$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2175.133906][T10506] memory: usage 307200kB, limit 307200kB, failcnt 37771 [ 2175.160446][T10506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2175.196062][T10506] Memory cgroup stats for /syz0: [ 2175.196287][T10506] anon 135168 [ 2175.196287][T10506] file 184320 [ 2175.196287][T10506] kernel 314253312 [ 2175.196287][T10506] kernel_stack 65536 [ 2175.196287][T10506] pagetables 77824 [ 2175.196287][T10506] percpu 4839008 [ 2175.196287][T10506] sock 0 [ 2175.196287][T10506] vmalloc 0 [ 2175.196287][T10506] shmem 180224 [ 2175.196287][T10506] zswap 0 [ 2175.196287][T10506] zswapped 0 [ 2175.196287][T10506] file_mapped 180224 [ 2175.196287][T10506] file_dirty 0 [ 2175.196287][T10506] file_writeback 0 [ 2175.196287][T10506] swapcached 0 [ 2175.196287][T10506] anon_thp 0 [ 2175.196287][T10506] file_thp 0 [ 2175.196287][T10506] shmem_thp 0 [ 2175.196287][T10506] inactive_anon 151552 [ 2175.196287][T10506] active_anon 163840 [ 2175.196287][T10506] inactive_file 0 [ 2175.196287][T10506] active_file 4096 [ 2175.196287][T10506] unevictable 0 [ 2175.196287][T10506] slab_reclaimable 18040 [ 2175.196287][T10506] slab_unreclaimable 309219136 [ 2175.196287][T10506] slab 309237176 [ 2175.345833][T10506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2175.345847][T10532] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2175.403210][T10506] ,cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10506,uid=0 [ 2175.404153][T10532] bond683 (uninitialized): Released all slaves 07:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2175.421889][T10506] Memory cgroup out of memory: Killed process 10506 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2175.488383][T10533] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2175.523274][T10533] CPU: 1 PID: 10533 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 07:08:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x6558000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2175.533740][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2175.543812][T10533] Call Trace: [ 2175.545564][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2175.547094][T10533] [ 2175.547106][T10533] dump_stack_lvl+0xcd/0x134 [ 2175.547142][T10533] dump_header+0x10b/0x7f9 [ 2175.547176][T10533] oom_kill_process.cold+0x10/0x15 [ 2175.547210][T10533] out_of_memory+0x358/0x14a0 [ 2175.547244][T10533] ? find_held_lock+0x2d/0x110 [ 2175.547271][T10533] ? oom_killer_disable+0x270/0x270 [ 2175.547304][T10533] ? find_held_lock+0x2d/0x110 [ 2175.547333][T10533] mem_cgroup_out_of_memory+0x206/0x270 [ 2175.547361][T10533] ? mem_cgroup_margin+0x130/0x130 [ 2175.547385][T10533] ? lock_downgrade+0x6e0/0x6e0 [ 2175.547429][T10533] try_charge_memcg+0xf67/0x13f0 [ 2175.547465][T10533] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2175.547501][T10533] ? lock_downgrade+0x6e0/0x6e0 [ 2175.547545][T10533] charge_memcg+0x31/0x320 [ 2175.547575][T10533] __mem_cgroup_charge+0x27/0x90 [ 2175.547602][T10533] ? _compound_head+0x5d/0x150 [ 2175.547634][T10533] wp_page_copy+0x27c/0x1b60 [ 2175.547676][T10533] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2175.547699][T10533] ? lock_downgrade+0x6e0/0x6e0 [ 2175.547725][T10533] ? vm_normal_page+0x146/0x2a0 [ 2175.547766][T10533] do_wp_page+0x1d1/0x1910 [ 2175.547797][T10533] __handle_mm_fault+0x1813/0x39b0 [ 2175.547832][T10533] ? vm_iomap_memory+0x190/0x190 [ 2175.547886][T10533] handle_mm_fault+0x1c8/0x780 [ 2175.547919][T10533] do_user_addr_fault+0x475/0x1210 [ 2175.547962][T10533] exc_page_fault+0x94/0x170 [ 2175.547997][T10533] asm_exc_page_fault+0x22/0x30 [ 2175.548022][T10533] RIP: 0033:0x7f23844374b0 [ 2175.548044][T10533] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2175.548070][T10533] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2175.548093][T10533] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2175.548111][T10533] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2175.548129][T10533] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2175.548152][T10533] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2175.548170][T10533] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2175.548187][T10533] ? apparmor_socket_create+0x1f8/0x660 [ 2175.548235][T10533] [ 2175.653282][T10533] memory: usage 307200kB, limit 307200kB, failcnt 28846 [ 2175.920600][T10533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2175.932420][T10533] Memory cgroup stats for /syz4: [ 2175.932896][T10533] anon 126976 [ 2175.932896][T10533] file 229376 [ 2175.932896][T10533] kernel 314216448 [ 2175.932896][T10533] kernel_stack 65536 [ 2175.932896][T10533] pagetables 69632 [ 2175.932896][T10533] percpu 4849664 [ 2175.932896][T10533] sock 0 [ 2175.932896][T10533] vmalloc 0 [ 2175.932896][T10533] shmem 229376 [ 2175.932896][T10533] zswap 0 [ 2175.932896][T10533] zswapped 0 [ 2175.932896][T10533] file_mapped 217088 [ 2175.932896][T10533] file_dirty 0 [ 2175.932896][T10533] file_writeback 0 [ 2175.932896][T10533] swapcached 0 [ 2175.932896][T10533] anon_thp 0 [ 2175.932896][T10533] file_thp 0 [ 2175.932896][T10533] shmem_thp 0 [ 2175.932896][T10533] inactive_anon 159744 [ 2175.932896][T10533] active_anon 196608 [ 2175.932896][T10533] inactive_file 0 [ 2175.932896][T10533] active_file 0 [ 2175.932896][T10533] unevictable 0 [ 2175.932896][T10533] slab_reclaimable 15872 [ 2175.932896][T10533] slab_unreclaimable 309179608 [ 2175.932896][T10533] slab 309195480 07:08:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xa}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x800, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2176.141631][T10551] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2176.248721][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.280810][T10533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10533,uid=0 [ 2176.311933][T10533] Memory cgroup out of memory: Killed process 10533 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2176.342795][T10571] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2176.361707][T10571] CPU: 0 PID: 10571 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2176.372173][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2176.382264][T10571] Call Trace: [ 2176.385563][T10571] [ 2176.388513][T10571] dump_stack_lvl+0xcd/0x134 [ 2176.391891][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2176.393119][T10571] dump_header+0x10b/0x7f9 [ 2176.393162][T10571] oom_kill_process.cold+0x10/0x15 [ 2176.412016][T10571] out_of_memory+0x358/0x14a0 [ 2176.416760][T10571] ? oom_killer_disable+0x270/0x270 [ 2176.421999][T10571] ? find_held_lock+0x2d/0x110 [ 2176.426799][T10571] mem_cgroup_out_of_memory+0x206/0x270 [ 2176.432379][T10571] ? mem_cgroup_margin+0x130/0x130 [ 2176.437517][T10571] ? lock_downgrade+0x6e0/0x6e0 [ 2176.442413][T10571] try_charge_memcg+0xf67/0x13f0 [ 2176.447380][T10571] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2176.453387][T10571] ? lock_downgrade+0x6e0/0x6e0 [ 2176.458284][T10571] charge_memcg+0x31/0x320 [ 2176.462818][T10571] __mem_cgroup_charge+0x27/0x90 [ 2176.467785][T10571] ? _compound_head+0x5d/0x150 [ 2176.472583][T10571] wp_page_copy+0x27c/0x1b60 [ 2176.477217][T10571] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2176.482696][T10571] ? lock_downgrade+0x6e0/0x6e0 [ 2176.487571][T10571] ? vm_normal_page+0x146/0x2a0 [ 2176.492453][T10571] do_wp_page+0x1d1/0x1910 [ 2176.496883][T10571] __handle_mm_fault+0x1813/0x39b0 [ 2176.502013][T10571] ? vm_iomap_memory+0x190/0x190 [ 2176.506979][T10571] handle_mm_fault+0x1c8/0x780 [ 2176.511772][T10571] do_user_addr_fault+0x475/0x1210 [ 2176.516940][T10571] exc_page_fault+0x94/0x170 [ 2176.521585][T10571] asm_exc_page_fault+0x22/0x30 [ 2176.526470][T10571] RIP: 0033:0x7f2941c374b0 [ 2176.530913][T10571] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2176.550632][T10571] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 [ 2176.556709][T10571] RAX: 00000000a25c24d7 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 [ 2176.564686][T10571] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000a1eab35 [ 2176.572680][T10571] RBP: 00000000a25c24d7 R08: 00000000000004d7 R09: 00000000a25c24db [ 2176.580667][T10571] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2176.588644][T10571] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83c43dce [ 2176.596633][T10571] ? apparmor_socket_create+0xae/0x660 [ 2176.602121][T10571] [ 2176.678048][T10564] bond93 (uninitialized): Released all slaves [ 2176.680482][T10571] memory: usage 307188kB, limit 307200kB, failcnt 37810 [ 2176.694002][T10571] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2176.703939][T10571] Memory cgroup stats for /syz0: [ 2176.704113][T10571] anon 126976 [ 2176.704113][T10571] file 184320 [ 2176.704113][T10571] kernel 314249216 [ 2176.704113][T10571] kernel_stack 65536 [ 2176.704113][T10571] pagetables 73728 [ 2176.704113][T10571] percpu 4839008 [ 2176.704113][T10571] sock 0 [ 2176.704113][T10571] vmalloc 0 [ 2176.704113][T10571] shmem 180224 [ 2176.704113][T10571] zswap 0 [ 2176.704113][T10571] zswapped 0 [ 2176.704113][T10571] file_mapped 180224 [ 2176.704113][T10571] file_dirty 0 [ 2176.704113][T10571] file_writeback 0 [ 2176.704113][T10571] swapcached 0 [ 2176.704113][T10571] anon_thp 0 [ 2176.704113][T10571] file_thp 0 [ 2176.704113][T10571] shmem_thp 0 [ 2176.704113][T10571] inactive_anon 143360 [ 2176.704113][T10571] active_anon 163840 07:08:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2176.704113][T10571] inactive_file 4096 [ 2176.704113][T10571] active_file 0 [ 2176.704113][T10571] unevictable 0 [ 2176.704113][T10571] slab_reclaimable 18688 [ 2176.704113][T10571] slab_unreclaimable 309218488 [ 2176.704113][T10571] slab 309237176 [ 2176.726421][T10570] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2176.844934][T10571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10571,uid=0 07:08:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x801, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2176.880434][T10571] Memory cgroup out of memory: Killed process 10571 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2176.960436][T10570] bond683 (uninitialized): Released all slaves [ 2177.014322][T10588] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2177.066762][T10588] CPU: 1 PID: 10588 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2177.077230][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2177.087318][T10588] Call Trace: [ 2177.090617][T10588] [ 2177.093576][T10588] dump_stack_lvl+0xcd/0x134 [ 2177.098203][T10588] dump_header+0x10b/0x7f9 [ 2177.102657][T10588] oom_kill_process.cold+0x10/0x15 [ 2177.107803][T10588] out_of_memory+0x358/0x14a0 [ 2177.112515][T10588] ? find_held_lock+0x2d/0x110 [ 2177.117307][T10588] ? oom_killer_disable+0x270/0x270 [ 2177.122544][T10588] ? find_held_lock+0x2d/0x110 [ 2177.127342][T10588] mem_cgroup_out_of_memory+0x206/0x270 [ 2177.132922][T10588] ? mem_cgroup_margin+0x130/0x130 [ 2177.138067][T10588] ? lock_downgrade+0x6e0/0x6e0 [ 2177.142956][T10588] try_charge_memcg+0xf67/0x13f0 [ 2177.147937][T10588] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2177.153951][T10588] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2177.159694][T10588] ? lock_downgrade+0x6e0/0x6e0 [ 2177.164566][T10588] ? lock_downgrade+0x6e0/0x6e0 [ 2177.169448][T10588] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2177.175020][T10588] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2177.181200][T10588] copy_process+0x145a/0x7090 [ 2177.185898][T10588] ? __lock_acquire+0xbc3/0x56d0 [ 2177.190872][T10588] ? __cleanup_sighand+0xb0/0xb0 [ 2177.195847][T10588] kernel_clone+0xe7/0xab0 [ 2177.200272][T10588] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2177.206265][T10588] ? create_io_thread+0xe0/0xe0 [ 2177.211130][T10588] ? find_held_lock+0x2d/0x110 [ 2177.215902][T10588] ? __ct_user_exit+0xff/0x150 [ 2177.220681][T10588] __do_sys_clone+0xba/0x100 [ 2177.225279][T10588] ? kernel_clone+0xab0/0xab0 [ 2177.229981][T10588] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2177.235888][T10588] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2177.241797][T10588] do_syscall_64+0x35/0xb0 [ 2177.246221][T10588] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2177.252122][T10588] RIP: 0033:0x7f2941c8a6a1 [ 2177.256558][T10588] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2177.276171][T10588] RSP: 002b:00007ffda265d4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2177.284589][T10588] RAX: ffffffffffffffda RBX: 00007f2942e22700 RCX: 00007f2941c8a6a1 [ 2177.292576][T10588] RDX: 00007f2942e229d0 RSI: 00007f2942e222f0 RDI: 00000000003d0f00 [ 2177.300552][T10588] RBP: 00007ffda265d700 R08: 00007f2942e22700 R09: 00007f2942e22700 [ 2177.308526][T10588] R10: 00007f2942e229d0 R11: 0000000000000206 R12: 00007ffda265d56e [ 2177.316498][T10588] R13: 00007ffda265d56f R14: 00007f2942e22300 R15: 0000000000022000 [ 2177.324509][T10588] [ 2177.422895][T10588] memory: usage 307200kB, limit 307200kB, failcnt 37855 [ 2177.449219][T10588] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2177.481249][T10588] Memory cgroup stats for /syz0: [ 2177.481511][T10588] anon 90112 [ 2177.481511][T10588] file 184320 [ 2177.481511][T10588] kernel 314253312 [ 2177.481511][T10588] kernel_stack 32768 [ 2177.481511][T10588] pagetables 69632 [ 2177.481511][T10588] percpu 4839008 [ 2177.481511][T10588] sock 0 [ 2177.481511][T10588] vmalloc 0 [ 2177.481511][T10588] shmem 180224 [ 2177.481511][T10588] zswap 0 [ 2177.481511][T10588] zswapped 0 [ 2177.481511][T10588] file_mapped 180224 [ 2177.481511][T10588] file_dirty 0 [ 2177.481511][T10588] file_writeback 0 [ 2177.481511][T10588] swapcached 0 [ 2177.481511][T10588] anon_thp 0 [ 2177.481511][T10588] file_thp 0 [ 2177.481511][T10588] shmem_thp 0 [ 2177.481511][T10588] inactive_anon 106496 [ 2177.481511][T10588] active_anon 163840 [ 2177.481511][T10588] inactive_file 0 [ 2177.481511][T10588] active_file 4096 [ 2177.481511][T10588] unevictable 0 [ 2177.481511][T10588] slab_reclaimable 14184 [ 2177.481511][T10588] slab_unreclaimable 309228776 [ 2177.481511][T10588] slab 309242960 07:08:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x6800000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2177.486591][T10584] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2177.581775][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2177.631312][T10588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10588,uid=0 [ 2177.654053][T10588] Memory cgroup out of memory: Killed process 10588 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2177.703269][T10591] bond93 (uninitialized): Released all slaves [ 2177.723317][T10597] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2177.783151][T10604] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2177.794191][T10597] CPU: 1 PID: 10597 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2177.794226][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2177.794241][T10597] Call Trace: [ 2177.794249][T10597] [ 2177.794259][T10597] dump_stack_lvl+0xcd/0x134 [ 2177.794296][T10597] dump_header+0x10b/0x7f9 [ 2177.794331][T10597] oom_kill_process.cold+0x10/0x15 [ 2177.794366][T10597] out_of_memory+0x358/0x14a0 [ 2177.794399][T10597] ? find_held_lock+0x2d/0x110 [ 2177.794424][T10597] ? oom_killer_disable+0x270/0x270 [ 2177.794457][T10597] ? find_held_lock+0x2d/0x110 [ 2177.794485][T10597] mem_cgroup_out_of_memory+0x206/0x270 [ 2177.794514][T10597] ? mem_cgroup_margin+0x130/0x130 [ 2177.794537][T10597] ? lock_downgrade+0x6e0/0x6e0 [ 2177.794582][T10597] try_charge_memcg+0xf67/0x13f0 [ 2177.794619][T10597] ? mem_cgroup_handle_over_high+0x510/0x510 07:08:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x900, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2177.794659][T10597] ? lock_downgrade+0x6e0/0x6e0 [ 2177.794703][T10597] charge_memcg+0x31/0x320 [ 2177.794734][T10597] __mem_cgroup_charge+0x27/0x90 [ 2177.794762][T10597] ? _compound_head+0x5d/0x150 [ 2177.794793][T10597] wp_page_copy+0x27c/0x1b60 [ 2177.794829][T10597] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2177.794855][T10597] ? lock_downgrade+0x6e0/0x6e0 [ 2177.794881][T10597] ? vm_normal_page+0x146/0x2a0 [ 2177.794922][T10597] do_wp_page+0x1d1/0x1910 [ 2177.794952][T10597] __handle_mm_fault+0x1813/0x39b0 [ 2177.794986][T10597] ? vm_iomap_memory+0x190/0x190 [ 2177.934784][T10597] handle_mm_fault+0x1c8/0x780 [ 2177.939590][T10597] do_user_addr_fault+0x475/0x1210 [ 2177.944750][T10597] exc_page_fault+0x94/0x170 [ 2177.949420][T10597] asm_exc_page_fault+0x22/0x30 [ 2177.954391][T10597] RIP: 0033:0x7f23844374b0 [ 2177.958833][T10597] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 07:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xe}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2177.978472][T10597] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2177.984570][T10597] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2177.992572][T10597] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2178.000570][T10597] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2178.008568][T10597] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2178.016564][T10597] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2178.024558][T10597] ? apparmor_socket_create+0x1f8/0x660 [ 2178.030162][T10597] [ 2178.070655][T10597] memory: usage 307200kB, limit 307200kB, failcnt 28887 [ 2178.092167][T10597] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2178.103676][T10604] bond683 (uninitialized): Released all slaves [ 2178.123272][T10597] Memory cgroup stats for /syz4: [ 2178.123521][T10597] anon 126976 [ 2178.123521][T10597] file 229376 [ 2178.123521][T10597] kernel 314216448 [ 2178.123521][T10597] kernel_stack 65536 [ 2178.123521][T10597] pagetables 69632 [ 2178.123521][T10597] percpu 4849664 [ 2178.123521][T10597] sock 0 [ 2178.123521][T10597] vmalloc 0 [ 2178.123521][T10597] shmem 229376 [ 2178.123521][T10597] zswap 0 [ 2178.123521][T10597] zswapped 0 [ 2178.123521][T10597] file_mapped 217088 [ 2178.123521][T10597] file_dirty 0 [ 2178.123521][T10597] file_writeback 0 [ 2178.123521][T10597] swapcached 0 [ 2178.123521][T10597] anon_thp 0 [ 2178.123521][T10597] file_thp 0 [ 2178.123521][T10597] shmem_thp 0 [ 2178.123521][T10597] inactive_anon 159744 [ 2178.123521][T10597] active_anon 196608 [ 2178.123521][T10597] inactive_file 0 [ 2178.123521][T10597] active_file 0 [ 2178.123521][T10597] unevictable 0 [ 2178.123521][T10597] slab_reclaimable 15872 [ 2178.123521][T10597] slab_unreclaimable 309179608 [ 2178.123521][T10597] slab 309195480 [ 2178.263984][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2178.344531][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2178.415763][T10621] bond93 (uninitialized): Released all slaves [ 2178.463037][T10619] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2178.563340][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2178.582575][T10597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10597,uid=0 07:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2178.611030][T10639] bond93 (uninitialized): Released all slaves 07:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x6c00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2178.646270][T10634] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2178.737333][T10634] bond683 (uninitialized): Released all slaves [ 2178.782534][T10597] Memory cgroup out of memory: Killed process 10597 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2178.861032][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2178.886580][T10649] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2178.921875][T10613] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2179.044310][T10613] CPU: 1 PID: 10613 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2179.054792][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2179.064881][T10613] Call Trace: [ 2179.068180][T10613] [ 2179.071130][T10613] dump_stack_lvl+0xcd/0x134 [ 2179.075762][T10613] dump_header+0x10b/0x7f9 [ 2179.080219][T10613] oom_kill_process.cold+0x10/0x15 [ 2179.085370][T10613] out_of_memory+0x358/0x14a0 [ 2179.090088][T10613] ? find_held_lock+0x2d/0x110 [ 2179.094885][T10613] ? oom_killer_disable+0x270/0x270 [ 2179.100112][T10613] ? find_held_lock+0x2d/0x110 [ 2179.104897][T10613] mem_cgroup_out_of_memory+0x206/0x270 [ 2179.110464][T10613] ? mem_cgroup_margin+0x130/0x130 [ 2179.115589][T10613] ? lock_downgrade+0x6e0/0x6e0 [ 2179.120472][T10613] try_charge_memcg+0xf67/0x13f0 [ 2179.125428][T10613] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2179.131432][T10613] ? lock_downgrade+0x6e0/0x6e0 [ 2179.136310][T10613] charge_memcg+0x31/0x320 [ 2179.140746][T10613] __mem_cgroup_charge+0x27/0x90 [ 2179.145694][T10613] ? _compound_head+0x5d/0x150 [ 2179.150479][T10613] wp_page_copy+0x27c/0x1b60 [ 2179.155095][T10613] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2179.160569][T10613] ? lock_downgrade+0x6e0/0x6e0 [ 2179.165429][T10613] ? vm_normal_page+0x146/0x2a0 [ 2179.170304][T10613] do_wp_page+0x1d1/0x1910 [ 2179.174739][T10613] __handle_mm_fault+0x1813/0x39b0 [ 2179.179879][T10613] ? vm_iomap_memory+0x190/0x190 [ 2179.184883][T10613] handle_mm_fault+0x1c8/0x780 [ 2179.189675][T10613] do_user_addr_fault+0x475/0x1210 [ 2179.194831][T10613] exc_page_fault+0x94/0x170 [ 2179.199453][T10613] asm_exc_page_fault+0x22/0x30 [ 2179.204347][T10613] RIP: 0033:0x7f2941c374b0 [ 2179.208779][T10613] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2179.228416][T10613] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 [ 2179.234506][T10613] RAX: 00000000a25c24d7 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 [ 2179.242499][T10613] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000a1eab35 [ 2179.250487][T10613] RBP: 00000000a25c24d7 R08: 00000000000004d7 R09: 00000000a25c24db [ 2179.258474][T10613] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2179.266469][T10613] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83c43dce [ 2179.274461][T10613] ? apparmor_socket_create+0xae/0x660 [ 2179.279953][T10613] [ 2179.346935][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2179.355783][T10613] memory: usage 307188kB, limit 307200kB, failcnt 37908 [ 2179.377058][T10660] bond93 (uninitialized): Released all slaves [ 2179.395817][T10613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2179.412387][T10613] Memory cgroup stats for /syz0: [ 2179.412574][T10613] anon 126976 [ 2179.412574][T10613] file 184320 [ 2179.412574][T10613] kernel 314249216 [ 2179.412574][T10613] kernel_stack 65536 [ 2179.412574][T10613] pagetables 73728 [ 2179.412574][T10613] percpu 4839008 [ 2179.412574][T10613] sock 0 [ 2179.412574][T10613] vmalloc 0 [ 2179.412574][T10613] shmem 180224 [ 2179.412574][T10613] zswap 0 [ 2179.412574][T10613] zswapped 0 [ 2179.412574][T10613] file_mapped 180224 [ 2179.412574][T10613] file_dirty 0 [ 2179.412574][T10613] file_writeback 0 [ 2179.412574][T10613] swapcached 0 [ 2179.412574][T10613] anon_thp 0 [ 2179.412574][T10613] file_thp 0 [ 2179.412574][T10613] shmem_thp 0 [ 2179.412574][T10613] inactive_anon 143360 [ 2179.412574][T10613] active_anon 163840 [ 2179.412574][T10613] inactive_file 0 [ 2179.412574][T10613] active_file 4096 [ 2179.412574][T10613] unevictable 0 07:08:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x7400000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2179.412574][T10613] slab_reclaimable 16112 [ 2179.412574][T10613] slab_unreclaimable 309218488 [ 2179.412574][T10613] slab 309234600 [ 2179.613457][T10613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10613,uid=0 [ 2179.655839][T10669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2179.704590][T10613] Memory cgroup out of memory: Killed process 10613 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2179.719629][T10669] bond683 (uninitialized): Released all slaves [ 2179.743296][T10662] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2179.762555][T10662] CPU: 1 PID: 10662 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2179.773022][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2179.783105][T10662] Call Trace: [ 2179.786412][T10662] [ 2179.789359][T10662] dump_stack_lvl+0xcd/0x134 [ 2179.793994][T10662] dump_header+0x10b/0x7f9 [ 2179.798455][T10662] oom_kill_process.cold+0x10/0x15 [ 2179.803610][T10662] out_of_memory+0x358/0x14a0 [ 2179.808336][T10662] ? oom_killer_disable+0x270/0x270 [ 2179.813591][T10662] ? find_held_lock+0x2d/0x110 [ 2179.818396][T10662] mem_cgroup_out_of_memory+0x206/0x270 [ 2179.823984][T10662] ? mem_cgroup_margin+0x130/0x130 [ 2179.829124][T10662] ? lock_downgrade+0x6e0/0x6e0 [ 2179.834029][T10662] try_charge_memcg+0xf67/0x13f0 [ 2179.839018][T10662] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2179.845048][T10662] ? lock_downgrade+0x6e0/0x6e0 [ 2179.849947][T10662] charge_memcg+0x31/0x320 [ 2179.854403][T10662] __mem_cgroup_charge+0x27/0x90 [ 2179.859368][T10662] ? _compound_head+0x5d/0x150 [ 2179.864175][T10662] wp_page_copy+0x27c/0x1b60 [ 2179.868793][T10662] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2179.874281][T10662] ? lock_downgrade+0x6e0/0x6e0 [ 2179.879162][T10662] ? vm_normal_page+0x146/0x2a0 [ 2179.884055][T10662] do_wp_page+0x1d1/0x1910 [ 2179.888507][T10662] __handle_mm_fault+0x1813/0x39b0 [ 2179.893656][T10662] ? vm_iomap_memory+0x190/0x190 [ 2179.898653][T10662] handle_mm_fault+0x1c8/0x780 [ 2179.903447][T10662] do_user_addr_fault+0x475/0x1210 [ 2179.908604][T10662] exc_page_fault+0x94/0x170 [ 2179.913228][T10662] asm_exc_page_fault+0x22/0x30 [ 2179.918108][T10662] RIP: 0033:0x7f23844374b0 [ 2179.922544][T10662] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2179.942364][T10662] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2179.948467][T10662] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 07:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x901, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2179.956463][T10662] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2179.964460][T10662] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2179.972455][T10662] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2179.980298][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2179.980433][T10662] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2179.997706][T10662] ? apparmor_socket_create+0x1f8/0x660 [ 2180.003307][T10662] [ 2180.025558][T10662] memory: usage 307200kB, limit 307200kB, failcnt 28937 [ 2180.060737][T10679] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2180.061611][T10662] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2180.131874][T10662] Memory cgroup stats for /syz4: [ 2180.132084][T10662] anon 126976 [ 2180.132084][T10662] file 229376 [ 2180.132084][T10662] kernel 314216448 [ 2180.132084][T10662] kernel_stack 65536 [ 2180.132084][T10662] pagetables 69632 [ 2180.132084][T10662] percpu 4849664 [ 2180.132084][T10662] sock 0 [ 2180.132084][T10662] vmalloc 0 [ 2180.132084][T10662] shmem 229376 [ 2180.132084][T10662] zswap 0 [ 2180.132084][T10662] zswapped 0 [ 2180.132084][T10662] file_mapped 217088 [ 2180.132084][T10662] file_dirty 0 [ 2180.132084][T10662] file_writeback 0 [ 2180.132084][T10662] swapcached 0 [ 2180.132084][T10662] anon_thp 0 [ 2180.132084][T10662] file_thp 0 [ 2180.132084][T10662] shmem_thp 0 [ 2180.132084][T10662] inactive_anon 159744 [ 2180.132084][T10662] active_anon 196608 [ 2180.132084][T10662] inactive_file 0 [ 2180.132084][T10662] active_file 0 [ 2180.132084][T10662] unevictable 0 [ 2180.132084][T10662] slab_reclaimable 15872 [ 2180.132084][T10662] slab_unreclaimable 309179608 [ 2180.132084][T10662] slab 309195480 [ 2180.299614][T10662] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10662,uid=0 [ 2180.334312][T10662] Memory cgroup out of memory: Killed process 10662 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2180.391100][T10689] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2180.394870][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2180.475422][T10689] CPU: 0 PID: 10689 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2180.485897][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2180.495958][T10689] Call Trace: [ 2180.499238][T10689] [ 2180.502170][T10689] dump_stack_lvl+0xcd/0x134 [ 2180.506776][T10689] dump_header+0x10b/0x7f9 [ 2180.511207][T10689] oom_kill_process.cold+0x10/0x15 [ 2180.516337][T10689] out_of_memory+0x358/0x14a0 [ 2180.521038][T10689] ? oom_killer_disable+0x270/0x270 [ 2180.526247][T10689] ? find_held_lock+0x2d/0x110 [ 2180.531023][T10689] mem_cgroup_out_of_memory+0x206/0x270 [ 2180.536577][T10689] ? mem_cgroup_margin+0x130/0x130 [ 2180.541695][T10689] ? lock_downgrade+0x6e0/0x6e0 [ 2180.546576][T10689] try_charge_memcg+0xf67/0x13f0 [ 2180.551528][T10689] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2180.557529][T10689] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2180.563259][T10689] ? lock_downgrade+0x6e0/0x6e0 [ 2180.568127][T10689] ? lock_downgrade+0x6e0/0x6e0 [ 2180.572998][T10689] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2180.578647][T10689] __alloc_pages+0x1ef/0x510 [ 2180.583261][T10689] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2180.590043][T10689] ? find_held_lock+0x2d/0x110 [ 2180.594831][T10689] alloc_pages+0x1a6/0x270 [ 2180.599261][T10689] pte_alloc_one+0x16/0x230 [ 2180.603784][T10689] __pte_alloc+0x69/0x250 [ 2180.608133][T10689] ? pmd_install+0x150/0x150 [ 2180.612731][T10689] ? hugepage_vma_check+0x44e/0x780 [ 2180.617936][T10689] ? __pmd_alloc+0x2ff/0x5c0 [ 2180.622535][T10689] __handle_mm_fault+0x310b/0x39b0 [ 2180.627665][T10689] ? vm_iomap_memory+0x190/0x190 [ 2180.632633][T10689] handle_mm_fault+0x1c8/0x780 [ 2180.637411][T10689] do_user_addr_fault+0x475/0x1210 [ 2180.642544][T10689] exc_page_fault+0x94/0x170 [ 2180.647147][T10689] asm_exc_page_fault+0x22/0x30 [ 2180.652002][T10689] RIP: 0033:0x7f2941c2a149 [ 2180.656435][T10689] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 07:08:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2180.676049][T10689] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2180.682121][T10689] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2180.690095][T10689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2180.698086][T10689] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2180.706061][T10689] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00000000002144a9 [ 2180.714040][T10689] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2180.722046][T10689] [ 2180.841238][T10691] bond93 (uninitialized): Released all slaves [ 2180.870600][T10689] memory: usage 307200kB, limit 307200kB, failcnt 37965 [ 2180.884158][T10689] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 07:08:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x7a00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2180.892692][T10699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2180.906575][T10699] bond683 (uninitialized): Released all slaves [ 2180.930482][T10702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x33}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2181.029226][T10689] Memory cgroup stats for /syz0: [ 2181.029414][T10689] anon 135168 [ 2181.029414][T10689] file 184320 [ 2181.029414][T10689] kernel 314253312 [ 2181.029414][T10689] kernel_stack 65536 [ 2181.029414][T10689] pagetables 77824 [ 2181.029414][T10689] percpu 4839008 [ 2181.029414][T10689] sock 0 [ 2181.029414][T10689] vmalloc 0 [ 2181.029414][T10689] shmem 180224 [ 2181.029414][T10689] zswap 0 [ 2181.029414][T10689] zswapped 0 [ 2181.029414][T10689] file_mapped 180224 [ 2181.029414][T10689] file_dirty 0 [ 2181.029414][T10689] file_writeback 0 [ 2181.029414][T10689] swapcached 0 [ 2181.029414][T10689] anon_thp 0 [ 2181.029414][T10689] file_thp 0 [ 2181.029414][T10689] shmem_thp 0 [ 2181.029414][T10689] inactive_anon 151552 [ 2181.029414][T10689] active_anon 163840 [ 2181.029414][T10689] inactive_file 0 [ 2181.029414][T10689] active_file 4096 [ 2181.029414][T10689] unevictable 0 [ 2181.029414][T10689] slab_reclaimable 18040 [ 2181.029414][T10689] slab_unreclaimable 309219136 [ 2181.029414][T10689] slab 309237176 [ 2181.239795][T10689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10689,uid=0 [ 2181.262706][T10689] Memory cgroup out of memory: Killed process 10689 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2181.302459][T10703] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2181.333850][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:08:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xa00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2181.354029][T10703] CPU: 0 PID: 10703 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2181.354066][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2181.354086][T10703] Call Trace: [ 2181.354094][T10703] [ 2181.354104][T10703] dump_stack_lvl+0xcd/0x134 [ 2181.354143][T10703] dump_header+0x10b/0x7f9 [ 2181.354178][T10703] oom_kill_process.cold+0x10/0x15 07:08:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2181.354213][T10703] out_of_memory+0x358/0x14a0 [ 2181.354252][T10703] ? oom_killer_disable+0x270/0x270 [ 2181.354286][T10703] ? find_held_lock+0x2d/0x110 [ 2181.354316][T10703] mem_cgroup_out_of_memory+0x206/0x270 [ 2181.354346][T10703] ? mem_cgroup_margin+0x130/0x130 [ 2181.354370][T10703] ? lock_downgrade+0x6e0/0x6e0 [ 2181.354415][T10703] try_charge_memcg+0xf67/0x13f0 [ 2181.354451][T10703] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2181.354489][T10703] ? lock_downgrade+0x6e0/0x6e0 [ 2181.354533][T10703] charge_memcg+0x31/0x320 [ 2181.354564][T10703] __mem_cgroup_charge+0x27/0x90 [ 2181.354591][T10703] ? _compound_head+0x5d/0x150 [ 2181.354623][T10703] wp_page_copy+0x27c/0x1b60 [ 2181.354659][T10703] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2181.354686][T10703] ? lock_downgrade+0x6e0/0x6e0 [ 2181.354710][T10703] ? vm_normal_page+0x146/0x2a0 [ 2181.354751][T10703] do_wp_page+0x1d1/0x1910 [ 2181.354783][T10703] __handle_mm_fault+0x1813/0x39b0 [ 2181.354818][T10703] ? vm_iomap_memory+0x190/0x190 [ 2181.354873][T10703] handle_mm_fault+0x1c8/0x780 [ 2181.354910][T10703] do_user_addr_fault+0x475/0x1210 [ 2181.354954][T10703] exc_page_fault+0x94/0x170 [ 2181.354989][T10703] asm_exc_page_fault+0x22/0x30 [ 2181.355014][T10703] RIP: 0033:0x7f23844374b0 [ 2181.355037][T10703] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2181.355062][T10703] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2181.355089][T10703] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2181.355109][T10703] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2181.355125][T10703] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2181.355143][T10703] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2181.355160][T10703] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2181.355179][T10703] ? apparmor_socket_create+0x1f8/0x660 [ 2181.355227][T10703] [ 2181.355405][T10703] memory: usage 307200kB, limit 307200kB, failcnt 29052 [ 2181.355424][T10703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2181.355440][T10703] Memory cgroup stats for /syz4: [ 2181.355661][T10703] anon 126976 [ 2181.355661][T10703] file 229376 [ 2181.355661][T10703] kernel 314216448 [ 2181.355661][T10703] kernel_stack 65536 [ 2181.355661][T10703] pagetables 69632 [ 2181.355661][T10703] percpu 4849664 [ 2181.355661][T10703] sock 0 [ 2181.355661][T10703] vmalloc 0 [ 2181.355661][T10703] shmem 229376 [ 2181.355661][T10703] zswap 0 [ 2181.355661][T10703] zswapped 0 [ 2181.355661][T10703] file_mapped 217088 [ 2181.355661][T10703] file_dirty 0 [ 2181.355661][T10703] file_writeback 0 [ 2181.355661][T10703] swapcached 0 [ 2181.355661][T10703] anon_thp 0 [ 2181.355661][T10703] file_thp 0 [ 2181.355661][T10703] shmem_thp 0 [ 2181.355661][T10703] inactive_anon 159744 [ 2181.355661][T10703] active_anon 196608 [ 2181.355661][T10703] inactive_file 0 [ 2181.355661][T10703] active_file 0 [ 2181.355661][T10703] unevictable 0 [ 2181.355661][T10703] slab_reclaimable 15872 [ 2181.355661][T10703] slab_unreclaimable 309179608 [ 2181.355661][T10703] slab 309195480 [ 2181.355726][T10703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10703,uid=0 [ 2181.355888][T10703] Memory cgroup out of memory: Killed process 10703 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2181.481318][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2181.771003][T10725] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2181.806073][T10725] CPU: 0 PID: 10725 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2181.816546][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2181.826631][T10725] Call Trace: [ 2181.829944][T10725] [ 2181.832754][T10719] bond93 (uninitialized): Released all slaves [ 2181.832874][T10725] dump_stack_lvl+0xcd/0x134 [ 2181.843544][T10725] dump_header+0x10b/0x7f9 [ 2181.848013][T10725] oom_kill_process.cold+0x10/0x15 [ 2181.853167][T10725] out_of_memory+0x358/0x14a0 [ 2181.857886][T10725] ? oom_killer_disable+0x270/0x270 [ 2181.863125][T10725] ? find_held_lock+0x2d/0x110 [ 2181.867925][T10725] mem_cgroup_out_of_memory+0x206/0x270 [ 2181.873503][T10725] ? mem_cgroup_margin+0x130/0x130 [ 2181.878646][T10725] ? lock_downgrade+0x6e0/0x6e0 [ 2181.883543][T10725] try_charge_memcg+0xf67/0x13f0 [ 2181.886485][T10724] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2181.888522][T10725] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2181.902594][T10725] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2181.908340][T10725] ? lock_downgrade+0x6e0/0x6e0 [ 2181.913221][T10725] ? lock_downgrade+0x6e0/0x6e0 [ 2181.918115][T10725] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2181.923691][T10725] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2181.929884][T10725] copy_process+0x607/0x7090 [ 2181.934502][T10725] ? put_page+0xd9/0x280 [ 2181.938769][T10725] ? wp_page_copy+0x2ce/0x1b60 [ 2181.943583][T10725] ? __cleanup_sighand+0xb0/0xb0 [ 2181.948574][T10725] kernel_clone+0xe7/0xab0 [ 2181.953018][T10725] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2181.959033][T10725] ? create_io_thread+0xe0/0xe0 [ 2181.963924][T10725] ? find_held_lock+0x2d/0x110 [ 2181.968716][T10725] ? __ct_user_exit+0xff/0x150 [ 2181.973514][T10725] __do_sys_clone+0xba/0x100 [ 2181.978137][T10725] ? kernel_clone+0xab0/0xab0 [ 2181.982846][T10725] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2181.988765][T10725] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2181.992198][T10724] bond683 (uninitialized): Released all slaves [ 2181.994680][T10725] do_syscall_64+0x35/0xb0 [ 2181.994713][T10725] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2182.011166][T10725] RIP: 0033:0x7f2941c8a6a1 [ 2182.015617][T10725] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2182.035257][T10725] RSP: 002b:00007ffda265d4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2182.043710][T10725] RAX: ffffffffffffffda RBX: 00007f2942e22700 RCX: 00007f2941c8a6a1 [ 2182.051716][T10725] RDX: 00007f2942e229d0 RSI: 00007f2942e222f0 RDI: 00000000003d0f00 [ 2182.059719][T10725] RBP: 00007ffda265d700 R08: 00007f2942e22700 R09: 00007f2942e22700 [ 2182.067719][T10725] R10: 00007f2942e229d0 R11: 0000000000000206 R12: 00007ffda265d56e [ 2182.075720][T10725] R13: 00007ffda265d56f R14: 00007f2942e22300 R15: 0000000000022000 [ 2182.083739][T10725] 07:08:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2182.167808][T10725] memory: usage 307156kB, limit 307200kB, failcnt 37989 [ 2182.185868][T10732] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2182.216781][T10725] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2182.235771][T10725] Memory cgroup stats for /syz0: [ 2182.236005][T10725] anon 90112 [ 2182.236005][T10725] file 184320 [ 2182.236005][T10725] kernel 314236928 [ 2182.236005][T10725] kernel_stack 32768 [ 2182.236005][T10725] pagetables 69632 [ 2182.236005][T10725] percpu 4839008 [ 2182.236005][T10725] sock 0 [ 2182.236005][T10725] vmalloc 0 [ 2182.236005][T10725] shmem 180224 [ 2182.236005][T10725] zswap 0 [ 2182.236005][T10725] zswapped 0 [ 2182.236005][T10725] file_mapped 180224 [ 2182.236005][T10725] file_dirty 0 [ 2182.236005][T10725] file_writeback 0 [ 2182.236005][T10725] swapcached 0 [ 2182.236005][T10725] anon_thp 0 [ 2182.236005][T10725] file_thp 0 [ 2182.236005][T10725] shmem_thp 0 [ 2182.236005][T10725] inactive_anon 106496 [ 2182.236005][T10725] active_anon 163840 [ 2182.236005][T10725] inactive_file 0 [ 2182.236005][T10725] active_file 4096 07:08:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2182.236005][T10725] unevictable 0 [ 2182.236005][T10725] slab_reclaimable 14184 [ 2182.236005][T10725] slab_unreclaimable 309217376 [ 2182.236005][T10725] slab 309231560 07:08:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xa01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2182.380037][T10725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10725,uid=0 [ 2182.402488][T10725] Memory cgroup out of memory: Killed process 10725 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x8100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2182.493428][T10743] bond93 (uninitialized): Released all slaves [ 2182.523423][T10738] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2182.575667][T10751] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2182.610758][T10738] CPU: 1 PID: 10738 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2182.621244][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2182.631326][T10738] Call Trace: [ 2182.634622][T10738] [ 2182.637571][T10738] dump_stack_lvl+0xcd/0x134 [ 2182.642194][T10738] dump_header+0x10b/0x7f9 [ 2182.646642][T10738] oom_kill_process.cold+0x10/0x15 [ 2182.651785][T10738] out_of_memory+0x358/0x14a0 [ 2182.656497][T10738] ? find_held_lock+0x2d/0x110 [ 2182.661288][T10738] ? oom_killer_disable+0x270/0x270 [ 2182.666521][T10738] ? find_held_lock+0x2d/0x110 [ 2182.671316][T10738] mem_cgroup_out_of_memory+0x206/0x270 [ 2182.676894][T10738] ? mem_cgroup_margin+0x130/0x130 [ 2182.682030][T10738] ? lock_downgrade+0x6e0/0x6e0 [ 2182.686931][T10738] try_charge_memcg+0xf67/0x13f0 [ 2182.691906][T10738] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2182.697928][T10738] ? lock_downgrade+0x6e0/0x6e0 [ 2182.702826][T10738] charge_memcg+0x31/0x320 [ 2182.707281][T10738] __mem_cgroup_charge+0x27/0x90 [ 2182.712246][T10738] ? _compound_head+0x5d/0x150 [ 2182.717045][T10738] wp_page_copy+0x27c/0x1b60 [ 2182.721680][T10738] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2182.727207][T10738] ? lock_downgrade+0x6e0/0x6e0 [ 2182.732090][T10738] ? vm_normal_page+0x146/0x2a0 [ 2182.736991][T10738] do_wp_page+0x1d1/0x1910 [ 2182.741450][T10738] __handle_mm_fault+0x1813/0x39b0 [ 2182.746608][T10738] ? vm_iomap_memory+0x190/0x190 [ 2182.751599][T10738] handle_mm_fault+0x1c8/0x780 [ 2182.756400][T10738] do_user_addr_fault+0x475/0x1210 [ 2182.761563][T10738] exc_page_fault+0x94/0x170 [ 2182.766198][T10738] asm_exc_page_fault+0x22/0x30 [ 2182.771087][T10738] RIP: 0033:0x7f23844374b0 [ 2182.775538][T10738] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2182.795182][T10738] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2182.801281][T10738] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2182.809273][T10738] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2182.817272][T10738] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2182.825278][T10738] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2182.833280][T10738] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2182.841279][T10738] ? apparmor_socket_create+0x1f8/0x660 [ 2182.846882][T10738] 07:08:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2182.930400][T10751] bond683 (uninitialized): Released all slaves [ 2182.942544][T10738] memory: usage 307200kB, limit 307200kB, failcnt 29113 [ 2182.952177][T10738] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2182.962511][T10738] Memory cgroup stats for /syz4: [ 2182.962732][T10738] anon 126976 [ 2182.962732][T10738] file 229376 [ 2182.962732][T10738] kernel 314216448 [ 2182.962732][T10738] kernel_stack 65536 [ 2182.962732][T10738] pagetables 69632 [ 2182.962732][T10738] percpu 4849664 [ 2182.962732][T10738] sock 0 [ 2182.962732][T10738] vmalloc 0 [ 2182.962732][T10738] shmem 229376 [ 2182.962732][T10738] zswap 0 [ 2182.962732][T10738] zswapped 0 [ 2182.962732][T10738] file_mapped 217088 [ 2182.962732][T10738] file_dirty 0 [ 2182.962732][T10738] file_writeback 0 [ 2182.962732][T10738] swapcached 0 [ 2182.962732][T10738] anon_thp 0 [ 2182.962732][T10738] file_thp 0 [ 2182.962732][T10738] shmem_thp 0 [ 2182.962732][T10738] inactive_anon 159744 [ 2182.962732][T10738] active_anon 196608 [ 2182.962732][T10738] inactive_file 0 [ 2182.962732][T10738] active_file 0 [ 2182.962732][T10738] unevictable 0 [ 2182.962732][T10738] slab_reclaimable 15872 [ 2182.962732][T10738] slab_unreclaimable 309179608 [ 2182.962732][T10738] slab 309195480 [ 2183.183463][T10738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10738,uid=0 [ 2183.215087][T10738] Memory cgroup out of memory: Killed process 10738 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2183.247087][T10749] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2183.272662][T10749] CPU: 1 PID: 10749 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2183.283131][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2183.292613][T10761] __nla_validate_parse: 1 callbacks suppressed [ 2183.292632][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2183.293186][T10749] Call Trace: [ 2183.293197][T10749] [ 2183.314840][T10749] dump_stack_lvl+0xcd/0x134 [ 2183.319471][T10749] dump_header+0x10b/0x7f9 [ 2183.323929][T10749] oom_kill_process.cold+0x10/0x15 [ 2183.329093][T10749] out_of_memory+0x358/0x14a0 [ 2183.333810][T10749] ? oom_killer_disable+0x270/0x270 [ 2183.339044][T10749] ? find_held_lock+0x2d/0x110 [ 2183.340681][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2183.343823][T10749] mem_cgroup_out_of_memory+0x206/0x270 [ 2183.343859][T10749] ? mem_cgroup_margin+0x130/0x130 [ 2183.363885][T10749] ? lock_downgrade+0x6e0/0x6e0 [ 2183.368787][T10749] try_charge_memcg+0xf67/0x13f0 [ 2183.373763][T10749] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2183.379782][T10749] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2183.385622][T10749] ? lock_downgrade+0x6e0/0x6e0 [ 2183.390509][T10749] ? lock_downgrade+0x6e0/0x6e0 [ 2183.395405][T10749] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2183.400992][T10749] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2183.407190][T10749] copy_process+0x607/0x7090 [ 2183.411821][T10749] ? find_held_lock+0x2d/0x110 [ 2183.416626][T10749] ? __cleanup_sighand+0xb0/0xb0 [ 2183.421613][T10749] kernel_clone+0xe7/0xab0 [ 2183.426078][T10749] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2183.432114][T10749] ? create_io_thread+0xe0/0xe0 [ 2183.437006][T10749] ? find_held_lock+0x2d/0x110 [ 2183.441802][T10749] ? __ct_user_exit+0xff/0x150 [ 2183.446604][T10749] __do_sys_clone+0xba/0x100 [ 2183.451226][T10749] ? kernel_clone+0xab0/0xab0 [ 2183.455951][T10749] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2183.461881][T10749] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2183.467822][T10749] do_syscall_64+0x35/0xb0 [ 2183.472272][T10749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2183.478195][T10749] RIP: 0033:0x7f2941c8a6a1 [ 2183.482630][T10749] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2183.502255][T10749] RSP: 002b:00007ffda265d4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2183.510697][T10749] RAX: ffffffffffffffda RBX: 00007f2942e01700 RCX: 00007f2941c8a6a1 [ 2183.518699][T10749] RDX: 00007f2942e019d0 RSI: 00007f2942e012f0 RDI: 00000000003d0f00 [ 2183.526708][T10749] RBP: 00007ffda265d700 R08: 00007f2942e01700 R09: 00007f2942e01700 [ 2183.534711][T10749] R10: 00007f2942e019d0 R11: 0000000000000206 R12: 00007ffda265d56e 07:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2183.542711][T10749] R13: 00007ffda265d56f R14: 00007f2942e01300 R15: 0000000000022000 [ 2183.550733][T10749] [ 2183.601395][T10771] bond93 (uninitialized): Released all slaves [ 2183.602740][T10749] memory: usage 307184kB, limit 307200kB, failcnt 38039 [ 2183.614493][T10749] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2183.626213][T10749] Memory cgroup stats for /syz0: [ 2183.626499][T10749] anon 102400 [ 2183.626499][T10749] file 184320 [ 2183.626499][T10749] kernel 314269696 [ 2183.626499][T10749] kernel_stack 65536 [ 2183.626499][T10749] pagetables 73728 [ 2183.626499][T10749] percpu 4839008 [ 2183.626499][T10749] sock 0 [ 2183.626499][T10749] vmalloc 0 [ 2183.626499][T10749] shmem 180224 [ 2183.626499][T10749] zswap 0 [ 2183.626499][T10749] zswapped 0 [ 2183.626499][T10749] file_mapped 180224 [ 2183.626499][T10749] file_dirty 0 [ 2183.626499][T10749] file_writeback 0 [ 2183.626499][T10749] swapcached 0 [ 2183.626499][T10749] anon_thp 0 [ 2183.626499][T10749] file_thp 0 [ 2183.626499][T10749] shmem_thp 0 [ 2183.626499][T10749] inactive_anon 118784 [ 2183.626499][T10749] active_anon 163840 [ 2183.626499][T10749] inactive_file 0 [ 2183.626499][T10749] active_file 4096 [ 2183.626499][T10749] unevictable 0 [ 2183.626499][T10749] slab_reclaimable 14184 [ 2183.626499][T10749] slab_unreclaimable 309226648 [ 2183.626499][T10749] slab 309240832 07:08:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x88a8ffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2183.724812][T10783] validate_nla: 1 callbacks suppressed [ 2183.724832][T10783] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x60}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2183.843220][T10785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2183.845318][T10749] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10749,uid=0 [ 2183.884070][T10749] Memory cgroup out of memory: Killed process 10749 (syz-executor.0) total-vm:54644kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xb00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2184.020940][T10785] bond683 (uninitialized): Released all slaves [ 2184.061355][T10778] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2184.120627][T10778] CPU: 1 PID: 10778 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2184.131187][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2184.141272][T10778] Call