/0x3370 [ 3523.986530][T30907] ? lock_release+0x810/0x810 [ 3523.991244][T30907] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3523.996641][T30907] ? do_raw_spin_lock+0x124/0x2b0 [ 3524.001686][T30907] ? rwlock_bug.part.0+0x90/0x90 [ 3524.006641][T30907] ? lock_chain_count+0x20/0x20 [ 3524.011516][T30907] __handle_mm_fault+0x1f58/0x3c90 [ 3524.016660][T30907] ? vm_iomap_memory+0x190/0x190 [ 3524.021647][T30907] handle_mm_fault+0x1b6/0x850 [ 3524.026447][T30907] do_user_addr_fault+0x475/0x1210 [ 3524.031588][T30907] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3524.037253][T30907] exc_page_fault+0x98/0x170 [ 3524.041865][T30907] asm_exc_page_fault+0x26/0x30 [ 3524.046744][T30907] RIP: 0033:0x7f7e1f236ede [ 3524.051171][T30907] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3524.070807][T30907] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3524.076893][T30907] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3524.084877][T30907] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3524.092862][T30907] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3524.105101][T30907] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3524.113169][T30907] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3524.121168][T30907] [ 3524.132823][T30907] memory: usage 307200kB, limit 307200kB, failcnt 5027 [ 3524.140835][T30907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3524.151633][T30886] device bridge_slave_1 left promiscuous mode [ 3524.157952][T30886] bridge4256: port 2(bridge_slave_1) entered disabled state [ 3524.159402][T30907] Memory cgroup stats for /syz5: [ 3524.165522][T30907] anon 81920 [ 3524.165522][T30907] file 315392 [ 3524.165522][T30907] kernel 314163200 [ 3524.165522][T30907] kernel_stack 65536 [ 3524.165522][T30907] pagetables 69632 [ 3524.165522][T30907] sec_pagetables 0 [ 3524.165522][T30907] percpu 5436000 [ 3524.165522][T30907] sock 0 [ 3524.165522][T30907] vmalloc 8192 [ 3524.165522][T30907] shmem 315392 [ 3524.165522][T30907] zswap 0 [ 3524.165522][T30907] zswapped 0 [ 3524.165522][T30907] file_mapped 290816 [ 3524.165522][T30907] file_dirty 0 [ 3524.165522][T30907] file_writeback 0 [ 3524.165522][T30907] swapcached 0 [ 3524.165522][T30907] anon_thp 0 [ 3524.165522][T30907] file_thp 0 [ 3524.165522][T30907] shmem_thp 0 [ 3524.165522][T30907] inactive_anon 57344 [ 3524.165522][T30907] active_anon 307200 [ 3524.165522][T30907] inactive_file 0 [ 3524.165522][T30907] active_file 0 [ 3524.165522][T30907] unevictable 0 [ 3524.165522][T30907] slab_reclaimable 16792 [ 3524.165522][T30907] slab_unreclaimable 308522288 22:17:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000005000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3524.262666][T30907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30907,uid=0 [ 3524.278427][T30907] Memory cgroup out of memory: Killed process 30907 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3524.298642][T30886] bridge4257: port 2(bridge_slave_1) entered blocking state 22:17:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3524.310390][T30886] bridge4257: port 2(bridge_slave_1) entered disabled state [ 3524.320211][T30886] device bridge_slave_1 entered promiscuous mode [ 3524.405413][T30912] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3524.427434][T30892] bridge4374: port 1(veth0_to_hsr) entered disabled state [ 3524.430332][T30912] CPU: 0 PID: 30912 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3524.445122][T30912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3524.455280][T30912] Call Trace: [ 3524.458572][T30912] [ 3524.461523][T30912] dump_stack_lvl+0xd1/0x138 [ 3524.466256][T30912] dump_header+0x10b/0x85f [ 3524.470730][T30912] oom_kill_process.cold+0x10/0x15 [ 3524.475883][T30912] out_of_memory+0x35c/0x14a0 [ 3524.480810][T30912] ? find_held_lock+0x2d/0x110 [ 3524.485627][T30912] ? oom_killer_disable+0x280/0x280 [ 3524.490951][T30912] ? find_held_lock+0x2d/0x110 [ 3524.495751][T30912] mem_cgroup_out_of_memory+0x206/0x270 [ 3524.501329][T30912] ? mem_cgroup_margin+0x130/0x130 [ 3524.506466][T30912] ? lock_downgrade+0x6e0/0x6e0 [ 3524.511446][T30912] try_charge_memcg+0xefb/0x12f0 [ 3524.516409][T30912] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3524.522418][T30912] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3524.528185][T30912] ? lock_downgrade+0x6e0/0x6e0 [ 3524.533059][T30912] ? lock_downgrade+0x6e0/0x6e0 [ 3524.538009][T30912] ? rcu_read_unlock+0x9/0x60 [ 3524.542722][T30912] obj_cgroup_charge+0x2af/0x5e0 [ 3524.547687][T30912] __kmem_cache_alloc_node+0xb2/0x430 [ 3524.553072][T30912] ? copy_semundo+0x18b/0x300 [ 3524.557780][T30912] kmalloc_trace+0x26/0x60 [ 3524.562219][T30912] copy_semundo+0x18b/0x300 [ 3524.566746][T30912] copy_process+0x2457/0x7520 [ 3524.571463][T30912] ? __cleanup_sighand+0xb0/0xb0 [ 3524.576423][T30912] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3524.582424][T30912] ? psi_memstall_leave+0x174/0x250 [ 3524.587656][T30912] kernel_clone+0xeb/0x990 [ 3524.592095][T30912] ? create_io_thread+0xf0/0xf0 [ 3524.596971][T30912] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3524.603245][T30912] ? lock_downgrade+0x6e0/0x6e0 [ 3524.608123][T30912] __do_sys_clone+0xba/0x100 [ 3524.612734][T30912] ? kernel_clone+0x990/0x990 [ 3524.617442][T30912] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3524.623363][T30912] do_syscall_64+0x39/0xb0 [ 3524.627791][T30912] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.633707][T30912] RIP: 0033:0x7f7e1f28d4f1 [ 3524.638132][T30912] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3524.657838][T30912] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3524.666266][T30912] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3524.674247][T30912] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3524.682227][T30912] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3524.690207][T30912] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3524.698275][T30912] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3524.706279][T30912] [ 3524.725372][T30892] bridge4375: port 1(veth0_to_hsr) entered blocking state [ 3524.734627][T30912] memory: usage 307200kB, limit 307200kB, failcnt 5108 [ 3524.741882][T30892] bridge4375: port 1(veth0_to_hsr) entered disabled state [ 3524.749742][T30912] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3524.762199][T30912] Memory cgroup stats for /syz5: [ 3524.762417][T30912] anon 81920 [ 3524.762417][T30912] file 315392 [ 3524.762417][T30912] kernel 314159104 [ 3524.762417][T30912] kernel_stack 65536 [ 3524.762417][T30912] pagetables 69632 [ 3524.762417][T30912] sec_pagetables 0 [ 3524.762417][T30912] percpu 5436000 [ 3524.762417][T30912] sock 0 [ 3524.762417][T30912] vmalloc 8192 [ 3524.762417][T30912] shmem 315392 [ 3524.762417][T30912] zswap 0 [ 3524.762417][T30912] zswapped 0 [ 3524.762417][T30912] file_mapped 290816 [ 3524.762417][T30912] file_dirty 0 [ 3524.762417][T30912] file_writeback 0 [ 3524.762417][T30912] swapcached 0 [ 3524.762417][T30912] anon_thp 0 [ 3524.762417][T30912] file_thp 0 [ 3524.762417][T30912] shmem_thp 0 [ 3524.762417][T30912] inactive_anon 90112 [ 3524.762417][T30912] active_anon 307200 [ 3524.762417][T30912] inactive_file 0 [ 3524.762417][T30912] active_file 0 [ 3524.762417][T30912] unevictable 0 [ 3524.762417][T30912] slab_reclaimable 16792 [ 3524.762417][T30912] slab_unreclaimable 308521520 [ 3524.771952][T30893] device bridge_slave_1 left promiscuous mode [ 3524.862107][T30912] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30912,uid=0 [ 3524.881782][T30893] bridge4374: port 2(bridge_slave_1) entered disabled state [ 3524.890177][T30912] Memory cgroup out of memory: Killed process 30912 (syz-executor.5) total-vm:54540kB, anon-rss:412kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000010a", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3524.917875][T30893] bridge4375: port 2(bridge_slave_1) entered blocking state [ 3524.928530][T30893] bridge4375: port 2(bridge_slave_1) entered disabled state [ 3524.938321][T30893] device bridge_slave_1 entered promiscuous mode [ 3525.020756][T30898] device veth0_to_hsr left promiscuous mode [ 3525.032328][T30898] bridge3682: port 1(veth0_to_hsr) entered disabled state [ 3525.048983][T30898] bridge3683: port 1(veth0_to_hsr) entered blocking state [ 3525.055872][T30918] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3525.061380][T30898] bridge3683: port 1(veth0_to_hsr) entered disabled state [ 3525.067123][T30918] CPU: 1 PID: 30918 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3525.082062][T30898] device veth0_to_hsr entered promiscuous mode [ 3525.084075][T30918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3525.084093][T30918] Call Trace: [ 3525.084102][T30918] [ 3525.084112][T30918] dump_stack_lvl+0xd1/0x138 [ 3525.099674][T30899] device bridge_slave_1 left promiscuous mode [ 3525.100385][T30918] dump_header+0x10b/0x85f [ 3525.103822][T30899] bridge3682: port 2(bridge_slave_1) entered disabled state [ 3525.106590][T30918] oom_kill_process.cold+0x10/0x15 [ 3525.135320][T30918] out_of_memory+0x35c/0x14a0 [ 3525.140017][T30918] ? find_held_lock+0x2d/0x110 [ 3525.144795][T30918] ? oom_killer_disable+0x280/0x280 [ 3525.150011][T30918] ? find_held_lock+0x2d/0x110 [ 3525.154890][T30918] mem_cgroup_out_of_memory+0x206/0x270 [ 3525.160465][T30918] ? mem_cgroup_margin+0x130/0x130 [ 3525.165590][T30918] ? lock_downgrade+0x6e0/0x6e0 [ 3525.170478][T30918] try_charge_memcg+0xefb/0x12f0 [ 3525.175471][T30918] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3525.181480][T30918] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3525.187642][T30918] ? lock_downgrade+0x6e0/0x6e0 [ 3525.192577][T30918] ? lock_downgrade+0x6e0/0x6e0 [ 3525.197433][T30918] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3525.203043][T30918] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3525.209231][T30918] copy_process+0x4e3/0x7520 [ 3525.214061][T30918] ? __lock_acquire+0xbc3/0x56d0 [ 3525.219134][T30918] ? __cleanup_sighand+0xb0/0xb0 [ 3525.224591][T30918] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3525.230821][T30918] ? psi_memstall_leave+0x174/0x250 [ 3525.236229][T30918] kernel_clone+0xeb/0x990 [ 3525.240655][T30918] ? create_io_thread+0xf0/0xf0 [ 3525.245771][T30918] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3525.252021][T30918] ? lock_downgrade+0x6e0/0x6e0 [ 3525.256894][T30918] __do_sys_clone+0xba/0x100 [ 3525.261579][T30918] ? kernel_clone+0x990/0x990 [ 3525.266288][T30918] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3525.272217][T30918] do_syscall_64+0x39/0xb0 [ 3525.276670][T30918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3525.282604][T30918] RIP: 0033:0x7f7e1f28d4f1 [ 3525.287043][T30918] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3525.307266][T30918] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3525.315714][T30918] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3525.323703][T30918] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3525.331838][T30918] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3525.339811][T30918] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3525.347806][T30918] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3525.355918][T30918] [ 3525.366345][T30918] memory: usage 307184kB, limit 307200kB, failcnt 5191 [ 3525.373724][T30918] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3525.381223][T30918] Memory cgroup stats for /syz5: [ 3525.381479][T30918] anon 81920 [ 3525.381479][T30918] file 315392 [ 3525.381479][T30918] kernel 314150912 [ 3525.381479][T30918] kernel_stack 32768 [ 3525.381479][T30918] pagetables 69632 [ 3525.381479][T30918] sec_pagetables 0 [ 3525.381479][T30918] percpu 5436000 [ 3525.381479][T30918] sock 0 [ 3525.381479][T30918] vmalloc 8192 [ 3525.381479][T30918] shmem 315392 [ 3525.381479][T30918] zswap 0 [ 3525.381479][T30918] zswapped 0 [ 3525.381479][T30918] file_mapped 290816 [ 3525.381479][T30918] file_dirty 0 [ 3525.381479][T30918] file_writeback 0 [ 3525.381479][T30918] swapcached 0 [ 3525.381479][T30918] anon_thp 0 [ 3525.381479][T30918] file_thp 0 [ 3525.381479][T30918] shmem_thp 0 [ 3525.381479][T30918] inactive_anon 61440 [ 3525.381479][T30918] active_anon 307200 [ 3525.381479][T30918] inactive_file 0 [ 3525.381479][T30918] active_file 0 [ 3525.381479][T30918] unevictable 0 [ 3525.381479][T30918] slab_reclaimable 16792 [ 3525.381479][T30918] slab_unreclaimable 308524072 [ 3525.481490][T30918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30918,uid=0 [ 3525.482035][T30899] bridge3683: port 2(bridge_slave_1) entered blocking state [ 3525.505791][T30899] bridge3683: port 2(bridge_slave_1) entered disabled state 22:17:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000e2030000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3525.514576][T30918] Memory cgroup out of memory: Killed process 30918 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3525.515584][T30899] device bridge_slave_1 entered promiscuous mode [ 3525.630748][T30904] bridge4292: port 1(veth0_to_hsr) entered disabled state [ 3525.653239][T30905] device bridge_slave_1 left promiscuous mode [ 3525.655183][T30925] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3525.660566][T30905] bridge4292: port 2(bridge_slave_1) entered disabled state [ 3525.678652][T30925] CPU: 0 PID: 30925 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3525.689111][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3525.699174][T30925] Call Trace: [ 3525.702472][T30925] [ 3525.705408][T30925] dump_stack_lvl+0xd1/0x138 [ 3525.710033][T30925] dump_header+0x10b/0x85f [ 3525.714466][T30925] oom_kill_process.cold+0x10/0x15 [ 3525.719601][T30925] out_of_memory+0x35c/0x14a0 [ 3525.724311][T30925] ? find_held_lock+0x2d/0x110 [ 3525.729086][T30925] ? oom_killer_disable+0x280/0x280 [ 3525.734294][T30925] ? find_held_lock+0x2d/0x110 [ 3525.739093][T30925] mem_cgroup_out_of_memory+0x206/0x270 [ 3525.744659][T30925] ? mem_cgroup_margin+0x130/0x130 [ 3525.749829][T30925] ? lock_downgrade+0x6e0/0x6e0 [ 3525.754753][T30925] try_charge_memcg+0xefb/0x12f0 [ 3525.759736][T30925] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3525.765740][T30925] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3525.771548][T30925] ? lock_downgrade+0x6e0/0x6e0 [ 3525.776415][T30925] ? lock_downgrade+0x6e0/0x6e0 [ 3525.781314][T30925] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3525.786879][T30925] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3525.793059][T30925] copy_process+0x1359/0x7520 [ 3525.797766][T30925] ? __lock_acquire+0xbc3/0x56d0 [ 3525.802829][T30925] ? __cleanup_sighand+0xb0/0xb0 [ 3525.807815][T30925] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3525.813820][T30925] ? psi_memstall_leave+0x174/0x250 [ 3525.819131][T30925] kernel_clone+0xeb/0x990 [ 3525.823582][T30925] ? create_io_thread+0xf0/0xf0 [ 3525.828453][T30925] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3525.834748][T30925] ? lock_downgrade+0x6e0/0x6e0 [ 3525.839636][T30925] __do_sys_clone+0xba/0x100 [ 3525.844365][T30925] ? kernel_clone+0x990/0x990 [ 3525.849085][T30925] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3525.854992][T30925] do_syscall_64+0x39/0xb0 [ 3525.859411][T30925] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3525.865322][T30925] RIP: 0033:0x7f7e1f28d4f1 [ 3525.869762][T30925] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3525.889377][T30925] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3525.897806][T30925] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3525.905956][T30925] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3525.913951][T30925] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3525.921964][T30925] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3525.929956][T30925] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3525.937944][T30925] [ 3525.943454][T30925] memory: usage 307188kB, limit 307200kB, failcnt 5281 [ 3525.964274][T30925] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3525.966031][T30911] device bridge_slave_1 left promiscuous mode 22:17:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000006800000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3525.973786][T30925] Memory cgroup stats for /syz5: [ 3525.977999][T30925] anon 81920 [ 3525.977999][T30925] file 315392 [ 3525.977999][T30925] kernel 314146816 [ 3525.977999][T30925] kernel_stack 32768 [ 3525.977999][T30925] pagetables 69632 [ 3525.977999][T30925] sec_pagetables 0 [ 3525.977999][T30925] percpu 5436000 [ 3525.977999][T30925] sock 0 [ 3525.977999][T30925] vmalloc 8192 [ 3525.977999][T30925] shmem 315392 [ 3525.977999][T30925] zswap 0 [ 3525.977999][T30925] zswapped 0 [ 3525.977999][T30925] file_mapped 290816 [ 3525.977999][T30925] file_dirty 0 [ 3525.977999][T30925] file_writeback 0 [ 3525.977999][T30925] swapcached 0 [ 3525.977999][T30925] anon_thp 0 [ 3525.977999][T30925] file_thp 0 [ 3525.977999][T30925] shmem_thp 0 [ 3525.977999][T30925] inactive_anon 77824 [ 3525.977999][T30925] active_anon 307200 [ 3525.977999][T30925] inactive_file 0 [ 3525.977999][T30925] active_file 0 [ 3525.977999][T30925] unevictable 0 [ 3525.977999][T30925] slab_reclaimable 16792 [ 3525.977999][T30925] slab_unreclaimable 308521824 [ 3525.982991][T30911] bridge3941: port 1(bridge_slave_1) entered disabled state 22:17:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 22:17:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3526.089923][T30925] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30925,uid=0 [ 3526.109169][T30925] Memory cgroup out of memory: Killed process 30925 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3526.175703][T30915] bridge4257: port 1(veth0_to_hsr) entered disabled state [ 3526.199633][T30915] bridge4258: port 1(veth0_to_hsr) entered blocking state [ 3526.207129][T30915] bridge4258: port 1(veth0_to_hsr) entered disabled state [ 3526.234141][T30916] device bridge_slave_1 left promiscuous mode [ 3526.241363][T30916] bridge4257: port 2(bridge_slave_1) entered disabled state [ 3526.257777][T30937] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3526.267109][T30916] bridge4258: port 2(bridge_slave_1) entered blocking state [ 3526.268432][T30937] CPU: 1 PID: 30937 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3526.279626][T30916] bridge4258: port 2(bridge_slave_1) entered disabled state [ 3526.285740][T30937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3526.285758][T30937] Call Trace: [ 3526.285766][T30937] [ 3526.285778][T30937] dump_stack_lvl+0xd1/0x138 [ 3526.285825][T30937] dump_header+0x10b/0x85f [ 3526.297927][T30916] device bridge_slave_1 entered promiscuous mode [ 3526.303955][T30937] oom_kill_process.cold+0x10/0x15 [ 3526.304001][T30937] out_of_memory+0x35c/0x14a0 [ 3526.304046][T30937] ? find_held_lock+0x2d/0x110 [ 3526.304087][T30937] ? oom_killer_disable+0x280/0x280 [ 3526.346051][T30937] ? find_held_lock+0x2d/0x110 [ 3526.350927][T30937] mem_cgroup_out_of_memory+0x206/0x270 [ 3526.356624][T30937] ? mem_cgroup_margin+0x130/0x130 [ 3526.361881][T30937] ? lock_downgrade+0x6e0/0x6e0 [ 3526.366841][T30937] try_charge_memcg+0xefb/0x12f0 [ 3526.371832][T30937] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3526.377940][T30937] ? lock_downgrade+0x6e0/0x6e0 22:17:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3526.382845][T30937] charge_memcg+0x90/0x3b0 [ 3526.387381][T30937] __mem_cgroup_charge+0x2b/0x90 [ 3526.390074][T30921] bridge4375: port 1(veth0_to_hsr) entered disabled state [ 3526.392456][T30937] ? copy_mc_to_kernel+0x3e/0x90 [ 3526.392502][T30937] do_wp_page+0x7ec/0x3370 [ 3526.392549][T30937] ? lock_release+0x810/0x810 [ 3526.413863][T30937] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3526.419300][T30937] ? do_raw_spin_lock+0x124/0x2b0 [ 3526.424363][T30937] ? rwlock_bug.part.0+0x90/0x90 [ 3526.429321][T30937] ? lock_chain_count+0x20/0x20 [ 3526.434378][T30937] __handle_mm_fault+0x1f58/0x3c90 [ 3526.439508][T30937] ? vm_iomap_memory+0x190/0x190 [ 3526.444485][T30937] handle_mm_fault+0x1b6/0x850 [ 3526.449272][T30937] do_user_addr_fault+0x475/0x1210 [ 3526.454584][T30937] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3526.460153][T30937] exc_page_fault+0x98/0x170 [ 3526.464752][T30937] asm_exc_page_fault+0x26/0x30 [ 3526.469622][T30937] RIP: 0033:0x7f7e1f236ede [ 3526.474070][T30937] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3526.493709][T30937] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3526.499796][T30937] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3526.507775][T30937] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3526.515750][T30937] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3526.523727][T30937] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3526.531719][T30937] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3526.539725][T30937] [ 3526.550561][T30921] bridge4376: port 1(veth0_to_hsr) entered blocking state [ 3526.557507][T30937] memory: usage 307200kB, limit 307200kB, failcnt 5368 [ 3526.557905][T30921] bridge4376: port 1(veth0_to_hsr) entered disabled state [ 3526.567106][T30937] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3526.586899][T30937] Memory cgroup stats for /syz5: [ 3526.587107][T30937] anon 81920 [ 3526.587107][T30937] file 315392 [ 3526.587107][T30937] kernel 314159104 [ 3526.587107][T30937] kernel_stack 65536 [ 3526.587107][T30937] pagetables 69632 [ 3526.587107][T30937] sec_pagetables 0 [ 3526.587107][T30937] percpu 5436000 [ 3526.587107][T30937] sock 0 [ 3526.587107][T30937] vmalloc 8192 [ 3526.587107][T30937] shmem 315392 [ 3526.587107][T30937] zswap 0 [ 3526.587107][T30937] zswapped 0 [ 3526.587107][T30937] file_mapped 290816 [ 3526.587107][T30937] file_dirty 0 [ 3526.587107][T30937] file_writeback 0 [ 3526.587107][T30937] swapcached 0 [ 3526.587107][T30937] anon_thp 0 [ 3526.587107][T30937] file_thp 0 [ 3526.587107][T30937] shmem_thp 0 [ 3526.587107][T30937] inactive_anon 49152 [ 3526.587107][T30937] active_anon 307200 [ 3526.587107][T30937] inactive_file 0 [ 3526.587107][T30937] active_file 0 [ 3526.587107][T30937] unevictable 0 [ 3526.587107][T30937] slab_reclaimable 16792 [ 3526.587107][T30937] slab_unreclaimable 308524536 [ 3526.588731][T30922] device bridge_slave_1 left promiscuous mode [ 3526.592526][T30937] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3526.689082][T30922] bridge4375: port 2(bridge_slave_1) entered disabled state [ 3526.705800][T30937] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30937,uid=0 [ 3526.717311][T30937] Memory cgroup out of memory: Killed process 30937 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3526.745095][T30922] bridge4376: port 2(bridge_slave_1) entered blocking state [ 3526.752788][T30922] bridge4376: port 2(bridge_slave_1) entered disabled state [ 3526.761755][T30922] device bridge_slave_1 entered promiscuous mode 22:17:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000020a", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3526.824809][T30944] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3526.835493][T30944] CPU: 0 PID: 30944 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3526.845956][T30944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3526.856045][T30944] Call Trace: [ 3526.859353][T30944] [ 3526.862306][T30944] dump_stack_lvl+0xd1/0x138 [ 3526.866957][T30944] dump_header+0x10b/0x85f [ 3526.871433][T30944] oom_kill_process.cold+0x10/0x15 [ 3526.876586][T30944] out_of_memory+0x35c/0x14a0 [ 3526.881314][T30944] ? find_held_lock+0x2d/0x110 [ 3526.886132][T30944] ? oom_killer_disable+0x280/0x280 [ 3526.891388][T30944] ? find_held_lock+0x2d/0x110 [ 3526.896215][T30944] mem_cgroup_out_of_memory+0x206/0x270 [ 3526.901905][T30944] ? mem_cgroup_margin+0x130/0x130 [ 3526.907075][T30944] ? lock_downgrade+0x6e0/0x6e0 [ 3526.912001][T30944] try_charge_memcg+0xefb/0x12f0 [ 3526.916991][T30944] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3526.923008][T30944] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3526.928762][T30944] ? lock_downgrade+0x6e0/0x6e0 [ 3526.933635][T30944] ? lock_downgrade+0x6e0/0x6e0 [ 3526.938516][T30944] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3526.944084][T30944] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3526.950265][T30944] copy_process+0x4e3/0x7520 [ 3526.954885][T30944] ? __lock_acquire+0xbc3/0x56d0 [ 3526.959860][T30944] ? __cleanup_sighand+0xb0/0xb0 [ 3526.964827][T30944] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3526.970845][T30944] ? psi_memstall_leave+0x174/0x250 [ 3526.976080][T30944] kernel_clone+0xeb/0x990 [ 3526.980525][T30944] ? create_io_thread+0xf0/0xf0 [ 3526.985398][T30944] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3526.991676][T30944] ? lock_downgrade+0x6e0/0x6e0 [ 3526.996563][T30944] __do_sys_clone+0xba/0x100 [ 3527.001171][T30944] ? kernel_clone+0x990/0x990 [ 3527.005881][T30944] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3527.011807][T30944] do_syscall_64+0x39/0xb0 [ 3527.016238][T30944] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.022153][T30944] RIP: 0033:0x7f7e1f28d4f1 [ 3527.026585][T30944] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3527.046292][T30944] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3527.054722][T30944] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3527.062709][T30944] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3527.070780][T30944] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3527.078769][T30944] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3527.086757][T30944] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3527.095024][T30944] [ 3527.102573][T30944] memory: usage 307176kB, limit 307200kB, failcnt 5431 [ 3527.132710][T30944] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3527.148051][T30928] device veth0_to_hsr left promiscuous mode [ 3527.154235][T30944] Memory cgroup stats for /syz5: [ 3527.154485][T30944] anon 81920 [ 3527.154485][T30944] file 315392 [ 3527.154485][T30944] kernel 314142720 [ 3527.154485][T30944] kernel_stack 32768 [ 3527.154485][T30944] pagetables 69632 [ 3527.154485][T30944] sec_pagetables 0 [ 3527.154485][T30944] percpu 5436000 [ 3527.154485][T30944] sock 0 [ 3527.154485][T30944] vmalloc 8192 [ 3527.154485][T30944] shmem 315392 [ 3527.154485][T30944] zswap 0 [ 3527.154485][T30944] zswapped 0 [ 3527.154485][T30944] file_mapped 290816 [ 3527.154485][T30944] file_dirty 0 [ 3527.154485][T30944] file_writeback 0 [ 3527.154485][T30944] swapcached 0 [ 3527.154485][T30944] anon_thp 0 [ 3527.154485][T30944] file_thp 0 [ 3527.154485][T30944] shmem_thp 0 [ 3527.154485][T30944] inactive_anon 90112 [ 3527.154485][T30944] active_anon 