Trace: [ 2184.144572][T10778] [ 2184.147527][T10778] dump_stack_lvl+0xcd/0x134 [ 2184.152158][T10778] dump_header+0x10b/0x7f9 [ 2184.156609][T10778] oom_kill_process.cold+0x10/0x15 [ 2184.161765][T10778] out_of_memory+0x358/0x14a0 [ 2184.166473][T10778] ? find_held_lock+0x2d/0x110 [ 2184.171251][T10778] ? oom_killer_disable+0x270/0x270 [ 2184.176481][T10778] ? find_held_lock+0x2d/0x110 [ 2184.181254][T10778] mem_cgroup_out_of_memory+0x206/0x270 [ 2184.186814][T10778] ? mem_cgroup_margin+0x130/0x130 [ 2184.191936][T10778] ? lock_downgrade+0x6e0/0x6e0 [ 2184.196810][T10778] try_charge_memcg+0xf67/0x13f0 [ 2184.201769][T10778] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2184.207767][T10778] ? lock_downgrade+0x6e0/0x6e0 [ 2184.212641][T10778] charge_memcg+0x31/0x320 [ 2184.217071][T10778] __mem_cgroup_charge+0x27/0x90 [ 2184.222020][T10778] ? _compound_head+0x5d/0x150 [ 2184.226800][T10778] wp_page_copy+0x27c/0x1b60 [ 2184.231412][T10778] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2184.236878][T10778] ? lock_downgrade+0x6e0/0x6e0 [ 2184.241736][T10778] ? vm_normal_page+0x146/0x2a0 [ 2184.246608][T10778] do_wp_page+0x1d1/0x1910 [ 2184.251041][T10778] __handle_mm_fault+0x1813/0x39b0 [ 2184.256168][T10778] ? vm_iomap_memory+0x190/0x190 [ 2184.261135][T10778] handle_mm_fault+0x1c8/0x780 [ 2184.265915][T10778] do_user_addr_fault+0x475/0x1210 [ 2184.271052][T10778] exc_page_fault+0x94/0x170 [ 2184.275672][T10778] asm_exc_page_fault+0x22/0x30 [ 2184.280541][T10778] RIP: 0033:0x7f23844374b0 [ 2184.284963][T10778] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2184.304589][T10778] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2184.310677][T10778] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2184.318655][T10778] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2184.326632][T10778] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2184.334605][T10778] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2184.342581][T10778] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2184.350557][T10778] ? apparmor_socket_create+0x1f8/0x660 [ 2184.356131][T10778] [ 2184.412610][T10778] memory: usage 307200kB, limit 307200kB, failcnt 29189 [ 2184.429971][T10778] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2184.443714][T10778] Memory cgroup stats for /syz4: [ 2184.444205][T10778] anon 126976 [ 2184.444205][T10778] file 229376 [ 2184.444205][T10778] kernel 314216448 [ 2184.444205][T10778] kernel_stack 65536 [ 2184.444205][T10778] pagetables 69632 [ 2184.444205][T10778] percpu 4849664 [ 2184.444205][T10778] sock 0 [ 2184.444205][T10778] vmalloc 0 [ 2184.444205][T10778] shmem 229376 [ 2184.444205][T10778] zswap 0 [ 2184.444205][T10778] zswapped 0 [ 2184.444205][T10778] file_mapped 217088 [ 2184.444205][T10778] file_dirty 0 [ 2184.444205][T10778] file_writeback 0 [ 2184.444205][T10778] swapcached 0 [ 2184.444205][T10778] anon_thp 0 [ 2184.444205][T10778] file_thp 0 [ 2184.444205][T10778] shmem_thp 0 [ 2184.444205][T10778] inactive_anon 159744 [ 2184.444205][T10778] active_anon 196608 [ 2184.444205][T10778] inactive_file 0 [ 2184.444205][T10778] active_file 0 [ 2184.444205][T10778] unevictable 0 [ 2184.444205][T10778] slab_reclaimable 15872 [ 2184.444205][T10778] slab_unreclaimable 309179608 [ 2184.444205][T10778] slab 309195480 07:08:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2184.586614][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2184.608163][T10796] bond93 (uninitialized): Released all slaves 07:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x68}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2184.637089][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2184.661306][T10811] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2184.723332][T10811] bond683 (uninitialized): Released all slaves [ 2184.802480][T10816] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2184.840855][T10778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10778,uid=0 [ 2184.944391][T10778] Memory cgroup out of memory: Killed process 10778 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2185.023799][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:08:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x9effffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2185.092860][T10822] bond93 (uninitialized): Released all slaves [ 2185.103933][T10800] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2185.170963][T10800] CPU: 0 PID: 10800 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2185.181442][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2185.191562][T10800] Call Trace: [ 2185.194863][T10800] [ 2185.197817][T10800] dump_stack_lvl+0xcd/0x134 [ 2185.202449][T10800] dump_header+0x10b/0x7f9 [ 2185.206944][T10800] oom_kill_process.cold+0x10/0x15 [ 2185.212099][T10800] out_of_memory+0x358/0x14a0 [ 2185.216843][T10800] ? find_held_lock+0x2d/0x110 [ 2185.221640][T10800] ? oom_killer_disable+0x270/0x270 [ 2185.226879][T10800] ? find_held_lock+0x2d/0x110 [ 2185.231688][T10800] mem_cgroup_out_of_memory+0x206/0x270 [ 2185.237266][T10800] ? mem_cgroup_margin+0x130/0x130 [ 2185.242406][T10800] ? lock_downgrade+0x6e0/0x6e0 [ 2185.247329][T10800] try_charge_memcg+0xf67/0x13f0 [ 2185.252298][T10800] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2185.258317][T10800] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2185.264108][T10800] ? lock_downgrade+0x6e0/0x6e0 [ 2185.268997][T10800] ? lock_downgrade+0x6e0/0x6e0 [ 2185.273898][T10800] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2185.279537][T10800] __alloc_pages+0x1ef/0x510 [ 2185.284182][T10800] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2185.291005][T10800] ? find_held_lock+0x2d/0x110 [ 2185.295802][T10800] alloc_pages+0x1a6/0x270 [ 2185.300240][T10800] pte_alloc_one+0x16/0x230 [ 2185.304751][T10800] __pte_alloc+0x69/0x250 [ 2185.309089][T10800] ? pmd_install+0x150/0x150 [ 2185.314292][T10800] ? hugepage_vma_check+0x44e/0x780 [ 2185.319524][T10800] ? __pmd_alloc+0x2ff/0x5c0 [ 2185.324124][T10800] __handle_mm_fault+0x310b/0x39b0 [ 2185.329251][T10800] ? vm_iomap_memory+0x190/0x190 [ 2185.334238][T10800] handle_mm_fault+0x1c8/0x780 [ 2185.339016][T10800] do_user_addr_fault+0x475/0x1210 [ 2185.344151][T10800] exc_page_fault+0x94/0x170 [ 2185.348758][T10800] asm_exc_page_fault+0x22/0x30 [ 2185.353618][T10800] RIP: 0033:0x7f2941c2a149 [ 2185.358049][T10800] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2185.377664][T10800] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2185.383737][T10800] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2185.391711][T10800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2185.399685][T10800] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2185.407659][T10800] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000215745 [ 2185.415643][T10800] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2185.423637][T10800] 07:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6c}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2185.497076][T10842] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0xd319000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2185.551998][T10842] bond683 (uninitialized): Released all slaves [ 2185.586772][T10844] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2185.722374][T10800] memory: usage 307200kB, limit 307200kB, failcnt 38155 [ 2185.732431][T10800] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2185.763243][T10800] Memory cgroup stats for /syz0: [ 2185.763496][T10800] anon 135168 [ 2185.763496][T10800] file 184320 [ 2185.763496][T10800] kernel 314253312 [ 2185.763496][T10800] kernel_stack 65536 [ 2185.763496][T10800] pagetables 77824 [ 2185.763496][T10800] percpu 4839008 [ 2185.763496][T10800] sock 0 [ 2185.763496][T10800] vmalloc 0 [ 2185.763496][T10800] shmem 180224 [ 2185.763496][T10800] zswap 0 [ 2185.763496][T10800] zswapped 0 [ 2185.763496][T10800] file_mapped 180224 [ 2185.763496][T10800] file_dirty 0 [ 2185.763496][T10800] file_writeback 0 [ 2185.763496][T10800] swapcached 0 [ 2185.763496][T10800] anon_thp 0 [ 2185.763496][T10800] file_thp 0 [ 2185.763496][T10800] shmem_thp 0 [ 2185.763496][T10800] inactive_anon 151552 [ 2185.763496][T10800] active_anon 163840 [ 2185.763496][T10800] inactive_file 0 [ 2185.763496][T10800] active_file 4096 [ 2185.763496][T10800] unevictable 0 [ 2185.763496][T10800] slab_reclaimable 18040 [ 2185.763496][T10800] slab_unreclaimable 309219136 [ 2185.763496][T10800] slab 309237176 [ 2185.928858][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2185.959129][T10800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10800,uid=0 [ 2185.984903][T10846] bond93 (uninitialized): Released all slaves 07:08:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x74}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2186.050291][T10800] Memory cgroup out of memory: Killed process 10800 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2186.112202][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2186.141012][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:08:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xb01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2186.210590][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2186.245988][T10867] bond93 (uninitialized): Released all slaves [ 2186.253494][T10833] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2186.253532][T10833] CPU: 1 PID: 10833 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2186.253561][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2186.253576][T10833] Call Trace: [ 2186.253584][T10833] [ 2186.253594][T10833] dump_stack_lvl+0xcd/0x134 [ 2186.253630][T10833] dump_header+0x10b/0x7f9 [ 2186.253676][T10833] oom_kill_process.cold+0x10/0x15 [ 2186.253710][T10833] out_of_memory+0x358/0x14a0 [ 2186.253745][T10833] ? find_held_lock+0x2d/0x110 [ 2186.253772][T10833] ? oom_killer_disable+0x270/0x270 [ 2186.253804][T10833] ? find_held_lock+0x2d/0x110 [ 2186.253834][T10833] mem_cgroup_out_of_memory+0x206/0x270 [ 2186.253862][T10833] ? mem_cgroup_margin+0x130/0x130 [ 2186.253885][T10833] ? lock_downgrade+0x6e0/0x6e0 [ 2186.253930][T10833] try_charge_memcg+0xf67/0x13f0 [ 2186.253967][T10833] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2186.254005][T10833] ? lock_downgrade+0x6e0/0x6e0 [ 2186.254049][T10833] charge_memcg+0x31/0x320 [ 2186.254080][T10833] __mem_cgroup_charge+0x27/0x90 [ 2186.254106][T10833] ? _compound_head+0x5d/0x150 [ 2186.254138][T10833] wp_page_copy+0x27c/0x1b60 [ 2186.254174][T10833] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2186.254199][T10833] ? lock_downgrade+0x6e0/0x6e0 [ 2186.254224][T10833] ? vm_normal_page+0x146/0x2a0 [ 2186.254266][T10833] do_wp_page+0x1d1/0x1910 [ 2186.254297][T10833] __handle_mm_fault+0x1813/0x39b0 [ 2186.254331][T10833] ? vm_iomap_memory+0x190/0x190 [ 2186.254386][T10833] handle_mm_fault+0x1c8/0x780 [ 2186.254419][T10833] do_user_addr_fault+0x475/0x1210 [ 2186.254466][T10833] exc_page_fault+0x94/0x170 [ 2186.254499][T10833] asm_exc_page_fault+0x22/0x30 [ 2186.254526][T10833] RIP: 0033:0x7f23844374b0 [ 2186.254548][T10833] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2186.254574][T10833] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2186.254597][T10833] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2186.254615][T10833] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2186.254633][T10833] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2186.254656][T10833] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2186.254674][T10833] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2186.254691][T10833] ? apparmor_socket_create+0x1f8/0x660 [ 2186.254737][T10833] [ 2186.274795][T10833] memory: usage 307200kB, limit 307200kB, failcnt 29267 [ 2186.631519][T10833] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2186.642209][T10833] Memory cgroup stats for /syz4: [ 2186.642426][T10833] anon 126976 [ 2186.642426][T10833] file 229376 [ 2186.642426][T10833] kernel 314216448 [ 2186.642426][T10833] kernel_stack 65536 [ 2186.642426][T10833] pagetables 69632 [ 2186.642426][T10833] percpu 4849664 [ 2186.642426][T10833] sock 0 [ 2186.642426][T10833] vmalloc 0 [ 2186.642426][T10833] shmem 229376 [ 2186.642426][T10833] zswap 0 [ 2186.642426][T10833] zswapped 0 [ 2186.642426][T10833] file_mapped 217088 [ 2186.642426][T10833] file_dirty 0 [ 2186.642426][T10833] file_writeback 0 [ 2186.642426][T10833] swapcached 0 [ 2186.642426][T10833] anon_thp 0 [ 2186.642426][T10833] file_thp 0 [ 2186.642426][T10833] shmem_thp 0 [ 2186.642426][T10833] inactive_anon 159744 [ 2186.642426][T10833] active_anon 196608 [ 2186.642426][T10833] inactive_file 0 [ 2186.642426][T10833] active_file 0 [ 2186.642426][T10833] unevictable 0 [ 2186.642426][T10833] slab_reclaimable 15872 07:08:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x7a}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2186.642426][T10833] slab_unreclaimable 309179608 [ 2186.642426][T10833] slab 309195480 [ 2186.753572][T10879] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0xf0ffffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2186.820296][T10833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10833,uid=0 [ 2186.913008][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2186.935134][T10833] Memory cgroup out of memory: Killed process 10833 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2187.023083][T10892] bond93 (uninitialized): Released all slaves [ 2187.141450][T10903] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2187.193567][T10881] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2187.235721][T10903] bond683 (uninitialized): Released all slaves [ 2187.272405][T10881] CPU: 0 PID: 10881 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2187.282885][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2187.292965][T10881] Call Trace: [ 2187.296277][T10881] [ 2187.299228][T10881] dump_stack_lvl+0xcd/0x134 [ 2187.303858][T10881] dump_header+0x10b/0x7f9 [ 2187.308315][T10881] oom_kill_process.cold+0x10/0x15 [ 2187.313465][T10881] out_of_memory+0x358/0x14a0 [ 2187.318356][T10881] ? find_held_lock+0x2d/0x110 [ 2187.323150][T10881] ? oom_killer_disable+0x270/0x270 [ 2187.328390][T10881] ? find_held_lock+0x2d/0x110 07:08:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2187.333187][T10881] mem_cgroup_out_of_memory+0x206/0x270 [ 2187.338769][T10881] ? mem_cgroup_margin+0x130/0x130 [ 2187.343907][T10881] ? lock_downgrade+0x6e0/0x6e0 [ 2187.348816][T10881] try_charge_memcg+0xf67/0x13f0 [ 2187.353798][T10881] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2187.359817][T10881] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2187.365607][T10881] ? lock_downgrade+0x6e0/0x6e0 [ 2187.370493][T10881] ? lock_downgrade+0x6e0/0x6e0 [ 2187.375391][T10881] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2187.380980][T10881] __alloc_pages+0x1ef/0x510 [ 2187.385609][T10881] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2187.392414][T10881] ? find_held_lock+0x2d/0x110 [ 2187.397197][T10881] alloc_pages+0x1a6/0x270 [ 2187.401629][T10881] pte_alloc_one+0x16/0x230 [ 2187.406140][T10881] __pte_alloc+0x69/0x250 [ 2187.410503][T10881] ? pmd_install+0x150/0x150 [ 2187.415100][T10881] ? hugepage_vma_check+0x44e/0x780 [ 2187.420307][T10881] ? __pmd_alloc+0x2ff/0x5c0 [ 2187.424915][T10881] __handle_mm_fault+0x310b/0x39b0 [ 2187.430043][T10881] ? vm_iomap_memory+0x190/0x190 [ 2187.435019][T10881] handle_mm_fault+0x1c8/0x780 [ 2187.439797][T10881] do_user_addr_fault+0x475/0x1210 [ 2187.444929][T10881] exc_page_fault+0x94/0x170 [ 2187.449546][T10881] asm_exc_page_fault+0x22/0x30 [ 2187.454419][T10881] RIP: 0033:0x7f2941c2a149 [ 2187.458846][T10881] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2187.478487][T10881] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2187.484565][T10881] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2187.492543][T10881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2187.500516][T10881] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2187.508489][T10881] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000215ecf [ 2187.516466][T10881] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2187.524458][T10881] [ 2187.601620][T10881] memory: usage 307200kB, limit 307200kB, failcnt 38200 [ 2187.611357][T10881] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2187.639461][T10881] Memory cgroup stats for /syz0: [ 2187.639706][T10881] anon 135168 [ 2187.639706][T10881] file 184320 [ 2187.639706][T10881] kernel 314253312 [ 2187.639706][T10881] kernel_stack 65536 [ 2187.639706][T10881] pagetables 77824 [ 2187.639706][T10881] percpu 4839008 [ 2187.639706][T10881] sock 0 [ 2187.639706][T10881] vmalloc 0 [ 2187.639706][T10881] shmem 180224 [ 2187.639706][T10881] zswap 0 [ 2187.639706][T10881] zswapped 0 [ 2187.639706][T10881] file_mapped 180224 [ 2187.639706][T10881] file_dirty 0 [ 2187.639706][T10881] file_writeback 0 [ 2187.639706][T10881] swapcached 0 [ 2187.639706][T10881] anon_thp 0 [ 2187.639706][T10881] file_thp 0 [ 2187.639706][T10881] shmem_thp 0 [ 2187.639706][T10881] inactive_anon 151552 [ 2187.639706][T10881] active_anon 163840 [ 2187.639706][T10881] inactive_file 0 [ 2187.639706][T10881] active_file 4096 [ 2187.639706][T10881] unevictable 0 [ 2187.639706][T10881] slab_reclaimable 18040 [ 2187.639706][T10881] slab_unreclaimable 309219136 [ 2187.639706][T10881] slab 309237176 07:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xc00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2187.802391][T10881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10881,uid=0 [ 2187.824796][T10881] Memory cgroup out of memory: Killed process 10881 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2187.893780][T10907] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2187.912144][T10907] CPU: 1 PID: 10907 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2187.922619][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2187.932700][T10907] Call Trace: [ 2187.936001][T10907] [ 2187.938951][T10907] dump_stack_lvl+0xcd/0x134 [ 2187.943588][T10907] dump_header+0x10b/0x7f9 [ 2187.948047][T10907] oom_kill_process.cold+0x10/0x15 [ 2187.953196][T10907] out_of_memory+0x358/0x14a0 [ 2187.957908][T10907] ? find_held_lock+0x2d/0x110 [ 2187.962704][T10907] ? oom_killer_disable+0x270/0x270 [ 2187.967938][T10907] ? find_held_lock+0x2d/0x110 [ 2187.972733][T10907] mem_cgroup_out_of_memory+0x206/0x270 [ 2187.978334][T10907] ? mem_cgroup_margin+0x130/0x130 [ 2187.983470][T10907] ? lock_downgrade+0x6e0/0x6e0 [ 2187.988368][T10907] try_charge_memcg+0xf67/0x13f0 [ 2187.993347][T10907] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2187.999370][T10907] ? lock_downgrade+0x6e0/0x6e0 [ 2188.004268][T10907] charge_memcg+0x31/0x320 [ 2188.008719][T10907] __mem_cgroup_charge+0x27/0x90 [ 2188.013683][T10907] ? _compound_head+0x5d/0x150 [ 2188.018486][T10907] wp_page_copy+0x27c/0x1b60 [ 2188.023103][T10907] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2188.028579][T10907] ? lock_downgrade+0x6e0/0x6e0 [ 2188.033462][T10907] ? vm_normal_page+0x146/0x2a0 [ 2188.038347][T10907] do_wp_page+0x1d1/0x1910 [ 2188.042790][T10907] __handle_mm_fault+0x1813/0x39b0 [ 2188.047926][T10907] ? vm_iomap_memory+0x190/0x190 [ 2188.052915][T10907] handle_mm_fault+0x1c8/0x780 [ 2188.057733][T10907] do_user_addr_fault+0x475/0x1210 [ 2188.062882][T10907] exc_page_fault+0x94/0x170 [ 2188.067499][T10907] asm_exc_page_fault+0x22/0x30 [ 2188.072371][T10907] RIP: 0033:0x7f23844374b0 [ 2188.076823][T10907] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2188.096463][T10907] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2188.102583][T10907] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2188.110575][T10907] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2188.118562][T10907] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2188.126562][T10907] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2188.134554][T10907] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2188.142565][T10907] ? apparmor_socket_create+0x1f8/0x660 [ 2188.148159][T10907] 07:08:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2188.312073][T10910] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2188.396688][T10912] __nla_validate_parse: 2 callbacks suppressed [ 2188.396709][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:08:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x115}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2188.460720][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2188.488843][T10907] memory: usage 307200kB, limit 307200kB, failcnt 29337 [ 2188.505258][T10928] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2188.525057][T10907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2188.541527][T10928] bond683 (uninitialized): Released all slaves [ 2188.553514][T10907] Memory cgroup stats for /syz4: [ 2188.553771][T10907] anon 126976 [ 2188.553771][T10907] file 229376 [ 2188.553771][T10907] kernel 314216448 [ 2188.553771][T10907] kernel_stack 65536 [ 2188.553771][T10907] pagetables 69632 [ 2188.553771][T10907] percpu 4849664 [ 2188.553771][T10907] sock 0 [ 2188.553771][T10907] vmalloc 0 [ 2188.553771][T10907] shmem 229376 [ 2188.553771][T10907] zswap 0 [ 2188.553771][T10907] zswapped 0 [ 2188.553771][T10907] file_mapped 217088 [ 2188.553771][T10907] file_dirty 0 [ 2188.553771][T10907] file_writeback 0 [ 2188.553771][T10907] swapcached 0 [ 2188.553771][T10907] anon_thp 0 [ 2188.553771][T10907] file_thp 0 [ 2188.553771][T10907] shmem_thp 0 [ 2188.553771][T10907] inactive_anon 159744 [ 2188.553771][T10907] active_anon 196608 [ 2188.553771][T10907] inactive_file 0 [ 2188.553771][T10907] active_file 0 [ 2188.553771][T10907] unevictable 0 [ 2188.553771][T10907] slab_reclaimable 15872 [ 2188.553771][T10907] slab_unreclaimable 309179608 [ 2188.553771][T10907] slab 309195480 07:08:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2188.720675][T10907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10907,uid=0 [ 2188.728645][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2188.784499][T10907] Memory cgroup out of memory: Killed process 10907 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2188.851508][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:08:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2188.925015][T10939] bond93 (uninitialized): Released all slaves 07:08:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x300}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2188.990151][T10946] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2189.105385][T10922] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2189.170831][T10922] CPU: 0 PID: 10922 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2189.181305][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2189.191395][T10922] Call Trace: [ 2189.194698][T10922] [ 2189.197647][T10922] dump_stack_lvl+0xcd/0x134 [ 2189.202275][T10922] dump_header+0x10b/0x7f9 [ 2189.206731][T10922] oom_kill_process.cold+0x10/0x15 [ 2189.211885][T10922] out_of_memory+0x358/0x14a0 [ 2189.216600][T10922] ? find_held_lock+0x2d/0x110 [ 2189.221398][T10922] ? oom_killer_disable+0x270/0x270 [ 2189.226636][T10922] ? find_held_lock+0x2d/0x110 [ 2189.231435][T10922] mem_cgroup_out_of_memory+0x206/0x270 [ 2189.237014][T10922] ? mem_cgroup_margin+0x130/0x130 [ 2189.242147][T10922] ? lock_downgrade+0x6e0/0x6e0 [ 2189.247029][T10922] try_charge_memcg+0xf67/0x13f0 [ 2189.251985][T10922] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2189.257978][T10922] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2189.263708][T10922] ? lock_downgrade+0x6e0/0x6e0 [ 2189.268568][T10922] ? lock_downgrade+0x6e0/0x6e0 [ 2189.273441][T10922] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2189.279001][T10922] __alloc_pages+0x1ef/0x510 [ 2189.283604][T10922] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2189.290393][T10922] ? find_held_lock+0x2d/0x110 [ 2189.295172][T10922] alloc_pages+0x1a6/0x270 [ 2189.299617][T10922] pte_alloc_one+0x16/0x230 [ 2189.304142][T10922] __pte_alloc+0x69/0x250 [ 2189.308478][T10922] ? pmd_install+0x150/0x150 [ 2189.313074][T10922] ? hugepage_vma_check+0x44e/0x780 [ 2189.318286][T10922] ? __pmd_alloc+0x2ff/0x5c0 [ 2189.322903][T10922] __handle_mm_fault+0x310b/0x39b0 [ 2189.328029][T10922] ? vm_iomap_memory+0x190/0x190 [ 2189.332998][T10922] handle_mm_fault+0x1c8/0x780 [ 2189.337775][T10922] do_user_addr_fault+0x475/0x1210 [ 2189.342911][T10922] exc_page_fault+0x94/0x170 [ 2189.347515][T10922] asm_exc_page_fault+0x22/0x30 [ 2189.352383][T10922] RIP: 0033:0x7f2941c2a149 [ 2189.356807][T10922] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2189.376425][T10922] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2189.382496][T10922] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2189.390471][T10922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2189.398456][T10922] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2189.406427][T10922] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00000000002166d8 [ 2189.414404][T10922] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2189.422401][T10922] 