307200 [ 3527.154485][T30944] inactive_file 0 [ 3527.154485][T30944] active_file 0 [ 3527.154485][T30944] unevictable 0 [ 3527.154485][T30944] slab_reclaimable 16792 [ 3527.154485][T30944] slab_unreclaimable 308521824 [ 3527.154668][T30928] bridge3683: port 1(veth0_to_hsr) entered disabled state [ 3527.172309][T30944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30944,uid=0 22:17:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3527.278077][T30944] Memory cgroup out of memory: Killed process 30944 (syz-executor.5) total-vm:54540kB, anon-rss:356kB, file-rss:8848kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3527.296739][T30928] bridge3684: port 1(veth0_to_hsr) entered blocking state [ 3527.309651][T30928] bridge3684: port 1(veth0_to_hsr) entered disabled state [ 3527.332057][T30928] device veth0_to_hsr entered promiscuous mode [ 3527.372732][T30950] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3527.390356][T30950] CPU: 0 PID: 30950 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3527.401021][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3527.405270][T30932] bridge4293: port 1(veth0_to_hsr) entered blocking state [ 3527.411204][T30950] Call Trace: [ 3527.411220][T30950] [ 3527.411231][T30950] dump_stack_lvl+0xd1/0x138 [ 3527.411278][T30950] dump_header+0x10b/0x85f [ 3527.411308][T30950] oom_kill_process.cold+0x10/0x15 [ 3527.411339][T30950] out_of_memory+0x35c/0x14a0 [ 3527.420520][T30932] bridge4293: port 1(veth0_to_hsr) entered disabled state [ 3527.421877][T30950] ? find_held_lock+0x2d/0x110 [ 3527.421925][T30950] ? oom_killer_disable+0x280/0x280 [ 3527.421970][T30950] ? find_held_lock+0x2d/0x110 [ 3527.442041][T30931] device bridge_slave_1 left promiscuous mode [ 3527.444134][T30950] mem_cgroup_out_of_memory+0x206/0x270 [ 3527.444185][T30950] ? mem_cgroup_margin+0x130/0x130 [ 3527.451772][T30931] bridge3683: port 2(bridge_slave_1) entered disabled state [ 3527.456030][T30950] ? lock_downgrade+0x6e0/0x6e0 [ 3527.456090][T30950] try_charge_memcg+0xefb/0x12f0 [ 3527.456132][T30950] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3527.505947][T30950] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3527.511706][T30950] ? lock_downgrade+0x6e0/0x6e0 [ 3527.516577][T30950] ? lock_downgrade+0x6e0/0x6e0 [ 3527.521458][T30950] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3527.527118][T30950] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3527.533299][T30950] copy_process+0x4e3/0x7520 [ 3527.537904][T30950] ? page_remove_rmap+0x435/0x1210 [ 3527.543040][T30950] ? folio_flags.constprop.0+0x53/0x150 [ 3527.548795][T30950] ? put_page+0xd9/0x280 [ 3527.553065][T30950] ? do_wp_page+0x844/0x3370 [ 3527.557697][T30950] ? __cleanup_sighand+0xb0/0xb0 [ 3527.562654][T30950] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3527.568063][T30950] ? rwlock_bug.part.0+0x90/0x90 [ 3527.573018][T30950] ? lock_chain_count+0x20/0x20 [ 3527.577895][T30950] kernel_clone+0xeb/0x990 [ 3527.582338][T30950] ? create_io_thread+0xf0/0xf0 [ 3527.587216][T30950] ? find_held_lock+0x2d/0x110 [ 3527.592045][T30950] __do_sys_clone+0xba/0x100 [ 3527.596678][T30950] ? kernel_clone+0x990/0x990 [ 3527.601400][T30950] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3527.607338][T30950] do_syscall_64+0x39/0xb0 [ 3527.611779][T30950] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.617700][T30950] RIP: 0033:0x7f7e1f28d4f1 [ 3527.622133][T30950] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3527.641932][T30950] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3527.650452][T30950] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3527.658437][T30950] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3527.666420][T30950] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3527.674406][T30950] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3527.682409][T30950] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3527.690413][T30950] [ 3527.710001][T30950] memory: usage 307184kB, limit 307200kB, failcnt 5503 [ 3527.717156][T30950] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3527.717488][T30931] bridge3684: port 2(bridge_slave_1) entered blocking state [ 3527.731553][T30950] Memory cgroup stats for /syz5: [ 3527.731776][T30950] anon 81920 [ 3527.731776][T30950] file 315392 [ 3527.731776][T30950] kernel 314142720 [ 3527.731776][T30950] kernel_stack 32768 [ 3527.731776][T30950] pagetables 69632 [ 3527.731776][T30950] sec_pagetables 0 [ 3527.731776][T30950] percpu 5436000 [ 3527.731776][T30950] sock 0 [ 3527.731776][T30950] vmalloc 8192 [ 3527.731776][T30950] shmem 315392 [ 3527.731776][T30950] zswap 0 [ 3527.731776][T30950] zswapped 0 [ 3527.731776][T30950] file_mapped 290816 [ 3527.731776][T30950] file_dirty 0 [ 3527.731776][T30950] file_writeback 0 [ 3527.731776][T30950] swapcached 0 [ 3527.731776][T30950] anon_thp 0 [ 3527.731776][T30950] file_thp 0 [ 3527.731776][T30950] shmem_thp 0 [ 3527.731776][T30950] inactive_anon 90112 [ 3527.731776][T30950] active_anon 307200 [ 3527.731776][T30950] inactive_file 0 [ 3527.731776][T30950] active_file 0 [ 3527.731776][T30950] unevictable 0 [ 3527.731776][T30950] slab_reclaimable 16792 [ 3527.731776][T30950] slab_unreclaimable 308524072 [ 3527.736445][T30931] bridge3684: port 2(bridge_slave_1) entered disabled state [ 3527.737533][T30950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30950,uid=0 [ 3527.845733][T30931] device bridge_slave_1 entered promiscuous mode 22:17:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000010a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3527.853660][T30950] Memory cgroup out of memory: Killed process 30950 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3527.892173][T30934] bridge4293: port 2(bridge_slave_1) entered blocking state [ 3527.903818][T30934] bridge4293: port 2(bridge_slave_1) entered disabled state [ 3527.931181][T30934] device bridge_slave_1 entered promiscuous mode [ 3527.952070][T30952] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3527.963736][T30952] CPU: 1 PID: 30952 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3527.964732][T30936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3527.974185][T30952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3527.974205][T30952] Call Trace: [ 3527.974214][T30952] [ 3527.974227][T30952] dump_stack_lvl+0xd1/0x138 [ 3527.974270][T30952] dump_header+0x10b/0x85f [ 3527.974300][T30952] oom_kill_process.cold+0x10/0x15 [ 3527.974332][T30952] out_of_memory+0x35c/0x14a0 [ 3527.974379][T30952] ? find_held_lock+0x2d/0x110 [ 3527.974419][T30952] ? oom_killer_disable+0x280/0x280 [ 3527.974463][T30952] ? find_held_lock+0x2d/0x110 [ 3528.033830][T30952] mem_cgroup_out_of_memory+0x206/0x270 [ 3528.039416][T30952] ? mem_cgroup_margin+0x130/0x130 [ 3528.044553][T30952] ? lock_downgrade+0x6e0/0x6e0 [ 3528.049438][T30952] try_charge_memcg+0xefb/0x12f0 [ 3528.054402][T30952] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3528.060413][T30952] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3528.066163][T30952] ? lock_downgrade+0x6e0/0x6e0 [ 3528.071042][T30952] ? lock_downgrade+0x6e0/0x6e0 [ 3528.075921][T30952] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3528.081491][T30952] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3528.087673][T30952] copy_process+0x4e3/0x7520 [ 3528.092292][T30952] ? __lock_acquire+0xbc3/0x56d0 [ 3528.097259][T30952] ? __cleanup_sighand+0xb0/0xb0 [ 3528.102216][T30952] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3528.108217][T30952] ? psi_memstall_leave+0x174/0x250 [ 3528.113449][T30952] kernel_clone+0xeb/0x990 [ 3528.117889][T30952] ? create_io_thread+0xf0/0xf0 [ 3528.122783][T30952] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3528.129077][T30952] ? lock_downgrade+0x6e0/0x6e0 [ 3528.133968][T30952] __do_sys_clone+0xba/0x100 [ 3528.138615][T30952] ? kernel_clone+0x990/0x990 [ 3528.143445][T30952] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3528.149388][T30952] do_syscall_64+0x39/0xb0 [ 3528.154274][T30952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.160202][T30952] RIP: 0033:0x7f7e1f28d4f1 [ 3528.164632][T30952] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3528.184375][T30952] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3528.192826][T30952] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3528.200907][T30952] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3528.208996][T30952] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3528.217184][T30952] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3528.225178][T30952] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3528.233274][T30952] [ 3528.255524][T30952] memory: usage 307192kB, limit 307200kB, failcnt 5570 [ 3528.262868][T30952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3528.270361][T30952] Memory cgroup stats for /syz5: [ 3528.270611][T30952] anon 81920 [ 3528.270611][T30952] file 315392 [ 3528.270611][T30952] kernel 314150912 [ 3528.270611][T30952] kernel_stack 32768 [ 3528.270611][T30952] pagetables 69632 [ 3528.270611][T30952] sec_pagetables 0 [ 3528.270611][T30952] percpu 5436000 [ 3528.270611][T30952] sock 0 [ 3528.270611][T30952] vmalloc 8192 [ 3528.270611][T30952] shmem 315392 [ 3528.270611][T30952] zswap 0 [ 3528.270611][T30952] zswapped 0 [ 3528.270611][T30952] file_mapped 290816 [ 3528.270611][T30952] file_dirty 0 [ 3528.270611][T30952] file_writeback 0 [ 3528.270611][T30952] swapcached 0 [ 3528.270611][T30952] anon_thp 0 [ 3528.270611][T30952] file_thp 0 [ 3528.270611][T30952] shmem_thp 0 [ 3528.270611][T30952] inactive_anon 90112 [ 3528.270611][T30952] active_anon 307200 [ 3528.270611][T30952] inactive_file 0 [ 3528.270611][T30952] active_file 0 [ 3528.270611][T30952] unevictable 0 22:17:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000026a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3528.270611][T30952] slab_reclaimable 16792 [ 3528.270611][T30952] slab_unreclaimable 308524720 [ 3528.326851][T30938] bridge3942: port 1(bridge_slave_1) entered blocking state [ 3528.393548][T30938] bridge3942: port 1(bridge_slave_1) entered disabled state 22:17:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000020a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3528.401923][T30952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30952,uid=0 [ 3528.412181][T30938] device bridge_slave_1 entered promiscuous mode [ 3528.419331][T30952] Memory cgroup out of memory: Killed process 30952 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3528.535465][T30942] bridge4258: port 1(veth0_to_hsr) entered disabled state [ 3528.550257][T30942] bridge4259: port 1(veth0_to_hsr) entered blocking state [ 3528.551774][T30964] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3528.557704][T30942] bridge4259: port 1(veth0_to_hsr) entered disabled state [ 3528.568168][T30964] CPU: 1 PID: 30964 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3528.568205][T30964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3528.568221][T30964] Call Trace: [ 3528.568230][T30964] [ 3528.568241][T30964] dump_stack_lvl+0xd1/0x138 [ 3528.568284][T30964] dump_header+0x10b/0x85f [ 3528.568317][T30964] oom_kill_process.cold+0x10/0x15 [ 3528.568349][T30964] out_of_memory+0x35c/0x14a0 [ 3528.568395][T30964] ? find_held_lock+0x2d/0x110 [ 3528.568435][T30964] ? oom_killer_disable+0x280/0x280 [ 3528.568479][T30964] ? find_held_lock+0x2d/0x110 [ 3528.601446][T30943] device bridge_slave_1 left promiscuous mode [ 3528.602314][T30964] mem_cgroup_out_of_memory+0x206/0x270 [ 3528.602366][T30964] ? mem_cgroup_margin+0x130/0x130 [ 3528.607728][T30943] bridge4258: port 2(bridge_slave_1) entered disabled state [ 3528.611356][T30964] ? lock_downgrade+0x6e0/0x6e0 [ 3528.611410][T30964] try_charge_memcg+0xefb/0x12f0 [ 3528.611448][T30964] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3528.611478][T30964] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3528.611520][T30964] ? lock_downgrade+0x6e0/0x6e0 [ 3528.686362][T30964] ? lock_downgrade+0x6e0/0x6e0 [ 3528.691250][T30964] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3528.696824][T30964] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3528.703087][T30964] copy_process+0x4e3/0x7520 [ 3528.707701][T30964] ? __lock_acquire+0xbc3/0x56d0 [ 3528.712668][T30964] ? __cleanup_sighand+0xb0/0xb0 [ 3528.717626][T30964] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3528.723629][T30964] ? psi_memstall_leave+0x174/0x250 [ 3528.728868][T30964] kernel_clone+0xeb/0x990 [ 3528.733307][T30964] ? create_io_thread+0xf0/0xf0 [ 3528.738177][T30964] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3528.744449][T30964] ? lock_downgrade+0x6e0/0x6e0 [ 3528.749331][T30964] __do_sys_clone+0xba/0x100 [ 3528.753961][T30964] ? kernel_clone+0x990/0x990 [ 3528.758688][T30964] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3528.764633][T30964] do_syscall_64+0x39/0xb0 [ 3528.769077][T30964] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.775001][T30964] RIP: 0033:0x7f7e1f28d4f1 [ 3528.779431][T30964] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3528.799054][T30964] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3528.807486][T30964] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3528.815471][T30964] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3528.823543][T30964] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3528.831528][T30964] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3528.839516][T30964] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3528.847523][T30964] [ 3528.856287][T30964] memory: usage 307172kB, limit 307200kB, failcnt 5652 [ 3528.867227][T30964] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3528.874899][T30964] Memory cgroup stats for /syz5: [ 3528.875164][T30964] anon 81920 [ 3528.875164][T30964] file 315392 [ 3528.875164][T30964] kernel 314138624 [ 3528.875164][T30964] kernel_stack 32768 [ 3528.875164][T30964] pagetables 69632 [ 3528.875164][T30964] sec_pagetables 0 [ 3528.875164][T30964] percpu 5436000 [ 3528.875164][T30964] sock 0 [ 3528.875164][T30964] vmalloc 8192 [ 3528.875164][T30964] shmem 315392 [ 3528.875164][T30964] zswap 0 [ 3528.875164][T30964] zswapped 0 [ 3528.875164][T30964] file_mapped 290816 [ 3528.875164][T30964] file_dirty 0 [ 3528.875164][T30964] file_writeback 0 [ 3528.875164][T30964] swapcached 0 [ 3528.875164][T30964] anon_thp 0 [ 3528.875164][T30964] file_thp 0 [ 3528.875164][T30964] shmem_thp 0 [ 3528.875164][T30964] inactive_anon 49152 [ 3528.875164][T30964] active_anon 307200 [ 3528.875164][T30964] inactive_file 0 [ 3528.875164][T30964] active_file 0 [ 3528.875164][T30964] unevictable 0 [ 3528.875164][T30964] slab_reclaimable 19368 [ 3528.875164][T30964] slab_unreclaimable 308521824 [ 3528.881987][T30943] bridge4259: port 2(bridge_slave_1) entered blocking state 22:17:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000001a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3528.981700][T30943] bridge4259: port 2(bridge_slave_1) entered disabled state [ 3528.991580][T30943] device bridge_slave_1 entered promiscuous mode [ 3529.006199][T30947] bridge4376: port 1(veth0_to_hsr) entered disabled state [ 3529.019058][T30964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30964,uid=0 22:17:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000c000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3529.035803][T30964] Memory cgroup out of memory: Killed process 30964 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3529.054299][T30947] bridge4377: port 1(veth0_to_hsr) entered blocking state [ 3529.065333][T30947] bridge4377: port 1(veth0_to_hsr) entered disabled state [ 3529.098906][T30946] device bridge_slave_1 left promiscuous mode [ 3529.114317][T30946] bridge4376: port 2(bridge_slave_1) entered disabled state [ 3529.138537][T30946] bridge4377: port 2(bridge_slave_1) entered blocking state [ 3529.148970][T30970] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3529.155063][T30946] bridge4377: port 2(bridge_slave_1) entered disabled state [ 3529.160323][T30970] CPU: 1 PID: 30970 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3529.177340][T30970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3529.178096][T30946] device bridge_slave_1 entered promiscuous mode [ 3529.187399][T30970] Call Trace: [ 3529.187409][T30970] [ 3529.187419][T30970] dump_stack_lvl+0xd1/0x138 [ 3529.187463][T30970] dump_header+0x10b/0x85f [ 3529.187493][T30970] oom_kill_process.cold+0x10/0x15 [ 3529.187526][T30970] out_of_memory+0x35c/0x14a0 [ 3529.187577][T30970] ? find_held_lock+0x2d/0x110 [ 3529.187617][T30970] ? oom_killer_disable+0x280/0x280 [ 3529.228900][T30970] ? find_held_lock+0x2d/0x110 [ 3529.233709][T30970] mem_cgroup_out_of_memory+0x206/0x270 [ 3529.239288][T30970] ? mem_cgroup_margin+0x130/0x130 [ 3529.244427][T30970] ? lock_downgrade+0x6e0/0x6e0 [ 3529.249309][T30970] try_charge_memcg+0xefb/0x12f0 [ 3529.254276][T30970] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3529.260277][T30970] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3529.266046][T30970] ? lock_downgrade+0x6e0/0x6e0 [ 3529.270934][T30970] ? lock_downgrade+0x6e0/0x6e0 [ 3529.275835][T30970] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3529.281419][T30970] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3529.287720][T30970] copy_process+0x4e3/0x7520 [ 3529.292346][T30970] ? __lock_acquire+0xbc3/0x56d0 [ 3529.297320][T30970] ? __cleanup_sighand+0xb0/0xb0 [ 3529.302291][T30970] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3529.308303][T30970] ? psi_memstall_leave+0x174/0x250 [ 3529.313534][T30970] kernel_clone+0xeb/0x990 [ 3529.317978][T30970] ? create_io_thread+0xf0/0xf0 [ 3529.322853][T30970] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3529.329124][T30970] ? lock_downgrade+0x6e0/0x6e0 [ 3529.334004][T30970] __do_sys_clone+0xba/0x100 [ 3529.338618][T30970] ? kernel_clone+0x990/0x990 [ 3529.343328][T30970] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3529.349254][T30970] do_syscall_64+0x39/0xb0 [ 3529.353712][T30970] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3529.359663][T30970] RIP: 0033:0x7f7e1f28d4f1 [ 3529.364119][T30970] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3529.384364][T30970] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 22:17:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000c", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3529.392801][T30970] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3529.400792][T30970] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3529.408773][T30970] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3529.416753][T30970] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3529.424738][T30970] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3529.432753][T30970] [ 3529.438656][T30971] bridge4259: port 1(veth0_to_hsr) entered disabled state [ 3529.510989][T30970] memory: usage 307168kB, limit 307200kB, failcnt 5735 [ 3529.518301][T30970] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3529.518388][T30955] device veth0_to_hsr left promiscuous mode [ 3529.532783][T30955] bridge3684: port 1(veth0_to_hsr) entered disabled state [ 3529.536006][T30970] Memory cgroup stats for /syz5: [ 3529.545577][T30970] anon 81920 [ 3529.545577][T30970] file 315392 [ 3529.545577][T30970] kernel 314142720 [ 3529.545577][T30970] kernel_stack 32768 [ 3529.545577][T30970] pagetables 69632 [ 3529.545577][T30970] sec_pagetables 0 [ 3529.545577][T30970] percpu 5436000 [ 3529.545577][T30970] sock 0 [ 3529.545577][T30970] vmalloc 8192 [ 3529.545577][T30970] shmem 315392 [ 3529.545577][T30970] zswap 0 [ 3529.545577][T30970] zswapped 0 [ 3529.545577][T30970] file_mapped 290816 [ 3529.545577][T30970] file_dirty 0 [ 3529.545577][T30970] file_writeback 0 [ 3529.545577][T30970] swapcached 0 [ 3529.545577][T30970] anon_thp 0 [ 3529.545577][T30970] file_thp 0 [ 3529.545577][T30970] shmem_thp 0 [ 3529.545577][T30970] inactive_anon 90112 [ 3529.545577][T30970] active_anon 307200 [ 3529.545577][T30970] inactive_file 0 [ 3529.545577][T30970] active_file 0 [ 3529.545577][T30970] unevictable 0 [ 3529.545577][T30970] slab_reclaimable 16792 [ 3529.545577][T30970] slab_unreclaimable 308521520 [ 3529.545746][T30955] bridge3685: port 1(veth0_to_hsr) entered blocking state [ 3529.558130][T30970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3529.648488][T30955] bridge3685: port 1(veth0_to_hsr) entered disabled state [ 3529.655830][T30970] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30970,uid=0 [ 3529.675601][T30955] device veth0_to_hsr entered promiscuous mode [ 3529.680965][T30970] Memory cgroup out of memory: Killed process 30970 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000e000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3529.715549][T30956] device bridge_slave_1 left promiscuous mode [ 3529.723466][T30956] bridge3684: port 2(bridge_slave_1) entered disabled state [ 3529.744475][T30956] bridge3685: port 2(bridge_slave_1) entered blocking state [ 3529.755456][T30956] bridge3685: port 2(bridge_slave_1) entered disabled state 22:17:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3529.764958][T30956] device bridge_slave_1 entered promiscuous mode [ 3529.845854][T30961] bridge4293: port 1(veth0_to_hsr) entered disabled state [ 3529.854802][T30979] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3529.870886][T30979] CPU: 0 PID: 30979 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3529.881372][T30979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3529.891551][T30979] Call Trace: [ 3529.894859][T30979] [ 3529.897809][T30979] dump_stack_lvl+0xd1/0x138 [ 3529.902450][T30979] dump_header+0x10b/0x85f [ 3529.906915][T30979] oom_kill_process.cold+0x10/0x15 [ 3529.912057][T30979] out_of_memory+0x35c/0x14a0 [ 3529.916780][T30979] ? find_held_lock+0x2d/0x110 [ 3529.921572][T30979] ? oom_killer_disable+0x280/0x280 [ 3529.926845][T30979] ? find_held_lock+0x2d/0x110 [ 3529.931659][T30979] mem_cgroup_out_of_memory+0x206/0x270 [ 3529.937243][T30979] ? mem_cgroup_margin+0x130/0x130 [ 3529.942409][T30979] ? lock_downgrade+0x6e0/0x6e0 [ 3529.947303][T30979] try_charge_memcg+0xefb/0x12f0 [ 3529.952267][T30979] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3529.958439][T30979] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3529.964191][T30979] ? lock_downgrade+0x6e0/0x6e0 [ 3529.969060][T30979] ? lock_downgrade+0x6e0/0x6e0 [ 3529.973924][T30979] ? rcu_read_unlock+0x9/0x60 [ 3529.978641][T30979] obj_cgroup_charge+0x2af/0x5e0 [ 3529.983610][T30979] __kmem_cache_alloc_node+0xb2/0x430 [ 3529.988998][T30979] ? copy_semundo+0x18b/0x300 [ 3529.993706][T30979] kmalloc_trace+0x26/0x60 [ 3529.998147][T30979] copy_semundo+0x18b/0x300 [ 3530.002679][T30979] copy_process+0x2457/0x7520 [ 3530.007405][T30979] ? __cleanup_sighand+0xb0/0xb0 [ 3530.012363][T30979] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3530.018363][T30979] ? psi_memstall_leave+0x174/0x250 [ 3530.023597][T30979] kernel_clone+0xeb/0x990 [ 3530.028038][T30979] ? create_io_thread+0xf0/0xf0 [ 3530.032915][T30979] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3530.039187][T30979] ? lock_downgrade+0x6e0/0x6e0 [ 3530.044068][T30979] __do_sys_clone+0xba/0x100 [ 3530.048938][T30979] ? kernel_clone+0x990/0x990 [ 3530.053649][T30979] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3530.059585][T30979] do_syscall_64+0x39/0xb0 [ 3530.064019][T30979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.069933][T30979] RIP: 0033:0x7f7e1f28d4f1 [ 3530.074364][T30979] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3530.093985][T30979] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3530.102414][T30979] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3530.110402][T30979] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3530.118582][T30979] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3530.126661][T30979] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3530.134644][T30979] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3530.142646][T30979] [ 3530.158023][T30961] bridge4294: port 1(veth0_to_hsr) entered blocking state [ 3530.166013][T30961] bridge4294: port 1(veth0_to_hsr) entered disabled state [ 3530.186004][T30962] device bridge_slave_1 left promiscuous mode [ 3530.192990][T30962] bridge4293: port 2(bridge_slave_1) entered disabled state [ 3530.196165][T30979] memory: usage 307184kB, limit 307200kB, failcnt 5831 [ 3530.208534][T30979] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3530.221941][T30979] Memory cgroup stats for /syz5: [ 3530.222146][T30979] anon 81920 [ 3530.222146][T30979] file 315392 [ 3530.222146][T30979] kernel 314159104 [ 3530.222146][T30979] kernel_stack 65536 [ 3530.222146][T30979] pagetables 69632 [ 3530.222146][T30979] sec_pagetables 0 [ 3530.222146][T30979] percpu 5436000 [ 3530.222146][T30979] sock 0 [ 3530.222146][T30979] vmalloc 8192 [ 3530.222146][T30979] shmem 315392 [ 3530.222146][T30979] zswap 0 [ 3530.222146][T30979] zswapped 0 [ 3530.222146][T30979] file_mapped 290816 [ 3530.222146][T30979] file_dirty 0 [ 3530.222146][T30979] file_writeback 0 [ 3530.222146][T30979] swapcached 0 [ 3530.222146][T30979] anon_thp 0 [ 3530.222146][T30979] file_thp 0 [ 3530.222146][T30979] shmem_thp 0 [ 3530.222146][T30979] inactive_anon 90112 [ 3530.222146][T30979] active_anon 307200 [ 3530.222146][T30979] inactive_file 0 [ 3530.222146][T30979] active_file 0 [ 3530.222146][T30979] unevictable 0 [ 3530.222146][T30979] slab_reclaimable 16792 [ 3530.222146][T30979] slab_unreclaimable 308521520 [ 3530.321044][T30979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30979,uid=0 [ 3530.330392][T30962] bridge4294: port 2(bridge_slave_1) entered blocking state 22:17:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000036a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3530.337756][T30979] Memory cgroup out of memory: Killed process 30979 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3530.350692][T30962] bridge4294: port 2(bridge_slave_1) entered disabled state [ 3530.374684][T30962] device bridge_slave_1 entered promiscuous mode [ 3530.385340][T30965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3530.491101][T30966] device bridge_slave_1 left promiscuous mode [ 3530.497867][T30988] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3530.498332][T30966] bridge3942: port 1(bridge_slave_1) entered disabled state [ 3530.511189][T30988] CPU: 1 PID: 30988 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3530.527922][T30988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3530.538005][T30988] Call Trace: [ 3530.541293][T30988] [ 3530.544222][T30988] dump_stack_lvl+0xd1/0x138 [ 3530.548827][T30988] dump_header+0x10b/0x85f [ 3530.553276][T30988] oom_kill_process.cold+0x10/0x15 [ 3530.558433][T30988] out_of_memory+0x35c/0x14a0 [ 3530.563180][T30988] ? find_held_lock+0x2d/0x110 [ 3530.568004][T30988] ? oom_killer_disable+0x280/0x280 [ 3530.573267][T30988] ? find_held_lock+0x2d/0x110 [ 3530.578111][T30988] mem_cgroup_out_of_memory+0x206/0x270 [ 3530.583714][T30988] ? mem_cgroup_margin+0x130/0x130 [ 3530.588889][T30988] ? lock_downgrade+0x6e0/0x6e0 [ 3530.594907][T30988] try_charge_memcg+0xefb/0x12f0 [ 3530.599862][T30988] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3530.605860][T30988] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3530.611825][T30988] ? lock_downgrade+0x6e0/0x6e0 [ 3530.616716][T30988] ? lock_downgrade+0x6e0/0x6e0 [ 3530.621618][T30988] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3530.627202][T30988] __alloc_pages+0x1f3/0x5b0 [ 3530.631936][T30988] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3530.638759][T30988] ? find_held_lock+0x2d/0x110 [ 3530.643657][T30988] alloc_pages+0x1aa/0x270 [ 3530.648106][T30988] pte_alloc_one+0x1a/0x230 [ 3530.652647][T30988] __pte_alloc+0x6d/0x260 [ 3530.657002][T30988] ? pmd_install+0x160/0x160 [ 3530.661617][T30988] ? hugepage_vma_check+0x24e/0x830 [ 3530.666837][T30988] ? _raw_spin_unlock+0x28/0x40 [ 3530.671726][T30988] ? __pmd_alloc+0x30c/0x5d0 [ 3530.676348][T30988] __handle_mm_fault+0x38cf/0x3c90 [ 3530.681515][T30988] ? vm_iomap_memory+0x190/0x190 [ 3530.686596][T30988] handle_mm_fault+0x1b6/0x850 [ 3530.691393][T30988] do_user_addr_fault+0x475/0x1210 [ 3530.697323][T30988] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3530.702904][T30988] exc_page_fault+0x98/0x170 [ 3530.707520][T30988] asm_exc_page_fault+0x26/0x30 [ 3530.712395][T30988] RIP: 0010:__put_user_4+0x16/0x20 [ 3530.717535][T30988] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3530.737158][T30988] RSP: 0018:ffffc9000a9afe40 EFLAGS: 00050293 [ 3530.743244][T30988] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3530.751227][T30988] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3530.759215][T30988] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3530.767201][T30988] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3530.775184][T30988] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3530.783180][T30988] ? __sys_socketpair+0xff/0x570 [ 3530.788270][T30988] __sys_socketpair+0x10b/0x570 [ 3530.793182][T30988] ? __ia32_sys_socket+0xb0/0xb0 [ 3530.798187][T30988] __x64_sys_socketpair+0x97/0x100 [ 3530.803339][T30988] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3530.809267][T30988] do_syscall_64+0x39/0xb0 [ 3530.813702][T30988] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.819623][T30988] RIP: 0033:0x7f7e1f28c0c9 [ 3530.824055][T30988] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3530.843684][T30988] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3530.852118][T30988] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3530.860103][T30988] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3530.868087][T30988] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3530.876072][T30988] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3530.884057][T30988] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3530.892063][T30988] [ 3530.918709][T30966] bridge3943: port 1(bridge_slave_1) entered blocking state [ 3530.926418][T30966] bridge3943: port 1(bridge_slave_1) entered disabled state [ 3530.935668][T30966] device bridge_slave_1 entered promiscuous mode [ 3530.950396][T30988] memory: usage 307196kB, limit 307200kB, failcnt 5931 [ 3530.957647][T30988] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 22:17:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3530.977667][T30988] Memory cgroup stats for /syz5: [ 3530.977919][T30988] anon 90112 [ 3530.977919][T30988] file 315392 [ 3530.977919][T30988] kernel 314163200 [ 3530.977919][T30988] kernel_stack 65536 [ 3530.977919][T30988] pagetables 73728 [ 3530.977919][T30988] sec_pagetables 0 [ 3530.977919][T30988] percpu 5436000 [ 3530.977919][T30988] sock 0 [ 3530.977919][T30988] vmalloc 8192 [ 3530.977919][T30988] shmem 315392 [ 3530.977919][T30988] zswap 0 [ 3530.977919][T30988] zswapped 0 [ 3530.977919][T30988] file_mapped 290816 [ 3530.977919][T30988] file_dirty 0 [ 3530.977919][T30988] file_writeback 0 [ 3530.977919][T30988] swapcached 0 [ 3530.977919][T30988] anon_thp 0 [ 3530.977919][T30988] file_thp 0 [ 3530.977919][T30988] shmem_thp 0 [ 3530.977919][T30988] inactive_anon 69632 [ 3530.977919][T30988] active_anon 307200 [ 3530.977919][T30988] inactive_file 0 [ 3530.977919][T30988] active_file 0 [ 3530.977919][T30988] unevictable 0 [ 3530.977919][T30988] slab_reclaimable 16792 [ 3530.977919][T30988] slab_unreclaimable 308521984 22:17:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3531.024306][T30972] device bridge_slave_1 left promiscuous mode [ 3531.082257][T30988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30985,uid=0 [ 3531.099664][T30988] Memory cgroup out of memory: Killed process 30985 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3531.107219][T30972] bridge4259: port 2(bridge_slave_1) entered disabled state [ 3531.148578][T30972] bridge4260: port 1(bridge_slave_1) entered blocking state [ 3531.173082][T30972] bridge4260: port 1(bridge_slave_1) entered disabled state [ 3531.188186][T30993] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3531.198320][T30972] device bridge_slave_1 entered promiscuous mode [ 3531.202249][T30993] CPU: 0 PID: 30993 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3531.215168][T30993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3531.225235][T30993] Call Trace: [ 3531.228529][T30993] [ 3531.231473][T30993] dump_stack_lvl+0xd1/0x138 [ 3531.236100][T30993] dump_header+0x10b/0x85f [ 3531.240537][T30993] oom_kill_process.cold+0x10/0x15 [ 3531.245670][T30993] out_of_memory+0x35c/0x14a0 [ 3531.250395][T30993] ? find_held_lock+0x2d/0x110 [ 3531.255230][T30993] ? oom_killer_disable+0x280/0x280 [ 3531.260487][T30993] ? find_held_lock+0x2d/0x110 [ 3531.265290][T30993] mem_cgroup_out_of_memory+0x206/0x270 [ 3531.270869][T30993] ? mem_cgroup_margin+0x130/0x130 [ 3531.276009][T30993] ? lock_downgrade+0x6e0/0x6e0 [ 3531.280894][T30993] try_charge_memcg+0xefb/0x12f0 [ 3531.285859][T30993] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3531.291867][T30993] ? lock_downgrade+0x6e0/0x6e0 [ 3531.296749][T30993] charge_memcg+0x90/0x3b0 [ 3531.301195][T30993] __mem_cgroup_charge+0x2b/0x90 [ 3531.306151][T30993] ? copy_mc_to_kernel+0x3e/0x90 [ 3531.311110][T30993] do_wp_page+0x7ec/0x3370 [ 3531.315578][T30993] ? lock_release+0x810/0x810 [ 3531.320290][T30993] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3531.325709][T30993] ? do_raw_spin_lock+0x124/0x2b0 [ 3531.330766][T30993] ? rwlock_bug.part.0+0x90/0x90 [ 3531.335736][T30993] ? lock_chain_count+0x20/0x20 [ 3531.340611][T30993] __handle_mm_fault+0x1f58/0x3c90 [ 3531.345785][T30993] ? vm_iomap_memory+0x190/0x190 [ 3531.350785][T30993] handle_mm_fault+0x1b6/0x850 [ 3531.355588][T30993] do_user_addr_fault+0x475/0x1210 [ 3531.360727][T30993] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3531.366308][T30993] exc_page_fault+0x98/0x170 [ 3531.370924][T30993] asm_exc_page_fault+0x26/0x30 [ 3531.375834][T30993] RIP: 0033:0x7f7e1f236ede [ 3531.380264][T30993] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3531.399908][T30993] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3531.406103][T30993] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3531.414100][T30993] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3531.422122][T30993] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3531.430108][T30993] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3531.438093][T30993] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3531.446096][T30993] 22:17:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000220300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3531.487382][T30993] memory: usage 307184kB, limit 307200kB, failcnt 6001 [ 3531.507191][T30993] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3531.512313][T30975] bridge4377: port 1(veth0_to_hsr) entered disabled state [ 3531.517742][T30993] Memory cgroup stats for /syz5: [ 3531.533689][T30993] anon 81920 [ 3531.533689][T30993] file 315392 [ 3531.533689][T30993] kernel 314159104 [ 3531.533689][T30993] kernel_stack 65536 [ 3531.533689][T30993] pagetables 69632 [ 3531.533689][T30993] sec_pagetables 0 [ 3531.533689][T30993] percpu 5436000 [ 3531.533689][T30993] sock 0 [ 3531.533689][T30993] vmalloc 8192 [ 3531.533689][T30993] shmem 315392 [ 3531.533689][T30993] zswap 0 [ 3531.533689][T30993] zswapped 0 [ 3531.533689][T30993] file_mapped 290816 [ 3531.533689][T30993] file_dirty 0 [ 3531.533689][T30993] file_writeback 0 [ 3531.533689][T30993] swapcached 0 [ 3531.533689][T30993] anon_thp 0 [ 3531.533689][T30993] file_thp 0 [ 3531.533689][T30993] shmem_thp 0 [ 3531.533689][T30993] inactive_anon 90112 [ 3531.533689][T30993] active_anon 307200 [ 3531.533689][T30993] inactive_file 0 [ 3531.533689][T30993] active_file 0 [ 3531.533689][T30993] unevictable 0 [ 3531.533689][T30993] slab_reclaimable 16792 [ 3531.533689][T30993] slab_unreclaimable 308521984 [ 3531.638445][T30975] bridge4378: port 1(veth0_to_hsr) entered blocking state [ 3531.645960][T30975] bridge4378: port 1(veth0_to_hsr) entered disabled state [ 3531.653980][T30993] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30993,uid=0 [ 3531.668028][T30976] device bridge_slave_1 left promiscuous mode [ 3531.676471][T30976] bridge4377: port 2(bridge_slave_1) entered disabled state 22:17:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000001f000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3531.682233][T30993] Memory cgroup out of memory: Killed process 30993 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3531.713023][T30976] bridge4378: port 2(bridge_slave_1) entered blocking state [ 3531.731334][T30976] bridge4378: port 2(bridge_slave_1) entered disabled state 22:17:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000e", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3531.753575][T30976] device bridge_slave_1 entered promiscuous mode [ 3531.827327][T31000] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3531.847452][T31000] CPU: 1 PID: 31000 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3531.847758][T30982] device veth0_to_hsr left promiscuous mode [ 3531.857911][T31000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3531.857933][T31000] Call Trace: [ 3531.857943][T31000] [ 3531.857955][T31000] dump_stack_lvl+0xd1/0x138 [ 3531.858000][T31000] dump_header+0x10b/0x85f [ 3531.858032][T31000] oom_kill_process.cold+0x10/0x15 [ 3531.858064][T31000] out_of_memory+0x35c/0x14a0 [ 3531.858108][T31000] ? find_held_lock+0x2d/0x110 [ 3531.858150][T31000] ? oom_killer_disable+0x280/0x280 [ 3531.858196][T31000] ? find_held_lock+0x2d/0x110 [ 3531.858237][T31000] mem_cgroup_out_of_memory+0x206/0x270 [ 3531.858282][T31000] ? mem_cgroup_margin+0x130/0x130 [ 3531.858321][T31000] ? lock_downgrade+0x6e0/0x6e0 [ 3531.868185][T30982] bridge3685: port 1(veth0_to_hsr) entered disabled state [ 3531.874283][T31000] try_charge_memcg+0xefb/0x12f0 [ 3531.874330][T31000] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3531.874361][T31000] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3531.953270][T31000] ? lock_downgrade+0x6e0/0x6e0 [ 3531.958125][T31000] ? lock_downgrade+0x6e0/0x6e0 [ 3531.963008][T31000] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3531.968642][T31000] __alloc_pages+0x1f3/0x5b0 [ 3531.973280][T31000] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3531.980055][T31000] ? find_held_lock+0x2d/0x110 [ 3531.984853][T31000] alloc_pages+0x1aa/0x270 [ 3531.989306][T31000] pte_alloc_one+0x1a/0x230 [ 3531.993815][T31000] __pte_alloc+0x6d/0x260 [ 3531.998162][T31000] ? pmd_install+0x160/0x160 [ 3532.002757][T31000] ? hugepage_vma_check+0x24e/0x830 [ 3532.007988][T31000] ? _raw_spin_unlock+0x28/0x40 [ 3532.012864][T31000] ? __pmd_alloc+0x30c/0x5d0 [ 3532.017595][T31000] __handle_mm_fault+0x38cf/0x3c90 [ 3532.022738][T31000] ? vm_iomap_memory+0x190/0x190 [ 3532.027701][T31000] handle_mm_fault+0x1b6/0x850 [ 3532.032479][T31000] do_user_addr_fault+0x475/0x1210 [ 3532.037617][T31000] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3532.043236][T31000] exc_page_fault+0x98/0x170 [ 3532.047846][T31000] asm_exc_page_fault+0x26/0x30 [ 3532.052722][T31000] RIP: 0010:__put_user_4+0x16/0x20 [ 3532.057864][T31000] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3532.077499][T31000] RSP: 0018:ffffc9000aa1fe40 EFLAGS: 00050293 [ 3532.083572][T31000] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3532.091548][T31000] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3532.099525][T31000] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3532.107516][T31000] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3532.115577][T31000] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3532.123649][T31000] ? __sys_socketpair+0xff/0x570 [ 3532.128630][T31000] __sys_socketpair+0x10b/0x570 [ 3532.133528][T31000] ? __ia32_sys_socket+0xb0/0xb0 [ 3532.138485][T31000] __x64_sys_socketpair+0x97/0x100 [ 3532.143603][T31000] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3532.149520][T31000] do_syscall_64+0x39/0xb0 [ 3532.153957][T31000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.159854][T31000] RIP: 0033:0x7f7e1f28c0c9 [ 3532.164268][T31000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3532.183894][T31000] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3532.192330][T31000] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3532.200320][T31000] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3532.208323][T31000] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3532.216299][T31000] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3532.224270][T31000] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3532.232263][T31000] [ 3532.243009][T30982] bridge3686: port 1(veth0_to_hsr) entered blocking state [ 3532.251018][T31000] memory: usage 307200kB, limit 307200kB, failcnt 6090 [ 3532.253891][T30982] bridge3686: port 1(veth0_to_hsr) entered disabled state [ 3532.266197][T31000] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3532.273832][T30982] device veth0_to_hsr entered promiscuous mode [ 3532.283186][T31000] Memory cgroup stats for /syz5: [ 3532.283402][T31000] anon 90112 [ 3532.283402][T31000] file 315392 [ 3532.283402][T31000] kernel 314167296 [ 3532.283402][T31000] kernel_stack 65536 [ 3532.283402][T31000] pagetables 73728 [ 3532.283402][T31000] sec_pagetables 0 [ 3532.283402][T31000] percpu 5436000 [ 3532.283402][T31000] sock 0 [ 3532.283402][T31000] vmalloc 8192 [ 3532.283402][T31000] shmem 315392 [ 3532.283402][T31000] zswap 0 [ 3532.283402][T31000] zswapped 0 [ 3532.283402][T31000] file_mapped 290816 [ 3532.283402][T31000] file_dirty 0 [ 3532.283402][T31000] file_writeback 0 [ 3532.283402][T31000] swapcached 0 [ 3532.283402][T31000] anon_thp 0 [ 3532.283402][T31000] file_thp 0 [ 3532.283402][T31000] shmem_thp 0 [ 3532.283402][T31000] inactive_anon 49152 [ 3532.283402][T31000] active_anon 307200 [ 3532.283402][T31000] inactive_file 0 [ 3532.283402][T31000] active_file 0 [ 3532.283402][T31000] unevictable 0 [ 3532.283402][T31000] slab_reclaimable 16792 [ 3532.283402][T31000] slab_unreclaimable 308521984 [ 3532.380483][T30983] device bridge_slave_1 left promiscuous mode [ 3532.386896][T30983] bridge3685: port 2(bridge_slave_1) entered disabled state [ 3532.395267][T31000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30998,uid=0 [ 3532.412192][T31000] Memory cgroup out of memory: Killed process 30998 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 22:17:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000020000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3532.437312][T30983] bridge3686: port 2(bridge_slave_1) entered blocking state [ 3532.445680][T30983] bridge3686: port 2(bridge_slave_1) entered disabled state [ 3532.455019][T30983] device bridge_slave_1 entered promiscuous mode 22:17:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000070000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3532.543646][T30989] bridge4294: port 1(veth0_to_hsr) entered disabled state [ 3532.571053][T30989] bridge4295: port 1(veth0_to_hsr) entered blocking state [ 3532.578390][T30989] bridge4295: port 1(veth0_to_hsr) entered disabled state [ 3532.582878][T31010] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3532.596594][T31010] CPU: 0 PID: 31010 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3532.607069][T31010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3532.617158][T31010] Call Trace: [ 3532.620463][T31010] [ 3532.623410][T31010] dump_stack_lvl+0xd1/0x138 [ 3532.628039][T31010] dump_header+0x10b/0x85f [ 3532.632486][T31010] oom_kill_process.cold+0x10/0x15 [ 3532.637713][T31010] out_of_memory+0x35c/0x14a0 [ 3532.642432][T31010] ? find_held_lock+0x2d/0x110 [ 3532.647228][T31010] ? oom_killer_disable+0x280/0x280 [ 3532.652462][T31010] ? find_held_lock+0x2d/0x110 [ 3532.657261][T31010] mem_cgroup_out_of_memory+0x206/0x270 [ 3532.662839][T31010] ? mem_cgroup_margin+0x130/0x130 [ 3532.667978][T31010] ? lock_downgrade+0x6e0/0x6e0 [ 3532.672863][T31010] try_charge_memcg+0xefb/0x12f0 [ 3532.677838][T31010] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3532.683839][T31010] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3532.689595][T31010] ? lock_downgrade+0x6e0/0x6e0 [ 3532.694490][T31010] obj_cgroup_charge+0x2af/0x5e0 [ 3532.699455][T31010] ? __anon_vma_prepare+0x64/0x580 [ 3532.704599][T31010] kmem_cache_alloc+0xb5/0x430 [ 3532.709403][T31010] __anon_vma_prepare+0x64/0x580 [ 3532.714465][T31010] ? __pmd_alloc+0x30c/0x5d0 [ 3532.719090][T31010] __handle_mm_fault+0x392f/0x3c90 [ 3532.724247][T31010] ? vm_iomap_memory+0x190/0x190 [ 3532.729241][T31010] handle_mm_fault+0x1b6/0x850 [ 3532.734042][T31010] do_user_addr_fault+0x475/0x1210 [ 3532.739183][T31010] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3532.744769][T31010] exc_page_fault+0x98/0x170 [ 3532.749385][T31010] asm_exc_page_fault+0x26/0x30 [ 3532.754262][T31010] RIP: 0010:__put_user_4+0x16/0x20 [ 3532.759419][T31010] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3532.779068][T31010] RSP: 0018:ffffc9000875fe40 EFLAGS: 00050293 [ 3532.785161][T31010] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3532.793158][T31010] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3532.801139][T31010] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3532.809121][T31010] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3532.817277][T31010] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3532.825274][T31010] ? __sys_socketpair+0xff/0x570 [ 3532.830258][T31010] __sys_socketpair+0x10b/0x570 [ 3532.835143][T31010] ? __ia32_sys_socket+0xb0/0xb0 [ 3532.840125][T31010] __x64_sys_socketpair+0x97/0x100 [ 3532.845266][T31010] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3532.851190][T31010] do_syscall_64+0x39/0xb0 [ 3532.855628][T31010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.861547][T31010] RIP: 0033:0x7f7e1f28c0c9 [ 3532.865976][T31010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3532.885602][T31010] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3532.894036][T31010] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3532.902019][T31010] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3532.910001][T31010] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3532.917983][T31010] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3532.925972][T31010] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3532.933981][T31010] [ 3532.943249][T31010] memory: usage 307200kB, limit 307200kB, failcnt 6183 [ 3532.950368][T31010] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3532.957401][T31010] Memory cgroup stats for /syz5: [ 3532.957674][T31010] anon 90112 [ 3532.957674][T31010] file 315392 [ 3532.957674][T31010] kernel 314167296 [ 3532.957674][T31010] kernel_stack 65536 [ 3532.957674][T31010] pagetables 77824 [ 3532.957674][T31010] sec_pagetables 0 [ 3532.957674][T31010] percpu 5436000 [ 3532.957674][T31010] sock 0 [ 3532.957674][T31010] vmalloc 8192 [ 3532.957674][T31010] shmem 315392 [ 3532.957674][T31010] zswap 0 [ 3532.957674][T31010] zswapped 0 [ 3532.957674][T31010] file_mapped 290816 [ 3532.957674][T31010] file_dirty 0 [ 3532.957674][T31010] file_writeback 0 [ 3532.957674][T31010] swapcached 0 [ 3532.957674][T31010] anon_thp 0 [ 3532.957674][T31010] file_thp 0 [ 3532.957674][T31010] shmem_thp 0 [ 3532.957674][T31010] inactive_anon 98304 [ 3532.957674][T31010] active_anon 307200 [ 3532.957674][T31010] inactive_file 0 [ 3532.957674][T31010] active_file 0 [ 3532.957674][T31010] unevictable 0 [ 3532.957674][T31010] slab_reclaimable 16792 [ 3532.957674][T31010] slab_unreclaimable 308521984 [ 3532.958492][T30990] device bridge_slave_1 left promiscuous mode [ 3532.962912][T31010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3533.055134][T30990] bridge4294: port 2(bridge_slave_1) entered disabled state [ 3533.066034][T31010] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31007,uid=0 22:17:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000022000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3533.094848][T31010] Memory cgroup out of memory: Killed process 31007 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3533.100522][T30990] bridge4295: port 2(bridge_slave_1) entered blocking state [ 3533.120548][T30990] bridge4295: port 2(bridge_slave_1) entered disabled state [ 3533.129978][T30990] device bridge_slave_1 entered promiscuous mode 22:17:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000006c00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3533.142780][T30992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3533.233584][T30994] device bridge_slave_1 left promiscuous mode [ 3533.234120][T31013] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3533.240913][T30994] bridge3943: port 1(bridge_slave_1) entered disabled state [ 3533.259545][T31013] CPU: 1 PID: 31013 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3533.270008][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3533.280063][T31013] Call Trace: [ 3533.283345][T31013] [ 3533.286285][T31013] dump_stack_lvl+0xd1/0x138 [ 3533.290949][T31013] dump_header+0x10b/0x85f [ 3533.295386][T31013] oom_kill_process.cold+0x10/0x15 [ 3533.300611][T31013] out_of_memory+0x35c/0x14a0 [ 3533.305312][T31013] ? find_held_lock+0x2d/0x110 [ 3533.310118][T31013] ? oom_killer_disable+0x280/0x280 [ 3533.315358][T31013] ? find_held_lock+0x2d/0x110 [ 3533.320355][T31013] mem_cgroup_out_of_memory+0x206/0x270 [ 3533.325952][T31013] ? mem_cgroup_margin+0x130/0x130 [ 3533.331071][T31013] ? lock_downgrade+0x6e0/0x6e0 [ 3533.336036][T31013] try_charge_memcg+0xefb/0x12f0 [ 3533.340999][T31013] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3533.346986][T31013] ? lock_downgrade+0x6e0/0x6e0 [ 3533.351869][T31013] charge_memcg+0x90/0x3b0 [ 3533.356289][T31013] __mem_cgroup_charge+0x2b/0x90 [ 3533.361240][T31013] ? copy_mc_to_kernel+0x3e/0x90 [ 3533.366211][T31013] do_wp_page+0x7ec/0x3370 [ 3533.370661][T31013] ? lock_release+0x810/0x810 [ 3533.375383][T31013] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3533.380785][T31013] ? do_raw_spin_lock+0x124/0x2b0 [ 3533.385817][T31013] ? rwlock_bug.part.0+0x90/0x90 [ 3533.390755][T31013] ? lock_chain_count+0x20/0x20 [ 3533.395607][T31013] __handle_mm_fault+0x1f58/0x3c90 [ 3533.400742][T31013] ? vm_iomap_memory+0x190/0x190 [ 3533.405717][T31013] handle_mm_fault+0x1b6/0x850 [ 3533.410490][T31013] do_user_addr_fault+0x475/0x1210 [ 3533.415606][T31013] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3533.421178][T31013] exc_page_fault+0x98/0x170 [ 3533.425866][T31013] asm_exc_page_fault+0x26/0x30 [ 3533.430730][T31013] RIP: 0033:0x7f7e1f236ede [ 3533.435147][T31013] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3533.454755][T31013] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3533.460827][T31013] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3533.468797][T31013] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3533.476784][T31013] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3533.484757][T31013] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3533.492740][T31013] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3533.500915][T31013] [ 3533.509637][T31013] memory: usage 307200kB, limit 307200kB, failcnt 6237 [ 3533.516068][T30994] bridge3944: port 1(bridge_slave_1) entered blocking state [ 3533.516725][T31013] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3533.533521][T31013] Memory cgroup stats for /syz5: [ 3533.533766][T31013] anon 81920 [ 3533.533766][T31013] file 315392 [ 3533.533766][T31013] kernel 314163200 [ 3533.533766][T31013] kernel_stack 65536 [ 3533.533766][T31013] pagetables 69632 [ 3533.533766][T31013] sec_pagetables 0 [ 3533.533766][T31013] percpu 5436000 [ 3533.533766][T31013] sock 0 [ 3533.533766][T31013] vmalloc 8192 [ 3533.533766][T31013] shmem 315392 [ 3533.533766][T31013] zswap 0 [ 3533.533766][T31013] zswapped 0 [ 3533.533766][T31013] file_mapped 290816 [ 3533.533766][T31013] file_dirty 0 [ 3533.533766][T31013] file_writeback 0 [ 3533.533766][T31013] swapcached 0 [ 3533.533766][T31013] anon_thp 0 [ 3533.533766][T31013] file_thp 0 [ 3533.533766][T31013] shmem_thp 0 [ 3533.533766][T31013] inactive_anon 49152 [ 3533.533766][T31013] active_anon 307200 [ 3533.533766][T31013] inactive_file 0 [ 3533.533766][T31013] active_file 0 [ 3533.533766][T31013] unevictable 0 [ 3533.533766][T31013] slab_reclaimable 19368 [ 3533.533766][T31013] slab_unreclaimable 308522632 22:17:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000222000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3533.549013][T30994] bridge3944: port 1(bridge_slave_1) entered disabled state [ 3533.630955][T31013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31013,uid=0 [ 3533.651754][T31013] Memory cgroup out of memory: Killed process 31013 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3533.677767][T30994] device bridge_slave_1 entered promiscuous mode 22:17:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3533.768690][T30999] bridge4261: port 1(veth0_to_hsr) entered blocking state [ 3533.782365][T31020] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3533.795696][T30999] bridge4261: port 1(veth0_to_hsr) entered disabled state [ 3533.795891][T31020] CPU: 1 PID: 31020 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3533.813288][T31020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3533.823553][T31020] Call