07:08:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0xffffffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2189.482388][T10953] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2189.489335][T10922] memory: usage 307200kB, limit 307200kB, failcnt 38288 [ 2189.504226][T10953] bond683 (uninitialized): Released all slaves [ 2189.561213][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2189.584090][T10922] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2189.612433][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2189.632691][T10922] Memory cgroup stats for /syz0: [ 2189.633037][T10922] anon 135168 [ 2189.633037][T10922] file 184320 [ 2189.633037][T10922] kernel 314253312 [ 2189.633037][T10922] kernel_stack 65536 [ 2189.633037][T10922] pagetables 77824 [ 2189.633037][T10922] percpu 4839008 [ 2189.633037][T10922] sock 0 [ 2189.633037][T10922] vmalloc 0 [ 2189.633037][T10922] shmem 180224 [ 2189.633037][T10922] zswap 0 [ 2189.633037][T10922] zswapped 0 [ 2189.633037][T10922] file_mapped 180224 [ 2189.633037][T10922] file_dirty 0 [ 2189.633037][T10922] file_writeback 0 [ 2189.633037][T10922] swapcached 0 [ 2189.633037][T10922] anon_thp 0 [ 2189.633037][T10922] file_thp 0 [ 2189.633037][T10922] shmem_thp 0 [ 2189.633037][T10922] inactive_anon 151552 [ 2189.633037][T10922] active_anon 163840 [ 2189.633037][T10922] inactive_file 0 [ 2189.633037][T10922] active_file 4096 [ 2189.633037][T10922] unevictable 0 [ 2189.633037][T10922] slab_reclaimable 18040 [ 2189.633037][T10922] slab_unreclaimable 309219136 [ 2189.633037][T10922] slab 309237176 07:08:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2189.793406][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2189.812967][T10922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10922,uid=0 07:08:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0xfffffffffffff000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2189.835707][T10922] Memory cgroup out of memory: Killed process 10922 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xc01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2189.895603][T10950] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2189.915504][T10962] bond93 (uninitialized): Released all slaves [ 2189.961655][T10974] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2189.993338][T10950] CPU: 1 PID: 10950 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2190.003815][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2190.013888][T10950] Call Trace: [ 2190.017180][T10950] [ 2190.020132][T10950] dump_stack_lvl+0xcd/0x134 [ 2190.024748][T10950] dump_header+0x10b/0x7f9 [ 2190.029191][T10950] oom_kill_process.cold+0x10/0x15 [ 2190.034331][T10950] out_of_memory+0x358/0x14a0 [ 2190.039041][T10950] ? oom_killer_disable+0x270/0x270 [ 2190.044269][T10950] ? find_held_lock+0x2d/0x110 [ 2190.049056][T10950] mem_cgroup_out_of_memory+0x206/0x270 [ 2190.054623][T10950] ? mem_cgroup_margin+0x130/0x130 [ 2190.059750][T10950] ? lock_downgrade+0x6e0/0x6e0 [ 2190.064638][T10950] try_charge_memcg+0xf67/0x13f0 [ 2190.069603][T10950] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2190.075616][T10950] ? lock_downgrade+0x6e0/0x6e0 [ 2190.080521][T10950] charge_memcg+0x31/0x320 [ 2190.084959][T10950] __mem_cgroup_charge+0x27/0x90 [ 2190.089922][T10950] ? _compound_head+0x5d/0x150 [ 2190.094702][T10950] wp_page_copy+0x27c/0x1b60 [ 2190.099317][T10950] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2190.104790][T10950] ? lock_downgrade+0x6e0/0x6e0 [ 2190.109658][T10950] ? vm_normal_page+0x146/0x2a0 [ 2190.114542][T10950] do_wp_page+0x1d1/0x1910 [ 2190.118985][T10950] __handle_mm_fault+0x1813/0x39b0 [ 2190.124125][T10950] ? vm_iomap_memory+0x190/0x190 [ 2190.129110][T10950] handle_mm_fault+0x1c8/0x780 [ 2190.133898][T10950] do_user_addr_fault+0x475/0x1210 [ 2190.139046][T10950] exc_page_fault+0x94/0x170 [ 2190.143665][T10950] asm_exc_page_fault+0x22/0x30 [ 2190.148530][T10950] RIP: 0033:0x7f23844374b0 [ 2190.152960][T10950] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2190.172584][T10950] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2190.178671][T10950] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2190.186661][T10950] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2190.194653][T10950] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2190.202644][T10950] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 07:08:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x500}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2190.210632][T10950] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2190.218623][T10950] ? apparmor_socket_create+0x1f8/0x660 [ 2190.224211][T10950] [ 2190.241791][T10974] bond683 (uninitialized): Released all slaves [ 2190.260810][T10950] memory: usage 307200kB, limit 307200kB, failcnt 29401 [ 2190.274061][T10950] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2190.298741][T10950] Memory cgroup stats for /syz4: [ 2190.298980][T10950] anon 126976 [ 2190.298980][T10950] file 229376 [ 2190.298980][T10950] kernel 314216448 [ 2190.298980][T10950] kernel_stack 65536 [ 2190.298980][T10950] pagetables 69632 [ 2190.298980][T10950] percpu 4849664 [ 2190.298980][T10950] sock 0 [ 2190.298980][T10950] vmalloc 0 [ 2190.298980][T10950] shmem 229376 [ 2190.298980][T10950] zswap 0 [ 2190.298980][T10950] zswapped 0 [ 2190.298980][T10950] file_mapped 217088 [ 2190.298980][T10950] file_dirty 0 [ 2190.298980][T10950] file_writeback 0 [ 2190.298980][T10950] swapcached 0 [ 2190.298980][T10950] anon_thp 0 [ 2190.298980][T10950] file_thp 0 [ 2190.298980][T10950] shmem_thp 0 [ 2190.298980][T10950] inactive_anon 159744 [ 2190.298980][T10950] active_anon 196608 [ 2190.298980][T10950] inactive_file 0 [ 2190.298980][T10950] active_file 0 [ 2190.298980][T10950] unevictable 0 [ 2190.298980][T10950] slab_reclaimable 15872 [ 2190.298980][T10950] slab_unreclaimable 309179608 [ 2190.298980][T10950] slab 309195480 [ 2190.321458][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:08:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r5, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2190.510255][T10989] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2190.617250][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2190.631448][T10950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10950,uid=0 [ 2190.631620][T10950] Memory cgroup out of memory: Killed process 10950 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2190.686444][T10979] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2190.696014][T10982] bond93 (uninitialized): Released all slaves [ 2190.755476][T10979] CPU: 1 PID: 10979 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2190.765953][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2190.776038][T10979] Call Trace: [ 2190.779339][T10979] [ 2190.782293][T10979] dump_stack_lvl+0xcd/0x134 [ 2190.786920][T10979] dump_header+0x10b/0x7f9 [ 2190.791376][T10979] oom_kill_process.cold+0x10/0x15 [ 2190.796528][T10979] out_of_memory+0x358/0x14a0 [ 2190.801245][T10979] ? oom_killer_disable+0x270/0x270 [ 2190.806484][T10979] ? find_held_lock+0x2d/0x110 [ 2190.811283][T10979] mem_cgroup_out_of_memory+0x206/0x270 [ 2190.816857][T10979] ? mem_cgroup_margin+0x130/0x130 [ 2190.821998][T10979] ? lock_downgrade+0x6e0/0x6e0 [ 2190.826895][T10979] try_charge_memcg+0xf67/0x13f0 [ 2190.831877][T10979] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2190.837915][T10979] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2190.843669][T10979] ? lock_downgrade+0x6e0/0x6e0 [ 2190.848548][T10979] ? lock_downgrade+0x6e0/0x6e0 [ 2190.853440][T10979] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2190.859027][T10979] __alloc_pages+0x1ef/0x510 [ 2190.863660][T10979] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2190.870476][T10979] ? find_held_lock+0x2d/0x110 [ 2190.875281][T10979] alloc_pages+0x1a6/0x270 [ 2190.879735][T10979] pte_alloc_one+0x16/0x230 [ 2190.884273][T10979] __pte_alloc+0x69/0x250 [ 2190.888635][T10979] ? pmd_install+0x150/0x150 [ 2190.893251][T10979] ? hugepage_vma_check+0x44e/0x780 [ 2190.898480][T10979] ? __pmd_alloc+0x2ff/0x5c0 [ 2190.903100][T10979] __handle_mm_fault+0x310b/0x39b0 [ 2190.908246][T10979] ? vm_iomap_memory+0x190/0x190 [ 2190.913237][T10979] handle_mm_fault+0x1c8/0x780 [ 2190.918037][T10979] do_user_addr_fault+0x475/0x1210 [ 2190.923194][T10979] exc_page_fault+0x94/0x170 [ 2190.927822][T10979] asm_exc_page_fault+0x22/0x30 [ 2190.932740][T10979] RIP: 0033:0x7f2941c2a149 [ 2190.937186][T10979] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2190.951516][T10997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2190.956797][T10979] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2190.956826][T10979] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2190.956843][T10979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 07:08:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x531}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x43190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2190.956859][T10979] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2190.956874][T10979] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000216cb0 [ 2190.956889][T10979] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2190.956927][T10979] [ 2191.103820][T10997] bond683 (uninitialized): Released all slaves [ 2191.140817][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 07:08:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2191.154815][T10979] memory: usage 307200kB, limit 307200kB, failcnt 38361 [ 2191.173171][T10979] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2191.184609][T10979] Memory cgroup stats for /syz0: [ 2191.184841][T10979] anon 135168 [ 2191.184841][T10979] file 184320 [ 2191.184841][T10979] kernel 314253312 [ 2191.184841][T10979] kernel_stack 65536 [ 2191.184841][T10979] pagetables 77824 [ 2191.184841][T10979] percpu 4839008 [ 2191.184841][T10979] sock 0 [ 2191.184841][T10979] vmalloc 0 [ 2191.184841][T10979] shmem 180224 [ 2191.184841][T10979] zswap 0 [ 2191.184841][T10979] zswapped 0 [ 2191.184841][T10979] file_mapped 180224 [ 2191.184841][T10979] file_dirty 0 [ 2191.184841][T10979] file_writeback 0 [ 2191.184841][T10979] swapcached 0 [ 2191.184841][T10979] anon_thp 0 [ 2191.184841][T10979] file_thp 0 [ 2191.184841][T10979] shmem_thp 0 07:08:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2191.184841][T10979] inactive_anon 151552 [ 2191.184841][T10979] active_anon 163840 [ 2191.184841][T10979] inactive_file 0 [ 2191.184841][T10979] active_file 4096 [ 2191.184841][T10979] unevictable 0 [ 2191.184841][T10979] slab_reclaimable 18040 [ 2191.184841][T10979] slab_unreclaimable 309219136 [ 2191.184841][T10979] slab 309237176 07:08:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2191.349105][T11010] bond93 (uninitialized): Released all slaves 07:08:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2191.510466][T11024] bond93 (uninitialized): Released all slaves [ 2191.543137][T11021] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2191.776270][T11029] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2191.797176][T10979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10979,uid=0 [ 2191.826050][T11029] bond683 (uninitialized): Released all slaves [ 2191.842844][T10979] Memory cgroup out of memory: Killed process 10979 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2191.876222][T11005] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2191.895786][T11005] CPU: 1 PID: 11005 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2191.906238][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2191.916298][T11005] Call Trace: [ 2191.919585][T11005] [ 2191.922521][T11005] dump_stack_lvl+0xcd/0x134 [ 2191.927134][T11005] dump_header+0x10b/0x7f9 [ 2191.931563][T11005] oom_kill_process.cold+0x10/0x15 [ 2191.936695][T11005] out_of_memory+0x358/0x14a0 [ 2191.941389][T11005] ? oom_killer_disable+0x270/0x270 [ 2191.946610][T11005] ? find_held_lock+0x2d/0x110 [ 2191.951385][T11005] mem_cgroup_out_of_memory+0x206/0x270 [ 2191.956954][T11005] ? mem_cgroup_margin+0x130/0x130 [ 2191.962069][T11005] ? lock_downgrade+0x6e0/0x6e0 [ 2191.966943][T11005] try_charge_memcg+0xf67/0x13f0 [ 2191.971899][T11005] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2191.977898][T11005] ? lock_downgrade+0x6e0/0x6e0 [ 2191.982770][T11005] charge_memcg+0x31/0x320 [ 2191.987198][T11005] __mem_cgroup_charge+0x27/0x90 [ 2191.992143][T11005] ? _compound_head+0x5d/0x150 [ 2191.996920][T11005] wp_page_copy+0x27c/0x1b60 [ 2192.001523][T11005] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2192.006990][T11005] ? lock_downgrade+0x6e0/0x6e0 [ 2192.011848][T11005] ? vm_normal_page+0x146/0x2a0 [ 2192.016719][T11005] do_wp_page+0x1d1/0x1910 [ 2192.021149][T11005] __handle_mm_fault+0x1813/0x39b0 [ 2192.026274][T11005] ? vm_iomap_memory+0x190/0x190 [ 2192.031244][T11005] handle_mm_fault+0x1c8/0x780 [ 2192.036019][T11005] do_user_addr_fault+0x475/0x1210 [ 2192.041154][T11005] exc_page_fault+0x94/0x170 [ 2192.045759][T11005] asm_exc_page_fault+0x22/0x30 [ 2192.050618][T11005] RIP: 0033:0x7f23844374b0 [ 2192.055044][T11005] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2192.074676][T11005] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2192.080749][T11005] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2192.088738][T11005] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2192.096712][T11005] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2192.104687][T11005] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2192.112665][T11005] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2192.120656][T11005] ? apparmor_socket_create+0x1f8/0x660 [ 2192.126232][T11005] 07:08:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xd00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x700}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2192.185460][T11005] memory: usage 307200kB, limit 307200kB, failcnt 29495 [ 2192.197435][T11005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2192.231964][T11040] bond93 (uninitialized): Released all slaves [ 2192.243353][T11005] Memory cgroup stats for /syz4: [ 2192.243550][T11005] anon 126976 [ 2192.243550][T11005] file 229376 [ 2192.243550][T11005] kernel 314216448 [ 2192.243550][T11005] kernel_stack 65536 [ 2192.243550][T11005] pagetables 69632 [ 2192.243550][T11005] percpu 4849664 [ 2192.243550][T11005] sock 0 [ 2192.243550][T11005] vmalloc 0 [ 2192.243550][T11005] shmem 229376 [ 2192.243550][T11005] zswap 0 [ 2192.243550][T11005] zswapped 0 [ 2192.243550][T11005] file_mapped 217088 [ 2192.243550][T11005] file_dirty 0 [ 2192.243550][T11005] file_writeback 0 [ 2192.243550][T11005] swapcached 0 [ 2192.243550][T11005] anon_thp 0 [ 2192.243550][T11005] file_thp 0 [ 2192.243550][T11005] shmem_thp 0 [ 2192.243550][T11005] inactive_anon 159744 [ 2192.243550][T11005] active_anon 196608 [ 2192.243550][T11005] inactive_file 0 [ 2192.243550][T11005] active_file 0 [ 2192.243550][T11005] unevictable 0 [ 2192.243550][T11005] slab_reclaimable 15872 [ 2192.243550][T11005] slab_unreclaimable 309179608 [ 2192.243550][T11005] slab 309195480 07:08:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2192.355256][T11055] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2192.381850][T11055] bond683 (uninitialized): Released all slaves [ 2192.486435][T11005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11005,uid=0 [ 2192.626672][T11005] Memory cgroup out of memory: Killed process 11005 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2192.657210][T11054] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2192.673262][T11054] CPU: 0 PID: 11054 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2192.683727][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2192.693811][T11054] Call Trace: [ 2192.697106][T11054] [ 2192.700082][T11054] dump_stack_lvl+0xcd/0x134 [ 2192.704710][T11054] dump_header+0x10b/0x7f9 [ 2192.709165][T11054] oom_kill_process.cold+0x10/0x15 [ 2192.714316][T11054] out_of_memory+0x358/0x14a0 [ 2192.719034][T11054] ? oom_killer_disable+0x270/0x270 [ 2192.724273][T11054] ? find_held_lock+0x2d/0x110 [ 2192.729076][T11054] mem_cgroup_out_of_memory+0x206/0x270 [ 2192.734659][T11054] ? mem_cgroup_margin+0x130/0x130 [ 2192.739800][T11054] ? lock_downgrade+0x6e0/0x6e0 [ 2192.744704][T11054] try_charge_memcg+0xf67/0x13f0 [ 2192.749681][T11054] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2192.755700][T11054] ? lock_downgrade+0x6e0/0x6e0 [ 2192.760596][T11054] charge_memcg+0x31/0x320 [ 2192.765046][T11054] __mem_cgroup_charge+0x27/0x90 [ 2192.770002][T11054] ? _compound_head+0x5d/0x150 [ 2192.774788][T11054] wp_page_copy+0x27c/0x1b60 [ 2192.779414][T11054] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2192.784905][T11054] ? lock_downgrade+0x6e0/0x6e0 [ 2192.789782][T11054] ? vm_normal_page+0x146/0x2a0 [ 2192.794672][T11054] do_wp_page+0x1d1/0x1910 [ 2192.799118][T11054] __handle_mm_fault+0x1813/0x39b0 [ 2192.804260][T11054] ? vm_iomap_memory+0x190/0x190 [ 2192.809244][T11054] handle_mm_fault+0x1c8/0x780 [ 2192.814037][T11054] do_user_addr_fault+0x475/0x1210 [ 2192.819279][T11054] exc_page_fault+0x94/0x170 [ 2192.823903][T11054] asm_exc_page_fault+0x22/0x30 [ 2192.828787][T11054] RIP: 0033:0x7f2941c374b0 [ 2192.833231][T11054] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2192.852960][T11054] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 [ 2192.859061][T11054] RAX: 00000000a25c24d7 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 [ 2192.867061][T11054] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000a1eab35 [ 2192.875063][T11054] RBP: 00000000a25c24d7 R08: 00000000000004d7 R09: 00000000a25c24db [ 2192.883067][T11054] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2192.891066][T11054] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83c43dce [ 2192.899064][T11054] ? apparmor_socket_create+0xae/0x660 [ 2192.904584][T11054] 07:08:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2193.013219][T11054] memory: usage 307188kB, limit 307200kB, failcnt 38404 [ 2193.023810][T11054] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2193.094879][T11074] bond93 (uninitialized): Released all slaves [ 2193.101908][T11054] Memory cgroup stats for /syz0: [ 2193.102089][T11054] anon 126976 [ 2193.102089][T11054] file 184320 [ 2193.102089][T11054] kernel 314249216 [ 2193.102089][T11054] kernel_stack 65536 [ 2193.102089][T11054] pagetables 73728 [ 2193.102089][T11054] percpu 4839008 [ 2193.102089][T11054] sock 0 [ 2193.102089][T11054] vmalloc 0 [ 2193.102089][T11054] shmem 180224 [ 2193.102089][T11054] zswap 0 [ 2193.102089][T11054] zswapped 0 [ 2193.102089][T11054] file_mapped 180224 [ 2193.102089][T11054] file_dirty 0 [ 2193.102089][T11054] file_writeback 0 [ 2193.102089][T11054] swapcached 0 [ 2193.102089][T11054] anon_thp 0 [ 2193.102089][T11054] file_thp 0 [ 2193.102089][T11054] shmem_thp 0 [ 2193.102089][T11054] inactive_anon 143360 [ 2193.102089][T11054] active_anon 163840 [ 2193.102089][T11054] inactive_file 0 [ 2193.102089][T11054] active_file 4096 [ 2193.102089][T11054] unevictable 0 [ 2193.102089][T11054] slab_reclaimable 16112 [ 2193.102089][T11054] slab_unreclaimable 309218488 [ 2193.102089][T11054] slab 309234600 [ 2193.102151][T11054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11054,uid=0 [ 2193.102795][T11054] Memory cgroup out of memory: Killed process 11054 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2193.271753][T11067] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 07:08:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xd01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2193.325787][T11076] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2193.401519][T11067] CPU: 0 PID: 11067 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2193.411994][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2193.422072][T11067] Call Trace: [ 2193.425376][T11067] [ 2193.428334][T11067] dump_stack_lvl+0xcd/0x134 [ 2193.432962][T11067] dump_header+0x10b/0x7f9 [ 2193.437423][T11067] oom_kill_process.cold+0x10/0x15 [ 2193.442577][T11067] out_of_memory+0x358/0x14a0 [ 2193.447290][T11067] ? find_held_lock+0x2d/0x110 [ 2193.452086][T11067] ? oom_killer_disable+0x270/0x270 [ 2193.457323][T11067] ? find_held_lock+0x2d/0x110 [ 2193.462118][T11067] mem_cgroup_out_of_memory+0x206/0x270 [ 2193.467709][T11067] ? mem_cgroup_margin+0x130/0x130 [ 2193.472844][T11067] ? lock_downgrade+0x6e0/0x6e0 [ 2193.477738][T11067] try_charge_memcg+0xf67/0x13f0 [ 2193.482713][T11067] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2193.488731][T11067] ? lock_downgrade+0x6e0/0x6e0 [ 2193.493618][T11067] charge_memcg+0x31/0x320 [ 2193.498049][T11067] __mem_cgroup_charge+0x27/0x90 [ 2193.502995][T11067] ? _compound_head+0x5d/0x150 [ 2193.507772][T11067] wp_page_copy+0x27c/0x1b60 [ 2193.512380][T11067] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2193.517846][T11067] ? lock_downgrade+0x6e0/0x6e0 [ 2193.522707][T11067] ? vm_normal_page+0x146/0x2a0 [ 2193.527579][T11067] do_wp_page+0x1d1/0x1910 [ 2193.532017][T11067] __handle_mm_fault+0x1813/0x39b0 [ 2193.537151][T11067] ? vm_iomap_memory+0x190/0x190 [ 2193.542129][T11067] handle_mm_fault+0x1c8/0x780 [ 2193.546921][T11067] do_user_addr_fault+0x475/0x1210 [ 2193.552067][T11067] exc_page_fault+0x94/0x170 [ 2193.556676][T11067] asm_exc_page_fault+0x22/0x30 [ 2193.561555][T11067] RIP: 0033:0x7f23844374b0 [ 2193.565977][T11067] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2193.585605][T11067] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2193.591688][T11067] RAX: 000000003d95148f RBX: 00007f238459c018 RCX: 0000001b2e920000 07:08:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2193.599664][T11067] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d57763c [ 2193.607640][T11067] RBP: 000000003d95148f R08: 000000000000148f R09: 000000003d951493 [ 2193.615634][T11067] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2193.623635][T11067] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874c3bcd [ 2193.631617][T11067] ? __x64_sys_socket+0xd/0xb0 [ 2193.636417][T11067] [ 2193.696556][T11076] bond683 (uninitialized): Released all slaves [ 2193.725839][T11067] memory: usage 307188kB, limit 307200kB, failcnt 29520 [ 2193.735914][T11067] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2193.746124][T11067] Memory cgroup stats for /syz4: [ 2193.746291][T11067] anon 114688 [ 2193.746291][T11067] file 229376 [ 2193.746291][T11067] kernel 314216448 [ 2193.746291][T11067] kernel_stack 65536 [ 2193.746291][T11067] pagetables 69632 [ 2193.746291][T11067] percpu 4849664 [ 2193.746291][T11067] sock 0 [ 2193.746291][T11067] vmalloc 0 [ 2193.746291][T11067] shmem 229376 [ 2193.746291][T11067] zswap 0 [ 2193.746291][T11067] zswapped 0 [ 2193.746291][T11067] file_mapped 217088 [ 2193.746291][T11067] file_dirty 0 [ 2193.746291][T11067] file_writeback 0 [ 2193.746291][T11067] swapcached 0 [ 2193.746291][T11067] anon_thp 0 [ 2193.746291][T11067] file_thp 0 [ 2193.746291][T11067] shmem_thp 0 [ 2193.746291][T11067] inactive_anon 147456 [ 2193.746291][T11067] active_anon 196608 [ 2193.746291][T11067] inactive_file 0 [ 2193.746291][T11067] active_file 0 [ 2193.746291][T11067] unevictable 0 [ 2193.746291][T11067] slab_reclaimable 15872 [ 2193.746291][T11067] slab_unreclaimable 309179608 [ 2193.746291][T11067] slab 309195480 07:08:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xa}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2193.750845][T11078] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2193.755149][T11067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11067,uid=0 [ 2193.944746][T11067] Memory cgroup out of memory: Killed process 11067 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x45190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2194.011617][T11087] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2194.076003][T11087] CPU: 0 PID: 11087 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2194.086478][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2194.096560][T11087] Call Trace: [ 2194.099862][T11087] [ 2194.102814][T11087] dump_stack_lvl+0xcd/0x134 [ 2194.107448][T11087] dump_header+0x10b/0x7f9 [ 2194.111900][T11087] oom_kill_process.cold+0x10/0x15 [ 2194.117045][T11087] out_of_memory+0x358/0x14a0 [ 2194.121757][T11087] ? find_held_lock+0x2d/0x110 [ 2194.126546][T11087] ? oom_killer_disable+0x270/0x270 [ 2194.131780][T11087] ? find_held_lock+0x2d/0x110 [ 2194.136569][T11087] mem_cgroup_out_of_memory+0x206/0x270 [ 2194.137969][T11086] __nla_validate_parse: 6 callbacks suppressed [ 2194.137986][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2194.142123][T11087] ? mem_cgroup_margin+0x130/0x130 [ 2194.142153][T11087] ? lock_downgrade+0x6e0/0x6e0 [ 2194.142197][T11087] try_charge_memcg+0xf67/0x13f0 07:08:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2194.172507][T11087] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2194.178523][T11087] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2194.184275][T11087] ? lock_downgrade+0x6e0/0x6e0 [ 2194.189163][T11087] ? lock_downgrade+0x6e0/0x6e0 [ 2194.194053][T11087] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2194.199636][T11087] __alloc_pages+0x1ef/0x510 [ 2194.204258][T11087] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2194.211070][T11087] ? find_held_lock+0x2d/0x110 [ 2194.215877][T11087] alloc_pages+0x1a6/0x270 [ 2194.220326][T11087] pte_alloc_one+0x16/0x230 [ 2194.224861][T11087] __pte_alloc+0x69/0x250 [ 2194.229213][T11087] ? pmd_install+0x150/0x150 [ 2194.231429][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2194.233809][T11087] ? hugepage_vma_check+0x44e/0x780 [ 2194.233845][T11087] ? __pmd_alloc+0x2ff/0x5c0 [ 2194.233876][T11087] __handle_mm_fault+0x310b/0x39b0 [ 2194.258056][T11087] ? vm_iomap_memory+0x190/0x190 [ 2194.263049][T11087] handle_mm_fault+0x1c8/0x780 [ 2194.267850][T11087] do_user_addr_fault+0x475/0x1210 [ 2194.273006][T11087] exc_page_fault+0x94/0x170 [ 2194.277629][T11087] asm_exc_page_fault+0x22/0x30 [ 2194.282506][T11087] RIP: 0033:0x7f2941c2a149 [ 2194.286942][T11087] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2194.306574][T11087] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2194.312672][T11087] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2194.320672][T11087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2194.328669][T11087] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2194.336670][T11087] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000217a28 [ 2194.344666][T11087] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2194.352685][T11087] 07:08:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xc}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2194.416966][T11087] memory: usage 307200kB, limit 307200kB, failcnt 38484 [ 2194.432374][T11087] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2194.448014][T11105] bond93 (uninitialized): Released all slaves [ 2194.463604][T11087] Memory cgroup stats for /syz0: [ 2194.463789][T11087] anon 135168 [ 2194.463789][T11087] file 184320 [ 2194.463789][T11087] kernel 314253312 [ 2194.463789][T11087] kernel_stack 65536 [ 2194.463789][T11087] pagetables 77824 [ 2194.463789][T11087] percpu 4839008 [ 2194.463789][T11087] sock 0 [ 2194.463789][T11087] vmalloc 0 [ 2194.463789][T11087] shmem 180224 [ 2194.463789][T11087] zswap 0 [ 2194.463789][T11087] zswapped 0 [ 2194.463789][T11087] file_mapped 180224 [ 2194.463789][T11087] file_dirty 0 [ 2194.463789][T11087] file_writeback 0 07:08:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2194.463789][T11087] swapcached 0 [ 2194.463789][T11087] anon_thp 0 [ 2194.463789][T11087] file_thp 0 [ 2194.463789][T11087] shmem_thp 0 [ 2194.463789][T11087] inactive_anon 151552 [ 2194.463789][T11087] active_anon 163840 [ 2194.463789][T11087] inactive_file 0 [ 2194.463789][T11087] active_file 4096 [ 2194.463789][T11087] unevictable 0 [ 2194.463789][T11087] slab_reclaimable 18040 [ 2194.463789][T11087] slab_unreclaimable 309219440 [ 2194.463789][T11087] slab 309237480 07:08:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2194.684409][T11124] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2194.721082][T11087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11087,uid=0 [ 2194.792285][T11087] Memory cgroup out of memory: Killed process 11087 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xe00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2194.921216][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2194.951563][T11126] bond93 (uninitialized): Released all slaves 07:08:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2195.003215][T11102] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2195.022126][T11102] CPU: 0 PID: 11102 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2195.032593][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2195.042719][T11102] Call Trace: [ 2195.046014][T11102] [ 2195.048965][T11102] dump_stack_lvl+0xcd/0x134 [ 2195.053602][T11102] dump_header+0x10b/0x7f9 [ 2195.058058][T11102] oom_kill_process.cold+0x10/0x15 [ 2195.063212][T11102] out_of_memory+0x358/0x14a0 [ 2195.067930][T11102] ? find_held_lock+0x2d/0x110 [ 2195.072722][T11102] ? oom_killer_disable+0x270/0x270 [ 2195.077957][T11102] ? find_held_lock+0x2d/0x110 [ 2195.082750][T11102] mem_cgroup_out_of_memory+0x206/0x270 [ 2195.088328][T11102] ? mem_cgroup_margin+0x130/0x130 [ 2195.093471][T11102] ? lock_downgrade+0x6e0/0x6e0 [ 2195.098366][T11102] try_charge_memcg+0xf67/0x13f0 07:08:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4c}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2195.103344][T11102] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2195.109367][T11102] ? lock_downgrade+0x6e0/0x6e0 [ 2195.114257][T11102] charge_memcg+0x31/0x320 [ 2195.118702][T11102] __mem_cgroup_charge+0x27/0x90 [ 2195.123666][T11102] ? _compound_head+0x5d/0x150 [ 2195.128467][T11102] wp_page_copy+0x27c/0x1b60 [ 2195.133105][T11102] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2195.138797][T11102] ? lock_downgrade+0x6e0/0x6e0 [ 2195.143677][T11102] ? vm_normal_page+0x146/0x2a0 [ 2195.148571][T11102] do_wp_page+0x1d1/0x1910 [ 2195.153025][T11102] __handle_mm_fault+0x1813/0x39b0 [ 2195.158174][T11102] ? vm_iomap_memory+0x190/0x190 [ 2195.163163][T11102] handle_mm_fault+0x1c8/0x780 [ 2195.167957][T11102] do_user_addr_fault+0x475/0x1210 [ 2195.173111][T11102] exc_page_fault+0x94/0x170 [ 2195.177740][T11102] asm_exc_page_fault+0x22/0x30 [ 2195.182618][T11102] RIP: 0033:0x7f23844374b0 [ 2195.187054][T11102] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2195.204102][T11136] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2195.206667][T11102] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2195.206693][T11102] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2195.206712][T11102] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2195.236903][T11102] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2195.244904][T11102] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2195.252903][T11102] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2195.260905][T11102] ? apparmor_socket_create+0x1f8/0x660 [ 2195.266501][T11102] [ 2195.345987][T11102] memory: usage 307200kB, limit 307200kB, failcnt 29592 [ 2195.355550][T11102] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2195.360100][T11136] bond683 (uninitialized): Released all slaves [ 2195.365471][T11102] Memory cgroup stats for /syz4: [ 2195.372345][T11102] anon 126976 [ 2195.372345][T11102] file 229376 [ 2195.372345][T11102] kernel 314216448 [ 2195.372345][T11102] kernel_stack 65536 [ 2195.372345][T11102] pagetables 69632 [ 2195.372345][T11102] percpu 4849664 [ 2195.372345][T11102] sock 0 [ 2195.372345][T11102] vmalloc 0 [ 2195.372345][T11102] shmem 229376 [ 2195.372345][T11102] zswap 0 [ 2195.372345][T11102] zswapped 0 [ 2195.372345][T11102] file_mapped 217088 [ 2195.372345][T11102] file_dirty 0 [ 2195.372345][T11102] file_writeback 0 [ 2195.372345][T11102] swapcached 0 [ 2195.372345][T11102] anon_thp 0 [ 2195.372345][T11102] file_thp 0 [ 2195.372345][T11102] shmem_thp 0 [ 2195.372345][T11102] inactive_anon 159744 [ 2195.372345][T11102] active_anon 196608 [ 2195.372345][T11102] inactive_file 0 [ 2195.372345][T11102] active_file 0 [ 2195.372345][T11102] unevictable 0 [ 2195.372345][T11102] slab_reclaimable 15872 [ 2195.372345][T11102] slab_unreclaimable 309179608 [ 2195.372345][T11102] slab 309195480 [ 2195.520449][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2195.559585][T11102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11102,uid=0 [ 2195.634400][T11102] Memory cgroup out of memory: Killed process 11102 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x60}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x68}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2195.751820][T11161] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2195.774668][T11148] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2195.846008][T11148] CPU: 0 PID: 11148 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2195.856488][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2195.866568][T11148] Call Trace: [ 2195.869866][T11148] [ 2195.872822][T11148] dump_stack_lvl+0xcd/0x134 [ 2195.877448][T11148] dump_header+0x10b/0x7f9 [ 2195.881907][T11148] oom_kill_process.cold+0x10/0x15 [ 2195.887061][T11148] out_of_memory+0x358/0x14a0 [ 2195.891772][T11148] ? find_held_lock+0x2d/0x110 [ 2195.896567][T11148] ? oom_killer_disable+0x270/0x270 [ 2195.901972][T11148] ? find_held_lock+0x2d/0x110 [ 2195.906767][T11148] mem_cgroup_out_of_memory+0x206/0x270 [ 2195.912343][T11148] ? mem_cgroup_margin+0x130/0x130 [ 2195.917827][T11148] ? lock_downgrade+0x6e0/0x6e0 [ 2195.922725][T11148] try_charge_memcg+0xf67/0x13f0 [ 2195.927701][T11148] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2195.933709][T11148] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2195.935741][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2195.939430][T11148] ? lock_downgrade+0x6e0/0x6e0 [ 2195.939464][T11148] ? lock_downgrade+0x6e0/0x6e0 [ 2195.939503][T11148] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2195.963981][T11148] __alloc_pages+0x1ef/0x510 [ 2195.968586][T11148] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2195.975370][T11148] ? find_held_lock+0x2d/0x110 [ 2195.980150][T11148] alloc_pages+0x1a6/0x270 [ 2195.984578][T11148] pte_alloc_one+0x16/0x230 [ 2195.989091][T11148] __pte_alloc+0x69/0x250 [ 2195.993425][T11148] ? pmd_install+0x150/0x150 [ 2195.998021][T11148] ? hugepage_vma_check+0x44e/0x780 [ 2196.003231][T11148] ? __pmd_alloc+0x2ff/0x5c0 [ 2196.007848][T11148] __handle_mm_fault+0x310b/0x39b0 [ 2196.012976][T11148] ? vm_iomap_memory+0x190/0x190 [ 2196.017946][T11148] handle_mm_fault+0x1c8/0x780 [ 2196.022726][T11148] do_user_addr_fault+0x475/0x1210 [ 2196.027864][T11148] exc_page_fault+0x94/0x170 [ 2196.032472][T11148] asm_exc_page_fault+0x22/0x30 [ 2196.037328][T11148] RIP: 0033:0x7f2941c2a149 [ 2196.041766][T11148] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2196.061403][T11148] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2196.067476][T11148] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2196.075452][T11148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2196.083428][T11148] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2196.091404][T11148] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00000000002180d2 [ 2196.099379][T11148] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2196.107386][T11148] 07:08:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6c}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x74}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2196.180737][T11148] memory: usage 307200kB, limit 307200kB, failcnt 38580 [ 2196.206472][T11148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2196.229129][T11148] Memory cgroup stats for /syz0: [ 2196.229521][T11148] anon 135168 [ 2196.229521][T11148] file 184320 [ 2196.229521][T11148] kernel 314253312 [ 2196.229521][T11148] kernel_stack 65536 [ 2196.229521][T11148] pagetables 77824 [ 2196.229521][T11148] percpu 4839008 [ 2196.229521][T11148] sock 0 [ 2196.229521][T11148] vmalloc 0 [ 2196.229521][T11148] shmem 180224 [ 2196.229521][T11148] zswap 0 [ 2196.229521][T11148] zswapped 0 [ 2196.229521][T11148] file_mapped 180224 [ 2196.229521][T11148] file_dirty 0 [ 2196.229521][T11148] file_writeback 0 [ 2196.229521][T11148] swapcached 0 [ 2196.229521][T11148] anon_thp 0 [ 2196.229521][T11148] file_thp 0 [ 2196.229521][T11148] shmem_thp 0 [ 2196.229521][T11148] inactive_anon 151552 [ 2196.229521][T11148] active_anon 163840 [ 2196.229521][T11148] inactive_file 0 [ 2196.229521][T11148] active_file 4096 [ 2196.229521][T11148] unevictable 0 [ 2196.229521][T11148] slab_reclaimable 18040 [ 2196.229521][T11148] slab_unreclaimable 309219136 [ 2196.229521][T11148] slab 309237176 [ 2196.350476][T11167] bond93 (uninitialized): Released all slaves [ 2196.394061][T11166] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2196.427854][T11166] bond683 (uninitialized): Released all slaves [ 2196.450367][T11148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11148,uid=0 [ 2196.511282][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:08:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xe01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7a}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2196.555527][T11148] Memory cgroup out of memory: Killed process 11148 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2196.635039][T11192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2196.670717][T11164] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2196.731396][T11164] CPU: 0 PID: 11164 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2196.741871][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2196.749322][T11192] bond683 (uninitialized): Released all slaves [ 2196.751938][T11164] Call Trace: [ 2196.751951][T11164] [ 2196.751961][T11164] dump_stack_lvl+0xcd/0x134 [ 2196.752000][T11164] dump_header+0x10b/0x7f9 [ 2196.773371][T11164] oom_kill_process.cold+0x10/0x15 [ 2196.778522][T11164] out_of_memory+0x358/0x14a0 [ 2196.783242][T11164] ? find_held_lock+0x2d/0x110 [ 2196.788039][T11164] ? oom_killer_disable+0x270/0x270 [ 2196.793274][T11164] ? find_held_lock+0x2d/0x110 [ 2196.798073][T11164] mem_cgroup_out_of_memory+0x206/0x270 [ 2196.803667][T11164] ? mem_cgroup_margin+0x130/0x130 [ 2196.808804][T11164] ? lock_downgrade+0x6e0/0x6e0 [ 2196.813704][T11164] try_charge_memcg+0xf67/0x13f0 [ 2196.818682][T11164] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2196.824702][T11164] ? lock_downgrade+0x6e0/0x6e0 [ 2196.829602][T11164] charge_memcg+0x31/0x320 [ 2196.834057][T11164] __mem_cgroup_charge+0x27/0x90 [ 2196.839031][T11164] ? _compound_head+0x5d/0x150 [ 2196.843827][T11164] wp_page_copy+0x27c/0x1b60 [ 2196.848459][T11164] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2196.853944][T11164] ? lock_downgrade+0x6e0/0x6e0 [ 2196.858813][T11164] ? vm_normal_page+0x146/0x2a0 [ 2196.863707][T11164] do_wp_page+0x1d1/0x1910 [ 2196.868156][T11164] __handle_mm_fault+0x1813/0x39b0 [ 2196.873301][T11164] ? vm_iomap_memory+0x190/0x190 [ 2196.878295][T11164] handle_mm_fault+0x1c8/0x780 [ 2196.883096][T11164] do_user_addr_fault+0x475/0x1210 [ 2196.888257][T11164] exc_page_fault+0x94/0x170 [ 2196.892884][T11164] asm_exc_page_fault+0x22/0x30 [ 2196.897761][T11164] RIP: 0033:0x7f23844374b0 [ 2196.902205][T11164] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2196.908207][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2196.921820][T11164] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2196.921849][T11164] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2196.921866][T11164] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2196.921882][T11164] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2196.961179][T11164] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2196.969188][T11164] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2196.974190][T11196] bond93 (uninitialized): Released all slaves [ 2196.977165][T11164] ? apparmor_socket_create+0x1f8/0x660 [ 2196.977221][T11164] [ 2197.069533][T11164] memory: usage 307200kB, limit 307200kB, failcnt 29681 [ 2197.150703][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2197.164672][T11164] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2197.195796][T11164] Memory cgroup stats for /syz4: [ 2197.196041][T11164] anon 126976 [ 2197.196041][T11164] file 229376 [ 2197.196041][T11164] kernel 314216448 [ 2197.196041][T11164] kernel_stack 65536 [ 2197.196041][T11164] pagetables 69632 [ 2197.196041][T11164] percpu 4849664 [ 2197.196041][T11164] sock 0 [ 2197.196041][T11164] vmalloc 0 [ 2197.196041][T11164] shmem 229376 [ 2197.196041][T11164] zswap 0 [ 2197.196041][T11164] zswapped 0 [ 2197.196041][T11164] file_mapped 217088 [ 2197.196041][T11164] file_dirty 0 [ 2197.196041][T11164] file_writeback 0 [ 2197.196041][T11164] swapcached 0 [ 2197.196041][T11164] anon_thp 0 [ 2197.196041][T11164] file_thp 0 [ 2197.196041][T11164] shmem_thp 0 [ 2197.196041][T11164] inactive_anon 159744 [ 2197.196041][T11164] active_anon 196608 [ 2197.196041][T11164] inactive_file 0 [ 2197.196041][T11164] active_file 0 [ 2197.196041][T11164] unevictable 0 [ 2197.196041][T11164] slab_reclaimable 15872 [ 2197.196041][T11164] slab_unreclaimable 309179608 [ 2197.196041][T11164] slab 309195480 07:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1500}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2197.343887][T11164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11164,uid=0 [ 2197.359993][T11164] Memory cgroup out of memory: Killed process 11164 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2197.471724][T11200] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2197.552849][T11200] CPU: 0 PID: 11200 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2197.563330][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2197.573414][T11200] Call Trace: [ 2197.576716][T11200] [ 2197.579666][T11200] dump_stack_lvl+0xcd/0x134 [ 2197.584296][T11200] dump_header+0x10b/0x7f9 [ 2197.588749][T11200] oom_kill_process.cold+0x10/0x15 [ 2197.593895][T11200] out_of_memory+0x358/0x14a0 [ 2197.598612][T11200] ? find_held_lock+0x2d/0x110 [ 2197.603407][T11200] ? oom_killer_disable+0x270/0x270 [ 2197.608644][T11200] ? find_held_lock+0x2d/0x110 [ 2197.613444][T11200] mem_cgroup_out_of_memory+0x206/0x270 [ 2197.619025][T11200] ? mem_cgroup_margin+0x130/0x130 [ 2197.624165][T11200] ? lock_downgrade+0x6e0/0x6e0 [ 2197.629059][T11200] try_charge_memcg+0xf67/0x13f0 [ 2197.634019][T11200] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2197.640013][T11200] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2197.645743][T11200] ? lock_downgrade+0x6e0/0x6e0 [ 2197.650607][T11200] ? lock_downgrade+0x6e0/0x6e0 [ 2197.655501][T11200] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2197.661076][T11200] __alloc_pages+0x1ef/0x510 [ 2197.665690][T11200] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2197.672493][T11200] ? find_held_lock+0x2d/0x110 [ 2197.677284][T11200] alloc_pages+0x1a6/0x270 [ 2197.681715][T11200] pte_alloc_one+0x16/0x230 [ 2197.686225][T11200] __pte_alloc+0x69/0x250 [ 2197.690574][T11200] ? pmd_install+0x150/0x150 [ 2197.695201][T11200] ? hugepage_vma_check+0x44e/0x780 [ 2197.700420][T11200] ? __pmd_alloc+0x2ff/0x5c0 [ 2197.705118][T11200] __handle_mm_fault+0x310b/0x39b0 [ 2197.710253][T11200] ? vm_iomap_memory+0x190/0x190 [ 2197.715229][T11200] handle_mm_fault+0x1c8/0x780 [ 2197.720013][T11200] do_user_addr_fault+0x475/0x1210 [ 2197.725151][T11200] exc_page_fault+0x94/0x170 [ 2197.729759][T11200] asm_exc_page_fault+0x22/0x30 [ 2197.734617][T11200] RIP: 0033:0x7f2941c2a149 [ 2197.739039][T11200] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2197.758655][T11200] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2197.764730][T11200] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2197.772715][T11200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2197.780687][T11200] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2197.788661][T11200] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000218791 [ 2197.796650][T11200] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2197.804644][T11200] 07:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x500}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x50b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2197.945689][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2197.986553][T11221] bond93 (uninitialized): Released all slaves [ 2198.009172][T11222] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2198.036623][T11200] memory: usage 307200kB, limit 307200kB, failcnt 38674 [ 2198.051963][T11200] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2198.070866][T11200] Memory cgroup stats for /syz0: [ 2198.071111][T11200] anon 135168 [ 2198.071111][T11200] file 184320 [ 2198.071111][T11200] kernel 314253312 [ 2198.071111][T11200] kernel_stack 65536 [ 2198.071111][T11200] pagetables 77824 [ 2198.071111][T11200] percpu 4839008 [ 2198.071111][T11200] sock 0 [ 2198.071111][T11200] vmalloc 0 [ 2198.071111][T11200] shmem 180224 [ 2198.071111][T11200] zswap 0 [ 2198.071111][T11200] zswapped 0 [ 2198.071111][T11200] file_mapped 180224 [ 2198.071111][T11200] file_dirty 0 [ 2198.071111][T11200] file_writeback 0 [ 2198.071111][T11200] swapcached 0 [ 2198.071111][T11200] anon_thp 0 [ 2198.071111][T11200] file_thp 0 [ 2198.071111][T11200] shmem_thp 0 [ 2198.071111][T11200] inactive_anon 151552 [ 2198.071111][T11200] active_anon 163840 [ 2198.071111][T11200] inactive_file 0 [ 2198.071111][T11200] active_file 4096 [ 2198.071111][T11200] unevictable 0 [ 2198.071111][T11200] slab_reclaimable 18040 [ 2198.071111][T11200] slab_unreclaimable 309219136 [ 2198.071111][T11200] slab 309237176 [ 2198.171361][T11222] bond683 (uninitialized): Released all slaves [ 2198.289127][T11200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11200,uid=0 [ 2198.316070][T11200] Memory cgroup out of memory: Killed process 11200 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xf00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1501}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2198.455139][T11245] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2198.477170][T11223] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2198.509440][T11223] CPU: 1 PID: 11223 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2198.519906][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2198.529984][T11223] Call Trace: [ 2198.533277][T11223] [ 2198.536229][T11223] dump_stack_lvl+0xcd/0x134 [ 2198.540864][T11223] dump_header+0x10b/0x7f9 [ 2198.545325][T11223] oom_kill_process.cold+0x10/0x15 [ 2198.550472][T11223] out_of_memory+0x358/0x14a0 [ 2198.555173][T11223] ? find_held_lock+0x2d/0x110 [ 2198.559958][T11223] ? oom_killer_disable+0x270/0x270 [ 2198.565183][T11223] ? find_held_lock+0x2d/0x110 [ 2198.569969][T11223] mem_cgroup_out_of_memory+0x206/0x270 [ 2198.575542][T11223] ? mem_cgroup_margin+0x130/0x130 [ 2198.580666][T11223] ? lock_downgrade+0x6e0/0x6e0 [ 2198.585580][T11223] try_charge_memcg+0xf67/0x13f0 [ 2198.590552][T11223] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2198.596649][T11223] ? lock_downgrade+0x6e0/0x6e0 [ 2198.601573][T11223] charge_memcg+0x31/0x320 [ 2198.606021][T11223] __mem_cgroup_charge+0x27/0x90 [ 2198.610978][T11223] ? _compound_head+0x5d/0x150 [ 2198.615763][T11223] wp_page_copy+0x27c/0x1b60 [ 2198.620377][T11223] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2198.625847][T11223] ? lock_downgrade+0x6e0/0x6e0 [ 2198.630710][T11223] ? vm_normal_page+0x146/0x2a0 [ 2198.635586][T11223] do_wp_page+0x1d1/0x1910 [ 2198.640026][T11223] __handle_mm_fault+0x1813/0x39b0 [ 2198.645167][T11223] ? vm_iomap_memory+0x190/0x190 [ 2198.650154][T11223] handle_mm_fault+0x1c8/0x780 [ 2198.654970][T11223] do_user_addr_fault+0x475/0x1210 [ 2198.660127][T11223] exc_page_fault+0x94/0x170 [ 2198.664746][T11223] asm_exc_page_fault+0x22/0x30 [ 2198.669617][T11223] RIP: 0033:0x7f23844374b0 [ 2198.674057][T11223] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2198.693690][T11223] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2198.699780][T11223] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2198.707788][T11223] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2198.715801][T11223] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2198.723796][T11223] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2198.731785][T11223] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2198.739773][T11223] ? apparmor_socket_create+0x1f8/0x660 [ 2198.745411][T11223] 07:08:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x700}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2198.883989][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2198.945653][T11246] bond93 (uninitialized): Released all slaves [ 2198.980708][T11223] memory: usage 307200kB, limit 307200kB, failcnt 29778 [ 2198.994110][T11249] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2199.013743][T11223] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2199.024841][T11223] Memory cgroup stats for /syz4: [ 2199.025032][T11223] anon 126976 [ 2199.025032][T11223] file 229376 [ 2199.025032][T11223] kernel 314216448 [ 2199.025032][T11223] kernel_stack 65536 [ 2199.025032][T11223] pagetables 69632 [ 2199.025032][T11223] percpu 4849664 [ 2199.025032][T11223] sock 0 [ 2199.025032][T11223] vmalloc 0 [ 2199.025032][T11223] shmem 229376 [ 2199.025032][T11223] zswap 0 [ 2199.025032][T11223] zswapped 0 [ 2199.025032][T11223] file_mapped 217088 [ 2199.025032][T11223] file_dirty 0 [ 2199.025032][T11223] file_writeback 0 [ 2199.025032][T11223] swapcached 0 [ 2199.025032][T11223] anon_thp 0 [ 2199.025032][T11223] file_thp 0 [ 2199.025032][T11223] shmem_thp 0 [ 2199.025032][T11223] inactive_anon 159744 [ 2199.025032][T11223] active_anon 196608 [ 2199.025032][T11223] inactive_file 0 [ 2199.025032][T11223] active_file 0 [ 2199.025032][T11223] unevictable 0 [ 2199.025032][T11223] slab_reclaimable 15872 [ 2199.025032][T11223] slab_unreclaimable 309179608 [ 2199.025032][T11223] slab 