Trace: [ 3533.826854][T31020] [ 3533.829803][T31020] dump_stack_lvl+0xd1/0x138 [ 3533.834432][T31020] dump_header+0x10b/0x85f [ 3533.838874][T31020] oom_kill_process.cold+0x10/0x15 [ 3533.844009][T31020] out_of_memory+0x35c/0x14a0 [ 3533.848724][T31020] ? find_held_lock+0x2d/0x110 [ 3533.853520][T31020] ? oom_killer_disable+0x280/0x280 [ 3533.858752][T31020] ? find_held_lock+0x2d/0x110 [ 3533.863556][T31020] mem_cgroup_out_of_memory+0x206/0x270 [ 3533.869133][T31020] ? mem_cgroup_margin+0x130/0x130 [ 3533.874290][T31020] ? lock_downgrade+0x6e0/0x6e0 [ 3533.879190][T31020] try_charge_memcg+0xefb/0x12f0 [ 3533.884171][T31020] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3533.890175][T31020] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3533.895931][T31020] ? lock_downgrade+0x6e0/0x6e0 [ 3533.900809][T31020] ? lock_downgrade+0x6e0/0x6e0 [ 3533.905692][T31020] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3533.911351][T31020] __alloc_pages+0x1f3/0x5b0 [ 3533.915966][T31020] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3533.922776][T31020] ? find_held_lock+0x2d/0x110 [ 3533.928365][T31020] alloc_pages+0x1aa/0x270 [ 3533.932804][T31020] pte_alloc_one+0x1a/0x230 [ 3533.937334][T31020] __pte_alloc+0x6d/0x260 [ 3533.941686][T31020] ? pmd_install+0x160/0x160 [ 3533.946320][T31020] ? hugepage_vma_check+0x24e/0x830 [ 3533.951539][T31020] ? _raw_spin_unlock+0x28/0x40 [ 3533.956416][T31020] ? __pmd_alloc+0x30c/0x5d0 [ 3533.961035][T31020] __handle_mm_fault+0x38cf/0x3c90 [ 3533.966183][T31020] ? vm_iomap_memory+0x190/0x190 [ 3533.971174][T31020] handle_mm_fault+0x1b6/0x850 [ 3533.975972][T31020] do_user_addr_fault+0x475/0x1210 [ 3533.981109][T31020] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3533.986694][T31020] exc_page_fault+0x98/0x170 [ 3533.991309][T31020] asm_exc_page_fault+0x26/0x30 [ 3533.996184][T31020] RIP: 0010:__put_user_4+0x16/0x20 [ 3534.001325][T31020] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3534.020953][T31020] RSP: 0018:ffffc90008c87e40 EFLAGS: 00050293 [ 3534.027038][T31020] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3534.035020][T31020] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3534.043003][T31020] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3534.050983][T31020] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3534.058965][T31020] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3534.066968][T31020] ? __sys_socketpair+0xff/0x570 [ 3534.071942][T31020] __sys_socketpair+0x10b/0x570 [ 3534.076829][T31020] ? __ia32_sys_socket+0xb0/0xb0 [ 3534.081810][T31020] __x64_sys_socketpair+0x97/0x100 [ 3534.086950][T31020] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3534.092870][T31020] do_syscall_64+0x39/0xb0 [ 3534.097306][T31020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.103223][T31020] RIP: 0033:0x7f7e1f28c0c9 [ 3534.107652][T31020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3534.127284][T31020] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3534.135716][T31020] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3534.143700][T31020] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3534.151683][T31020] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3534.159666][T31020] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3534.167795][T31020] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3534.175945][T31020] [ 3534.194846][T31020] memory: usage 307196kB, limit 307200kB, failcnt 6324 [ 3534.202336][T31020] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3534.210017][T31020] Memory cgroup stats for /syz5: [ 3534.210183][T31020] anon 90112 [ 3534.210183][T31020] file 315392 [ 3534.210183][T31020] kernel 314163200 [ 3534.210183][T31020] kernel_stack 65536 [ 3534.210183][T31020] pagetables 73728 [ 3534.210183][T31020] sec_pagetables 0 [ 3534.210183][T31020] percpu 5436000 [ 3534.210183][T31020] sock 0 [ 3534.210183][T31020] vmalloc 8192 [ 3534.210183][T31020] shmem 315392 [ 3534.210183][T31020] zswap 0 [ 3534.210183][T31020] zswapped 0 [ 3534.210183][T31020] file_mapped 290816 [ 3534.210183][T31020] file_dirty 0 [ 3534.210183][T31020] file_writeback 0 [ 3534.210183][T31020] swapcached 0 [ 3534.210183][T31020] anon_thp 0 [ 3534.210183][T31020] file_thp 0 [ 3534.210183][T31020] shmem_thp 0 [ 3534.210183][T31020] inactive_anon 86016 [ 3534.210183][T31020] active_anon 307200 [ 3534.210183][T31020] inactive_file 0 [ 3534.210183][T31020] active_file 0 [ 3534.210183][T31020] unevictable 0 [ 3534.210183][T31020] slab_reclaimable 16792 [ 3534.210183][T31020] slab_unreclaimable 308521984 [ 3534.307277][T31001] device bridge_slave_1 left promiscuous mode [ 3534.314772][T31020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31019,uid=0 [ 3534.321971][T31001] bridge4260: port 1(bridge_slave_1) entered disabled state [ 3534.330933][T31020] Memory cgroup out of memory: Killed process 31019 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 22:17:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000322000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000002a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3534.386885][T31001] bridge4261: port 2(bridge_slave_1) entered blocking state [ 3534.396307][T31001] bridge4261: port 2(bridge_slave_1) entered disabled state [ 3534.404970][T31001] device bridge_slave_1 entered promiscuous mode [ 3534.514226][T31025] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3534.525493][T31004] bridge4378: port 1(veth0_to_hsr) entered disabled state [ 3534.526839][T31025] CPU: 1 PID: 31025 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3534.543201][T31025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3534.553270][T31025] Call Trace: [ 3534.556566][T31025] [ 3534.559544][T31025] dump_stack_lvl+0xd1/0x138 [ 3534.564151][T31025] dump_header+0x10b/0x85f [ 3534.568607][T31025] oom_kill_process.cold+0x10/0x15 [ 3534.573726][T31025] out_of_memory+0x35c/0x14a0 [ 3534.578451][T31025] ? find_held_lock+0x2d/0x110 [ 3534.583279][T31025] ? oom_killer_disable+0x280/0x280 [ 3534.588631][T31025] ? find_held_lock+0x2d/0x110 [ 3534.593443][T31025] mem_cgroup_out_of_memory+0x206/0x270 [ 3534.599182][T31025] ? mem_cgroup_margin+0x130/0x130 [ 3534.604336][T31025] ? lock_downgrade+0x6e0/0x6e0 [ 3534.609227][T31025] try_charge_memcg+0xefb/0x12f0 [ 3534.614283][T31025] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3534.620287][T31025] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3534.626041][T31025] ? lock_downgrade+0x6e0/0x6e0 [ 3534.630939][T31025] obj_cgroup_charge+0x2af/0x5e0 [ 3534.635906][T31025] ? __anon_vma_prepare+0x64/0x580 [ 3534.641048][T31025] kmem_cache_alloc+0xb5/0x430 [ 3534.645836][T31025] __anon_vma_prepare+0x64/0x580 [ 3534.650805][T31025] ? __pmd_alloc+0x30c/0x5d0 [ 3534.655454][T31025] __handle_mm_fault+0x392f/0x3c90 [ 3534.660609][T31025] ? vm_iomap_memory+0x190/0x190 [ 3534.665605][T31025] handle_mm_fault+0x1b6/0x850 [ 3534.670417][T31025] do_user_addr_fault+0x475/0x1210 [ 3534.675556][T31025] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3534.681146][T31025] exc_page_fault+0x98/0x170 [ 3534.685769][T31025] asm_exc_page_fault+0x26/0x30 [ 3534.690749][T31025] RIP: 0010:__put_user_4+0x16/0x20 [ 3534.695994][T31025] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3534.715807][T31025] RSP: 0018:ffffc90008c87e40 EFLAGS: 00050293 [ 3534.721901][T31025] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3534.729890][T31025] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3534.737877][T31025] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3534.745860][T31025] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3534.753844][T31025] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3534.761845][T31025] ? __sys_socketpair+0xff/0x570 [ 3534.766826][T31025] __sys_socketpair+0x10b/0x570 [ 3534.771816][T31025] ? __ia32_sys_socket+0xb0/0xb0 [ 3534.776803][T31025] __x64_sys_socketpair+0x97/0x100 [ 3534.781945][T31025] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3534.787865][T31025] do_syscall_64+0x39/0xb0 [ 3534.792297][T31025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.798217][T31025] RIP: 0033:0x7f7e1f28c0c9 [ 3534.802652][T31025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3534.822455][T31025] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3534.830887][T31025] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3534.838874][T31025] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3534.846856][T31025] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3534.854839][T31025] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3534.862829][T31025] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3534.870841][T31025] [ 3534.889448][T31025] memory: usage 307200kB, limit 307200kB, failcnt 6478 [ 3534.904733][T31004] bridge4379: port 1(veth0_to_hsr) entered blocking state [ 3534.906185][T31025] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3534.915711][T31004] bridge4379: port 1(veth0_to_hsr) entered disabled state [ 3534.920216][T31025] Memory cgroup stats for /syz5: [ 3534.926380][T31025] anon 90112 [ 3534.926380][T31025] file 315392 [ 3534.926380][T31025] kernel 314167296 [ 3534.926380][T31025] kernel_stack 65536 [ 3534.926380][T31025] pagetables 77824 [ 3534.926380][T31025] sec_pagetables 0 [ 3534.926380][T31025] percpu 5436000 [ 3534.926380][T31025] sock 0 [ 3534.926380][T31025] vmalloc 8192 [ 3534.926380][T31025] shmem 315392 [ 3534.926380][T31025] zswap 0 [ 3534.926380][T31025] zswapped 0 [ 3534.926380][T31025] file_mapped 290816 [ 3534.926380][T31025] file_dirty 0 [ 3534.926380][T31025] file_writeback 0 [ 3534.926380][T31025] swapcached 0 [ 3534.926380][T31025] anon_thp 0 [ 3534.926380][T31025] file_thp 0 [ 3534.926380][T31025] shmem_thp 0 [ 3534.926380][T31025] inactive_anon 98304 [ 3534.926380][T31025] active_anon 307200 [ 3534.926380][T31025] inactive_file 0 [ 3534.926380][T31025] active_file 0 [ 3534.926380][T31025] unevictable 0 [ 3534.926380][T31025] slab_reclaimable 16792 [ 3534.926380][T31025] slab_unreclaimable 308521984 [ 3534.969871][T31005] device bridge_slave_1 left promiscuous mode [ 3535.029767][T31025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31024,uid=0 [ 3535.047170][T31025] Memory cgroup out of memory: Killed process 31024 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 22:17:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000024000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3535.075496][T31005] bridge4378: port 2(bridge_slave_1) entered disabled state [ 3535.094786][T31005] bridge4379: port 2(bridge_slave_1) entered blocking state [ 3535.104330][T31005] bridge4379: port 2(bridge_slave_1) entered disabled state [ 3535.113921][T31005] device bridge_slave_1 entered promiscuous mode 22:17:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3535.185147][T31011] device veth0_to_hsr left promiscuous mode [ 3535.194046][T31011] bridge3686: port 1(veth0_to_hsr) entered disabled state [ 3535.213107][T31011] bridge3687: port 1(veth0_to_hsr) entered blocking state [ 3535.221606][T31011] bridge3687: port 1(veth0_to_hsr) entered disabled state [ 3535.236315][T31011] device veth0_to_hsr entered promiscuous mode [ 3535.248248][T31031] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3535.253465][T31012] device bridge_slave_1 left promiscuous mode [ 3535.267504][T31031] CPU: 1 PID: 31031 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3535.272684][T31012] bridge3686: port 2(bridge_slave_1) entered disabled state [ 3535.278059][T31031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3535.278079][T31031] Call Trace: [ 3535.278088][T31031] [ 3535.278100][T31031] dump_stack_lvl+0xd1/0x138 [ 3535.278148][T31031] dump_header+0x10b/0x85f [ 3535.278182][T31031] oom_kill_process.cold+0x10/0x15 [ 3535.315957][T31031] out_of_memory+0x35c/0x14a0 [ 3535.320706][T31031] ? find_held_lock+0x2d/0x110 [ 3535.325525][T31031] ? oom_killer_disable+0x280/0x280 [ 3535.330787][T31031] ? find_held_lock+0x2d/0x110 [ 3535.335599][T31031] mem_cgroup_out_of_memory+0x206/0x270 [ 3535.341187][T31031] ? mem_cgroup_margin+0x130/0x130 [ 3535.346391][T31031] ? lock_downgrade+0x6e0/0x6e0 [ 3535.351279][T31031] try_charge_memcg+0xefb/0x12f0 [ 3535.356247][T31031] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3535.362254][T31031] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3535.368101][T31031] ? lock_downgrade+0x6e0/0x6e0 [ 3535.372996][T31031] obj_cgroup_charge+0x2af/0x5e0 [ 3535.377966][T31031] ? __anon_vma_prepare+0x64/0x580 [ 3535.383109][T31031] kmem_cache_alloc+0xb5/0x430 [ 3535.387899][T31031] __anon_vma_prepare+0x64/0x580 [ 3535.392865][T31031] ? __pmd_alloc+0x30c/0x5d0 [ 3535.397489][T31031] __handle_mm_fault+0x392f/0x3c90 [ 3535.402639][T31031] ? vm_iomap_memory+0x190/0x190 [ 3535.407632][T31031] handle_mm_fault+0x1b6/0x850 [ 3535.412433][T31031] do_user_addr_fault+0x475/0x1210 [ 3535.417574][T31031] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3535.423159][T31031] exc_page_fault+0x98/0x170 [ 3535.427783][T31031] asm_exc_page_fault+0x26/0x30 [ 3535.432658][T31031] RIP: 0010:__put_user_4+0x16/0x20 [ 3535.437869][T31031] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3535.457497][T31031] RSP: 0018:ffffc9000b1f7e40 EFLAGS: 00050293 [ 3535.463584][T31031] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3535.471616][T31031] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3535.479629][T31031] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3535.487624][T31031] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3535.495610][T31031] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3535.503612][T31031] ? __sys_socketpair+0xff/0x570 [ 3535.508593][T31031] __sys_socketpair+0x10b/0x570 [ 3535.513481][T31031] ? __ia32_sys_socket+0xb0/0xb0 [ 3535.518466][T31031] __x64_sys_socketpair+0x97/0x100 [ 3535.523608][T31031] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3535.529532][T31031] do_syscall_64+0x39/0xb0 [ 3535.533972][T31031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.539898][T31031] RIP: 0033:0x7f7e1f28c0c9 [ 3535.544329][T31031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3535.564309][T31031] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3535.572744][T31031] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3535.580730][T31031] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3535.588713][T31031] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3535.596701][T31031] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3535.604707][T31031] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3535.612734][T31031] [ 3535.639413][T31012] bridge3687: port 2(bridge_slave_1) entered blocking state [ 3535.647197][T31012] bridge3687: port 2(bridge_slave_1) entered disabled state [ 3535.655420][T31031] memory: usage 307200kB, limit 307200kB, failcnt 6585 [ 3535.656926][T31012] device bridge_slave_1 entered promiscuous mode [ 3535.664908][T31031] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3535.678708][T31031] Memory cgroup stats for /syz5: [ 3535.678980][T31031] anon 90112 22:17:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000090000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3535.678980][T31031] file 315392 [ 3535.678980][T31031] kernel 314167296 [ 3535.678980][T31031] kernel_stack 65536 [ 3535.678980][T31031] pagetables 77824 [ 3535.678980][T31031] sec_pagetables 0 [ 3535.678980][T31031] percpu 5436000 [ 3535.678980][T31031] sock 0 [ 3535.678980][T31031] vmalloc 8192 [ 3535.678980][T31031] shmem 315392 [ 3535.678980][T31031] zswap 0 [ 3535.678980][T31031] zswapped 0 [ 3535.678980][T31031] file_mapped 290816 [ 3535.678980][T31031] file_dirty 0 [ 3535.678980][T31031] file_writeback 0 [ 3535.678980][T31031] swapcached 0 [ 3535.678980][T31031] anon_thp 0 [ 3535.678980][T31031] file_thp 0 [ 3535.678980][T31031] shmem_thp 0 [ 3535.678980][T31031] inactive_anon 90112 [ 3535.678980][T31031] active_anon 307200 [ 3535.678980][T31031] inactive_file 0 [ 3535.678980][T31031] active_file 0 [ 3535.678980][T31031] unevictable 0 [ 3535.678980][T31031] slab_reclaimable 16792 [ 3535.678980][T31031] slab_unreclaimable 308521984 [ 3535.773744][T31017] bridge4295: port 1(veth0_to_hsr) entered disabled state [ 3535.789572][T31031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31030,uid=0 [ 3535.805421][T31031] Memory cgroup out of memory: Killed process 31030 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3535.829804][T31017] bridge4296: port 1(veth0_to_hsr) entered blocking state 22:17:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000001225000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3535.837212][T31017] bridge4296: port 1(veth0_to_hsr) entered disabled state [ 3535.880404][T31018] device bridge_slave_1 left promiscuous mode [ 3535.887461][T31018] bridge4295: port 2(bridge_slave_1) entered disabled state [ 3535.925040][T31018] bridge4296: port 2(bridge_slave_1) entered blocking state [ 3535.933040][T31018] bridge4296: port 2(bridge_slave_1) entered disabled state [ 3535.942936][T31018] device bridge_slave_1 entered promiscuous mode [ 3535.948655][T31041] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3535.954310][T31022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3535.968720][T31041] CPU: 1 PID: 31041 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3535.979770][T31041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3535.989868][T31041] Call Trace: [ 3535.993186][T31041] [ 3535.996144][T31041] dump_stack_lvl+0xd1/0x138 [ 3536.000810][T31041] dump_header+0x10b/0x85f [ 3536.005263][T31041] oom_kill_process.cold+0x10/0x15 [ 3536.010441][T31041] out_of_memory+0x35c/0x14a0 [ 3536.015168][T31041] ? find_held_lock+0x2d/0x110 [ 3536.019978][T31041] ? oom_killer_disable+0x280/0x280 [ 3536.025219][T31041] ? find_held_lock+0x2d/0x110 [ 3536.030019][T31041] mem_cgroup_out_of_memory+0x206/0x270 [ 3536.035603][T31041] ? mem_cgroup_margin+0x130/0x130 [ 3536.040833][T31041] ? lock_downgrade+0x6e0/0x6e0 [ 3536.045809][T31041] try_charge_memcg+0xefb/0x12f0 [ 3536.050778][T31041] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3536.056787][T31041] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3536.062631][T31041] ? lock_downgrade+0x6e0/0x6e0 [ 3536.067522][T31041] obj_cgroup_charge+0x2af/0x5e0 [ 3536.072486][T31041] ? __anon_vma_prepare+0x64/0x580 [ 3536.077644][T31041] kmem_cache_alloc+0xb5/0x430 [ 3536.082444][T31041] __anon_vma_prepare+0x64/0x580 [ 3536.087411][T31041] ? __pmd_alloc+0x30c/0x5d0 [ 3536.092119][T31041] __handle_mm_fault+0x392f/0x3c90 [ 3536.097269][T31041] ? vm_iomap_memory+0x190/0x190 [ 3536.102263][T31041] handle_mm_fault+0x1b6/0x850 [ 3536.107063][T31041] do_user_addr_fault+0x475/0x1210 [ 3536.112216][T31041] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3536.117886][T31041] exc_page_fault+0x98/0x170 [ 3536.122505][T31041] asm_exc_page_fault+0x26/0x30 [ 3536.127391][T31041] RIP: 0010:__put_user_4+0x16/0x20 [ 3536.132535][T31041] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3536.154177][T31041] RSP: 0018:ffffc9000b277e40 EFLAGS: 00050293 [ 3536.160351][T31041] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3536.168339][T31041] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3536.176334][T31041] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3536.184319][T31041] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3536.192303][T31041] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3536.200302][T31041] ? __sys_socketpair+0xff/0x570 [ 3536.205284][T31041] __sys_socketpair+0x10b/0x570 [ 3536.210168][T31041] ? __ia32_sys_socket+0xb0/0xb0 [ 3536.215152][T31041] __x64_sys_socketpair+0x97/0x100 [ 3536.220295][T31041] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3536.226216][T31041] do_syscall_64+0x39/0xb0 [ 3536.230649][T31041] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.236568][T31041] RIP: 0033:0x7f7e1f28c0c9 [ 3536.241001][T31041] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3536.260805][T31041] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 22:17:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000007400000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3536.269237][T31041] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3536.277226][T31041] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3536.285209][T31041] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3536.293193][T31041] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3536.301177][T31041] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3536.309204][T31041] [ 3536.314999][T31041] memory: usage 307200kB, limit 307200kB, failcnt 6685 [ 3536.335279][T31041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3536.347165][T31023] device bridge_slave_1 left promiscuous mode [ 3536.358240][T31041] Memory cgroup stats for /syz5: [ 3536.358675][T31041] anon 90112 [ 3536.358675][T31041] file 315392 [ 3536.358675][T31041] kernel 314167296 [ 3536.358675][T31041] kernel_stack 65536 [ 3536.358675][T31041] pagetables 77824 [ 3536.358675][T31041] sec_pagetables 0 [ 3536.358675][T31041] percpu 5436000 [ 3536.358675][T31041] sock 0 [ 3536.358675][T31041] vmalloc 8192 [ 3536.358675][T31041] shmem 315392 [ 3536.358675][T31041] zswap 0 [ 3536.358675][T31041] zswapped 0 [ 3536.358675][T31041] file_mapped 290816 [ 3536.358675][T31041] file_dirty 0 [ 3536.358675][T31041] file_writeback 0 [ 3536.358675][T31041] swapcached 0 [ 3536.358675][T31041] anon_thp 0 [ 3536.358675][T31041] file_thp 0 [ 3536.358675][T31041] shmem_thp 0 [ 3536.358675][T31041] inactive_anon 73728 [ 3536.358675][T31041] active_anon 307200 22:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000012a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3536.358675][T31041] inactive_file 0 [ 3536.358675][T31041] active_file 0 [ 3536.358675][T31041] unevictable 0 [ 3536.358675][T31041] slab_reclaimable 16792 [ 3536.358675][T31041] slab_unreclaimable 308521984 [ 3536.467486][T31023] bridge3944: port 1(bridge_slave_1) entered disabled state [ 3536.468124][T31041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31040,uid=0 [ 3536.491520][T31041] Memory cgroup out of memory: Killed process 31040 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3536.518288][T31023] bridge3945: port 1(bridge_slave_1) entered blocking state [ 3536.526940][T31023] bridge3945: port 1(bridge_slave_1) entered disabled state 22:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000600", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3536.536456][T31023] device bridge_slave_1 entered promiscuous mode [ 3536.638698][T31028] bridge4261: port 1(veth0_to_hsr) entered disabled state [ 3536.647360][T31048] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3536.658124][T31048] CPU: 1 PID: 31048 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3536.668966][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3536.679070][T31048] Call Trace: [ 3536.682480][T31048] [ 3536.685430][T31048] dump_stack_lvl+0xd1/0x138 [ 3536.690035][T31048] dump_header+0x10b/0x85f [ 3536.694463][T31048] oom_kill_process.cold+0x10/0x15 [ 3536.699622][T31048] out_of_memory+0x35c/0x14a0 [ 3536.704713][T31048] ? find_held_lock+0x2d/0x110 [ 3536.709521][T31048] ? oom_killer_disable+0x280/0x280 [ 3536.714793][T31048] ? find_held_lock+0x2d/0x110 [ 3536.719630][T31048] mem_cgroup_out_of_memory+0x206/0x270 [ 3536.725246][T31048] ? mem_cgroup_margin+0x130/0x130 [ 3536.730404][T31048] ? lock_downgrade+0x6e0/0x6e0 [ 3536.735280][T31048] try_charge_memcg+0xefb/0x12f0 [ 3536.740260][T31048] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3536.746262][T31048] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3536.752000][T31048] ? lock_downgrade+0x6e0/0x6e0 [ 3536.756866][T31048] obj_cgroup_charge+0x2af/0x5e0 [ 3536.761826][T31048] ? __anon_vma_prepare+0x64/0x580 [ 3536.766983][T31048] kmem_cache_alloc+0xb5/0x430 [ 3536.771785][T31048] __anon_vma_prepare+0x64/0x580 [ 3536.776838][T31048] ? __pmd_alloc+0x30c/0x5d0 [ 3536.781461][T31048] __handle_mm_fault+0x392f/0x3c90 [ 3536.786611][T31048] ? vm_iomap_memory+0x190/0x190 [ 3536.791610][T31048] handle_mm_fault+0x1b6/0x850 [ 3536.796409][T31048] do_user_addr_fault+0x475/0x1210 [ 3536.801554][T31048] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3536.807140][T31048] exc_page_fault+0x98/0x170 [ 3536.811759][T31048] asm_exc_page_fault+0x26/0x30 [ 3536.816634][T31048] RIP: 0010:__put_user_4+0x16/0x20 [ 3536.822555][T31048] Code: 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 3536.842187][T31048] RSP: 0018:ffffc900087bfe40 EFLAGS: 00050293 [ 3536.848271][T31048] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 3536.856258][T31048] RDX: 0000000000040000 RSI: ffffffff87bf87cf RDI: 0000000000000000 [ 3536.864353][T31048] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3536.872335][T31048] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 3536.880322][T31048] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 3536.888318][T31048] ? __sys_socketpair+0xff/0x570 [ 3536.893382][T31048] __sys_socketpair+0x10b/0x570 [ 3536.898267][T31048] ? __ia32_sys_socket+0xb0/0xb0 [ 3536.903253][T31048] __x64_sys_socketpair+0x97/0x100 [ 3536.908394][T31048] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3536.914320][T31048] do_syscall_64+0x39/0xb0 [ 3536.918753][T31048] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.924670][T31048] RIP: 0033:0x7f7e1f28c0c9 [ 3536.929101][T31048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3536.948812][T31048] RSP: 002b:00007f7e1ff22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3536.957243][T31048] RAX: ffffffffffffffda RBX: 00007f7e1f3abf80 RCX: 00007f7e1f28c0c9 [ 3536.965492][T31048] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3536.973481][T31048] RBP: 00007f7e1f2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 3536.981476][T31048] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 3536.989639][T31048] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3536.997644][T31048] [ 3537.009941][T31028] bridge4262: port 1(veth0_to_hsr) entered blocking state [ 3537.025751][T31028] bridge4262: port 1(veth0_to_hsr) entered disabled state [ 3537.045606][T31029] device bridge_slave_1 left promiscuous mode [ 3537.052506][T31048] memory: usage 307200kB, limit 307200kB, failcnt 6781 [ 3537.052622][T31029] bridge4261: port 2(bridge_slave_1) entered disabled state [ 3537.065987][T31048] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3537.076981][T31048] Memory cgroup stats for /syz5: [ 3537.077195][T31048] anon 90112 [ 3537.077195][T31048] file 315392 [ 3537.077195][T31048] kernel 314167296 [ 3537.077195][T31048] kernel_stack 65536 [ 