309195480 [ 2199.047321][T11249] bond683 (uninitialized): Released all slaves [ 2199.212403][T11223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11223,uid=0 [ 2199.240801][T11223] Memory cgroup out of memory: Killed process 11223 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x900}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2199.306256][T11262] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2199.331279][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2199.393180][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2199.430471][T11262] CPU: 1 PID: 11262 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2199.440977][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2199.451063][T11262] Call Trace: [ 2199.454362][T11262] [ 2199.457316][T11262] dump_stack_lvl+0xcd/0x134 [ 2199.461948][T11262] dump_header+0x10b/0x7f9 [ 2199.466406][T11262] oom_kill_process.cold+0x10/0x15 [ 2199.471553][T11262] out_of_memory+0x358/0x14a0 [ 2199.476271][T11262] ? oom_killer_disable+0x270/0x270 [ 2199.481508][T11262] ? find_held_lock+0x2d/0x110 [ 2199.486305][T11262] mem_cgroup_out_of_memory+0x206/0x270 [ 2199.491882][T11262] ? mem_cgroup_margin+0x130/0x130 [ 2199.497023][T11262] ? lock_downgrade+0x6e0/0x6e0 [ 2199.501920][T11262] try_charge_memcg+0xf67/0x13f0 [ 2199.506895][T11262] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2199.512905][T11262] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2199.518659][T11262] ? lock_downgrade+0x6e0/0x6e0 [ 2199.523546][T11262] ? lock_downgrade+0x6e0/0x6e0 [ 2199.528442][T11262] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2199.534024][T11262] __alloc_pages+0x1ef/0x510 [ 2199.538647][T11262] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2199.545458][T11262] ? find_held_lock+0x2d/0x110 [ 2199.550267][T11262] alloc_pages+0x1a6/0x270 [ 2199.554722][T11262] pte_alloc_one+0x16/0x230 [ 2199.559257][T11262] __pte_alloc+0x69/0x250 [ 2199.563615][T11262] ? pmd_install+0x150/0x150 [ 2199.568235][T11262] ? hugepage_vma_check+0x44e/0x780 [ 2199.573463][T11262] ? __pmd_alloc+0x2ff/0x5c0 [ 2199.578087][T11262] __handle_mm_fault+0x310b/0x39b0 [ 2199.583233][T11262] ? vm_iomap_memory+0x190/0x190 [ 2199.588231][T11262] handle_mm_fault+0x1c8/0x780 07:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xa00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2199.593031][T11262] do_user_addr_fault+0x475/0x1210 [ 2199.598192][T11262] exc_page_fault+0x94/0x170 [ 2199.602818][T11262] asm_exc_page_fault+0x22/0x30 [ 2199.607702][T11262] RIP: 0033:0x7f2941c2a149 [ 2199.612141][T11262] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2199.631783][T11262] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2199.637885][T11262] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2199.645888][T11262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2199.653893][T11262] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2199.661893][T11262] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000218dbc [ 2199.669897][T11262] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2199.677919][T11262] [ 2199.733528][T11262] memory: usage 307200kB, limit 307200kB, failcnt 38713 [ 2199.733676][T11269] bond93 (uninitialized): Released all slaves [ 2199.740648][T11262] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2199.740672][T11262] Memory cgroup stats for /syz0: [ 2199.740888][T11262] anon 135168 [ 2199.740888][T11262] file 184320 [ 2199.740888][T11262] kernel 314253312 [ 2199.740888][T11262] kernel_stack 65536 [ 2199.740888][T11262] pagetables 77824 [ 2199.740888][T11262] percpu 4839008 [ 2199.740888][T11262] sock 0 [ 2199.740888][T11262] vmalloc 0 [ 2199.740888][T11262] shmem 180224 [ 2199.740888][T11262] zswap 0 [ 2199.740888][T11262] zswapped 0 [ 2199.740888][T11262] file_mapped 180224 [ 2199.740888][T11262] file_dirty 0 [ 2199.740888][T11262] file_writeback 0 [ 2199.740888][T11262] swapcached 0 [ 2199.740888][T11262] anon_thp 0 [ 2199.740888][T11262] file_thp 0 [ 2199.740888][T11262] shmem_thp 0 [ 2199.740888][T11262] inactive_anon 151552 [ 2199.740888][T11262] active_anon 163840 [ 2199.740888][T11262] inactive_file 0 [ 2199.740888][T11262] active_file 4096 [ 2199.740888][T11262] unevictable 0 [ 2199.740888][T11262] slab_reclaimable 18040 [ 2199.740888][T11262] slab_unreclaimable 309219136 [ 2199.740888][T11262] slab 309237176 [ 2199.740951][T11262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11262,uid=0 [ 2199.741115][T11262] Memory cgroup out of memory: Killed process 11262 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xf01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2199.841027][T11275] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 07:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xb05}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xc00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2200.026925][T11281] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2200.058178][T11275] CPU: 1 PID: 11275 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2200.068653][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2200.078739][T11275] Call Trace: [ 2200.082121][T11275] [ 2200.085059][T11275] dump_stack_lvl+0xcd/0x134 [ 2200.089669][T11275] dump_header+0x10b/0x7f9 [ 2200.094101][T11275] oom_kill_process.cold+0x10/0x15 [ 2200.099227][T11275] out_of_memory+0x358/0x14a0 [ 2200.103923][T11275] ? find_held_lock+0x2d/0x110 [ 2200.108693][T11275] ? oom_killer_disable+0x270/0x270 [ 2200.113904][T11275] ? find_held_lock+0x2d/0x110 [ 2200.118676][T11275] mem_cgroup_out_of_memory+0x206/0x270 [ 2200.124229][T11275] ? mem_cgroup_margin+0x130/0x130 [ 2200.129342][T11275] ? lock_downgrade+0x6e0/0x6e0 [ 2200.134214][T11275] try_charge_memcg+0xf67/0x13f0 [ 2200.139180][T11275] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2200.145179][T11275] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2200.150922][T11275] ? lock_downgrade+0x6e0/0x6e0 [ 2200.155782][T11275] ? lock_downgrade+0x6e0/0x6e0 [ 2200.160642][T11275] ? rcu_read_unlock+0x9/0x60 [ 2200.165343][T11275] obj_cgroup_charge+0x2ab/0x5e0 [ 2200.170295][T11275] kmem_cache_alloc_trace+0xa3/0x3e0 [ 2200.175588][T11275] ? copy_semundo+0x187/0x2f0 [ 2200.180268][T11275] ? apparmor_task_alloc+0x2bb/0x3b0 [ 2200.185565][T11275] copy_semundo+0x187/0x2f0 [ 2200.190077][T11275] copy_process+0x2409/0x7090 [ 2200.194788][T11275] ? __cleanup_sighand+0xb0/0xb0 [ 2200.199755][T11275] kernel_clone+0xe7/0xab0 [ 2200.204199][T11275] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2200.210188][T11275] ? create_io_thread+0xe0/0xe0 [ 2200.215053][T11275] ? find_held_lock+0x2d/0x110 [ 2200.219830][T11275] ? __ct_user_exit+0xff/0x150 [ 2200.224609][T11275] __do_sys_clone+0xba/0x100 [ 2200.229208][T11275] ? kernel_clone+0xab0/0xab0 [ 2200.233905][T11275] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2200.239810][T11275] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2200.245720][T11275] do_syscall_64+0x35/0xb0 [ 2200.250145][T11275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2200.256046][T11275] RIP: 0033:0x7f238448a6a1 [ 2200.260465][T11275] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2200.280080][T11275] RSP: 002b:00007ffcaabcb6d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2200.288501][T11275] RAX: ffffffffffffffda RBX: 00007f2385553700 RCX: 00007f238448a6a1 [ 2200.296544][T11275] RDX: 00007f23855539d0 RSI: 00007f23855532f0 RDI: 00000000003d0f00 [ 2200.304523][T11275] RBP: 00007ffcaabcb920 R08: 00007f2385553700 R09: 00007f2385553700 [ 2200.312508][T11275] R10: 00007f23855539d0 R11: 0000000000000206 R12: 00007ffcaabcb78e [ 2200.320481][T11275] R13: 00007ffcaabcb78f R14: 00007f2385553300 R15: 0000000000022000 [ 2200.328470][T11275] 07:08:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2200.425226][T11275] memory: usage 307152kB, limit 307200kB, failcnt 29842 [ 2200.450281][T11275] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2200.461387][T11275] Memory cgroup stats for /syz4: [ 2200.461627][T11275] anon 86016 [ 2200.461627][T11275] file 229376 [ 2200.461627][T11275] kernel 314208256 [ 2200.461627][T11275] kernel_stack 65536 [ 2200.461627][T11275] pagetables 65536 [ 2200.461627][T11275] percpu 4849664 [ 2200.461627][T11275] sock 0 [ 2200.461627][T11275] vmalloc 0 [ 2200.461627][T11275] shmem 229376 [ 2200.461627][T11275] zswap 0 [ 2200.461627][T11275] zswapped 0 [ 2200.461627][T11275] file_mapped 217088 [ 2200.461627][T11275] file_dirty 0 [ 2200.461627][T11275] file_writeback 0 [ 2200.461627][T11275] swapcached 0 [ 2200.461627][T11275] anon_thp 0 [ 2200.461627][T11275] file_thp 0 [ 2200.461627][T11275] shmem_thp 0 [ 2200.461627][T11275] inactive_anon 118784 [ 2200.461627][T11275] active_anon 196608 [ 2200.461627][T11275] inactive_file 0 [ 2200.461627][T11275] active_file 0 [ 2200.461627][T11275] unevictable 0 [ 2200.461627][T11275] slab_reclaimable 13944 [ 2200.461627][T11275] slab_unreclaimable 309178496 [ 2200.461627][T11275] slab 309192440 07:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x19d3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2200.724980][T11289] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2200.781156][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.785003][T11275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11275,uid=0 [ 2200.830706][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2200.871189][T11275] Memory cgroup out of memory: Killed process 11275 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2200.890135][T11306] bond93 (uninitialized): Released all slaves 07:08:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x3105}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x1f00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2201.019830][T11331] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2201.031806][T11295] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2201.031926][T11295] CPU: 0 PID: 11295 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2201.031955][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2201.031970][T11295] Call Trace: [ 2201.031978][T11295] [ 2201.031988][T11295] dump_stack_lvl+0xcd/0x134 [ 2201.032023][T11295] dump_header+0x10b/0x7f9 [ 2201.032057][T11295] oom_kill_process.cold+0x10/0x15 [ 2201.032091][T11295] out_of_memory+0x358/0x14a0 [ 2201.032125][T11295] ? find_held_lock+0x2d/0x110 [ 2201.032153][T11295] ? oom_killer_disable+0x270/0x270 [ 2201.032187][T11295] ? find_held_lock+0x2d/0x110 07:08:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0xffe, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x2000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2201.032217][T11295] mem_cgroup_out_of_memory+0x206/0x270 [ 2201.032252][T11295] ? mem_cgroup_margin+0x130/0x130 [ 2201.032276][T11295] ? lock_downgrade+0x6e0/0x6e0 [ 2201.032321][T11295] try_charge_memcg+0xf67/0x13f0 [ 2201.032358][T11295] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2201.032388][T11295] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2201.032416][T11295] ? lock_downgrade+0x6e0/0x6e0 [ 2201.032447][T11295] ? lock_downgrade+0x6e0/0x6e0 [ 2201.032490][T11295] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2201.032523][T11295] __alloc_pages+0x1ef/0x510 [ 2201.032556][T11295] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2201.032600][T11295] ? find_held_lock+0x2d/0x110 [ 2201.032636][T11295] alloc_pages+0x1a6/0x270 [ 2201.032668][T11295] pte_alloc_one+0x16/0x230 [ 2201.032694][T11295] __pte_alloc+0x69/0x250 [ 2201.032718][T11295] ? pmd_install+0x150/0x150 [ 2201.032743][T11295] ? hugepage_vma_check+0x44e/0x780 [ 2201.032773][T11295] ? __pmd_alloc+0x2ff/0x5c0 [ 2201.032803][T11295] __handle_mm_fault+0x310b/0x39b0 [ 2201.032838][T11295] ? vm_iomap_memory+0x190/0x190 [ 2201.032893][T11295] handle_mm_fault+0x1c8/0x780 [ 2201.032926][T11295] do_user_addr_fault+0x475/0x1210 [ 2201.032972][T11295] exc_page_fault+0x94/0x170 [ 2201.033008][T11295] asm_exc_page_fault+0x22/0x30 [ 2201.033033][T11295] RIP: 0033:0x7f2941c2a149 [ 2201.033055][T11295] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2201.033080][T11295] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2201.033102][T11295] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2201.033120][T11295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2201.033137][T11295] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2201.033155][T11295] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021955c [ 2201.033173][T11295] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2201.033210][T11295] [ 2201.033309][T11295] memory: usage 307200kB, limit 307200kB, failcnt 38797 [ 2201.033328][T11295] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2201.033344][T11295] Memory cgroup stats for /syz0: [ 2201.033506][T11295] anon 135168 [ 2201.033506][T11295] file 184320 [ 2201.033506][T11295] kernel 314253312 [ 2201.033506][T11295] kernel_stack 65536 [ 2201.033506][T11295] pagetables 77824 [ 2201.033506][T11295] percpu 4839008 [ 2201.033506][T11295] sock 0 [ 2201.033506][T11295] vmalloc 0 [ 2201.033506][T11295] shmem 180224 [ 2201.033506][T11295] zswap 0 [ 2201.033506][T11295] zswapped 0 [ 2201.033506][T11295] file_mapped 180224 [ 2201.033506][T11295] file_dirty 0 [ 2201.033506][T11295] file_writeback 0 [ 2201.033506][T11295] swapcached 0 [ 2201.033506][T11295] anon_thp 0 [ 2201.033506][T11295] file_thp 0 [ 2201.033506][T11295] shmem_thp 0 [ 2201.033506][T11295] inactive_anon 151552 [ 2201.033506][T11295] active_anon 163840 [ 2201.033506][T11295] inactive_file 0 [ 2201.033506][T11295] active_file 4096 [ 2201.033506][T11295] unevictable 0 [ 2201.033506][T11295] slab_reclaimable 18040 [ 2201.033506][T11295] slab_unreclaimable 309219136 [ 2201.033506][T11295] slab 309237176 [ 2201.033569][T11295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11295,uid=0 [ 2201.033702][T11295] Memory cgroup out of memory: Killed process 11295 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4c00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2201.634650][T11327] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2201.666834][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x5865}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2201.685384][T11327] CPU: 1 PID: 11327 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2201.691121][T11332] bond93 (uninitialized): Released all slaves [ 2201.695832][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2201.695851][T11327] Call Trace: [ 2201.695860][T11327] [ 2201.695871][T11327] dump_stack_lvl+0xcd/0x134 [ 2201.695911][T11327] dump_header+0x10b/0x7f9 [ 2201.727393][T11327] oom_kill_process.cold+0x10/0x15 [ 2201.732561][T11327] out_of_memory+0x358/0x14a0 [ 2201.737288][T11327] ? find_held_lock+0x2d/0x110 [ 2201.742083][T11327] ? oom_killer_disable+0x270/0x270 [ 2201.747328][T11327] ? find_held_lock+0x2d/0x110 [ 2201.752132][T11327] mem_cgroup_out_of_memory+0x206/0x270 [ 2201.757715][T11327] ? mem_cgroup_margin+0x130/0x130 [ 2201.762857][T11327] ? lock_downgrade+0x6e0/0x6e0 [ 2201.767757][T11327] try_charge_memcg+0xf67/0x13f0 [ 2201.769317][T11328] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2201.772714][T11327] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2201.772760][T11327] ? lock_downgrade+0x6e0/0x6e0 [ 2201.772805][T11327] charge_memcg+0x31/0x320 [ 2201.796119][T11327] __mem_cgroup_charge+0x27/0x90 [ 2201.801076][T11327] ? _compound_head+0x5d/0x150 [ 2201.805877][T11327] wp_page_copy+0x27c/0x1b60 [ 2201.810508][T11327] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2201.813147][T11328] bond683 (uninitialized): Released all slaves [ 2201.815974][T11327] ? lock_downgrade+0x6e0/0x6e0 [ 2201.816007][T11327] ? vm_normal_page+0x146/0x2a0 [ 2201.816050][T11327] do_wp_page+0x1d1/0x1910 07:08:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x3300}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2201.836311][T11327] __handle_mm_fault+0x1813/0x39b0 [ 2201.841464][T11327] ? vm_iomap_memory+0x190/0x190 [ 2201.846461][T11327] handle_mm_fault+0x1c8/0x780 [ 2201.851269][T11327] do_user_addr_fault+0x475/0x1210 [ 2201.856431][T11327] exc_page_fault+0x94/0x170 [ 2201.861067][T11327] asm_exc_page_fault+0x22/0x30 [ 2201.865946][T11327] RIP: 0033:0x7f23844374b0 [ 2201.870385][T11327] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2201.890019][T11327] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2201.896110][T11327] RAX: 000000003d95148f RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2201.904112][T11327] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d57763c [ 2201.910441][T11346] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2201.912083][T11327] RBP: 000000003d95148f R08: 000000000000148f R09: 000000003d951493 [ 2201.912104][T11327] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2201.912123][T11327] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874c3bcd [ 2201.912141][T11327] ? __x64_sys_socket+0xd/0xb0 [ 2201.950121][T11327] [ 2202.061245][T11327] memory: usage 307200kB, limit 307200kB, failcnt 29922 [ 2202.068532][T11327] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2202.075629][T11327] Memory cgroup stats for /syz4: [ 2202.075817][T11327] anon 114688 [ 2202.075817][T11327] file 229376 [ 2202.075817][T11327] kernel 314228736 [ 2202.075817][T11327] kernel_stack 65536 [ 2202.075817][T11327] pagetables 69632 [ 2202.075817][T11327] percpu 4849664 [ 2202.075817][T11327] sock 0 [ 2202.075817][T11327] vmalloc 0 [ 2202.075817][T11327] shmem 229376 [ 2202.075817][T11327] zswap 0 [ 2202.075817][T11327] zswapped 0 [ 2202.075817][T11327] file_mapped 217088 [ 2202.075817][T11327] file_dirty 0 [ 2202.075817][T11327] file_writeback 0 [ 2202.075817][T11327] swapcached 0 [ 2202.075817][T11327] anon_thp 0 [ 2202.075817][T11327] file_thp 0 [ 2202.075817][T11327] shmem_thp 0 [ 2202.075817][T11327] inactive_anon 147456 [ 2202.075817][T11327] active_anon 196608 [ 2202.075817][T11327] inactive_file 0 [ 2202.075817][T11327] active_file 0 [ 2202.075817][T11327] unevictable 0 [ 2202.075817][T11327] slab_reclaimable 27712 [ 2202.075817][T11327] slab_unreclaimable 309180560 [ 2202.075817][T11327] slab 309208272 [ 2202.232533][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2202.294117][T11362] bond93 (uninitialized): Released all slaves [ 2202.335975][T11327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11327,uid=0 [ 2202.372602][T11327] Memory cgroup out of memory: Killed process 11327 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6558}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2202.468139][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2202.492307][T11340] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2202.515114][T11340] CPU: 1 PID: 11340 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2202.525577][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2202.535649][T11340] Call Trace: [ 2202.538945][T11340] [ 2202.541887][T11340] dump_stack_lvl+0xcd/0x134 [ 2202.546504][T11340] dump_header+0x10b/0x7f9 [ 2202.550957][T11340] oom_kill_process.cold+0x10/0x15 [ 2202.556114][T11340] out_of_memory+0x358/0x14a0 [ 2202.560830][T11340] ? find_held_lock+0x2d/0x110 [ 2202.565622][T11340] ? oom_killer_disable+0x270/0x270 [ 2202.571025][T11340] ? find_held_lock+0x2d/0x110 [ 2202.575814][T11340] mem_cgroup_out_of_memory+0x206/0x270 [ 2202.581377][T11340] ? mem_cgroup_margin+0x130/0x130 [ 2202.586496][T11340] ? lock_downgrade+0x6e0/0x6e0 [ 2202.591369][T11340] try_charge_memcg+0xf67/0x13f0 [ 2202.596326][T11340] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2202.602318][T11340] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2202.608044][T11340] ? lock_downgrade+0x6e0/0x6e0 [ 2202.612914][T11340] ? lock_downgrade+0x6e0/0x6e0 [ 2202.617788][T11340] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2202.623349][T11340] __alloc_pages+0x1ef/0x510 [ 2202.627959][T11340] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2202.634744][T11340] ? find_held_lock+0x2d/0x110 [ 2202.639525][T11340] alloc_pages+0x1a6/0x270 [ 2202.643954][T11340] pte_alloc_one+0x16/0x230 [ 2202.648467][T11340] __pte_alloc+0x69/0x250 [ 2202.652815][T11340] ? pmd_install+0x150/0x150 [ 2202.657412][T11340] ? hugepage_vma_check+0x44e/0x780 [ 2202.662620][T11340] ? __pmd_alloc+0x2ff/0x5c0 [ 2202.667220][T11340] __handle_mm_fault+0x310b/0x39b0 [ 2202.672346][T11340] ? vm_iomap_memory+0x190/0x190 [ 2202.677317][T11340] handle_mm_fault+0x1c8/0x780 [ 2202.682108][T11340] do_user_addr_fault+0x475/0x1210 [ 2202.687280][T11340] exc_page_fault+0x94/0x170 [ 2202.691904][T11340] asm_exc_page_fault+0x22/0x30 [ 2202.696782][T11340] RIP: 0033:0x7f2941c2a149 [ 2202.701209][T11340] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2202.720828][T11340] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2202.726901][T11340] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2202.734875][T11340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2202.742863][T11340] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2202.750923][T11340] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000219b21 [ 2202.758897][T11340] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2202.766910][T11340] [ 2202.854101][T11371] bond93 (uninitialized): Released all slaves [ 2202.883311][T11372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2202.922389][T11372] bond683 (uninitialized): Released all slaves [ 2203.006411][T11374] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2203.035032][T11340] memory: usage 307200kB, limit 307200kB, failcnt 38892 [ 2203.052088][T11340] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2203.059714][T11340] Memory cgroup stats for /syz0: [ 2203.059902][T11340] anon 135168 [ 2203.059902][T11340] file 184320 [ 2203.059902][T11340] kernel 314253312 [ 2203.059902][T11340] kernel_stack 65536 [ 2203.059902][T11340] pagetables 77824 [ 2203.059902][T11340] percpu 4839008 [ 2203.059902][T11340] sock 0 [ 2203.059902][T11340] vmalloc 0 [ 2203.059902][T11340] shmem 180224 [ 2203.059902][T11340] zswap 0 [ 2203.059902][T11340] zswapped 0 [ 2203.059902][T11340] file_mapped 180224 [ 2203.059902][T11340] file_dirty 0 [ 2203.059902][T11340] file_writeback 0 [ 2203.059902][T11340] swapcached 0 [ 2203.059902][T11340] anon_thp 0 [ 2203.059902][T11340] file_thp 0 [ 2203.059902][T11340] shmem_thp 0 [ 2203.059902][T11340] inactive_anon 151552 [ 2203.059902][T11340] active_anon 163840 [ 2203.059902][T11340] inactive_file 0 [ 2203.059902][T11340] active_file 4096 [ 2203.059902][T11340] unevictable 0 [ 2203.059902][T11340] slab_reclaimable 18040 [ 2203.059902][T11340] slab_unreclaimable 309219136 [ 2203.059902][T11340] slab 309237176 [ 2203.206878][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2203.243703][T11340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11340,uid=0 [ 2203.266286][T11340] Memory cgroup out of memory: Killed process 11340 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1000, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6c00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2203.436185][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2203.494530][T11390] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2203.521993][T11401] bond93 (uninitialized): Released all slaves 07:08:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7400}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2203.585749][T11402] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2203.677360][T11390] CPU: 1 PID: 11390 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2203.681520][T11402] bond683 (uninitialized): Released all slaves [ 2203.687814][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2203.687833][T11390] Call Trace: [ 2203.687842][T11390] [ 2203.687853][T11390] dump_stack_lvl+0xcd/0x134 [ 2203.687889][T11390] dump_header+0x10b/0x7f9 [ 2203.687922][T11390] oom_kill_process.cold+0x10/0x15 [ 2203.687957][T11390] out_of_memory+0x358/0x14a0 [ 2203.687991][T11390] ? find_held_lock+0x2d/0x110 [ 2203.688022][T11390] ? oom_killer_disable+0x270/0x270 [ 2203.688055][T11390] ? find_held_lock+0x2d/0x110 [ 2203.688083][T11390] mem_cgroup_out_of_memory+0x206/0x270 [ 2203.688112][T11390] ? mem_cgroup_margin+0x130/0x130 [ 2203.688137][T11390] ? lock_downgrade+0x6e0/0x6e0 [ 2203.688182][T11390] try_charge_memcg+0xf67/0x13f0 [ 2203.688219][T11390] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2203.688257][T11390] ? lock_downgrade+0x6e0/0x6e0 [ 2203.688300][T11390] charge_memcg+0x31/0x320 [ 2203.688332][T11390] __mem_cgroup_charge+0x27/0x90 [ 2203.688358][T11390] ? _compound_head+0x5d/0x150 [ 2203.688391][T11390] wp_page_copy+0x27c/0x1b60 [ 2203.688426][T11390] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2203.688452][T11390] ? lock_downgrade+0x6e0/0x6e0 [ 2203.688476][T11390] ? vm_normal_page+0x146/0x2a0 [ 2203.688516][T11390] do_wp_page+0x1d1/0x1910 [ 2203.688549][T11390] __handle_mm_fault+0x1813/0x39b0 [ 2203.688583][T11390] ? vm_iomap_memory+0x190/0x190 [ 2203.688637][T11390] handle_mm_fault+0x1c8/0x780 [ 2203.688669][T11390] do_user_addr_fault+0x475/0x1210 [ 2203.688711][T11390] exc_page_fault+0x94/0x170 [ 2203.688746][T11390] asm_exc_page_fault+0x22/0x30 [ 