3537.077195][T31048] pagetables 77824 [ 3537.077195][T31048] sec_pagetables 0 [ 3537.077195][T31048] percpu 5436000 [ 3537.077195][T31048] sock 0 [ 3537.077195][T31048] vmalloc 8192 [ 3537.077195][T31048] shmem 315392 [ 3537.077195][T31048] zswap 0 [ 3537.077195][T31048] zswapped 0 [ 3537.077195][T31048] file_mapped 290816 [ 3537.077195][T31048] file_dirty 0 [ 3537.077195][T31048] file_writeback 0 [ 3537.077195][T31048] swapcached 0 [ 3537.077195][T31048] anon_thp 0 [ 3537.077195][T31048] file_thp 0 [ 3537.077195][T31048] shmem_thp 0 [ 3537.077195][T31048] inactive_anon 77824 [ 3537.077195][T31048] active_anon 307200 [ 3537.077195][T31048] inactive_file 0 [ 3537.077195][T31048] active_file 0 [ 3537.077195][T31048] unevictable 0 [ 3537.077195][T31048] slab_reclaimable 16792 [ 3537.077195][T31048] slab_unreclaimable 308521984 [ 3537.086518][T31029] bridge4262: port 2(bridge_slave_1) entered blocking state [ 3537.182428][T31029] bridge4262: port 2(bridge_slave_1) entered disabled state 22:17:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000320300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000002c000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3537.191247][T31048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31046,uid=0 [ 3537.192929][T31029] device bridge_slave_1 entered promiscuous mode [ 3537.216872][T31048] Memory cgroup out of memory: Killed process 31046 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3537.304743][T31034] bridge4379: port 1(veth0_to_hsr) entered disabled state [ 3537.317998][T31034] bridge4380: port 1(veth0_to_hsr) entered blocking state [ 3537.325769][T31034] bridge4380: port 1(veth0_to_hsr) entered disabled state [ 3537.353601][T31035] device bridge_slave_1 left promiscuous mode [ 3537.360846][T31035] bridge4379: port 2(bridge_slave_1) entered disabled state [ 3537.369000][T31054] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3537.387721][T31054] CPU: 1 PID: 31054 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3537.396135][T31035] bridge4380: port 2(bridge_slave_1) entered blocking state [ 3537.398187][T31054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3537.398207][T31054] Call Trace: [ 3537.398216][T31054] [ 3537.398228][T31054] dump_stack_lvl+0xd1/0x138 [ 3537.398275][T31054] dump_header+0x10b/0x85f [ 3537.398309][T31054] oom_kill_process.cold+0x10/0x15 [ 3537.405955][T31035] bridge4380: port 2(bridge_slave_1) entered disabled state [ 3537.415623][T31054] out_of_memory+0x35c/0x14a0 [ 3537.415678][T31054] ? find_held_lock+0x2d/0x110 22:17:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000001a", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3537.415722][T31054] ? oom_killer_disable+0x280/0x280 [ 3537.415765][T31054] ? find_held_lock+0x2d/0x110 [ 3537.415803][T31054] mem_cgroup_out_of_memory+0x206/0x270 [ 3537.415845][T31054] ? mem_cgroup_margin+0x130/0x130 [ 3537.415882][T31054] ? lock_downgrade+0x6e0/0x6e0 [ 3537.415932][T31054] try_charge_memcg+0xefb/0x12f0 [ 3537.415970][T31054] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3537.423770][T31035] device bridge_slave_1 entered promiscuous mode [ 3537.426770][T31054] ? lock_downgrade+0x6e0/0x6e0 [ 3537.426825][T31054] charge_memcg+0x90/0x3b0 [ 3537.426862][T31054] __mem_cgroup_charge+0x2b/0x90 [ 3537.510253][T31054] ? copy_mc_to_kernel+0x3e/0x90 [ 3537.515245][T31054] do_wp_page+0x7ec/0x3370 [ 3537.519732][T31054] ? lock_release+0x810/0x810 [ 3537.524454][T31054] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3537.529891][T31054] ? do_raw_spin_lock+0x124/0x2b0 [ 3537.535001][T31054] ? rwlock_bug.part.0+0x90/0x90 [ 3537.539987][T31054] ? lock_chain_count+0x20/0x20 [ 3537.544889][T31054] __handle_mm_fault+0x1f58/0x3c90 [ 3537.550071][T31054] ? vm_iomap_memory+0x190/0x190 [ 3537.555103][T31054] handle_mm_fault+0x1b6/0x850 [ 3537.556244][T31060] bridge4380: port 1(veth0_to_hsr) entered disabled state [ 3537.560598][T31054] do_user_addr_fault+0x475/0x1210 [ 3537.560645][T31054] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3537.560695][T31054] exc_page_fault+0x98/0x170 [ 3537.560728][T31054] asm_exc_page_fault+0x26/0x30 [ 3537.588428][T31054] RIP: 0033:0x7f7e1f236ede [ 3537.592859][T31054] Code: 10 4c 89 35 b4 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3537.612656][T31054] RSP: 002b:00007ffc49b30ac0 EFLAGS: 00010246 [ 3537.618750][T31054] RAX: 00007f7e1f3abf80 RBX: 00007f7e1f3abf8c RCX: 0000000000000000 [ 3537.626752][T31054] RDX: 0000000000000000 RSI: 00007f7e1f3abf88 RDI: 0000000000000000 [ 3537.634860][T31054] RBP: 00007f7e1f3abf80 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3537.642930][T31054] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007f7e1f3abf8c [ 3537.650929][T31054] R13: 00007f7e1ee00078 R14: 00007f7e1f3abf80 R15: 0000000000000000 [ 3537.658920][T31054] [ 3537.671007][T31060] bridge4381: port 1(veth0_to_hsr) entered blocking state [ 3537.678557][T31060] bridge4381: port 1(veth0_to_hsr) entered disabled state [ 3537.709950][T31054] memory: usage 307200kB, limit 307200kB, failcnt 6867 [ 3537.716984][T31054] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3537.727563][T31054] Memory cgroup stats for /syz5: [ 3537.727821][T31054] anon 81920 [ 3537.727821][T31054] file 315392 [ 3537.727821][T31054] kernel 314159104 [ 3537.727821][T31054] kernel_stack 65536 [ 3537.727821][T31054] pagetables 69632 [ 3537.727821][T31054] sec_pagetables 0 [ 3537.727821][T31054] percpu 5436000 [ 3537.727821][T31054] sock 0 [ 3537.727821][T31054] vmalloc 8192 [ 3537.727821][T31054] shmem 315392 [ 3537.727821][T31054] zswap 0 [ 3537.727821][T31054] zswapped 0 [ 3537.727821][T31054] file_mapped 290816 [ 3537.727821][T31054] file_dirty 0 [ 3537.727821][T31054] file_writeback 0 [ 3537.727821][T31054] swapcached 0 [ 3537.727821][T31054] anon_thp 0 [ 3537.727821][T31054] file_thp 0 [ 3537.727821][T31054] shmem_thp 0 [ 3537.727821][T31054] inactive_anon 65536 [ 3537.727821][T31054] active_anon 307200 [ 3537.727821][T31054] inactive_file 0 [ 3537.727821][T31054] active_file 0 [ 3537.727821][T31054] unevictable 0 [ 3537.727821][T31054] slab_reclaimable 19368 [ 3537.727821][T31054] slab_unreclaimable 308521984 [ 3537.768275][T31039] device veth0_to_hsr left promiscuous mode [ 3537.824866][T31054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31054,uid=0 22:17:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000032000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3537.845802][T31054] Memory cgroup out of memory: Killed process 31054 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3537.856547][T31039] bridge3687: port 1(veth0_to_hsr) entered disabled state [ 3537.873127][T31039] bridge3688: port 1(veth0_to_hsr) entered blocking state [ 3537.881017][T31039] bridge3688: port 1(veth0_to_hsr) entered disabled state [ 3537.893645][T31039] device veth0_to_hsr entered promiscuous mode [ 3537.915666][T31042] device bridge_slave_1 left promiscuous mode [ 3537.928365][T31042] bridge3687: port 2(bridge_slave_1) entered disabled state [ 3537.945775][T31062] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3537.957082][T31042] bridge3688: port 2(bridge_slave_1) entered blocking state [ 3537.957156][T31042] bridge3688: port 2(bridge_slave_1) entered disabled state [ 3537.965100][T31062] CPU: 1 PID: 31062 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3537.982653][T31062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3537.985648][T31042] device bridge_slave_1 entered promiscuous mode [ 3537.992724][T31062] Call Trace: [ 3537.992736][T31062] [ 3537.992747][T31062] dump_stack_lvl+0xd1/0x138 [ 3537.992789][T31062] dump_header+0x10b/0x85f 22:17:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000000a0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3537.992822][T31062] oom_kill_process.cold+0x10/0x15 [ 3538.019527][T31062] out_of_memory+0x35c/0x14a0 [ 3538.024266][T31062] ? find_held_lock+0x2d/0x110 [ 3538.029082][T31062] ? oom_killer_disable+0x280/0x280 [ 3538.034337][T31062] ? find_held_lock+0x2d/0x110 [ 3538.039154][T31062] mem_cgroup_out_of_memory+0x206/0x270 [ 3538.044747][T31062] ? mem_cgroup_margin+0x130/0x130 [ 3538.049919][T31062] ? lock_downgrade+0x6e0/0x6e0 [ 3538.054816][T31062] try_charge_memcg+0xefb/0x12f0 [ 3538.059797][T31062] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3538.065817][T31062] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3538.071590][T31062] ? lock_downgrade+0x6e0/0x6e0 [ 3538.076487][T31062] ? lock_downgrade+0x6e0/0x6e0 [ 3538.081383][T31062] ? rcu_read_unlock+0x9/0x60 [ 3538.086127][T31062] obj_cgroup_charge+0x2af/0x5e0 [ 3538.091100][T31062] ? copy_process+0x3aa/0x7520 [ 3538.095891][T31062] kmem_cache_alloc_node+0xb7/0x460 [ 3538.096417][T31045] bridge4296: port 1(veth0_to_hsr) entered disabled state [ 3538.101119][T31062] copy_process+0x3aa/0x7520 [ 3538.101163][T31062] ? __lock_acquire+0xbc3/0x56d0 [ 3538.101202][T31062] ? __cleanup_sighand+0xb0/0xb0 [ 3538.122801][T31062] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3538.128823][T31062] ? psi_memstall_leave+0x174/0x250 [ 3538.134170][T31062] kernel_clone+0xeb/0x990 [ 3538.138711][T31062] ? create_io_thread+0xf0/0xf0 [ 3538.143580][T31062] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3538.149832][T31062] ? lock_downgrade+0x6e0/0x6e0 [ 3538.154692][T31062] __do_sys_clone+0xba/0x100 [ 3538.159294][T31062] ? kernel_clone+0x990/0x990 [ 3538.164034][T31062] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3538.169972][T31062] do_syscall_64+0x39/0xb0 [ 3538.174407][T31062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.180323][T31062] RIP: 0033:0x7f7e1f28d4f1 [ 3538.184733][T31062] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3538.204434][T31062] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3538.212862][T31062] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3538.220859][T31062] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3538.228833][T31062] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3538.236832][T31062] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3538.244798][T31062] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3538.252780][T31062] [ 3538.268334][T31045] bridge4297: port 1(veth0_to_hsr) entered blocking state [ 3538.277473][T31045] bridge4297: port 1(veth0_to_hsr) entered disabled state [ 3538.277919][T31062] memory: usage 307160kB, limit 307200kB, failcnt 6932 [ 3538.300331][T31047] device bridge_slave_1 left promiscuous mode [ 3538.300969][T31062] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3538.308909][T31047] bridge4296: port 2(bridge_slave_1) entered disabled state [ 3538.314235][T31062] Memory cgroup stats for /syz5: [ 3538.321400][T31062] anon 81920 [ 3538.321400][T31062] file 315392 [ 3538.321400][T31062] kernel 314122240 [ 3538.321400][T31062] kernel_stack 32768 [ 3538.321400][T31062] pagetables 69632 [ 3538.321400][T31062] sec_pagetables 0 [ 3538.321400][T31062] percpu 5436000 [ 3538.321400][T31062] sock 0 [ 3538.321400][T31062] vmalloc 8192 [ 3538.321400][T31062] shmem 315392 [ 3538.321400][T31062] zswap 0 [ 3538.321400][T31062] zswapped 0 [ 3538.321400][T31062] file_mapped 290816 [ 3538.321400][T31062] file_dirty 0 [ 3538.321400][T31062] file_writeback 0 [ 3538.321400][T31062] swapcached 0 [ 3538.321400][T31062] anon_thp 0 [ 3538.321400][T31062] file_thp 0 [ 3538.321400][T31062] shmem_thp 0 [ 3538.321400][T31062] inactive_anon 49152 [ 3538.321400][T31062] active_anon 307200 [ 3538.321400][T31062] inactive_file 0 [ 3538.321400][T31062] active_file 0 [ 3538.321400][T31062] unevictable 0 [ 3538.321400][T31062] slab_reclaimable 19752 [ 3538.321400][T31062] slab_unreclaimable 308514672 [ 3538.418929][T31062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31062,uid=0 [ 3538.431508][T31047] bridge4297: port 2(bridge_slave_1) entered blocking state [ 3538.434601][T31062] Memory cgroup out of memory: Killed process 31062 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3538.443330][T31047] bridge4297: port 2(bridge_slave_1) entered disabled state 22:17:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000132000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000027800000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3538.470905][T31047] device bridge_slave_1 entered promiscuous mode [ 3538.485177][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3538.572720][T31051] device bridge_slave_1 left promiscuous mode [ 3538.589248][T31051] bridge3945: port 1(bridge_slave_1) entered disabled state [ 3538.607431][T31070] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3538.608118][T31051] bridge3946: port 1(bridge_slave_1) entered blocking state [ 3538.618368][T31070] CPU: 1 PID: 31070 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3538.627282][T31051] bridge3946: port 1(bridge_slave_1) entered disabled state [ 3538.635829][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3538.635854][T31070] Call Trace: [ 3538.635863][T31070] [ 3538.635875][T31070] dump_stack_lvl+0xd1/0x138 [ 3538.635919][T31070] dump_header+0x10b/0x85f [ 3538.635951][T31070] oom_kill_process.cold+0x10/0x15 [ 3538.635984][T31070] out_of_memory+0x35c/0x14a0 [ 3538.646504][T31051] device bridge_slave_1 entered promiscuous mode [ 3538.653430][T31070] ? find_held_lock+0x2d/0x110 [ 3538.653481][T31070] ? oom_killer_disable+0x280/0x280 [ 3538.653526][T31070] ? find_held_lock+0x2d/0x110 [ 3538.699681][T31070] mem_cgroup_out_of_memory+0x206/0x270 [ 3538.705272][T31070] ? mem_cgroup_margin+0x130/0x130 [ 3538.710433][T31070] ? lock_downgrade+0x6e0/0x6e0 [ 3538.715337][T31070] try_charge_memcg+0xefb/0x12f0 [ 3538.720317][T31070] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3538.726321][T31070] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3538.732237][T31070] ? lock_downgrade+0x6e0/0x6e0 [ 3538.737094][T31070] ? lock_downgrade+0x6e0/0x6e0 [ 3538.741960][T31070] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3538.747514][T31070] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3538.753677][T31070] copy_process+0x4e3/0x7520 [ 3538.758285][T31070] ? __lock_acquire+0xbc3/0x56d0 [ 3538.759747][T31055] bridge4262: port 1(veth0_to_hsr) entered disabled state [ 3538.763233][T31070] ? __cleanup_sighand+0xb0/0xb0 [ 3538.763274][T31070] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3538.763325][T31070] ? psi_memstall_leave+0x174/0x250 [ 3538.786558][T31070] kernel_clone+0xeb/0x990 [ 3538.791030][T31070] ? create_io_thread+0xf0/0xf0 [ 3538.795911][T31070] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3538.802190][T31070] ? lock_downgrade+0x6e0/0x6e0 [ 3538.807069][T31070] __do_sys_clone+0xba/0x100 [ 3538.811682][T31070] ? kernel_clone+0x990/0x990 [ 3538.816402][T31070] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3538.822307][T31070] do_syscall_64+0x39/0xb0 [ 3538.826732][T31070] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.832718][T31070] RIP: 0033:0x7f7e1f28d4f1 [ 3538.837130][T31070] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3538.856832][T31070] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3538.865263][T31070] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3538.873258][T31070] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3538.881239][T31070] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3538.889221][T31070] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3538.897201][T31070] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3538.905191][T31070] 22:17:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3538.921302][T31070] memory: usage 307184kB, limit 307200kB, failcnt 7026 [ 3538.934977][T31055] bridge4263: port 1(veth0_to_hsr) entered blocking state [ 3538.935047][T31070] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3538.952072][T31070] Memory cgroup stats for /syz5: [ 3538.952332][T31070] anon 81920 [ 3538.952332][T31070] file 315392 [ 3538.952332][T31070] kernel 314159104 [ 3538.952332][T31070] kernel_stack 32768 [ 3538.952332][T31070] pagetables 69632 [ 3538.952332][T31070] sec_pagetables 0 [ 3538.952332][T31070] percpu 5436000 [ 3538.952332][T31070] sock 0 [ 3538.952332][T31070] vmalloc 8192 [ 3538.952332][T31070] shmem 315392 [ 3538.952332][T31070] zswap 0 [ 3538.952332][T31070] zswapped 0 [ 3538.952332][T31070] file_mapped 290816 [ 3538.952332][T31070] file_dirty 0 [ 3538.952332][T31070] file_writeback 0 [ 3538.952332][T31070] swapcached 0 [ 3538.952332][T31070] anon_thp 0 [ 3538.952332][T31070] file_thp 0 [ 3538.952332][T31070] shmem_thp 0 [ 3538.952332][T31070] inactive_anon 90112 [ 3538.952332][T31070] active_anon 307200 [ 3538.952332][T31070] inactive_file 0 [ 3538.952332][T31070] active_file 0 [ 3538.952332][T31070] unevictable 0 [ 3538.952332][T31070] slab_reclaimable 16792 [ 3538.952332][T31070] slab_unreclaimable 308521520 [ 3538.959699][T31055] bridge4263: port 1(veth0_to_hsr) entered disabled state 22:17:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000332000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3539.053852][T31070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31070,uid=0 [ 3539.077352][T31070] Memory cgroup out of memory: Killed process 31070 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3539.097026][T31057] device bridge_slave_1 left promiscuous mode [ 3539.104201][T31057] bridge4262: port 2(bridge_slave_1) entered disabled state [ 3539.121851][T31057] bridge4263: port 2(bridge_slave_1) entered blocking state [ 3539.138898][T31057] bridge4263: port 2(bridge_slave_1) entered disabled state [ 3539.148639][T31057] device bridge_slave_1 entered promiscuous mode 22:17:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000420300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3539.176629][T31059] device bridge_slave_1 left promiscuous mode [ 3539.184040][T31059] bridge4380: port 2(bridge_slave_1) entered disabled state [ 3539.219757][T31059] bridge4381: port 2(bridge_slave_1) entered blocking state [ 3539.227529][T31059] bridge4381: port 2(bridge_slave_1) entered disabled state [ 3539.236877][T31059] device bridge_slave_1 entered promiscuous mode [ 3539.239852][T31077] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 22:17:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000001f", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3539.264380][T31077] CPU: 1 PID: 31077 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3539.274890][T31077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3539.285190][T31077] Call Trace: [ 3539.288509][T31077] [ 3539.291488][T31077] dump_stack_lvl+0xd1/0x138 [ 3539.296129][T31077] dump_header+0x10b/0x85f [ 3539.300756][T31077] oom_kill_process.cold+0x10/0x15 [ 3539.305909][T31077] out_of_memory+0x35c/0x14a0 [ 3539.310653][T31077] ? find_held_lock+0x2d/0x110 [ 3539.315476][T31077] ? oom_killer_disable+0x280/0x280 [ 3539.320750][T31077] ? find_held_lock+0x2d/0x110 [ 3539.325583][T31077] mem_cgroup_out_of_memory+0x206/0x270 [ 3539.331208][T31077] ? mem_cgroup_margin+0x130/0x130 [ 3539.336384][T31077] ? lock_downgrade+0x6e0/0x6e0 [ 3539.341306][T31077] try_charge_memcg+0xefb/0x12f0 [ 3539.346308][T31077] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3539.352336][T31077] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3539.356256][T31065] device veth0_to_hsr left promiscuous mode [ 3539.358095][T31077] ? lock_downgrade+0x6e0/0x6e0 [ 3539.358135][T31077] ? lock_downgrade+0x6e0/0x6e0 [ 3539.358164][T31077] ? rcu_read_unlock+0x9/0x60 [ 3539.358214][T31077] obj_cgroup_charge+0x2af/0x5e0 [ 3539.365823][T31065] bridge3688: port 1(veth0_to_hsr) entered disabled state [ 3539.368925][T31077] __kmem_cache_alloc_node+0xb2/0x430 [ 3539.368963][T31077] ? copy_semundo+0x18b/0x300 [ 3539.369010][T31077] kmalloc_trace+0x26/0x60 [ 3539.369047][T31077] copy_semundo+0x18b/0x300 [ 3539.409537][T31077] copy_process+0x2457/0x7520 [ 3539.414307][T31077] ? page_remove_rmap+0x435/0x1210 [ 3539.419437][T31077] ? folio_flags.constprop.0+0x53/0x150 [ 3539.425057][T31077] ? __cleanup_sighand+0xb0/0xb0 [ 3539.430025][T31077] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3539.435424][T31077] ? rwlock_bug.part.0+0x90/0x90 [ 3539.440404][T31077] ? lock_chain_count+0x20/0x20 [ 3539.445291][T31077] kernel_clone+0xeb/0x990 [ 3539.449712][T31077] ? create_io_thread+0xf0/0xf0 [ 3539.454568][T31077] ? find_held_lock+0x2d/0x110 [ 3539.459379][T31077] __do_sys_clone+0xba/0x100 [ 3539.464013][T31077] ? kernel_clone+0x990/0x990 [ 3539.468755][T31077] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3539.474716][T31077] do_syscall_64+0x39/0xb0 [ 3539.479166][T31077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.485090][T31077] RIP: 0033:0x7f7e1f28d4f1 [ 3539.489507][T31077] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3539.509119][T31077] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3539.517536][T31077] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3539.525524][T31077] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3539.533528][T31077] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3539.541569][T31077] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3539.549582][T31077] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3539.557599][T31077] [ 3539.565644][T31065] bridge3689: port 1(veth0_to_hsr) entered blocking state [ 3539.575889][T31077] memory: usage 307184kB, limit 307200kB, failcnt 7129 [ 3539.584378][T31077] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3539.592283][T31077] Memory cgroup stats for /syz5: [ 3539.592517][T31077] anon 81920 [ 3539.592517][T31077] file 315392 [ 3539.592517][T31077] kernel 314159104 [ 3539.592517][T31077] kernel_stack 65536 [ 3539.592517][T31077] pagetables 69632 [ 3539.592517][T31077] sec_pagetables 0 [ 3539.592517][T31077] percpu 5436000 [ 3539.592517][T31077] sock 0 [ 3539.592517][T31077] vmalloc 8192 [ 3539.592517][T31077] shmem 315392 [ 3539.592517][T31077] zswap 0 [ 3539.592517][T31077] zswapped 0 [ 3539.592517][T31077] file_mapped 290816 [ 3539.592517][T31077] file_dirty 0 [ 3539.592517][T31077] file_writeback 0 [ 3539.592517][T31077] swapcached 0 [ 3539.592517][T31077] anon_thp 0 [ 3539.592517][T31077] file_thp 0 [ 3539.592517][T31077] shmem_thp 0 [ 3539.592517][T31077] inactive_anon 90112 [ 3539.592517][T31077] active_anon 307200 [ 3539.592517][T31077] inactive_file 0 [ 3539.592517][T31077] active_file 0 [ 3539.592517][T31077] unevictable 0 [ 3539.592517][T31077] slab_reclaimable 16792 [ 3539.592517][T31077] slab_unreclaimable 308521520 [ 3539.597841][T31065] bridge3689: port 1(veth0_to_hsr) entered disabled state [ 3539.698719][T31077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31077,uid=0 22:17:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000013a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3539.720917][T31065] device veth0_to_hsr entered promiscuous mode [ 3539.733724][T31077] Memory cgroup out of memory: Killed process 31077 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3539.734938][T31066] device bridge_slave_1 left promiscuous mode [ 3539.758436][T31066] bridge3688: port 2(bridge_slave_1) entered disabled state 22:17:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000020a0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3539.786578][T31066] bridge3689: port 2(bridge_slave_1) entered blocking state [ 3539.799721][T31066] bridge3689: port 2(bridge_slave_1) entered disabled state [ 3539.808734][T31066] device bridge_slave_1 entered promiscuous mode [ 3539.867088][T31089] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3539.885241][T31072] device bridge_slave_1 left promiscuous mode [ 3539.888975][T31089] CPU: 1 PID: 31089 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3539.901792][T31089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3539.908512][T31072] bridge4297: port 2(bridge_slave_1) entered disabled state [ 3539.911857][T31089] Call Trace: [ 3539.911871][T31089] [ 3539.911882][T31089] dump_stack_lvl+0xd1/0x138 [ 3539.911926][T31089] dump_header+0x10b/0x85f [ 3539.911958][T31089] oom_kill_process.cold+0x10/0x15 [ 3539.939554][T31089] out_of_memory+0x35c/0x14a0 [ 3539.944272][T31089] ? find_held_lock+0x2d/0x110 [ 3539.949068][T31089] ? oom_killer_disable+0x280/0x280 [ 3539.954298][T31089] ? find_held_lock+0x2d/0x110 [ 3539.959092][T31089] mem_cgroup_out_of_memory+0x206/0x270 [ 3539.964677][T31089] ? mem_cgroup_margin+0x130/0x130 [ 3539.969821][T31089] ? lock_downgrade+0x6e0/0x6e0 [ 3539.974706][T31089] try_charge_memcg+0xefb/0x12f0 [ 3539.979679][T31089] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3539.985686][T31089] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3539.991441][T31089] ? lock_downgrade+0x6e0/0x6e0 [ 3539.996310][T31089] ? lock_downgrade+0x6e0/0x6e0 [ 3540.001176][T31089] ? rcu_read_unlock+0x9/0x60 [ 3540.005891][T31089] obj_cgroup_charge+0x2af/0x5e0 [ 3540.010858][T31089] __kmem_cache_alloc_node+0xb2/0x430 [ 3540.016251][T31089] ? copy_semundo+0x18b/0x300 [ 3540.020960][T31089] kmalloc_trace+0x26/0x60 [ 3540.025404][T31089] copy_semundo+0x18b/0x300 [ 3540.029934][T31089] copy_process+0x2457/0x7520 [ 3540.034628][T31089] ? page_remove_rmap+0x435/0x1210 [ 3540.039764][T31089] ? folio_flags.constprop.0+0x53/0x150 [ 3540.045359][T31089] ? __cleanup_sighand+0xb0/0xb0 [ 3540.050313][T31089] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3540.055722][T31089] ? rwlock_bug.part.0+0x90/0x90 [ 3540.060676][T31089] ? lock_chain_count+0x20/0x20 [ 3540.065557][T31089] kernel_clone+0xeb/0x990 [ 3540.069996][T31089] ? create_io_thread+0xf0/0xf0 [ 3540.074877][T31089] ? find_held_lock+0x2d/0x110 [ 3540.079679][T31089] __do_sys_clone+0xba/0x100 [ 3540.084294][T31089] ? kernel_clone+0x990/0x990 [ 3540.089005][T31089] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3540.094933][T31089] do_syscall_64+0x39/0xb0 [ 3540.099363][T31089] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.105365][T31089] RIP: 0033:0x7f7e1f28d4f1 [ 3540.109791][T31089] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3540.129498][T31089] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3540.137928][T31089] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3540.145912][T31089] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3540.153895][T31089] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3540.161877][T31089] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3540.169857][T31089] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3540.177859][T31089] [ 3540.193721][T31072] bridge4298: port 1(bridge_slave_1) entered blocking state [ 3540.204937][T31089] memory: usage 307184kB, limit 307200kB, failcnt 7214 [ 3540.212559][T31072] bridge4298: port 1(bridge_slave_1) entered disabled state [ 3540.221686][T31089] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3540.239603][T31089] Memory