2203.688771][T11390] RIP: 0033:0x7f23844374b0 [ 2203.688795][T11390] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2203.688819][T11390] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2203.688844][T11390] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2203.688861][T11390] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2203.688880][T11390] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2203.688897][T11390] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2203.688915][T11390] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2203.688931][T11390] ? apparmor_socket_create+0x1f8/0x660 [ 2203.688977][T11390] [ 2203.752806][T11390] memory: usage 307200kB, limit 307200kB, failcnt 30006 [ 2204.060765][T11390] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2204.072071][T11390] Memory cgroup stats for /syz4: [ 2204.072236][T11390] anon 126976 [ 2204.072236][T11390] file 229376 [ 2204.072236][T11390] kernel 314216448 [ 2204.072236][T11390] kernel_stack 65536 [ 2204.072236][T11390] pagetables 69632 [ 2204.072236][T11390] percpu 4849664 [ 2204.072236][T11390] sock 0 [ 2204.072236][T11390] vmalloc 0 [ 2204.072236][T11390] shmem 229376 [ 2204.072236][T11390] zswap 0 [ 2204.072236][T11390] zswapped 0 [ 2204.072236][T11390] file_mapped 217088 [ 2204.072236][T11390] file_dirty 0 [ 2204.072236][T11390] file_writeback 0 [ 2204.072236][T11390] swapcached 0 [ 2204.072236][T11390] anon_thp 0 [ 2204.072236][T11390] file_thp 0 [ 2204.072236][T11390] shmem_thp 0 [ 2204.072236][T11390] inactive_anon 159744 [ 2204.072236][T11390] active_anon 196608 [ 2204.072236][T11390] inactive_file 0 [ 2204.072236][T11390] active_file 0 [ 2204.072236][T11390] unevictable 0 [ 2204.072236][T11390] slab_reclaimable 15872 [ 2204.072236][T11390] slab_unreclaimable 309179608 [ 2204.072236][T11390] slab 309195480 [ 2204.156104][T11404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2204.215638][T11390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11390,uid=0 [ 2204.241954][T11390] Memory cgroup out of memory: Killed process 11390 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7a00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2204.276510][T11399] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2204.310360][T11399] CPU: 1 PID: 11399 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2204.320830][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2204.330924][T11399] Call Trace: [ 2204.334225][T11399] [ 2204.337179][T11399] dump_stack_lvl+0xcd/0x134 [ 2204.341812][T11399] dump_header+0x10b/0x7f9 [ 2204.346278][T11399] oom_kill_process.cold+0x10/0x15 [ 2204.351444][T11399] out_of_memory+0x358/0x14a0 [ 2204.356195][T11399] ? oom_killer_disable+0x270/0x270 [ 2204.361437][T11399] ? find_held_lock+0x2d/0x110 [ 2204.366235][T11399] mem_cgroup_out_of_memory+0x206/0x270 [ 2204.371813][T11399] ? mem_cgroup_margin+0x130/0x130 [ 2204.376950][T11399] ? lock_downgrade+0x6e0/0x6e0 [ 2204.381854][T11399] try_charge_memcg+0xf67/0x13f0 [ 2204.386833][T11399] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2204.392848][T11399] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2204.398605][T11399] ? lock_downgrade+0x6e0/0x6e0 [ 2204.403487][T11399] ? lock_downgrade+0x6e0/0x6e0 [ 2204.408384][T11399] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2204.413963][T11399] __alloc_pages+0x1ef/0x510 [ 2204.418591][T11399] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2204.425409][T11399] ? find_held_lock+0x2d/0x110 [ 2204.430216][T11399] alloc_pages+0x1a6/0x270 [ 2204.434666][T11399] pte_alloc_one+0x16/0x230 [ 2204.439198][T11399] __pte_alloc+0x69/0x250 [ 2204.443552][T11399] ? pmd_install+0x150/0x150 [ 2204.448168][T11399] ? hugepage_vma_check+0x44e/0x780 [ 2204.453397][T11399] ? __pmd_alloc+0x2ff/0x5c0 [ 2204.458020][T11399] __handle_mm_fault+0x310b/0x39b0 [ 2204.463168][T11399] ? vm_iomap_memory+0x190/0x190 [ 2204.468158][T11399] handle_mm_fault+0x1c8/0x780 [ 2204.472956][T11399] do_user_addr_fault+0x475/0x1210 [ 2204.478112][T11399] exc_page_fault+0x94/0x170 [ 2204.482740][T11399] asm_exc_page_fault+0x22/0x30 [ 2204.487615][T11399] RIP: 0033:0x7f2941c2a149 [ 2204.492051][T11399] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2204.511694][T11399] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2204.517790][T11399] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2204.525787][T11399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2204.533787][T11399] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2204.541788][T11399] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000219fa5 [ 2204.549783][T11399] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2204.557797][T11399] [ 2204.610980][T11399] memory: usage 307200kB, limit 307200kB, failcnt 38946 [ 2204.613751][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:08:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x8100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2204.700474][T11399] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2204.716680][T11399] Memory cgroup stats for /syz0: [ 2204.716873][T11399] anon 135168 [ 2204.716873][T11399] file 184320 [ 2204.716873][T11399] kernel 314253312 [ 2204.716873][T11399] kernel_stack 65536 [ 2204.716873][T11399] pagetables 77824 [ 2204.716873][T11399] percpu 4839008 [ 2204.716873][T11399] sock 0 [ 2204.716873][T11399] vmalloc 0 [ 2204.716873][T11399] shmem 180224 [ 2204.716873][T11399] zswap 0 [ 2204.716873][T11399] zswapped 0 [ 2204.716873][T11399] file_mapped 180224 [ 2204.716873][T11399] file_dirty 0 [ 2204.716873][T11399] file_writeback 0 [ 2204.716873][T11399] swapcached 0 [ 2204.716873][T11399] anon_thp 0 [ 2204.716873][T11399] file_thp 0 [ 2204.716873][T11399] shmem_thp 0 [ 2204.716873][T11399] inactive_anon 151552 [ 2204.716873][T11399] active_anon 163840 [ 2204.716873][T11399] inactive_file 0 [ 2204.716873][T11399] active_file 4096 [ 2204.716873][T11399] unevictable 0 [ 2204.716873][T11399] slab_reclaimable 18040 [ 2204.716873][T11399] slab_unreclaimable 309219136 [ 2204.716873][T11399] slab 309237176 [ 2204.891417][T11399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11399,uid=0 [ 2204.957268][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2204.961865][T11399] Memory cgroup out of memory: Killed process 11399 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2205.028412][T11431] bond93 (uninitialized): Released all slaves [ 2205.050604][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2205.112255][T11429] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2205.152855][T11429] CPU: 0 PID: 11429 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2205.163329][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2205.173412][T11429] Call Trace: [ 2205.176705][T11429] [ 2205.179652][T11429] dump_stack_lvl+0xcd/0x134 [ 2205.184277][T11429] dump_header+0x10b/0x7f9 [ 2205.188723][T11429] oom_kill_process.cold+0x10/0x15 [ 2205.193867][T11429] out_of_memory+0x358/0x14a0 [ 2205.198580][T11429] ? find_held_lock+0x2d/0x110 [ 2205.203375][T11429] ? oom_killer_disable+0x270/0x270 [ 2205.208614][T11429] ? find_held_lock+0x2d/0x110 [ 2205.213413][T11429] mem_cgroup_out_of_memory+0x206/0x270 [ 2205.218986][T11429] ? mem_cgroup_margin+0x130/0x130 [ 2205.224118][T11429] ? lock_downgrade+0x6e0/0x6e0 [ 2205.229015][T11429] try_charge_memcg+0xf67/0x13f0 [ 2205.233990][T11429] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2205.240006][T11429] ? lock_downgrade+0x6e0/0x6e0 [ 2205.244897][T11429] charge_memcg+0x31/0x320 [ 2205.249348][T11429] __mem_cgroup_charge+0x27/0x90 [ 2205.254312][T11429] ? _compound_head+0x5d/0x150 [ 2205.259113][T11429] wp_page_copy+0x27c/0x1b60 [ 2205.263744][T11429] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2205.269227][T11429] ? lock_downgrade+0x6e0/0x6e0 [ 2205.274116][T11429] ? vm_normal_page+0x146/0x2a0 [ 2205.279004][T11429] do_wp_page+0x1d1/0x1910 [ 2205.283451][T11429] __handle_mm_fault+0x1813/0x39b0 [ 2205.288596][T11429] ? vm_iomap_memory+0x190/0x190 [ 2205.293593][T11429] handle_mm_fault+0x1c8/0x780 [ 2205.298391][T11429] do_user_addr_fault+0x475/0x1210 [ 2205.303547][T11429] exc_page_fault+0x94/0x170 [ 2205.308174][T11429] asm_exc_page_fault+0x22/0x30 [ 2205.313056][T11429] RIP: 0033:0x7f23844374b0 [ 2205.317493][T11429] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2205.337134][T11429] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2205.343263][T11429] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 07:08:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1001, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xd319}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2205.351264][T11429] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2205.359268][T11429] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2205.367271][T11429] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2205.375266][T11429] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2205.379538][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2205.383240][T11429] ? apparmor_socket_create+0x1f8/0x660 [ 2205.383294][T11429] 07:08:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2205.509878][T11451] bond93 (uninitialized): Released all slaves [ 2205.525797][T11429] memory: usage 307200kB, limit 307200kB, failcnt 30117 [ 2205.535459][T11457] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2205.543548][T11457] bond683 (uninitialized): Released all slaves 07:08:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2205.648260][T11429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2205.679671][T11429] Memory cgroup stats for /syz4: [ 2205.679889][T11429] anon 126976 [ 2205.679889][T11429] file 229376 [ 2205.679889][T11429] kernel 314216448 [ 2205.679889][T11429] kernel_stack 65536 [ 2205.679889][T11429] pagetables 69632 [ 2205.679889][T11429] percpu 4849664 [ 2205.679889][T11429] sock 0 [ 2205.679889][T11429] vmalloc 0 [ 2205.679889][T11429] shmem 229376 [ 2205.679889][T11429] zswap 0 [ 2205.679889][T11429] zswapped 0 [ 2205.679889][T11429] file_mapped 217088 [ 2205.679889][T11429] file_dirty 0 [ 2205.679889][T11429] file_writeback 0 [ 2205.679889][T11429] swapcached 0 [ 2205.679889][T11429] anon_thp 0 [ 2205.679889][T11429] file_thp 0 [ 2205.679889][T11429] shmem_thp 0 [ 2205.679889][T11429] inactive_anon 159744 [ 2205.679889][T11429] active_anon 196608 [ 2205.679889][T11429] inactive_file 0 [ 2205.679889][T11429] active_file 0 [ 2205.679889][T11429] unevictable 0 [ 2205.679889][T11429] slab_reclaimable 15872 [ 2205.679889][T11429] slab_unreclaimable 309179608 [ 2205.679889][T11429] slab 309195480 [ 2205.825359][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2205.845927][T11429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11429,uid=0 [ 2205.853786][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2205.874949][T11429] Memory cgroup out of memory: Killed process 11429 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2205.894721][T11452] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2205.970612][T11452] CPU: 0 PID: 11452 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2205.981090][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2205.991174][T11452] Call Trace: [ 2205.994475][T11452] [ 2205.997428][T11452] dump_stack_lvl+0xcd/0x134 [ 2206.002088][T11452] dump_header+0x10b/0x7f9 [ 2206.006541][T11452] oom_kill_process.cold+0x10/0x15 [ 2206.011687][T11452] out_of_memory+0x358/0x14a0 [ 2206.016399][T11452] ? oom_killer_disable+0x270/0x270 [ 2206.021630][T11452] ? find_held_lock+0x2d/0x110 [ 2206.026419][T11452] mem_cgroup_out_of_memory+0x206/0x270 [ 2206.032002][T11452] ? mem_cgroup_margin+0x130/0x130 [ 2206.037144][T11452] ? lock_downgrade+0x6e0/0x6e0 [ 2206.042047][T11452] try_charge_memcg+0xf67/0x13f0 [ 2206.047026][T11452] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2206.053029][T11452] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2206.058767][T11452] ? lock_downgrade+0x6e0/0x6e0 [ 2206.063646][T11452] ? lock_downgrade+0x6e0/0x6e0 [ 2206.068539][T11452] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2206.074120][T11452] __alloc_pages+0x1ef/0x510 [ 2206.078745][T11452] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2206.085557][T11452] ? find_held_lock+0x2d/0x110 [ 2206.090362][T11452] alloc_pages+0x1a6/0x270 [ 2206.094811][T11452] pte_alloc_one+0x16/0x230 [ 2206.099339][T11452] __pte_alloc+0x69/0x250 [ 2206.103696][T11452] ? pmd_install+0x150/0x150 [ 2206.108302][T11452] ? hugepage_vma_check+0x44e/0x780 [ 2206.113516][T11452] ? __pmd_alloc+0x2ff/0x5c0 [ 2206.118130][T11452] __handle_mm_fault+0x310b/0x39b0 [ 2206.123275][T11452] ? vm_iomap_memory+0x190/0x190 [ 2206.128264][T11452] handle_mm_fault+0x1c8/0x780 [ 2206.133063][T11452] do_user_addr_fault+0x475/0x1210 [ 2206.138222][T11452] exc_page_fault+0x94/0x170 [ 2206.142844][T11452] asm_exc_page_fault+0x22/0x30 [ 2206.147715][T11452] RIP: 0033:0x7f2941c2a149 [ 2206.152156][T11452] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2206.171796][T11452] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2206.177888][T11452] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2206.185888][T11452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2206.193884][T11452] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2206.201877][T11452] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021a778 [ 2206.209866][T11452] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2206.217880][T11452] 07:08:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x34000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2206.314961][T11470] bond93 (uninitialized): Released all slaves [ 2206.332934][T11452] memory: usage 307200kB, limit 307200kB, failcnt 39040 [ 2206.352034][T11452] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 07:08:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x400300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2206.423878][T11482] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2206.431405][T11452] Memory cgroup stats for /syz0: [ 2206.432196][T11452] anon 135168 [ 2206.432196][T11452] file 184320 [ 2206.432196][T11452] kernel 314253312 [ 2206.432196][T11452] kernel_stack 65536 [ 2206.432196][T11452] pagetables 77824 [ 2206.432196][T11452] percpu 4839008 [ 2206.432196][T11452] sock 0 [ 2206.432196][T11452] vmalloc 0 [ 2206.432196][T11452] shmem 180224 [ 2206.432196][T11452] zswap 0 [ 2206.432196][T11452] zswapped 0 [ 2206.432196][T11452] file_mapped 180224 [ 2206.432196][T11452] file_dirty 0 [ 2206.432196][T11452] file_writeback 0 [ 2206.432196][T11452] swapcached 0 [ 2206.432196][T11452] anon_thp 0 [ 2206.432196][T11452] file_thp 0 [ 2206.432196][T11452] shmem_thp 0 [ 2206.432196][T11452] inactive_anon 151552 [ 2206.432196][T11452] active_anon 163840 [ 2206.432196][T11452] inactive_file 0 [ 2206.432196][T11452] active_file 4096 [ 2206.432196][T11452] unevictable 0 [ 2206.432196][T11452] slab_reclaimable 18040 [ 2206.432196][T11452] slab_unreclaimable 309219136 [ 2206.432196][T11452] slab 309237176 [ 2206.613458][T11482] bond683 (uninitialized): Released all slaves [ 2206.662223][T11480] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2206.670593][T11452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11452,uid=0 [ 2206.705747][T11452] Memory cgroup out of memory: Killed process 11452 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2206.743968][T11484] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2206.778113][T11484] CPU: 1 PID: 11484 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2206.788586][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2206.798612][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2206.798645][T11484] Call Trace: [ 2206.798656][T11484] [ 2206.814167][T11484] dump_stack_lvl+0xcd/0x134 [ 2206.818796][T11484] dump_header+0x10b/0x7f9 [ 2206.823245][T11484] oom_kill_process.cold+0x10/0x15 [ 2206.828374][T11484] out_of_memory+0x358/0x14a0 [ 2206.833069][T11484] ? oom_killer_disable+0x270/0x270 [ 2206.838281][T11484] ? find_held_lock+0x2d/0x110 [ 2206.843069][T11484] mem_cgroup_out_of_memory+0x206/0x270 [ 2206.848627][T11484] ? mem_cgroup_margin+0x130/0x130 [ 2206.853748][T11484] ? lock_downgrade+0x6e0/0x6e0 [ 2206.858636][T11484] try_charge_memcg+0xf67/0x13f0 [ 2206.863593][T11484] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2206.869591][T11484] ? lock_downgrade+0x6e0/0x6e0 [ 2206.874477][T11484] charge_memcg+0x31/0x320 [ 2206.878905][T11484] __mem_cgroup_charge+0x27/0x90 [ 2206.883860][T11484] ? _compound_head+0x5d/0x150 [ 2206.888641][T11484] wp_page_copy+0x27c/0x1b60 [ 2206.893259][T11484] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2206.898726][T11484] ? lock_downgrade+0x6e0/0x6e0 [ 2206.903584][T11484] ? vm_normal_page+0x146/0x2a0 [ 2206.908458][T11484] do_wp_page+0x1d1/0x1910 [ 2206.912887][T11484] __handle_mm_fault+0x1813/0x39b0 [ 2206.918014][T11484] ? vm_iomap_memory+0x190/0x190 [ 2206.922984][T11484] handle_mm_fault+0x1c8/0x780 [ 2206.927777][T11484] do_user_addr_fault+0x475/0x1210 [ 2206.932909][T11484] exc_page_fault+0x94/0x170 [ 2206.937530][T11484] asm_exc_page_fault+0x22/0x30 [ 2206.942419][T11484] RIP: 0033:0x7f23844374b0 [ 2206.946855][T11484] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2206.966468][T11484] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2206.972542][T11484] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2206.980516][T11484] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2206.988489][T11484] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2206.996464][T11484] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2207.004440][T11484] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2207.012414][T11484] ? apparmor_socket_create+0x1f8/0x660 [ 2207.017986][T11484] 07:08:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6558}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1100, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe0ffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2207.104227][T11484] memory: usage 307200kB, limit 307200kB, failcnt 30202 [ 2207.121849][T11484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf0ffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2207.151994][T11484] Memory cgroup stats for /syz4: [ 2207.152205][T11484] anon 126976 [ 2207.152205][T11484] file 229376 [ 2207.152205][T11484] kernel 314216448 [ 2207.152205][T11484] kernel_stack 65536 [ 2207.152205][T11484] pagetables 69632 [ 2207.152205][T11484] percpu 4849664 [ 2207.152205][T11484] sock 0 [ 2207.152205][T11484] vmalloc 0 [ 2207.152205][T11484] shmem 229376 [ 2207.152205][T11484] zswap 0 [ 2207.152205][T11484] zswapped 0 [ 2207.152205][T11484] file_mapped 217088 [ 2207.152205][T11484] file_dirty 0 [ 2207.152205][T11484] file_writeback 0 [ 2207.152205][T11484] swapcached 0 [ 2207.152205][T11484] anon_thp 0 [ 2207.152205][T11484] file_thp 0 [ 2207.152205][T11484] shmem_thp 0 [ 2207.152205][T11484] inactive_anon 159744 [ 2207.152205][T11484] active_anon 196608 [ 2207.152205][T11484] inactive_file 0 [ 2207.152205][T11484] active_file 0 [ 2207.152205][T11484] unevictable 0 [ 2207.152205][T11484] slab_reclaimable 15872 [ 2207.152205][T11484] slab_unreclaimable 309179608 [ 2207.152205][T11484] slab 309195480 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x1000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x3000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2207.405334][T11484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11484,uid=0 [ 2207.435203][T11484] Memory cgroup out of memory: Killed process 11484 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2207.483806][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2207.554411][T11504] bond93 (uninitialized): Released all slaves 07:08:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2207.654655][T11505] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2207.685353][T11525] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2207.738279][T11505] CPU: 1 PID: 11505 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2207.748783][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2207.758869][T11505] Call Trace: [ 2207.762172][T11505] [ 2207.765130][T11505] dump_stack_lvl+0xcd/0x134 [ 2207.769762][T11505] dump_header+0x10b/0x7f9 [ 2207.774219][T11505] oom_kill_process.cold+0x10/0x15 [ 2207.779378][T11505] out_of_memory+0x358/0x14a0 [ 2207.784105][T11505] ? find_held_lock+0x2d/0x110 [ 2207.788898][T11505] ? oom_killer_disable+0x270/0x270 [ 2207.794131][T11505] ? find_held_lock+0x2d/0x110 [ 2207.798928][T11505] mem_cgroup_out_of_memory+0x206/0x270 [ 2207.804504][T11505] ? mem_cgroup_margin+0x130/0x130 [ 2207.809646][T11505] ? lock_downgrade+0x6e0/0x6e0 [ 2207.814547][T11505] try_charge_memcg+0xf67/0x13f0 [ 2207.819526][T11505] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2207.825536][T11505] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2207.831287][T11505] ? lock_downgrade+0x6e0/0x6e0 [ 2207.836171][T11505] ? lock_downgrade+0x6e0/0x6e0 [ 2207.841075][T11505] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2207.846658][T11505] __alloc_pages+0x1ef/0x510 [ 2207.851282][T11505] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2207.858098][T11505] ? find_held_lock+0x2d/0x110 [ 2207.862900][T11505] alloc_pages+0x1a6/0x270 [ 2207.867349][T11505] pte_alloc_one+0x16/0x230 [ 2207.871966][T11505] __pte_alloc+0x69/0x250 [ 2207.876329][T11505] ? pmd_install+0x150/0x150 [ 2207.880945][T11505] ? hugepage_vma_check+0x44e/0x780 [ 2207.886174][T11505] ? __pmd_alloc+0x2ff/0x5c0 [ 2207.890793][T11505] __handle_mm_fault+0x310b/0x39b0 [ 2207.895938][T11505] ? vm_iomap_memory+0x190/0x190 [ 2207.900926][T11505] handle_mm_fault+0x1c8/0x780 [ 2207.905725][T11505] do_user_addr_fault+0x475/0x1210 [ 2207.910880][T11505] exc_page_fault+0x94/0x170 [ 2207.915506][T11505] asm_exc_page_fault+0x22/0x30 [ 2207.920386][T11505] RIP: 0033:0x7f2941c2a149 [ 2207.924824][T11505] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2207.944465][T11505] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2207.950569][T11505] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2207.958568][T11505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2207.966562][T11505] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2207.974558][T11505] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021af7f [ 2207.982557][T11505] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2207.990575][T11505] 07:08:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x5000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2208.051002][T11505] memory: usage 307200kB, limit 307200kB, failcnt 39147 [ 2208.064214][T11505] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2208.114211][T11505] Memory cgroup stats for /syz0: [ 2208.114399][T11505] anon 135168 [ 2208.114399][T11505] file 184320 [ 2208.114399][T11505] kernel 314253312 [ 2208.114399][T11505] kernel_stack 65536 [ 2208.114399][T11505] pagetables 77824 [ 2208.114399][T11505] percpu 4839008 [ 2208.114399][T11505] sock 0 [ 2208.114399][T11505] vmalloc 0 [ 2208.114399][T11505] shmem 180224 [ 2208.114399][T11505] zswap 0 [ 2208.114399][T11505] zswapped 0 [ 2208.114399][T11505] file_mapped 180224 [ 2208.114399][T11505] file_dirty 0 [ 2208.114399][T11505] file_writeback 0 [ 2208.114399][T11505] swapcached 0 [ 2208.114399][T11505] anon_thp 0 [ 2208.114399][T11505] file_thp 0 [ 2208.114399][T11505] shmem_thp 0 [ 2208.114399][T11505] inactive_anon 151552 [ 2208.114399][T11505] active_anon 163840 [ 2208.114399][T11505] inactive_file 0 [ 2208.114399][T11505] active_file 4096 [ 2208.114399][T11505] unevictable 0 [ 2208.114399][T11505] slab_reclaimable 18040 [ 2208.114399][T11505] slab_unreclaimable 309219136 [ 2208.114399][T11505] slab 309237176 [ 2208.264848][T11526] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2208.308904][T11505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11505,uid=0 [ 2208.350681][T11526] bond683 (uninitialized): Released all slaves [ 2208.432523][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2208.471526][T11544] bond93 (uninitialized): Released all slaves 07:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1101, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x50b0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b0001006272"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2208.545563][T11505] Memory cgroup out of memory: Killed process 11505 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2208.634324][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2208.663118][T11532] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2208.686135][T11532] CPU: 0 PID: 11532 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2208.696656][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2208.706738][T11532] Call Trace: [ 2208.710039][T11532] [ 2208.712992][T11532] dump_stack_lvl+0xcd/0x134 [ 2208.717629][T11532] dump_header+0x10b/0x7f9 [ 2208.722087][T11532] oom_kill_process.cold+0x10/0x15 [ 2208.727237][T11532] out_of_memory+0x358/0x14a0 [ 2208.731958][T11532] ? find_held_lock+0x2d/0x110 [ 2208.736755][T11532] ? oom_killer_disable+0x270/0x270 [ 2208.741995][T11532] ? find_held_lock+0x2d/0x110 [ 