cgroup stats for /syz5: [ 3540.239871][T31089] anon 81920 [ 3540.239871][T31089] file 315392 [ 3540.239871][T31089] kernel 314159104 [ 3540.239871][T31089] kernel_stack 65536 [ 3540.239871][T31089] pagetables 69632 [ 3540.239871][T31089] sec_pagetables 0 [ 3540.239871][T31089] percpu 5436000 [ 3540.239871][T31089] sock 0 [ 3540.239871][T31089] vmalloc 8192 [ 3540.239871][T31089] shmem 315392 [ 3540.239871][T31089] zswap 0 [ 3540.239871][T31089] zswapped 0 [ 3540.239871][T31089] file_mapped 290816 [ 3540.239871][T31089] file_dirty 0 [ 3540.239871][T31089] file_writeback 0 [ 3540.239871][T31089] swapcached 0 [ 3540.239871][T31089] anon_thp 0 [ 3540.239871][T31089] file_thp 0 [ 3540.239871][T31089] shmem_thp 0 [ 3540.239871][T31089] inactive_anon 90112 [ 3540.239871][T31089] active_anon 307200 [ 3540.239871][T31089] inactive_file 0 [ 3540.239871][T31089] active_file 0 [ 3540.239871][T31089] unevictable 0 [ 3540.239871][T31089] slab_reclaimable 16792 [ 3540.239871][T31089] slab_unreclaimable 308521520 [ 3540.345848][T31089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31089,uid=0 [ 3540.347175][T31072] device bridge_slave_1 entered promiscuous mode 22:17:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000007a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000003c000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3540.370975][T31089] Memory cgroup out of memory: Killed process 31089 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3540.392384][T31093] device bridge_slave_1 left promiscuous mode [ 3540.404489][T31093] bridge3689: port 2(bridge_slave_1) entered disabled state [ 3540.440822][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3540.495841][T31097] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3540.504144][T31075] device bridge_slave_1 left promiscuous mode [ 3540.506424][T31097] CPU: 1 PID: 31097 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3540.513088][T31075] bridge3946: port 1(bridge_slave_1) entered disabled state [ 3540.522636][T31097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3540.522658][T31097] Call Trace: [ 3540.522668][T31097] [ 3540.522679][T31097] dump_stack_lvl+0xd1/0x138 [ 3540.522727][T31097] dump_header+0x10b/0x85f [ 3540.522758][T31097] oom_kill_process.cold+0x10/0x15 [ 3540.522791][T31097] out_of_memory+0x35c/0x14a0 [ 3540.565334][T31097] ? find_held_lock+0x2d/0x110 [ 3540.570140][T31097] ? oom_killer_disable+0x280/0x280 [ 3540.575373][T31097] ? find_held_lock+0x2d/0x110 [ 3540.580169][T31097] mem_cgroup_out_of_memory+0x206/0x270 [ 3540.585748][T31097] ? mem_cgroup_margin+0x130/0x130 [ 3540.590898][T31097] ? lock_downgrade+0x6e0/0x6e0 [ 3540.595799][T31097] try_charge_memcg+0xefb/0x12f0 [ 3540.600783][T31097] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3540.606821][T31097] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3540.612588][T31097] ? lock_downgrade+0x6e0/0x6e0 [ 3540.618160][T31097] ? lock_downgrade+0x6e0/0x6e0 [ 3540.623042][T31097] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3540.628611][T31097] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3540.634794][T31097] copy_process+0x4e3/0x7520 [ 3540.639408][T31097] ? __lock_acquire+0xbc3/0x56d0 [ 3540.644376][T31097] ? __cleanup_sighand+0xb0/0xb0 [ 3540.649351][T31097] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3540.655393][T31097] ? psi_memstall_leave+0x174/0x250 [ 3540.660648][T31097] kernel_clone+0xeb/0x990 [ 3540.665195][T31097] ? create_io_thread+0xf0/0xf0 [ 3540.670070][T31097] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3540.676441][T31097] ? lock_downgrade+0x6e0/0x6e0 [ 3540.681349][T31097] __do_sys_clone+0xba/0x100 [ 3540.686421][T31097] ? kernel_clone+0x990/0x990 [ 3540.691143][T31097] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3540.697070][T31097] do_syscall_64+0x39/0xb0 [ 3540.701939][T31097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.707856][T31097] RIP: 0033:0x7f7e1f28d4f1 [ 3540.712284][T31097] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3540.731925][T31097] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3540.740395][T31097] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3540.748385][T31097] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3540.756372][T31097] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3540.764355][T31097] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3540.772406][T31097] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3540.780417][T31097] [ 3540.796671][T31097] memory: usage 307188kB, limit 307200kB, failcnt 7288 [ 3540.803930][T31097] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3540.811528][T31097] Memory cgroup stats for /syz5: [ 3540.811797][T31097] anon 81920 [ 3540.811797][T31097] file 315392 [ 3540.811797][T31097] kernel 314146816 [ 3540.811797][T31097] kernel_stack 32768 [ 3540.811797][T31097] pagetables 69632 [ 3540.811797][T31097] sec_pagetables 0 [ 3540.811797][T31097] percpu 5436000 [ 3540.811797][T31097] sock 0 [ 3540.811797][T31097] vmalloc 8192 [ 3540.811797][T31097] shmem 315392 [ 3540.811797][T31097] zswap 0 [ 3540.811797][T31097] zswapped 0 [ 3540.811797][T31097] file_mapped 290816 [ 3540.811797][T31097] file_dirty 0 [ 3540.811797][T31097] file_writeback 0 [ 3540.811797][T31097] swapcached 0 [ 3540.811797][T31097] anon_thp 0 [ 3540.811797][T31097] file_thp 0 [ 3540.811797][T31097] shmem_thp 0 [ 3540.811797][T31097] inactive_anon 49152 [ 3540.811797][T31097] active_anon 307200 [ 3540.811797][T31097] inactive_file 0 [ 3540.811797][T31097] active_file 0 [ 3540.811797][T31097] unevictable 0 [ 3540.811797][T31097] slab_reclaimable 16792 [ 3540.811797][T31097] slab_unreclaimable 308524072 [ 3540.823979][T31075] bridge3947: port 1(bridge_slave_1) entered blocking state [ 3540.915166][T31097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31097,uid=0 22:17:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000003f000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3540.935337][T31097] Memory cgroup out of memory: Killed process 31097 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3540.952212][T31075] bridge3947: port 1(bridge_slave_1) entered disabled state [ 3540.969038][T31075] device bridge_slave_1 entered promiscuous mode 22:17:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3541.055162][T31101] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3541.078357][T31101] CPU: 1 PID: 31101 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3541.088848][T31101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3541.089237][T31083] device bridge_slave_1 left promiscuous mode [ 3541.098914][T31101] Call Trace: [ 3541.098930][T31101] [ 3541.098941][T31101] dump_stack_lvl+0xd1/0x138 [ 3541.098993][T31101] dump_header+0x10b/0x85f [ 3541.099027][T31101] oom_kill_process.cold+0x10/0x15 [ 3541.106294][T31083] bridge4263: port 2(bridge_slave_1) entered disabled state [ 3541.108346][T31101] out_of_memory+0x35c/0x14a0 [ 3541.108400][T31101] ? find_held_lock+0x2d/0x110 [ 3541.142163][T31101] ? oom_killer_disable+0x280/0x280 [ 3541.147391][T31101] ? find_held_lock+0x2d/0x110 [ 3541.152252][T31101] mem_cgroup_out_of_memory+0x206/0x270 [ 3541.157837][T31101] ? mem_cgroup_margin+0x130/0x130 [ 3541.163019][T31101] ? lock_downgrade+0x6e0/0x6e0 [ 3541.167880][T31101] try_charge_memcg+0xefb/0x12f0 [ 3541.172841][T31101] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3541.178823][T31101] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3541.184556][T31101] ? lock_downgrade+0x6e0/0x6e0 [ 3541.189417][T31101] ? lock_downgrade+0x6e0/0x6e0 [ 3541.194306][T31101] ? rcu_read_unlock+0x9/0x60 [ 3541.198999][T31101] obj_cgroup_charge+0x2af/0x5e0 [ 3541.203981][T31101] __kmem_cache_alloc_node+0xb2/0x430 [ 3541.209366][T31101] ? copy_semundo+0x18b/0x300 [ 3541.214098][T31101] kmalloc_trace+0x26/0x60 [ 3541.218548][T31101] copy_semundo+0x18b/0x300 [ 3541.223201][T31101] copy_process+0x2457/0x7520 [ 3541.227877][T31101] ? page_remove_rmap+0x435/0x1210 [ 3541.233006][T31101] ? folio_flags.constprop.0+0x53/0x150 [ 3541.238594][T31101] ? __cleanup_sighand+0xb0/0xb0 [ 3541.243625][T31101] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3541.249018][T31101] ? rwlock_bug.part.0+0x90/0x90 [ 3541.253995][T31101] ? lock_chain_count+0x20/0x20 [ 3541.258873][T31101] kernel_clone+0xeb/0x990 [ 3541.263289][T31101] ? create_io_thread+0xf0/0xf0 [ 3541.268140][T31101] ? find_held_lock+0x2d/0x110 [ 3541.272923][T31101] __do_sys_clone+0xba/0x100 [ 3541.277632][T31101] ? kernel_clone+0x990/0x990 [ 3541.282347][T31101] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3541.288288][T31101] do_syscall_64+0x39/0xb0 [ 3541.292722][T31101] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3541.298631][T31101] RIP: 0033:0x7f7e1f28d4f1 [ 3541.303048][T31101] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3541.322926][T31101] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3541.331362][T31101] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3541.339363][T31101] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3541.347459][T31101] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3541.355437][T31101] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3541.363418][T31101] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3541.371591][T31101] [ 3541.382201][T31101] memory: usage 307192kB, limit 307200kB, failcnt 7364 [ 3541.389310][T31101] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3541.396938][T31101] Memory cgroup stats for /syz5: [ 3541.397170][T31101] anon 81920 [ 3541.397170][T31101] file 315392 [ 3541.397170][T31101] kernel 314159104 [ 3541.397170][T31101] kernel_stack 65536 [ 3541.397170][T31101] pagetables 69632 [ 3541.397170][T31101] sec_pagetables 0 [ 3541.397170][T31101] percpu 5436000 [ 3541.397170][T31101] sock 0 [ 3541.397170][T31101] vmalloc 8192 [ 3541.397170][T31101] shmem 315392 [ 3541.397170][T31101] zswap 0 [ 3541.397170][T31101] zswapped 0 [ 3541.397170][T31101] file_mapped 290816 [ 3541.397170][T31101] file_dirty 0 [ 3541.397170][T31101] file_writeback 0 [ 3541.397170][T31101] swapcached 0 [ 3541.397170][T31101] anon_thp 0 [ 3541.397170][T31101] file_thp 0 [ 3541.397170][T31101] shmem_thp 0 [ 3541.397170][T31101] inactive_anon 90112 [ 3541.397170][T31101] active_anon 307200 [ 3541.397170][T31101] inactive_file 0 [ 3541.397170][T31101] active_file 0 [ 3541.397170][T31101] unevictable 0 [ 3541.397170][T31101] slab_reclaimable 16792 [ 3541.397170][T31101] slab_unreclaimable 308521824 22:17:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000242000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3541.494196][T31101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31101,uid=0 [ 3541.496659][T31083] bridge4264: port 1(bridge_slave_1) entered blocking state [ 3541.510961][T31101] Memory cgroup out of memory: Killed process 31101 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3541.543362][T31083] bridge4264: port 1(bridge_slave_1) entered disabled state [ 3541.572867][T31083] device bridge_slave_1 entered promiscuous mode [ 3541.598418][T31106] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3541.615056][T31106] CPU: 1 PID: 31106 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3541.625553][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3541.635642][T31106] Call Trace: [ 3541.638945][T31106] [ 3541.641903][T31106] dump_stack_lvl+0xd1/0x138 [ 3541.646548][T31106] dump_header+0x10b/0x85f [ 3541.650996][T31106] oom_kill_process.cold+0x10/0x15 [ 3541.656141][T31106] out_of_memory+0x35c/0x14a0 [ 3541.657781][T31085] bridge4381: port 1(veth0_to_hsr) entered disabled state [ 3541.660845][T31106] ? find_held_lock+0x2d/0x110 [ 3541.660894][T31106] ? oom_killer_disable+0x280/0x280 [ 3541.660939][T31106] ? find_held_lock+0x2d/0x110 [ 3541.682960][T31106] mem_cgroup_out_of_memory+0x206/0x270 [ 3541.688524][T31106] ? mem_cgroup_margin+0x130/0x130 [ 3541.693645][T31106] ? lock_downgrade+0x6e0/0x6e0 [ 3541.698513][T31106] try_charge_memcg+0xefb/0x12f0 [ 3541.703463][T31106] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3541.709541][T31106] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3541.715282][T31106] ? lock_downgrade+0x6e0/0x6e0 [ 3541.720240][T31106] ? lock_downgrade+0x6e0/0x6e0 [ 3541.725150][T31106] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3541.730748][T31106] __alloc_pages+0x1f3/0x5b0 [ 3541.735368][T31106] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3541.742146][T31106] ? find_held_lock+0x2d/0x110 [ 3541.747030][T31106] ? __pmd_alloc+0x307/0x5d0 [ 3541.751634][T31106] ? lock_downgrade+0x6e0/0x6e0 [ 3541.756487][T31106] ? do_raw_spin_lock+0x124/0x2b0 [ 3541.761521][T31106] alloc_pages+0x1aa/0x270 [ 3541.765942][T31106] pte_alloc_one+0x1a/0x230 [ 3541.770461][T31106] __do_fault+0x433/0x600 [ 3541.774831][T31106] ? __pud_alloc+0xe4/0x180 [ 3541.779378][T31106] __handle_mm_fault+0x236e/0x3c90 [ 3541.784542][T31106] ? vm_iomap_memory+0x190/0x190 [ 3541.789516][T31106] handle_mm_fault+0x1b6/0x850 [ 3541.794286][T31106] do_user_addr_fault+0x475/0x1210 [ 3541.799405][T31106] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3541.805489][T31106] exc_page_fault+0x98/0x170 [ 3541.810091][T31106] asm_exc_page_fault+0x26/0x30 [ 3541.814951][T31106] RIP: 0033:0x7f7e1f2276c6 [ 3541.819380][T31106] Code: ff ff 66 90 48 8b 0d 29 e0 ca 00 4c 63 05 12 e0 ca 00 48 8b 05 13 e0 ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 f9 df ca 00 c3 52 48 8d 35 ca f0 0b 00 48 89 c2 48 [ 3541.839020][T31106] RSP: 002b:00007ffc49b30ab8 EFLAGS: 00010287 [ 3541.845091][T31106] RAX: 0000001b32520000 RBX: 0000000000000003 RCX: 0000001b32520000 [ 3541.853063][T31106] RDX: 0000001b32520004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 3541.861033][T31106] RBP: 0000000000000000 R08: 0000001b32920000 R09: 0000000000040000 22:17:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000004a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3541.869008][T31106] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 3541.876997][T31106] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc49b30d60 [ 3541.885031][T31106] [ 3541.894180][T31085] bridge4382: port 1(veth0_to_hsr) entered blocking state [ 3541.902324][T31106] memory: usage 307132kB, limit 307200kB, failcnt 7436 [ 3541.916150][T31085] bridge4382: port 1(veth0_to_hsr) entered disabled state [ 3541.916204][T31106] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3541.935716][T31106] Memory cgroup stats for /syz5: [ 3541.935970][T31106] anon 69632 [ 3541.935970][T31106] file 315392 [ 3541.935970][T31106] kernel 314109952 [ 3541.935970][T31106] kernel_stack 32768 [ 3541.935970][T31106] pagetables 61440 [ 3541.935970][T31106] sec_pagetables 0 [ 3541.935970][T31106] percpu 5436000 [ 3541.935970][T31106] sock 0 [ 3541.935970][T31106] vmalloc 8192 [ 3541.935970][T31106] shmem 315392 [ 3541.935970][T31106] zswap 0 [ 3541.935970][T31106] zswapped 0 [ 3541.935970][T31106] file_mapped 290816 [ 3541.935970][T31106] file_dirty 0 [ 3541.935970][T31106] file_writeback 0 [ 3541.935970][T31106] swapcached 0 [ 3541.935970][T31106] anon_thp 0 [ 3541.935970][T31106] file_thp 0 [ 3541.935970][T31106] shmem_thp 0 [ 3541.935970][T31106] inactive_anon 77824 [ 3541.935970][T31106] active_anon 307200 [ 3541.935970][T31106] inactive_file 0 [ 3541.935970][T31106] active_file 0 [ 3541.935970][T31106] unevictable 0 [ 3541.935970][T31106] slab_reclaimable 16792 [ 3541.935970][T31106] slab_unreclaimable 308513160 [ 3542.031168][T31086] device bridge_slave_1 left promiscuous mode [ 3542.037427][T31086] bridge4381: port 2(bridge_slave_1) entered disabled state [ 3542.057155][T31086] bridge4382: port 2(bridge_slave_1) entered blocking state [ 3542.059313][T31106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) 22:17:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 22:17:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000001142000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3542.064884][T31086] bridge4382: port 2(bridge_slave_1) entered disabled state [ 3542.068364][T31106] ,cpuset= [ 3542.073670][T31086] device bridge_slave_1 entered promiscuous mode [ 3542.091086][T31106] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31106,uid=0 [ 3542.102930][T31106] Memory cgroup out of memory: Killed process 31106 (syz-executor.5) total-vm:54408kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 3542.163931][T31092] device veth0_to_hsr left promiscuous mode [ 3542.177865][T31092] bridge3689: port 1(veth0_to_hsr) entered disabled state [ 3542.211370][T31092] bridge3690: port 1(veth0_to_hsr) entered blocking state [ 3542.218949][T31092] bridge3690: port 1(veth0_to_hsr) entered disabled state [ 3542.233453][T31092] device veth0_to_hsr entered promiscuous mode [ 3542.242688][T31111] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:17:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000000c0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3542.267657][T31111] CPU: 1 PID: 31111 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3542.278323][T31111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3542.288501][T31111] Call Trace: [ 3542.291816][T31111] [ 3542.294787][T31111] dump_stack_lvl+0xd1/0x138 [ 3542.299435][T31111] dump_header+0x10b/0x85f [ 3542.303906][T31111] oom_kill_process.cold+0x10/0x15 [ 3542.309074][T31111] out_of_memory+0x35c/0x14a0 [ 3542.313810][T31111] ? find_held_lock+0x2d/0x110 [ 3542.318640][T31111] ? oom_killer_disable+0x280/0x280 [ 3542.323899][T31111] ? find_held_lock+0x2d/0x110 [ 3542.328716][T31111] mem_cgroup_out_of_memory+0x206/0x270 [ 3542.334313][T31111] ? mem_cgroup_margin+0x130/0x130 [ 3542.339469][T31111] ? lock_downgrade+0x6e0/0x6e0 [ 3542.344399][T31111] try_charge_memcg+0xefb/0x12f0 [ 3542.347029][T31098] bridge4297: port 1(veth0_to_hsr) entered disabled state [ 3542.349395][T31111] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3542.349437][T31111] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3542.349484][T31111] ? lock_downgrade+0x6e0/0x6e0 [ 3542.349513][T31111] ? lock_downgrade+0x6e0/0x6e0 [ 3542.349554][T31111] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3542.383554][T31111] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3542.389739][T31111] copy_process+0x1359/0x7520 [ 3542.394449][T31111] ? page_remove_rmap+0x435/0x1210 [ 3542.399574][T31111] ? folio_flags.constprop.0+0x53/0x150 [ 3542.405131][T31111] ? put_page+0xd9/0x280 [ 3542.409380][T31111] ? do_wp_page+0x844/0x3370 [ 3542.413986][T31111] ? __cleanup_sighand+0xb0/0xb0 [ 3542.418941][T31111] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3542.424465][T31111] ? rwlock_bug.part.0+0x90/0x90 [ 3542.429452][T31111] ? lock_chain_count+0x20/0x20 [ 3542.434332][T31111] kernel_clone+0xeb/0x990 [ 3542.438757][T31111] ? create_io_thread+0xf0/0xf0 [ 3542.443615][T31111] ? find_held_lock+0x2d/0x110 [ 3542.448400][T31111] __do_sys_clone+0xba/0x100 [ 3542.453011][T31111] ? kernel_clone+0x990/0x990 [ 3542.457813][T31111] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3542.463754][T31111] do_syscall_64+0x39/0xb0 [ 3542.468216][T31111] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.474162][T31111] RIP: 0033:0x7f7e1f28d4f1 [ 3542.478600][T31111] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3542.498680][T31111] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3542.507482][T31111] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3542.515463][T31111] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3542.523449][T31111] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3542.531521][T31111] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3542.539503][T31111] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3542.547533][T31111] [ 3542.557315][T31111] memory: usage 307180kB, limit 307200kB, failcnt 7508 [ 3542.564846][T31111] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3542.571874][T31111] Memory cgroup stats for /syz5: [ 3542.572065][T31111] anon 81920 [ 3542.572065][T31111] file 315392 [ 3542.572065][T31111] kernel 314146816 [ 3542.572065][T31111] kernel_stack 32768 [ 3542.572065][T31111] pagetables 69632 [ 3542.572065][T31111] sec_pagetables 0 [ 3542.572065][T31111] percpu 5436000 [ 3542.572065][T31111] sock 0 [ 3542.572065][T31111] vmalloc 8192 [ 3542.572065][T31111] shmem 315392 [ 3542.572065][T31111] zswap 0 [ 3542.572065][T31111] zswapped 0 [ 3542.572065][T31111] file_mapped 290816 [ 3542.572065][T31111] file_dirty 0 [ 3542.572065][T31111] file_writeback 0 [ 3542.572065][T31111] swapcached 0 [ 3542.572065][T31111] anon_thp 0 [ 3542.572065][T31111] file_thp 0 [ 3542.572065][T31111] shmem_thp 0 [ 3542.572065][T31111] inactive_anon 73728 [ 3542.572065][T31111] active_anon 307200 [ 3542.572065][T31111] inactive_file 0 [ 3542.572065][T31111] active_file 0 [ 3542.572065][T31111] unevictable 0 [ 3542.572065][T31111] slab_reclaimable 16792 [ 3542.572065][T31111] slab_unreclaimable 308524072 [ 3542.679414][T31111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31111,uid=0 [ 3542.690934][T31098] bridge4299: port 1(veth0_to_hsr) entered blocking state [ 3542.696188][T31111] Memory cgroup out of memory: Killed process 31111 (syz-executor.5) total-vm:54540kB, anon-rss:356kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 22:17:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000048000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3542.712325][T31098] bridge4299: port 1(veth0_to_hsr) entered disabled state [ 3542.762611][T31099] device bridge_slave_1 left promiscuous mode [ 3542.777216][T31099] bridge4298: port 1(bridge_slave_1) entered disabled state [ 3542.800264][T31122] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:17:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000037a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3542.806114][T31099] bridge4299: port 2(bridge_slave_1) entered blocking state [ 3542.818923][T31099] bridge4299: port 2(bridge_slave_1) entered disabled state [ 3542.820502][T31122] CPU: 1 PID: 31122 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3542.828607][T31099] device bridge_slave_1 entered promiscuous mode [ 3542.836625][T31122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3542.836644][T31122] Call Trace: [ 3542.836653][T31122] [ 3542.836665][T31122] dump_stack_lvl+0xd1/0x138 [ 3542.836711][T31122] dump_header+0x10b/0x85f [ 3542.836745][T31122] oom_kill_process.cold+0x10/0x15 [ 3542.836777][T31122] out_of_memory+0x35c/0x14a0 [ 3542.836822][T31122] ? find_held_lock+0x2d/0x110 [ 3542.836863][T31122] ? oom_killer_disable+0x280/0x280 [ 3542.888266][T31122] ? find_held_lock+0x2d/0x110 [ 3542.893092][T31122] mem_cgroup_out_of_memory+0x206/0x270 [ 3542.898694][T31122] ? mem_cgroup_margin+0x130/0x130 [ 3542.903855][T31122] ? lock_downgrade+0x6e0/0x6e0 [ 3542.908748][T31122] try_charge_memcg+0xefb/0x12f0 [ 3542.913723][T31122] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3542.919741][T31122] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3542.925509][T31122] ? lock_downgrade+0x6e0/0x6e0 [ 3542.930396][T31122] ? lock_downgrade+0x6e0/0x6e0 [ 3542.932025][T31103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3542.935271][T31122] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3542.935316][T31122] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3542.935356][T31122] copy_process+0x4e3/0x7520 [ 3542.960950][T31122] ? __lock_acquire+0xbc3/0x56d0 [ 3542.965930][T31122] ? io_schedule_timeout+0x150/0x150 [ 3542.971267][T31122] ? __cleanup_sighand+0xb0/0xb0 [ 3542.976242][T31122] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3542.982446][T31122] ? lockdep_hardirqs_on+0x7d/0x100 [ 3542.987674][T31122] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3542.993963][T31122] kernel_clone+0xeb/0x990 [ 3542.998401][T31122] ? create_io_thread+0xf0/0xf0 [ 3543.000911][T31124] device bridge_slave_1 left promiscuous mode [ 3543.003269][T31122] ? lock_release+0x429/0x810 [ 3543.003307][T31122] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3543.003354][T31122] ? lock_downgrade+0x6e0/0x6e0 [ 3543.009844][T31124] bridge4299: port 2(bridge_slave_1) entered disabled state [ 3543.014171][T31122] __do_sys_clone+0xba/0x100 [ 3543.014212][T31122] ? kernel_clone+0x990/0x990 [ 3543.014261][T31122] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3543.047728][T31122] do_syscall_64+0x39/0xb0 [ 3543.052155][T31122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.058064][T31122] RIP: 0033:0x7f7e1f28d4f1 [ 3543.062498][T31122] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3543.082223][T31122] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3543.091007][T31122] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3543.099089][T31122] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3543.107083][T31122] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3543.115097][T31122] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3543.123111][T31122] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3543.131235][T31122] [ 3543.138937][T31124] bridge4300: port 1(bridge_slave_1) entered blocking state [ 3543.146451][T31122] memory: usage 307184kB, limit 307200kB, failcnt 7572 [ 3543.146477][T31122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3543.146495][T31122] Memory cgroup stats for /syz5 [ 3543.161870][T31124] bridge4300: port 1(bridge_slave_1) entered disabled state [ 3543.178415][T31124] device bridge_slave_1 entered promiscuous mode [ 3543.185157][T31122] : [ 3543.185294][T31122] anon 81920 [ 3543.185294][T31122] file 315392 [ 3543.185294][T31122] kernel 314126336 [ 3543.185294][T31122] kernel_stack 32768 [ 3543.185294][T31122] pagetables 69632 [ 3543.185294][T31122] sec_pagetables 0 [ 3543.185294][T31122] percpu 5436000 [ 3543.185294][T31122] sock 0 [ 3543.185294][T31122] vmalloc 8192 [ 3543.185294][T31122] shmem 315392 [ 3543.185294][T31122] zswap 0 [ 3543.185294][T31122] zswapped 0 [ 3543.185294][T31122] file_mapped 290816 [ 3543.185294][T31122] file_dirty 0 [ 3543.185294][T31122] file_writeback 0 [ 3543.185294][T31122] swapcached 0 [ 3543.185294][T31122] anon_thp 0 [ 3543.185294][T31122] file_thp 0 [ 3543.185294][T31122] shmem_thp 0 [ 3543.185294][T31122] inactive_anon 90112 [ 3543.185294][T31122] active_anon 307200 [ 3543.185294][T31122] inactive_file 0 [ 3543.185294][T31122] active_file 0 [ 3543.185294][T31122] unevictable 0 [ 3543.185294][T31122] slab_reclaimable 16792 [ 3543.185294][T31122] slab_unreclaimable 308521824 [ 3543.210017][T31104] device bridge_slave_1 left promiscuous mode [ 3543.285690][T31122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31122,uid=0 [ 3543.303547][T31104] bridge3947: port 1(bridge_slave_1) entered disabled state 22:17:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000008100000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000034a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3543.311008][T31122] Memory cgroup out of memory: Killed process 31122 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3543.344868][T31104] bridge3948: port 1(bridge_slave_1) entered blocking state 22:17:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000900", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3543.364330][T31104] bridge3948: port 1(bridge_slave_1) entered disabled state [ 3543.375348][T31104] device bridge_slave_1 entered promiscuous mode [ 3543.397687][T31109] bridge4263: port 1(veth0_to_hsr) entered disabled state [ 3543.444263][T31109] bridge4265: port 1(veth0_to_hsr) entered blocking state [ 3543.459076][T31129] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3543.462324][T31109] bridge4265: port 1(veth0_to_hsr) entered disabled state [ 3543.470995][T31129] CPU: 0 PID: 31129 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3543.487104][T31129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3543.497288][T31129] Call Trace: [ 3543.500601][T31129] [ 3543.503555][T31129] dump_stack_lvl+0xd1/0x138 [ 3543.508207][T31129] dump_header+0x10b/0x85f [ 3543.512698][T31129] oom_kill_process.cold+0x10/0x15 [ 3543.514696][T31108] device bridge_slave_1 left promiscuous mode [ 3543.517823][T31129] out_of_memory+0x35c/0x14a0 [ 3543.528632][T31129] ? find_held_lock+0x2d/0x110 [ 3543.533447][T31129] ? oom_killer_disable+0x280/0x280 [ 3543.533495][T31108] bridge4264: port 1(bridge_slave_1) entered disabled state [ 3543.538687][T31129] ? find_held_lock+0x2d/0x110 [ 3543.538737][T31129] mem_cgroup_out_of_memory+0x206/0x270 [ 3543.556359][T31129] ? mem_cgroup_margin+0x130/0x130 [ 3543.561530][T31129] ? lock_downgrade+0x6e0/0x6e0 [ 3543.566421][T31129] try_charge_memcg+0xefb/0x12f0 [ 3543.571392][T31129] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3543.577402][T31129] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3543.583127][T31129] ? lock_downgrade+0x6e0/0x6e0 [ 3543.587993][T31129] ? lock_downgrade+0x6e0/0x6e0 [ 3543.592888][T31129] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3543.598490][T31129] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3543.604703][T31129] copy_process+0x4e3/0x7520 [ 3543.609357][T31129] ? __lock_acquire+0xbc3/0x56d0 [ 3543.614359][T31129] ? __cleanup_sighand+0xb0/0xb0 [ 3543.619436][T31129] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3543.625454][T31129] ? psi_memstall_leave+0x174/0x250 [ 3543.630774][T31129] kernel_clone+0xeb/0x990 [ 3543.635390][T31129] ? create_io_thread+0xf0/0xf0 [ 3543.640313][T31129] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3543.646636][T31129] ? lock_downgrade+0x6e0/0x6e0 [ 3543.651521][T31129] __do_sys_clone+0xba/0x100 [ 3543.656143][T31129] ? kernel_clone+0x990/0x990 [ 3543.660865][T31129] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3543.666822][T31129] do_syscall_64+0x39/0xb0 [ 3543.671344][T31129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.677271][T31129] RIP: 0033:0x7f7e1f28d4f1 [ 3543.681727][T31129] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3543.701380][T31129] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3543.709841][T31129] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3543.717838][T31129] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3543.725833][T31129] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3543.733859][T31129] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3543.742117][T31129] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3543.750125][T31129] [ 3543.760056][T31129] memory: usage 307172kB, limit 307200kB, failcnt 7642 [ 3543.767679][T31129] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3543.774985][T31129] Memory cgroup stats for /syz5: [ 3543.775241][T31129] anon 81920 [ 3543.775241][T31129] file 315392 [ 3543.775241][T31129] kernel 314146816 [ 3543.775241][T31129] kernel_stack 32768 [ 3543.775241][T31129] pagetables 69632 [ 3543.775241][T31129] sec_pagetables 0 [ 3543.775241][T31129] percpu 5436000 [ 3543.775241][T31129] sock 0 [ 3543.775241][T31129] vmalloc 8192 [ 3543.775241][T31129] shmem 315392 [ 3543.775241][T31129] zswap 0 [ 3543.775241][T31129] zswapped 0 [ 3543.775241][T31129] file_mapped 290816 [ 3543.775241][T31129] file_dirty 0 [ 3543.775241][T31129] file_writeback 0 [ 3543.775241][T31129] swapcached 0 [ 3543.775241][T31129] anon_thp 0 [ 3543.775241][T31129] file_thp 0 [ 3543.775241][T31129] shmem_thp 0 [ 3543.775241][T31129] inactive_anon 49152 [ 3543.775241][T31129] active_anon 307200 [ 3543.775241][T31129] inactive_file 0 [ 3543.775241][T31129] active_file 0 [ 3543.775241][T31129] unevictable 0 [ 3543.775241][T31129] slab_reclaimable 16792 [ 3543.775241][T31129] slab_unreclaimable 308521824 [ 3543.776391][T31108] bridge4265: port 2(bridge_slave_1) entered blocking state [ 3543.780585][T31129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3543.878470][T31108] bridge4265: port 2(bridge_slave_1) entered disabled state [ 3543.882447][T31129] ,cpuset= 22:17:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000520300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000004c000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3543.890472][T31108] device bridge_slave_1 entered promiscuous mode [ 3543.904360][T31129] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31129,uid=0 [ 3543.926775][T31129] Memory cgroup out of memory: Killed process 31129 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3543.995090][T31113] bridge4382: port 1(veth0_to_hsr) entered disabled state [ 3544.011846][T31113] bridge4383: port 1(veth0_to_hsr) entered blocking state [ 3544.028379][T31113] bridge4383: port 1(veth0_to_hsr) entered disabled state [ 3544.080031][T31138] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3544.103812][T31138] CPU: 1 PID: 31138 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3544.112243][T31116] device veth0_to_hsr left promiscuous mode [ 3544.114369][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3544.114388][T31138] Call Trace: [ 3544.114397][T31138] [ 3544.114409][T31138] dump_stack_lvl+0xd1/0x138 [ 3544.114477][T31138] dump_header+0x10b/0x85f [ 3544.114512][T31138] oom_kill_process.cold+0x10/0x15 [ 3544.121295][T31116] bridge3690: port 1(veth0_to_hsr) entered disabled state [ 3544.130457][T31138] out_of_memory+0x35c/0x14a0 [ 3544.130513][T31138] ? find_held_lock+0x2d/0x110 [ 3544.130556][T31138] ? oom_killer_disable+0x280/0x280 [ 3544.130598][T31138] ? find_held_lock+0x2d/0x110 [ 3544.130639][T31138] mem_cgroup_out_of_memory+0x206/0x270 [ 3544.183090][T31138] ? mem_cgroup_margin+0x130/0x130 [ 3544.188244][T31138] ? lock_downgrade+0x6e0/0x6e0 [ 3544.193125][T31138] try_charge_memcg+0xefb/0x12f0 [ 3544.198114][T31138] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3544.204103][T31138] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3544.209876][T31138] ? lock_downgrade+0x6e0/0x6e0 [ 3544.214785][T31138] ? lock_downgrade+0x6e0/0x6e0 [ 3544.219676][T31138] __memcg_kmem_charge_page+0x16e/0x3b0 [ 3544.225231][T31138] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3544.231412][T31138] copy_process+0x4e3/0x7520 [ 3544.236052][T31138] ? __lock_acquire+0xbc3/0x56d0 [ 3544.241037][T31138] ? __cleanup_sighand+0xb0/0xb0 [ 3544.245978][T31138] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3544.251990][T31138] ? psi_memstall_leave+0x174/0x250 [ 3544.257233][T31138] kernel_clone+0xeb/0x990 [ 3544.261686][T31138] ? create_io_thread+0xf0/0xf0 [ 3544.266559][T31138] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 3544.272845][T31138] ? lock_downgrade+0x6e0/0x6e0 [ 3544.278015][T31138] __do_sys_clone+0xba/0x100 [ 3544.282615][T31138] ? kernel_clone+0x990/0x990 [ 3544.287307][T31138] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3544.293222][T31138] do_syscall_64+0x39/0xb0 [ 3544.297676][T31138] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.303610][T31138] RIP: 0033:0x7f7e1f28d4f1 [ 3544.308050][T31138] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3544.327670][T31138] RSP: 002b:00007ffc49b30988 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3544.336098][T31138] RAX: ffffffffffffffda RBX: 00007f7e1ff22700 RCX: 00007f7e1f28d4f1 [ 3544.344072][T31138] RDX: 00007f7e1ff229d0 RSI: 00007f7e1ff222f0 RDI: 00000000003d0f00 [ 3544.352047][T31138] RBP: 00007ffc49b30bd0 R08: 00007f7e1ff22700 R09: 00007f7e1ff22700 [ 3544.360037][T31138] R10: 00007f7e1ff229d0 R11: 0000000000000206 R12: 00007ffc49b30a3e [ 3544.368084][T31138] R13: 00007ffc49b30a3f R14: 00007f7e1ff22300 R15: 0000000000022000 [ 3544.376119][T31138] [ 3544.395924][T31116] bridge3691: port 1(veth0_to_hsr) entered blocking state [ 3544.403290][T31138] memory: usage 307180kB, limit 307200kB, failcnt 7755 [ 3544.403316][T31138] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3544.403332][T31138] Memory cgroup stats for /syz5: [ 3544.403541][T31138] anon 81920 [ 3544.403541][T31138] file 315392 [ 3544.403541][T31138] kernel 314155008 [ 3544.403541][T31138] kernel_stack 32768 [ 3544.403541][T31138] pagetables 69632 [ 3544.403541][T31138] sec_pagetables 0 [ 3544.403541][T31138] percpu 5436000 [ 3544.403541][T31138] sock 0 [ 3544.403541][T31138] vmalloc 8192 [ 3544.403541][T31138] shmem 315392 [ 3544.403541][T31138] zswap 0 [ 3544.403541][T31138] zswapped 0 [ 3544.403541][T31138] file_mapped 290816 [ 3544.403541][T31138] file_dirty 0 [ 3544.403541][T31138] file_writeback 0 [ 3544.403541][T31138] swapcached 0 [ 3544.403541][T31138] anon_thp 0 [ 3544.403541][T31138] file_thp 0 [ 3544.403541][T31138] shmem_thp 0 [ 3544.403541][T31138] inactive_anon 49152 [ 3544.403541][T31138] active_anon 307200 22:17:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000352000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3544.403541][T31138] inactive_file 0 [ 3544.403541][T31138] active_file 0 [ 3544.403541][T31138] unevictable 0 [ 3544.403541][T31138] slab_reclaimable 16792 [ 3544.403541][T31138] slab_unreclaimable 308521824 [ 3544.403612][T31138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31138,uid=0 [ 3544.403785][T31138] Memory cgroup out of memory: Killed process 31138 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3544.562070][T31116] bridge3691: port 1(veth0_to_hsr) entered disabled state [ 3544.565001][T31142] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 3544.586455][T31142] CPU: 0 PID: 31142 Comm: syz-executor.5 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3544.594812][T31116] device veth0_to_hsr entered promiscuous mode [ 3544.596921][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3544.596941][T31142] Call Trace: [ 3544.596950][T31142] [ 3544.596962][T31142] dump_stack_lvl+0xd1/0x138 [ 3544.597009][T31142] dump_header+0x10b/0x85f [ 3544.628942][T31142] oom_kill_process.cold+0x10/0x15 [ 3544.634114][T31142] out_of_memory+0x35c/0x14a0 [ 3544.634943][T31119] device bridge_slave_1 left promiscuous mode [ 3544.638838][T31142] ? find_held_lock+0x2d/0x110 [ 3544.638885][T31142] ? oom_killer_disable+0x280/0x280 [ 3544.638934][T31142] ? find_held_lock+0x2d/0x110 [ 3544.638977][T31142] mem_cgroup_out_of_memory+0x206/0x270 [ 3544.662158][T31119] bridge4382: port 2(bridge_slave_1) entered disabled state [ 3544.666242][T31142] ? mem_cgroup_margin+0x130/0x130 [ 3544.666291][T31142] ? lock_downgrade+0x6e0/0x6e0 [ 3544.666340][T31142] try_charge_memcg+0xefb/0x12f0 [ 3544.666379][T31142] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3544.694665][T31142] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3544.700429][T31142] ? lock_downgrade+0x6e0/0x6e0 [ 3544.705321][T31142] obj_cgroup_charge+0x2af/0x5e0 [ 3544.710381][T31142] kmem_cache_alloc_lru+0x145/0x760 [ 3544.715596][T31142] ? ext4_alloc_inode+0x28/0x680 [ 3544.720641][T31142] ? ext4_free_in_core_inode+0x70/0x70 [ 3544.726154][T31142] ext4_alloc_inode+0x28/0x680 [ 3544.730937][T31142] ? ext4_free_in_core_inode+0x70/0x70 [ 3544.736422][T31142] alloc_inode+0x61/0x230 [ 3544.740821][T31142] new_inode+0x2b/0x280 [ 3544.745357][T31142] __ext4_new_inode+0x399/0x57d0 [ 3544.750328][T31142] ? __kmem_cache_free+0xaf/0x3b0 [ 3544.755379][T31142] ? tomoyo_path_perm+0x16d/0x430 [ 3544.760490][T31142] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 3544.766066][T31142] ? ext4_lookup+0xcb/0x700 [ 3544.770719][T31142] ext4_symlink+0x5ac/0xa00 [ 3544.775256][T31142] ? d_alloc+0x1c0/0x240 [ 3544.779522][T31142] ? ext4_mknod+0x4f0/0x4f0 [ 3544.784042][T31142] ? from_kgid+0x8b/0xd0 [ 3544.788399][T31142] ? from_kuid_munged+0x130/0x130 [ 3544.793451][T31142] ? generic_permission+0x28f/0x7a0 [ 3544.798685][T31142] ? bpf_lsm_inode_permission+0x9/0x10 [ 3544.804174][T31142] ? bpf_lsm_inode_symlink+0x9/0x10 [ 3544.809561][T31142] vfs_symlink+0x369/0x5c0 [ 3544.814007][T31142] do_symlinkat+0x250/0x2c0 [ 3544.818544][T31142] ? __ia32_sys_unlink+0x110/0x110 [ 3544.823685][T31142] ? getname_flags.part.0+0x1dd/0x4f0 [ 3544.829096][T31142] __x64_sys_symlinkat+0x97/0xc0 [ 3544.834069][T31142] do_syscall_64+0x39/0xb0 [ 3544.838773][T31142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.844690][T31142] RIP: 0033:0x7f7e1f28ba07 [ 3544.849119][T31142] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3544.869963][T31142] RSP: 002b:00007ffc49b30c98 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 3544.878393][T31142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e1f28ba07 [ 3544.886377][T31142] RDX: 00007f7e1f2e7bab RSI: 00000000ffffff9c RDI: 00007ffc49b30d60 22:17:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000000e0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3544.894360][T31142] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc49b30b30 [ 3544.902351][T31142] R10: 00007ffc49b309e7 R11: 0000000000000202 R12: 0000000000000001 [ 3544.910340][T31142] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc49b30d60 [ 3544.918343][T31142] [ 3544.929954][T31142] memory: usage 307164kB, limit 307200kB, failcnt 7800 [ 3544.939613][T31142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3544.959386][T31142] Memory cgroup stats for /syz5: [ 3544.959999][T31142] anon 69632 [ 3544.959999][T31142] file 315392 [ 3544.959999][T31142] kernel 314101760 [ 3544.959999][T31142] kernel_stack 32768 [ 3544.959999][T31142] pagetables 57344 [ 3544.959999][T31142] sec_pagetables 0 [ 3544.959999][T31142] percpu 5436000 [ 3544.959999][T31142] sock 0 [ 3544.959999][T31142] vmalloc 8192 [ 3544.959999][T31142] shmem 315392 [ 3544.959999][T31142] zswap 0 [ 3544.959999][T31142] zswapped 0 [ 3544.959999][T31142] file_mapped 290816 [ 3544.959999][T31142] file_dirty 0 [ 3544.959999][T31142] file_writeback 0 [ 3544.959999][T31142] swapcached 0 [ 3544.959999][T31142] anon_thp 0 [ 3544.959999][T31142] file_thp 0 [ 3544.959999][T31142] shmem_thp 0 [ 3544.959999][T31142] inactive_anon 77824 [ 3544.959999][T31142] active_anon 307200 [ 3544.959999][T31142] inactive_file 0 [ 3544.959999][T31142] active_file 0 [ 3544.959999][T31142] unevictable 0 [ 3544.959999][T31142] slab_reclaimable 13656 [ 3544.959999][T31142] slab_unreclaimable 308513464 22:17:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000022", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3544.960764][T31119] bridge4383: port 2(bridge_slave_1) entered blocking state [ 3544.974142][T31142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3545.064466][T31119] bridge4383: port 2(bridge_slave_1) entered disabled state [ 3545.080924][T31119] device bridge_slave_1 entered promiscuous mode [ 3545.163796][T31130] bridge4299: port 1(veth0_to_hsr) entered disabled state [ 3545.165519][T31142] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5106,uid=0 [ 3545.198720][T31142] Memory cgroup out of memory: Killed process 5106 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3545.221228][T31130] bridge4301: port 1(veth0_to_hsr) entered blocking state [ 3545.228756][T31130] bridge4301: port 1(veth0_to_hsr) entered disabled state [ 3545.261188][T31132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3545.330791][T31133] device bridge_slave_1 left promiscuous mode [ 3545.339611][T31133] bridge4300: port 1(bridge_slave_1) entered disabled state 22:17:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000038200000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3545.373788][T31133] bridge4301: port 2(bridge_slave_1) entered blocking state [ 3545.383688][T31133] bridge4301: port 2(bridge_slave_1) entered disabled state [ 3545.393584][T31133] device bridge_slave_1 entered promiscuous mode [ 3545.407203][T31134] device bridge_slave_1 left promiscuous mode [ 3545.419720][T31134] bridge3948: port 1(bridge_slave_1) entered disabled state 22:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3545.448464][T31134] bridge3949: port 1(bridge_slave_1) entered blocking state [ 3545.459548][T31134] bridge3949: port 1(bridge_slave_1) entered disabled state [ 3545.468935][T31134] device bridge_slave_1 entered promiscuous mode [ 3545.536410][T31139] bridge4265: port 1(veth0_to_hsr) entered disabled state [ 3545.546046][T31139] bridge4266: port 1(veth0_to_hsr) entered blocking state [ 3545.554867][T31139] bridge4266: port 1(veth0_to_hsr) entered disabled state [ 3545.574791][T31140] device bridge_slave_1 left promiscuous mode [ 3545.583771][T31140] bridge4265: port 2(bridge_slave_1) entered disabled state 22:17:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000005a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3545.616373][T31140] bridge4266: port 2(bridge_slave_1) entered blocking state [ 3545.624347][T31140] bridge4266: port 2(bridge_slave_1) entered disabled state [ 3545.634103][T31140] device bridge_slave_1 entered promiscuous mode [ 3545.739270][T31147] device veth0_to_hsr left promiscuous mode [ 3545.745444][T31147] bridge3691: port 1(veth0_to_hsr) entered disabled state [ 3545.763684][T31147] bridge3692: port 1(veth0_to_hsr) entered blocking state [ 3545.771095][T31147] bridge3692: port 1(veth0_to_hsr) entered disabled state [ 3545.783081][T31147] device veth0_to_hsr entered promiscuous mode [ 3545.796718][T31148] bridge4383: port 1(veth0_to_hsr) entered disabled state [ 3545.806453][T31148] bridge4384: port 1(veth0_to_hsr) entered blocking state [ 3545.814641][T31148] bridge4384: port 1(veth0_to_hsr) entered disabled state 22:17:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000042110000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3545.842591][T31149] bridge3692: port 2(bridge_slave_1) entered blocking state [ 3545.853238][T31149] bridge3692: port 2(bridge_slave_1) entered disabled state [ 3545.862487][T31149] device bridge_slave_1 entered promiscuous mode [ 3545.876396][T31151] device bridge_slave_1 left promiscuous mode [ 3545.883399][T31151] bridge4383: port 2(bridge_slave_1) entered disabled state [ 3545.913151][T31151] bridge4384: port 2(bridge_slave_1) entered blocking state [ 3545.920744][T31151] bridge4384: port 2(bridge_slave_1) entered disabled state [ 3545.930142][T31151] device bridge_slave_1 entered promiscuous mode 22:17:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000222", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3546.040609][T31156] bridge4301: port 1(veth0_to_hsr) entered disabled state [ 3546.061282][T31156] bridge4302: port 1(veth0_to_hsr) entered blocking state [ 3546.068533][T31156] bridge4302: port 1(veth0_to_hsr) entered disabled state [ 3546.098557][T31158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:17:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000000000035a000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3546.149496][T31172] device bridge_slave_1 left promiscuous mode [ 3546.155995][T31172] bridge4384: port 2(bridge_slave_1) entered disabled state [ 3546.197050][T31159] device bridge_slave_1 left promiscuous mode [ 3546.208557][T31159] bridge4301: port 2(bridge_slave_1) entered disabled state [ 3546.253173][T31159] bridge4302: port 2(bridge_slave_1) entered blocking state [ 3546.276027][T31159] bridge4302: port 2(bridge_slave_1) entered disabled state [ 3546.300733][T31159] device bridge_slave_1 entered promiscuous mode 22:17:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400000000ffffa88800000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3546.339624][T31160] device bridge_slave_1 left promiscuous mode [ 3546.345958][T31160] bridge3949: port 1(bridge_slave_1) entered disabled state [ 3546.376253][T31160] bridge3950: port 1(bridge_slave_1) entered blocking state 22:17:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3546.389734][T31160] bridge3950: port 1(bridge_slave_1) entered disabled state [ 3546.403619][T31160] device bridge_slave_1 entered promiscuous mode [ 3546.480008][T31163] bridge4266: port 1(veth0_to_hsr) entered disabled state [ 3546.494968][T31163] bridge4267: port 1(veth0_to_hsr) entered blocking state [ 3546.509395][T31163] bridge4267: port 1(veth0_to_hsr) entered disabled state 22:17:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000060000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3546.537384][T31164] device bridge_slave_1 left promiscuous mode [ 3546.544441][T31164] bridge4266: port 2(bridge_slave_1) entered disabled state [ 3546.565217][T31164] bridge4267: port 2(bridge_slave_1) entered blocking state [ 3546.582291][T31164] bridge4267: port 2(bridge_slave_1) entered disabled state [ 3546.598335][T31164] device bridge_slave_1 entered promiscuous mode 22:17:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000620300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3546.744840][T31168] device veth0_to_hsr left promiscuous mode [ 3546.764787][T31168] bridge3692: port 1(veth0_to_hsr) entered disabled state [ 3546.781827][T31168] bridge3693: port 1(veth0_to_hsr) entered blocking state [ 3546.806406][T31168] bridge3693: port 1(veth0_to_hsr) entered disabled state [ 3546.848170][T31168] device veth0_to_hsr entered promiscuous mode [ 3546.985105][T31170] device bridge_slave_1 left promiscuous mode [ 3546.993058][T31170] bridge3692: port 2(bridge_slave_1) entered disabled state [ 3547.038829][T31170] bridge3693: port 2(bridge_slave_1) entered blocking state [ 3547.063722][T31170] bridge3693: port 2(bridge_slave_1) entered disabled state [ 3547.078893][T31170] device bridge_slave_1 entered promiscuous mode [ 3547.095285][T31171] bridge4384: port 1(veth0_to_hsr) entered disabled state [ 3547.127811][T31171] bridge4385: port 1(veth0_to_hsr) entered blocking state [ 3547.148292][T31171] bridge4385: port 1(veth0_to_hsr) entered disabled state [ 3547.280731][T31175] bridge4302: port 1(veth0_to_hsr) entered disabled state [ 3547.313303][T31175] bridge4303: port 1(veth0_to_hsr) entered blocking state [ 3547.330113][T31175] bridge4303: port 1(veth0_to_hsr) entered disabled state [ 3547.372532][T31177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3547.469746][T31178] device bridge_slave_1 left promiscuous mode [ 3547.477420][T31178] bridge4302: port 2(bridge_slave_1) entered disabled state 22:17:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000025120000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 22:17:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000322", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3547.521971][T31178] bridge4303: port 2(bridge_slave_1) entered blocking state [ 3547.538958][T31178] bridge4303: port 2(bridge_slave_1) entered disabled state [ 3547.558598][T31178] device bridge_slave_1 entered promiscuous mode 22:17:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000038a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3547.595352][T31179] device bridge_slave_1 left promiscuous mode [ 3547.603742][T31179] bridge3950: port 1(bridge_slave_1) entered disabled state [ 3547.644328][T31179] bridge3951: port 1(bridge_slave_1) entered blocking state [ 3547.677741][T31179] bridge3951: port 1(bridge_slave_1) entered disabled state [ 3547.703403][T31179] device bridge_slave_1 entered promiscuous mode 22:17:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000e00", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3547.835589][T31182] bridge4267: port 1(veth0_to_hsr) entered disabled state [ 3547.852016][T31182] bridge4268: port 1(veth0_to_hsr) entered blocking state [ 3547.862284][T31182] bridge4268: port 1(veth0_to_hsr) entered disabled state [ 3547.886636][T31183] device bridge_slave_1 left promiscuous mode [ 3547.893361][T31183] bridge4267: port 2(bridge_slave_1) entered disabled state [ 3547.924577][T31183] bridge4268: port 2(bridge_slave_1) entered blocking state [ 3547.939611][T31183] bridge4268: port 2(bridge_slave_1) entered disabled state [ 3547.955477][T31183] device bridge_slave_1 entered promiscuous mode 22:17:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000006a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3548.053868][T17369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3548.239320][T31188] device veth0_to_hsr left promiscuous mode [ 3548.245500][T31188] bridge3693: port 1(veth0_to_hsr) entered disabled state [ 3548.302709][T31188] bridge3694: port 1(veth0_to_hsr) entered blocking state [ 3548.319365][T31188] bridge3694: port 1(veth0_to_hsr) entered disabled state [ 3548.343727][T31188] device veth0_to_hsr entered promiscuous mode [ 3548.366114][T31189] bridge4385: port 1(veth0_to_hsr) entered disabled state [ 3548.428004][T31189] bridge4386: port 1(veth0_to_hsr) entered blocking state [ 3548.451546][T31189] bridge4386: port 1(veth0_to_hsr) entered disabled state [ 3548.589034][T31192] device bridge_slave_1 left promiscuous mode [ 3548.597739][T31192] bridge3693: port 2(bridge_slave_1) entered disabled state [ 3548.640835][T31192] bridge3694: port 2(bridge_slave_1) entered blocking state [ 3548.657215][T31192] bridge3694: port 2(bridge_slave_1) entered disabled state [ 3548.676962][T31192] device bridge_slave_1 entered promiscuous mode 22:17:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000000000021a0000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3548.708612][T31193] bridge4386: port 2(bridge_slave_1) entered blocking state [ 3548.722139][T31193] bridge4386: port 2(bridge_slave_1) entered disabled state [ 3548.743258][T31193] device bridge_slave_1 entered promiscuous mode 22:17:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000024", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 3548.794008][T31194] bridge4303: port 1(veth0_to_hsr) entered disabled state [ 3548.830091][T31194] bridge4304: port 1(veth0_to_hsr) entered blocking state [ 3548.851127][T31194] bridge4304: port 1(veth0_to_hsr) entered disabled state [ 3548.918372][T31196] device bridge_slave_1 left promiscuous mode [ 3548.932099][T31196] bridge4303: port 2(bridge_slave_1) entered disabled state [ 3548.980950][T31196] bridge4304: port 2(bridge_slave_1) entered blocking state [ 3548.999156][T31196] bridge4304: port 2(bridge_slave_1) entered disabled state [ 3549.020570][T31196] device bridge_slave_1 entered promiscuous mode 22:17:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000408a00000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3549.052446][T31198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3549.187352][T31199] device bridge_slave_1 left promiscuous mode [ 3549.203674][T31199] bridge3951: port 1(bridge_slave_1) entered disabled state [ 3549.225219][T31220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3549.235826][T31220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3549.245707][T31220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3549.255366][T31220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3549.265905][T31220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3549.274007][T31220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3549.304082][T31199] bridge3952: port 1(bridge_slave_1) entered blocking state [ 3549.323693][T31199] bridge3952: port 1(bridge_slave_1) entered disabled state [ 3549.336809][T31199] device bridge_slave_1 entered promiscuous mode 22:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b0001006272696467650000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) [ 3549.440538][T31202] bridge4268: port 1(veth0_to_hsr) entered disabled state [ 3549.451294][T31202] bridge4269: port 1(veth0_to_hsr) entered blocking state [ 3549.458771][T31202] bridge4269: port 1(veth0_to_hsr) entered disabled state [ 3549.490712][T17369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3549.516766][T31203] device bridge_slave_1 left promiscuous mode [ 3549.523728][T31203] bridge4268: port 2(bridge_slave_1) entered disabled state 22:17:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0008000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001040000007a0300000000000000", @ANYRES32=0x0, @ANYBLOB="04a00400000000e9140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) [ 3549.544975][T31203] bridge4269: port 2(bridge_slave_1) entered blocking state [ 3549.557162][T31203] bridge4269: port 2(bridge_slave_1) entered disabled state [ 3549.566901][T31203] device bridge_slave_1 entered promiscuous mode [ 3549.699659][T31207] device veth0_to_hsr left promiscuous mode [ 3549.706426][T31207] bridge3694: port 1(veth0_to_hsr) entered disabled state [ 3549.720644][T31207] bridge3695: port 1(veth0_to_hsr) entered blocking state [ 3549.731371][T31207] bridge3695: port 1(veth0_to_hsr) entered disabled state [ 3549.745070][T31207] device veth0_to_hsr entered promiscuous mode [ 3549.760845][T31209] device bridge_slave_1 left promiscuous mode [ 3549.767829][T31209] bridge3694: port 2(bridge_slave_1) entered disabled state [ 3549.788057][T31209] bridge3695: port 2(bridge_slave_1) entered blocking state [ 3549.795774][T31209] bridge3695: port 2(bridge_slave_1) entered disabled state [ 3549.806550][T31209] device bridge_slave_1 entered promiscuous mode [ 3549.895342][T31211] bridge4386: port 1(veth0_to_hsr) entered disabled state [ 3549.926787][T31211] bridge4387: port 1(veth0_to_hsr) entered blocking state [ 3549.948678][T31211] bridge4387: port 1(veth0_to_hsr) entered disabled state [ 3549.987752][T31212] device bridge_slave_1 left promiscuous mode [ 3549.994582][T31212] bridge4386: port 2(bridge_slave_1) entered disabled state [ 3550.016781][T31212] bridge4387: port 2(bridge_slave_1) entered blocking state [ 3550.025270][T31212] bridge4387: port 2(bridge_slave_1) entered disabled state [ 3550.035079][T31212] device bridge_slave_1 entered promiscuous mode [ 3550.113935][T31216] bridge4304: port 1(veth0_to_hsr) entered disabled state [ 3550.132500][T31216] bridge4305: port 1(veth0_to_hsr) entered blocking state [ 3550.140162][T31216] bridge4305: port 1(veth0_to_hsr) entered disabled state [ 3550.175169][T31221] device bridge_slave_1 left promiscuous mode [ 3550.189429][T31221] bridge4304: port 2(bridge_slave_1) entered disabled state [ 3550.228237][T31221] bridge4305: port 2(bridge_slave_1) entered blocking state [ 3550.238845][T31221] bridge4305: port 2(bridge_slave_1) entered disabled state [ 3550.248571][T31221] device bridge_slave_1 entered promiscuous mode [ 3550.281028][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3550.368466][T31225] device bridge_slave_1 left promiscuous mode [ 3550.379585][T31225] bridge3952: port 1(bridge_slave_1) entered disabled state [ 3550.412664][T31225] bridge3953: port 1(bridge_slave_1) entered blocking state [ 3550.434116][T31225] bridge3953: port 1(bridge_slave_1) entered disabled state [ 3550.448105][T31225] device bridge_slave_1 entered promiscuous mode [ 3550.495697][T17369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.587289][T31228] bridge4269: port 1(veth0_to_hsr) entered disabled state [ 3550.601757][T31228] bridge4270: port 1(veth0_to_hsr) entered blocking state [ 3550.615398][T31228] bridge4270: port 1(veth0_to_hsr) entered disabled state [ 3550.660105][T31229] device bridge_slave_1 left promiscuous mode [ 3550.666428][T31229] bridge4269: port 2(bridge_slave_1) entered disabled state [ 3550.693273][T31229] bridge4270: port 2(bridge_slave_1) entered blocking state [ 3550.704694][T31229] bridge4270: port 2(bridge_slave_1) entered disabled state [ 3550.732148][T31229] device bridge_slave_1 entered promiscuous mode [ 3550.758022][T17369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3551.359643][T31220] Bluetooth: hci0: command 0x0409 tx timeout [ 3551.523202][T31217] chnl_net:caif_netlink_parms(): no params data found [ 3551.841089][T31217] bridge0: port 1(bridge_slave_0) entered blocking state [ 3551.848254][T31217] bridge0: port 1(bridge_slave_0) entered disabled state [ 3551.888264][T31217] device bridge_slave_0 entered promiscuous mode [ 3551.932626][T31217] bridge0: port 2(bridge_slave_1) entered blocking state [ 3551.940380][T31217] bridge0: port 2(bridge_slave_1) entered disabled state [ 3551.961838][T31217] device bridge_slave_1 entered promiscuous mode [ 3552.280238][T31217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3552.469685][T31217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3552.667650][T17369] device bridge_slave_1 left promiscuous mode [ 3552.676067][T17369] bridge4586: port 2(bridge_slave_1) entered disabled state [ 3552.686623][T17369] bridge4586: port 1(veth0_to_hsr) entered disabled state [ 3553.429412][T31220] Bluetooth: hci0: command 0x041b tx timeout [ 3555.509453][T31220] Bluetooth: hci0: command 0x040f tx timeout [ 3555.549897][T17369] device hsr_slave_0 left promiscuous mode [ 3555.556725][T17369] device hsr_slave_1 left promiscuous mode [ 3555.567268][T17369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3555.577962][T17369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3555.594470][T17369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3555.604542][T17369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3555.623980][T17369] device bridge_slave_0 left promiscuous mode [ 3555.632157][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 3556.022385][T17369] device veth1_macvtap left promiscuous mode [ 3556.028878][T17369] device veth0_macvtap left promiscuous mode [ 3556.039348][T17369] device veth1_vlan left promiscuous mode [ 3556.045451][T17369] device veth0_vlan left promiscuous mode [ 3557.589496][T31220] Bluetooth: hci0: command 0x0419 tx timeout [ 3573.351977][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.358538][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3615.100495][T31220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3615.114620][T31220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3615.125871][T31220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3615.133730][T31220] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3615.143162][T31220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3617.189719][ T5119] Bluetooth: hci6: command 0x0409 tx timeout [ 3619.269648][ T5119] Bluetooth: hci6: command 0x041b tx timeout [ 3621.349487][ T5119] Bluetooth: hci6: command 0x040f tx timeout [ 3623.441654][ T5119] Bluetooth: hci6: command 0x0419 tx timeout [ 3634.801178][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3634.807546][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3672.709378][T31220] Bluetooth: hci0: command 0x0406 tx timeout [ 3681.438973][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3681.450388][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3681.458728][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3681.467166][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3681.476044][ T5119] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3681.484013][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3683.509874][T31220] Bluetooth: hci7: command 0x0409 tx timeout [ 3685.589532][T31220] Bluetooth: hci7: command 0x041b tx timeout [ 3687.669341][ T5119] Bluetooth: hci7: command 0x040f tx timeout [ 3689.749685][ T5119] Bluetooth: hci7: command 0x0419 tx timeout [ 3696.231057][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 3696.237496][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 3700.069779][ T28] INFO: task dhcpcd:4646 blocked for more than 143 seconds. [ 3700.077146][ T28] Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3700.086500][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3700.095854][ T28] task:dhcpcd state:D stack:22928 pid:4646 ppid:4645 flags:0x00000000 [ 3700.105653][ T28] Call Trace: [ 3700.108960][ T28] [ 3700.112246][ T28] __schedule+0xb8a/0x5450 [ 3700.116773][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3700.123208][ T28] ? arch_stack_walk+0x97/0xf0 [ 3700.128522][ T28] ? io_schedule_timeout+0x150/0x150 [ 3700.134021][ T28] ? __mutex_lock+0xa43/0x1360 [ 3700.138843][ T28] schedule+0xde/0x1b0 [ 3700.143275][ T28] schedule_preempt_disabled+0x13/0x20 [ 3700.148815][ T28] __mutex_lock+0xa48/0x1360 [ 3700.153954][ T28] ? netlink_dump+0xbe/0xc50 [ 3700.158572][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3700.164988][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 3700.170271][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3700.176164][ T28] netlink_dump+0xbe/0xc50 [ 3700.180950][ T28] ? netlink_deliver_tap+0xc50/0xc50 [ 3700.186269][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3700.192359][ T28] ? kfree_skbmem+0xef/0x1b0 [ 3700.197016][ T28] netlink_recvmsg+0xbe1/0xe50 [ 3700.202125][ T28] ? netlink_dump+0xc50/0xc50 [ 3700.206878][ T28] ? aa_af_perm+0x240/0x240 [ 3700.211599][ T28] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3700.216945][ T28] ? security_socket_recvmsg+0x93/0xc0 [ 3700.222648][ T28] ? netlink_dump+0xc50/0xc50 [ 3700.227455][ T28] sock_recvmsg+0xe2/0x160 [ 3700.232943][ T28] ____sys_recvmsg+0x210/0x5a0 [ 3700.237843][ T28] ? kernel_recvmsg+0x80/0x80 [ 3700.242709][ T28] ? copy_msghdr_from_user+0xfc/0x150 [ 3700.248124][ T28] ? __copy_msghdr+0x4b0/0x4b0 [ 3700.252986][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3700.257963][ T28] ___sys_recvmsg+0xf2/0x180 [ 3700.262663][ T28] ? copy_msghdr_from_user+0x150/0x150 [ 3700.268152][ T28] ? __sys_sendto+0x263/0x340 [ 3700.272963][ T28] ? __fget_light+0x20a/0x270 [ 3700.278122][ T28] __sys_recvmsg+0xf4/0x1c0 [ 3700.282802][ T28] ? __sys_recvmsg_sock+0x50/0x50 [ 3700.288088][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3700.295349][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3700.304201][ T28] do_syscall_64+0x39/0xb0 [ 3700.308650][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3700.319533][ T28] RIP: 0033:0x7f8e55de0003 [ 3700.324204][ T28] RSP: 002b:00007fff3b3bf908 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3700.333060][ T28] RAX: ffffffffffffffda RBX: 00007fff3b3c0a40 RCX: 00007f8e55de0003 [ 3700.341170][ T28] RDX: 0000000000000000 RSI: 00007fff3b3c0960 RDI: 0000000000000010 [ 3700.349170][ T28] RBP: 00007fff3b3c09d0 R08: 00007fff3b3c0944 R09: 000000000000000c [ 3700.357492][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3b3c0960 [ 3700.365593][ T28] R13: 00007fff3b3c0944 R14: 00007fff3b3c0950 R15: 00007fff3b3bf910 [ 3700.373657][ T28] [ 3700.376729][ T28] INFO: task kworker/0:8:5197 blocked for more than 143 seconds. [ 3700.384606][ T28] Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3700.392475][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3700.403252][ T28] task:kworker/0:8 state:D stack:27352 pid:5197 ppid:2 flags:0x00004000 [ 3700.412654][ T28] Workqueue: events switchdev_deferred_process_work [ 3700.419844][ T28] Call Trace: [ 3700.423142][ T28] [ 3700.426162][ T28] __schedule+0xb8a/0x5450 [ 3700.430731][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 3700.436218][ T28] ? io_schedule_timeout+0x150/0x150 [ 3700.441665][ T28] ? mark_held_locks+0x9f/0xe0 [ 3700.446465][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3700.451544][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 3700.456779][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3700.462125][ T28] schedule+0xde/0x1b0 [ 3700.466222][ T28] schedule_preempt_disabled+0x13/0x20 [ 3700.471927][ T28] __mutex_lock+0xa48/0x1360 [ 3700.476576][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 3700.482799][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3700.488400][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 3700.493395][ T28] switchdev_deferred_process_work+0xe/0x20 [ 3700.499468][ T28] process_one_work+0x9bf/0x1710 [ 3700.504476][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3700.511798][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3700.516899][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 3700.522073][ T28] worker_thread+0x669/0x1090 [ 3700.527347][ T28] ? __kthread_parkme+0x163/0x220 [ 3700.532653][ T28] ? process_one_work+0x1710/0x1710 [ 3700.538035][ T28] kthread+0x2e8/0x3a0 [ 3700.542242][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3700.547917][ T28] ret_from_fork+0x1f/0x30 [ 3700.558185][ T28] [ 3700.568389][ T28] INFO: task kworker/0:2:12440 blocked for more than 143 seconds. [ 3700.579024][ T28] Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3700.589388][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3700.598111][ T28] task:kworker/0:2 state:D stack:27320 pid:12440 ppid:2 flags:0x00004000 [ 3700.607411][ T28] Workqueue: events linkwatch_event [ 3700.612748][ T28] Call Trace: [ 3700.616046][ T28] [ 3700.618976][ T28] __schedule+0xb8a/0x5450 [ 3700.624340][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 3700.634038][ T28] ? io_schedule_timeout+0x150/0x150 [ 3700.642095][ T28] ? mark_held_locks+0x9f/0xe0 [ 3700.647206][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3700.652523][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 3700.657751][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3700.664203][ T28] schedule+0xde/0x1b0 [ 3700.668313][ T28] schedule_preempt_disabled+0x13/0x20 [ 3700.674114][ T28] __mutex_lock+0xa48/0x1360 [ 3700.678736][ T28] ? linkwatch_event+0xf/0x70 [ 3700.683847][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3700.690185][ T28] ? lock_release+0x810/0x810 [ 3700.696151][ T28] linkwatch_event+0xf/0x70 [ 3700.701076][ T28] process_one_work+0x9bf/0x1710 [ 3700.706083][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3700.711770][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 3700.716968][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 3700.722147][ T28] worker_thread+0x669/0x1090 [ 3700.726960][ T28] ? process_one_work+0x1710/0x1710 [ 3700.734155][ T28] kthread+0x2e8/0x3a0 [ 3700.738287][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3700.744324][ T28] ret_from_fork+0x1f/0x30 [ 3700.748804][ T28] [ 3700.751919][ T28] INFO: task syz-executor.5:31217 blocked for more than 144 seconds. [ 3700.760109][ T28] Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3700.767668][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3700.776485][ T28] task:syz-executor.5 state:D stack:23792 pid:31217 ppid:1 flags:0x00000004 [ 3700.785972][ T28] Call Trace: [ 3700.789540][ T28] [ 3700.792516][ T28] __schedule+0xb8a/0x5450 [ 3700.796964][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3700.803080][ T28] ? static_obj+0xb2/0xc0 [ 3700.807464][ T28] ? io_schedule_timeout+0x150/0x150 [ 3700.812832][ T28] ? __mutex_lock+0xa43/0x1360 [ 3700.817631][ T28] schedule+0xde/0x1b0 [ 3700.821825][ T28] schedule_preempt_disabled+0x13/0x20 [ 3700.827311][ T28] __mutex_lock+0xa48/0x1360 [ 3700.831990][ T28] ? rtnetlink_rcv_msg+0x3e9/0xca0 [ 3700.837143][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3700.844936][ T28] ? rtnetlink_rcv_msg+0x3b3/0xca0 [ 3700.850300][ T28] rtnetlink_rcv_msg+0x3e9/0xca0 [ 3700.855919][ T28] ? rtnl_getlink+0xae0/0xae0 [ 3700.860783][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3700.866797][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3700.872983][ T28] ? kasan_save_stack+0x35/0x40 [ 3700.877957][ T28] ? kasan_save_stack+0x22/0x40 [ 3700.885364][ T28] netlink_rcv_skb+0x165/0x440 [ 3700.890580][ T28] ? rtnl_getlink+0xae0/0xae0 [ 3700.895334][ T28] ? netlink_ack+0x1370/0x1370 [ 3700.900898][ T28] ? netlink_deliver_tap+0x1b1/0xc50 [ 3700.906236][ T28] netlink_unicast+0x547/0x7f0 [ 3700.911674][ T28] ? netlink_attachskb+0x890/0x890 [ 3700.916936][ T28] ? __virt_addr_valid+0x61/0x2e0 [ 3700.922621][ T28] ? __phys_addr_symbol+0x30/0x70 [ 3700.927736][ T28] ? __check_object_size+0x2e2/0x5a0 [ 3700.933588][ T28] netlink_sendmsg+0x91b/0xe10 [ 3700.938407][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3700.943705][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3700.949488][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3700.954496][ T28] sock_sendmsg+0xde/0x190 [ 3700.958962][ T28] __sys_sendto+0x23a/0x340 [ 3700.965358][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3700.971157][ T28] ? kmem_cache_free+0xee/0x5c0 [ 3700.976085][ T28] ? blkcg_maybe_throttle_current+0x31f/0xc80 [ 3700.982774][ T28] ? task_work_run+0x1fe/0x270 [ 3700.988055][ T28] ? __blkcg_punt_bio_submit+0x1d0/0x1d0 [ 3700.994577][ T28] __x64_sys_sendto+0xe1/0x1b0 [ 3701.001170][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3701.007413][ T28] do_syscall_64+0x39/0xb0 [ 3701.012449][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3701.019017][ T28] RIP: 0033:0x7fb06823e0fc [ 3701.023844][ T28] RSP: 002b:00007ffc3693b4c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3701.032681][ T28] RAX: ffffffffffffffda RBX: 00007fb068ed4620 RCX: 00007fb06823e0fc [ 3701.041074][ T28] RDX: 0000000000000028 RSI: 00007fb068ed4670 RDI: 0000000000000003 [ 3701.049628][ T28] RBP: 0000000000000000 R08: 00007ffc3693b514 R09: 000000000000000c [ 3701.057775][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3701.066130][ T28] R13: 00007fb068ed4670 R14: 0000000000000003 R15: 0000000000000000 [ 3701.076572][ T28] [ 3701.080289][ T28] [ 3701.080289][ T28] Showing all locks held in the system: [ 3701.088862][ T28] 1 lock held by rcu_tasks_kthre/12: [ 3701.097529][ T28] #0: ffffffff8c791030 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 3701.108854][ T28] 1 lock held by rcu_tasks_trace/13: [ 3701.114498][ T28] #0: ffffffff8c790d30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 3701.128347][ T28] 3 locks held by kworker/1:1/26: [ 3701.133662][ T28] #0: ffff888026ec3d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 3701.145058][ T28] #1: ffffc90000a1fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 3701.158758][ T28] #2: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 3701.169913][ T28] 1 lock held by khungtaskd/28: [ 3701.174794][ T28] #0: ffffffff8c791b80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 [ 3701.187535][ T28] 1 lock held by kworker/u4:3/46: [ 3701.193798][ T28] 1 lock held by dhcpcd/4646: [ 3701.198513][ T28] #0: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xbe/0xc50 [ 3701.207841][ T28] 2 locks held by getty/4750: [ 3701.212858][ T28] #0: ffff888027b37098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 3701.223021][ T28] #1: ffffc900015802f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 3701.233653][ T28] 3 locks held by kworker/0:8/5197: [ 3701.238892][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 3701.250913][ T28] #1: ffffc90004fafda8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 3701.261956][ T28] #2: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 3701.272821][ T28] 3 locks held by kworker/0:2/12440: [ 3701.278146][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 3701.288968][ T28] #1: ffffc90008c27da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 3701.301942][ T28] #2: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xf/0x70 [ 3701.311213][ T28] 3 locks held by kworker/0:1/4762: [ 3701.316451][ T28] #0: ffff888026ec3d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 3701.327773][ T28] #1: ffffc9001661fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 3701.341191][ T28] #2: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 3701.352536][ T28] 5 locks held by kworker/u4:2/17369: [ 3701.358118][ T28] #0: ffff8880125df938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 3701.369006][ T28] #1: ffffc90015eafda8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 3701.379371][ T28] #2: ffffffff8e0ace90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb10 [ 3701.388780][ T28] #3: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x92/0x590 [ 3701.399748][ T28] #4: ffffffff8c79c700 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6d0 [ 3701.412673][ T28] 3 locks held by kworker/1:3/26723: [ 3701.420720][ T28] 1 lock held by syz-executor.5/31217: [ 3701.426257][ T28] #0: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 3701.436345][ T28] 1 lock held by syz-executor.5/31260: [ 3701.442165][ T28] #0: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 3701.452129][ T28] 1 lock held by syz-executor.5/31264: [ 3701.457636][ T28] #0: ffffffff8e0c0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 3701.469289][ T28] [ 3701.471651][ T28] ============================================= [ 3701.471651][ T28] [ 3701.489290][ T28] NMI backtrace for cpu 0 [ 3701.493776][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3701.503627][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3701.513828][ T28] Call Trace: [ 3701.517137][ T28] [ 3701.520101][ T28] dump_stack_lvl+0xd1/0x138 [ 3701.524756][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 3701.530106][ T28] nmi_trigger_cpumask_backtrace+0x333/0x3c0 [ 3701.536120][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 3701.541345][ T28] watchdog+0xc75/0xfc0 [ 3701.545538][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3701.551637][ T28] kthread+0x2e8/0x3a0 [ 3701.555724][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3701.561382][ T28] ret_from_fork+0x1f/0x30 [ 3701.565847][ T28] [ 3701.569544][ T28] Sending NMI from CPU 0 to CPUs 1: [ 3701.574885][ C1] NMI backtrace for cpu 1 [ 3701.574897][ C1] CPU: 1 PID: 5167 Comm: kworker/1:4 Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3701.574918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3701.574930][ C1] Workqueue: events_power_efficient gc_worker [ 3701.575044][ C1] RIP: 0010:kasan_check_range+0x12/0x190 [ 3701.575071][ C1] Code: 64 e4 ff ff 89 43 08 5b 5d 41 5c c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 66 0f 1f 00 48 85 f6 0f 84 3c 01 00 00 49 89 f9 41 54 <44> 0f b6 c2 49 01 f1 55 53 0f 82 18 01 00 00 48 b8 ff ff ff ff ff [ 3701.575088][ C1] RSP: 0018:ffffc90004ec79a8 EFLAGS: 00000002 [ 3701.575103][ C1] RAX: 0000000000000007 RBX: 00000000000001f4 RCX: ffffffff81639400 [ 3701.575116][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91341af8 [ 3701.575128][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff91341af8 [ 3701.575140][ C1] R10: fffffbfff2268358 R11: 0000000000000000 R12: 0000000000000000 [ 3701.575152][ C1] R13: ffff88807da50000 R14: ffff88807da50a38 R15: dffffc0000000000 [ 3701.575170][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3701.575189][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3701.575203][ C1] CR2: 00007f1f4f4d4620 CR3: 000000000c48e000 CR4: 00000000003506e0 [ 3701.575215][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3701.575227][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3701.575239][ C1] Call Trace: [ 3701.575244][ C1] [ 3701.575251][ C1] __lock_acquire+0x6f0/0x56d0 [ 3701.575275][ C1] ? mark_lock.part.0+0xee/0x1910 [ 3701.575294][ C1] ? lock_chain_count+0x20/0x20 [ 3701.575311][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3701.575330][ C1] ? __queue_work+0x6d3/0x13b0 [ 3701.575351][ C1] ? lock_chain_count+0x20/0x20 [ 3701.575373][ C1] lock_acquire+0x1e3/0x630 [ 3701.575391][ C1] ? gc_worker+0x21b/0x18d0 [ 3701.575419][ C1] ? lock_release+0x810/0x810 [ 3701.575436][ C1] ? gc_worker+0xad0/0x18d0 [ 3701.575470][ C1] gc_worker+0x24a/0x18d0 [ 3701.575494][ C1] ? gc_worker+0x21b/0x18d0 [ 3701.575525][ C1] ? nf_conntrack_get_tuple_skb+0x460/0x460 [ 3701.575559][ C1] process_one_work+0x9bf/0x1710 [ 3701.575585][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3701.575610][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 3701.575629][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 3701.575658][ C1] worker_thread+0x669/0x1090 [ 3701.575684][ C1] ? process_one_work+0x1710/0x1710 [ 3701.575707][ C1] kthread+0x2e8/0x3a0 [ 3701.575724][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 3701.575744][ C1] ret_from_fork+0x1f/0x30 [ 3701.575775][ C1] [ 3701.850387][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 3701.857295][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-syzkaller-00383-ge471d83e1fa0 #0 [ 3701.867148][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3701.877338][ T28] Call Trace: [ 3701.880642][ T28] [ 3701.883594][ T28] dump_stack_lvl+0xd1/0x138 [ 3701.888232][ T28] panic+0x2cc/0x626 [ 3701.892206][ T28] ? panic_print_sys_info.part.0+0x110/0x110 [ 3701.898234][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 3701.903652][ T28] ? watchdog.cold+0x130/0x158 [ 3701.908461][ T28] watchdog.cold+0x141/0x158 [ 3701.913374][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3701.919422][ T28] kthread+0x2e8/0x3a0 [ 3701.923582][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3701.929269][ T28] ret_from_fork+0x1f/0x30 [ 3701.933748][ T28] [ 3701.936985][ T28] Kernel Offset: disabled [ 3701.941314][ T28] Rebooting in 86400 seconds..