2208.746791][T11532] mem_cgroup_out_of_memory+0x206/0x270 [ 2208.752367][T11532] ? mem_cgroup_margin+0x130/0x130 [ 2208.757504][T11532] ? lock_downgrade+0x6e0/0x6e0 [ 2208.762400][T11532] try_charge_memcg+0xf67/0x13f0 [ 2208.767375][T11532] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2208.773393][T11532] ? lock_downgrade+0x6e0/0x6e0 [ 2208.778285][T11532] charge_memcg+0x31/0x320 [ 2208.782734][T11532] __mem_cgroup_charge+0x27/0x90 [ 2208.787703][T11532] ? _compound_head+0x5d/0x150 [ 2208.792499][T11532] wp_page_copy+0x27c/0x1b60 [ 2208.797125][T11532] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2208.802614][T11532] ? lock_downgrade+0x6e0/0x6e0 [ 2208.807490][T11532] ? vm_normal_page+0x146/0x2a0 [ 2208.812381][T11532] do_wp_page+0x1d1/0x1910 [ 2208.816830][T11532] __handle_mm_fault+0x1813/0x39b0 [ 2208.821977][T11532] ? vm_iomap_memory+0x190/0x190 [ 2208.827149][T11532] handle_mm_fault+0x1c8/0x780 [ 2208.831947][T11532] do_user_addr_fault+0x475/0x1210 [ 2208.837109][T11532] exc_page_fault+0x94/0x170 [ 2208.841737][T11532] asm_exc_page_fault+0x22/0x30 [ 2208.846619][T11532] RIP: 0033:0x7f23844374b0 [ 2208.851058][T11532] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2208.870700][T11532] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2208.876794][T11532] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2208.884784][T11532] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2208.892779][T11532] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2208.900776][T11532] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2208.908770][T11532] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2208.916765][T11532] ? apparmor_socket_create+0x1f8/0x660 [ 2208.922356][T11532] 07:08:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2209.010042][T11532] memory: usage 307200kB, limit 307200kB, failcnt 30255 [ 2209.018977][T11561] bond93 (uninitialized): Released all slaves [ 2209.045739][T11563] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2209.063450][T11532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2209.102429][T11532] Memory cgroup stats for /syz4: [ 2209.102674][T11532] anon 126976 [ 2209.102674][T11532] file 229376 [ 2209.102674][T11532] kernel 314216448 [ 2209.102674][T11532] kernel_stack 65536 [ 2209.102674][T11532] pagetables 69632 [ 2209.102674][T11532] percpu 4849664 [ 2209.102674][T11532] sock 0 [ 2209.102674][T11532] vmalloc 0 [ 2209.102674][T11532] shmem 229376 [ 2209.102674][T11532] zswap 0 [ 2209.102674][T11532] zswapped 0 [ 2209.102674][T11532] file_mapped 217088 [ 2209.102674][T11532] file_dirty 0 [ 2209.102674][T11532] file_writeback 0 [ 2209.102674][T11532] swapcached 0 [ 2209.102674][T11532] anon_thp 0 [ 2209.102674][T11532] file_thp 0 [ 2209.102674][T11532] shmem_thp 0 [ 2209.102674][T11532] inactive_anon 159744 [ 2209.102674][T11532] active_anon 196608 [ 2209.102674][T11532] inactive_file 0 [ 2209.102674][T11532] active_file 0 [ 2209.102674][T11532] unevictable 0 [ 2209.102674][T11532] slab_reclaimable 15872 [ 2209.102674][T11532] slab_unreclaimable 309179608 [ 2209.102674][T11532] slab 309195480 07:08:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2209.156474][T11564] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2209.245814][T11532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11532,uid=0 [ 2209.245993][T11532] Memory cgroup out of memory: Killed process 11532 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2209.419761][T11562] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2209.433352][T11562] CPU: 1 PID: 11562 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2209.443811][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2209.453895][T11562] Call Trace: [ 2209.457195][T11562] [ 2209.460145][T11562] dump_stack_lvl+0xcd/0x134 [ 2209.464773][T11562] dump_header+0x10b/0x7f9 [ 2209.469227][T11562] oom_kill_process.cold+0x10/0x15 [ 2209.474378][T11562] out_of_memory+0x358/0x14a0 [ 2209.479092][T11562] ? find_held_lock+0x2d/0x110 [ 2209.483884][T11562] ? oom_killer_disable+0x270/0x270 [ 2209.489116][T11562] ? find_held_lock+0x2d/0x110 [ 2209.493912][T11562] mem_cgroup_out_of_memory+0x206/0x270 [ 2209.499486][T11562] ? mem_cgroup_margin+0x130/0x130 [ 2209.504624][T11562] ? lock_downgrade+0x6e0/0x6e0 [ 2209.509518][T11562] try_charge_memcg+0xf67/0x13f0 [ 2209.514483][T11562] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2209.520479][T11562] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2209.526208][T11562] ? lock_downgrade+0x6e0/0x6e0 [ 2209.531075][T11562] ? lock_downgrade+0x6e0/0x6e0 [ 2209.535952][T11562] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2209.541517][T11562] __alloc_pages+0x1ef/0x510 [ 2209.546121][T11562] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2209.552908][T11562] ? find_held_lock+0x2d/0x110 [ 2209.557697][T11562] alloc_pages+0x1a6/0x270 [ 2209.562138][T11562] pte_alloc_one+0x16/0x230 [ 2209.566652][T11562] __pte_alloc+0x69/0x250 [ 2209.571002][T11562] ? pmd_install+0x150/0x150 [ 2209.575604][T11562] ? hugepage_vma_check+0x44e/0x780 [ 2209.580815][T11562] ? __pmd_alloc+0x2ff/0x5c0 [ 2209.585416][T11562] __handle_mm_fault+0x310b/0x39b0 [ 2209.590553][T11562] ? vm_iomap_memory+0x190/0x190 [ 2209.595529][T11562] handle_mm_fault+0x1c8/0x780 [ 2209.600317][T11562] do_user_addr_fault+0x475/0x1210 [ 2209.605453][T11562] exc_page_fault+0x94/0x170 [ 2209.610066][T11562] asm_exc_page_fault+0x22/0x30 [ 2209.614933][T11562] RIP: 0033:0x7f2941c2a149 [ 2209.619363][T11562] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2209.639001][T11562] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2209.645092][T11562] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2209.653076][T11562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2209.661073][T11562] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2209.669076][T11562] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021b636 [ 2209.677068][T11562] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2209.685089][T11562] 07:08:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x8000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2209.800365][T11562] memory: usage 307200kB, limit 307200kB, failcnt 39227 [ 2209.882309][T11562] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2209.894571][T11562] Memory cgroup stats for /syz0: [ 2209.894972][T11562] anon 135168 [ 2209.894972][T11562] file 184320 [ 2209.894972][T11562] kernel 314253312 [ 2209.894972][T11562] kernel_stack 65536 [ 2209.894972][T11562] pagetables 77824 [ 2209.894972][T11562] percpu 4839008 [ 2209.894972][T11562] sock 0 [ 2209.894972][T11562] vmalloc 0 [ 2209.894972][T11562] shmem 180224 [ 2209.894972][T11562] zswap 0 [ 2209.894972][T11562] zswapped 0 [ 2209.894972][T11562] file_mapped 180224 [ 2209.894972][T11562] file_dirty 0 [ 2209.894972][T11562] file_writeback 0 [ 2209.894972][T11562] swapcached 0 [ 2209.894972][T11562] anon_thp 0 [ 2209.894972][T11562] file_thp 0 [ 2209.894972][T11562] shmem_thp 0 [ 2209.894972][T11562] inactive_anon 151552 [ 2209.894972][T11562] active_anon 163840 [ 2209.894972][T11562] inactive_file 0 [ 2209.894972][T11562] active_file 4096 [ 2209.894972][T11562] unevictable 0 [ 2209.894972][T11562] slab_reclaimable 18040 [ 2209.894972][T11562] slab_unreclaimable 309219136 [ 2209.894972][T11562] slab 309237176 07:08:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x9000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xa000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2210.077802][T11562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11562,uid=0 [ 2210.107437][T11562] Memory cgroup out of memory: Killed process 11562 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2210.140156][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2210.192090][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2210.225722][T11582] bond93 (uninitialized): Released all slaves 07:08:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1200, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xc000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2210.259860][T11591] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2210.324354][T11605] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2210.345421][T11591] CPU: 1 PID: 11591 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2210.355896][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2210.365976][T11591] Call Trace: [ 2210.369274][T11591] [ 2210.372216][T11591] dump_stack_lvl+0xcd/0x134 [ 2210.376834][T11591] dump_header+0x10b/0x7f9 [ 2210.381292][T11591] oom_kill_process.cold+0x10/0x15 [ 2210.386437][T11591] out_of_memory+0x358/0x14a0 [ 2210.391156][T11591] ? oom_killer_disable+0x270/0x270 [ 2210.396389][T11591] ? find_held_lock+0x2d/0x110 [ 2210.401182][T11591] mem_cgroup_out_of_memory+0x206/0x270 [ 2210.406752][T11591] ? mem_cgroup_margin+0x130/0x130 [ 2210.411889][T11591] ? lock_downgrade+0x6e0/0x6e0 [ 2210.416787][T11591] try_charge_memcg+0xf67/0x13f0 [ 2210.421765][T11591] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2210.427783][T11591] ? lock_downgrade+0x6e0/0x6e0 [ 2210.432680][T11591] charge_memcg+0x31/0x320 [ 2210.437127][T11591] __mem_cgroup_charge+0x27/0x90 [ 2210.442088][T11591] ? _compound_head+0x5d/0x150 [ 2210.446877][T11591] wp_page_copy+0x27c/0x1b60 [ 2210.451504][T11591] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2210.456985][T11591] ? lock_downgrade+0x6e0/0x6e0 [ 2210.461862][T11591] ? vm_normal_page+0x146/0x2a0 [ 2210.466759][T11591] do_wp_page+0x1d1/0x1910 [ 2210.471209][T11591] __handle_mm_fault+0x1813/0x39b0 [ 2210.476349][T11591] ? vm_iomap_memory+0x190/0x190 [ 2210.481341][T11591] handle_mm_fault+0x1c8/0x780 [ 2210.486135][T11591] do_user_addr_fault+0x475/0x1210 [ 2210.491290][T11591] exc_page_fault+0x94/0x170 [ 2210.495916][T11591] asm_exc_page_fault+0x22/0x30 [ 2210.500790][T11591] RIP: 0033:0x7f23844374b0 [ 2210.505228][T11591] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2210.524871][T11591] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2210.530966][T11591] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2210.538958][T11591] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2210.546944][T11591] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2210.554934][T11591] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2210.562925][T11591] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2210.570921][T11591] ? apparmor_socket_create+0x1f8/0x660 [ 2210.576513][T11591] 07:08:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2210.634569][T11591] memory: usage 307200kB, limit 307200kB, failcnt 30350 [ 2210.646033][T11591] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2210.683199][T11591] Memory cgroup stats for /syz4: [ 2210.683433][T11591] anon 126976 [ 2210.683433][T11591] file 229376 [ 2210.683433][T11591] kernel 314216448 [ 2210.683433][T11591] kernel_stack 65536 [ 2210.683433][T11591] pagetables 69632 [ 2210.683433][T11591] percpu 4849664 [ 2210.683433][T11591] sock 0 [ 2210.683433][T11591] vmalloc 0 [ 2210.683433][T11591] shmem 229376 [ 2210.683433][T11591] zswap 0 [ 2210.683433][T11591] zswapped 0 [ 2210.683433][T11591] file_mapped 217088 [ 2210.683433][T11591] file_dirty 0 [ 2210.683433][T11591] file_writeback 0 [ 2210.683433][T11591] swapcached 0 [ 2210.683433][T11591] anon_thp 0 [ 2210.683433][T11591] file_thp 0 [ 2210.683433][T11591] shmem_thp 0 [ 2210.683433][T11591] inactive_anon 159744 [ 2210.683433][T11591] active_anon 196608 [ 2210.683433][T11591] inactive_file 0 [ 2210.683433][T11591] active_file 0 [ 2210.683433][T11591] unevictable 0 [ 2210.683433][T11591] slab_reclaimable 15872 [ 2210.683433][T11591] slab_unreclaimable 309179608 [ 2210.683433][T11591] slab 309195480 [ 2210.718136][T11617] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2210.871416][T11591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11591,uid=0 07:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x10000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2210.926027][T11591] Memory cgroup out of memory: Killed process 11591 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2211.005732][T11617] bond683 (uninitialized): Released all slaves [ 2211.086296][T11610] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2211.146514][T11610] CPU: 1 PID: 11610 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2211.156980][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2211.167048][T11610] Call Trace: [ 2211.170347][T11610] [ 2211.173298][T11610] dump_stack_lvl+0xcd/0x134 [ 2211.177926][T11610] dump_header+0x10b/0x7f9 [ 2211.182379][T11610] oom_kill_process.cold+0x10/0x15 [ 2211.187528][T11610] out_of_memory+0x358/0x14a0 [ 2211.192245][T11610] ? find_held_lock+0x2d/0x110 [ 2211.197044][T11610] ? oom_killer_disable+0x270/0x270 [ 2211.202282][T11610] ? find_held_lock+0x2d/0x110 [ 2211.207079][T11610] mem_cgroup_out_of_memory+0x206/0x270 [ 2211.212653][T11610] ? mem_cgroup_margin+0x130/0x130 [ 2211.217788][T11610] ? lock_downgrade+0x6e0/0x6e0 [ 2211.222681][T11610] try_charge_memcg+0xf67/0x13f0 [ 2211.227658][T11610] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2211.233670][T11610] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2211.239418][T11610] ? lock_downgrade+0x6e0/0x6e0 [ 2211.244301][T11610] ? lock_downgrade+0x6e0/0x6e0 [ 2211.249195][T11610] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2211.254774][T11610] __alloc_pages+0x1ef/0x510 [ 2211.259396][T11610] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2211.266201][T11610] ? find_held_lock+0x2d/0x110 [ 2211.271002][T11610] alloc_pages+0x1a6/0x270 [ 2211.275456][T11610] pte_alloc_one+0x16/0x230 [ 2211.279990][T11610] __pte_alloc+0x69/0x250 [ 2211.284346][T11610] ? pmd_install+0x150/0x150 [ 2211.288959][T11610] ? hugepage_vma_check+0x44e/0x780 07:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x1f000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2211.294182][T11610] ? __pmd_alloc+0x2ff/0x5c0 [ 2211.298800][T11610] __handle_mm_fault+0x310b/0x39b0 [ 2211.303947][T11610] ? vm_iomap_memory+0x190/0x190 [ 2211.308942][T11610] handle_mm_fault+0x1c8/0x780 [ 2211.313744][T11610] do_user_addr_fault+0x475/0x1210 [ 2211.318900][T11610] exc_page_fault+0x94/0x170 [ 2211.323524][T11610] asm_exc_page_fault+0x22/0x30 [ 2211.328405][T11610] RIP: 0033:0x7f2941c2a149 [ 2211.332844][T11610] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2211.352478][T11610] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2211.358572][T11610] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2211.366562][T11610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2211.374553][T11610] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2211.382547][T11610] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021bcd0 [ 2211.390542][T11610] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2211.398553][T11610] [ 2211.470716][T11610] memory: usage 307200kB, limit 307200kB, failcnt 39307 [ 2211.482441][T11610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2211.492968][T11610] Memory cgroup stats for /syz0: [ 2211.493158][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2211.513919][T11610] anon 135168 [ 2211.513919][T11610] file 184320 07:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2211.513919][T11610] kernel 314253312 [ 2211.513919][T11610] kernel_stack 65536 [ 2211.513919][T11610] pagetables 77824 [ 2211.513919][T11610] percpu 4839008 [ 2211.513919][T11610] sock 0 [ 2211.513919][T11610] vmalloc 0 [ 2211.513919][T11610] shmem 180224 [ 2211.513919][T11610] zswap 0 [ 2211.513919][T11610] zswapped 0 [ 2211.513919][T11610] file_mapped 180224 [ 2211.513919][T11610] file_dirty 0 [ 2211.513919][T11610] file_writeback 0 [ 2211.513919][T11610] swapcached 0 [ 2211.513919][T11610] anon_thp 0 [ 2211.513919][T11610] file_thp 0 [ 2211.513919][T11610] shmem_thp 0 [ 2211.513919][T11610] inactive_anon 151552 [ 2211.513919][T11610] active_anon 163840 [ 2211.513919][T11610] inactive_file 0 [ 2211.513919][T11610] active_file 4096 [ 2211.513919][T11610] unevictable 0 [ 2211.513919][T11610] slab_reclaimable 18040 [ 2211.513919][T11610] slab_unreclaimable 309219136 [ 2211.513919][T11610] slab 309237176 07:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x48000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2211.715226][T11620] device bridge967 entered promiscuous mode [ 2211.734061][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2211.750936][T11610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11610,uid=0 [ 2211.751111][T11610] Memory cgroup out of memory: Killed process 11610 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1201, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4c000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2211.907570][T11635] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2211.924197][T11649] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2211.970389][T11635] CPU: 1 PID: 11635 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2211.980864][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2211.990944][T11635] Call Trace: [ 2211.994254][T11635] [ 2211.997204][T11635] dump_stack_lvl+0xcd/0x134 [ 2212.001834][T11635] dump_header+0x10b/0x7f9 [ 2212.006288][T11635] oom_kill_process.cold+0x10/0x15 [ 2212.011434][T11635] out_of_memory+0x358/0x14a0 [ 2212.016131][T11635] ? find_held_lock+0x2d/0x110 [ 2212.020908][T11635] ? oom_killer_disable+0x270/0x270 [ 2212.026123][T11635] ? find_held_lock+0x2d/0x110 [ 2212.030904][T11635] mem_cgroup_out_of_memory+0x206/0x270 [ 2212.036472][T11635] ? mem_cgroup_margin+0x130/0x130 [ 2212.041603][T11635] ? lock_downgrade+0x6e0/0x6e0 [ 2212.046491][T11635] try_charge_memcg+0xf67/0x13f0 [ 2212.051458][T11635] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2212.057465][T11635] ? lock_downgrade+0x6e0/0x6e0 [ 2212.062351][T11635] charge_memcg+0x31/0x320 [ 2212.066787][T11635] __mem_cgroup_charge+0x27/0x90 [ 2212.071751][T11635] ? _compound_head+0x5d/0x150 [ 2212.076545][T11635] wp_page_copy+0x27c/0x1b60 [ 2212.081175][T11635] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2212.086651][T11635] ? lock_downgrade+0x6e0/0x6e0 [ 2212.091523][T11635] ? vm_normal_page+0x146/0x2a0 [ 2212.096400][T11635] do_wp_page+0x1d1/0x1910 [ 2212.100842][T11635] __handle_mm_fault+0x1813/0x39b0 [ 2212.105972][T11635] ? vm_iomap_memory+0x190/0x190 [ 2212.110949][T11635] handle_mm_fault+0x1c8/0x780 [ 2212.115729][T11635] do_user_addr_fault+0x475/0x1210 [ 2212.120866][T11635] exc_page_fault+0x94/0x170 [ 2212.125471][T11635] asm_exc_page_fault+0x22/0x30 [ 2212.130336][T11635] RIP: 0033:0x7f23844374b0 [ 2212.134758][T11635] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2212.154388][T11635] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2212.160489][T11635] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 07:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x60000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2212.168488][T11635] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2212.176467][T11635] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2212.184444][T11635] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2212.192423][T11635] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2212.200397][T11635] ? apparmor_socket_create+0x1f8/0x660 [ 2212.205977][T11635] [ 2212.294181][T11649] bond683 (uninitialized): Released all slaves [ 2212.310217][T11635] memory: usage 307200kB, limit 307200kB, failcnt 30431 [ 2212.341640][T11651] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2212.358389][T11635] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2212.378318][T11635] Memory cgroup stats for /syz4: [ 2212.378551][T11635] anon 126976 [ 2212.378551][T11635] file 229376 [ 2212.378551][T11635] kernel 314216448 [ 2212.378551][T11635] kernel_stack 65536 [ 2212.378551][T11635] pagetables 69632 [ 2212.378551][T11635] percpu 4849664 [ 2212.378551][T11635] sock 0 [ 2212.378551][T11635] vmalloc 0 [ 2212.378551][T11635] shmem 229376 [ 2212.378551][T11635] zswap 0 [ 2212.378551][T11635] zswapped 0 [ 2212.378551][T11635] file_mapped 217088 [ 2212.378551][T11635] file_dirty 0 [ 2212.378551][T11635] file_writeback 0 [ 2212.378551][T11635] swapcached 0 [ 2212.378551][T11635] anon_thp 0 [ 2212.378551][T11635] file_thp 0 [ 2212.378551][T11635] shmem_thp 0 07:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x65580000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2212.378551][T11635] inactive_anon 159744 [ 2212.378551][T11635] active_anon 196608 [ 2212.378551][T11635] inactive_file 0 [ 2212.378551][T11635] active_file 0 [ 2212.378551][T11635] unevictable 0 [ 2212.378551][T11635] slab_reclaimable 15872 [ 2212.378551][T11635] slab_unreclaimable 309179608 [ 2212.378551][T11635] slab 309195480 [ 2212.476072][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2212.522169][T11652] bond93 (uninitialized): Released all slaves [ 2212.569125][T11635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11635,uid=0 [ 2212.595934][T11635] Memory cgroup out of memory: Killed process 11635 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x68000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2212.617274][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2212.617483][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2212.667118][T11662] device bridge968 entered promiscuous mode [ 2212.711329][T11674] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 07:08:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4e190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6c000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2212.823071][T11674] CPU: 1 PID: 11674 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2212.833556][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2212.843653][T11674] Call Trace: [ 2212.846953][T11674] [ 2212.849908][T11674] dump_stack_lvl+0xcd/0x134 [ 2212.854541][T11674] dump_header+0x10b/0x7f9 [ 2212.859001][T11674] oom_kill_process.cold+0x10/0x15 [ 2212.864155][T11674] out_of_memory+0x358/0x14a0 [ 2212.868873][T11674] ? find_held_lock+0x2d/0x110 [ 2212.873685][T11674] ? oom_killer_disable+0x270/0x270 [ 2212.875518][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2212.878902][T11674] ? find_held_lock+0x2d/0x110 [ 2212.878939][T11674] mem_cgroup_out_of_memory+0x206/0x270 [ 2212.878969][T11674] ? mem_cgroup_margin+0x130/0x130 [ 2212.903679][T11674] ? lock_downgrade+0x6e0/0x6e0 [ 2212.908605][T11674] try_charge_memcg+0xf67/0x13f0 [ 2212.913601][T11674] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2212.919628][T11674] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2212.925393][T11674] ? lock_downgrade+0x6e0/0x6e0 [ 2212.930280][T11674] ? lock_downgrade+0x6e0/0x6e0 [ 2212.935183][T11674] obj_cgroup_charge+0x2ab/0x5e0 [ 2212.940160][T11674] kmem_cache_alloc_lru+0x13e/0x720 [ 2212.945387][T11674] ? sock_alloc_inode+0x23/0x1d0 [ 2212.950365][T11674] sock_alloc_inode+0x23/0x1d0 [ 2212.955161][T11674] ? sock_free_inode+0x20/0x20 [ 2212.959954][T11674] alloc_inode+0x61/0x230 [ 2212.964320][T11674] new_inode_pseudo+0x13/0x80 [ 2212.969027][T11674] sock_alloc+0x3c/0x260 [ 2212.973303][T11674] __sock_create+0xb9/0x790 [ 2212.977834][T11674] ? lock_downgrade+0x6e0/0x6e0 [ 2212.982718][T11674] __sys_socket+0x12f/0x240 [ 2212.985929][T11687] bond93 (uninitialized): Released all slaves [ 2212.987239][T11674] ? __sys_socket_file+0x1f0/0x1f0 [ 2212.987279][T11674] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2212.987319][T11674] __x64_sys_socket+0x6f/0xb0 [ 2213.009076][T11674] do_syscall_64+0x35/0xb0 [ 2213.013529][T11674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2213.019455][T11674] RIP: 0033:0x7f2941c89279 [ 2213.023903][T11674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2213.043543][T11674] RSP: 002b:00007f2942e22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2213.051993][T11674] RAX: ffffffffffffffda RBX: 00007f2941d9bf80 RCX: 00007f2941c89279 [ 2213.059997][T11674] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2213.067995][T11674] RBP: 00007f2941ce32e9 R08: 0000000000000000 R09: 0000000000000000 [ 2213.075992][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2213.083991][T11674] R13: 00007ffda265d56f R14: 00007f2942e22300 R15: 0000000000022000 [ 2213.092015][T11674] 07:08:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xff7f}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2213.176433][T11674] memory: usage 307200kB, limit 307200kB, failcnt 39399 [ 2213.188043][T11674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2213.199653][T11695] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2213.202905][T11674] Memory cgroup stats for /syz0: [ 2213.238392][T11674] anon 135168 [ 2213.238392][T11674] file 184320 [ 2213.238392][T11674] kernel 314253312 [ 2213.238392][T11674] kernel_stack 65536 [ 2213.238392][T11674] pagetables 73728 [ 2213.238392][T11674] percpu 4839008 [ 2213.238392][T11674] sock 0 [ 2213.238392][T11674] vmalloc 0 [ 2213.238392][T11674] shmem 180224 [ 2213.238392][T11674] zswap 0 [ 2213.238392][T11674] zswapped 0 [ 2213.238392][T11674] file_mapped 180224 [ 2213.238392][T11674] file_dirty 0 [ 2213.238392][T11674] file_writeback 0 [ 2213.238392][T11674] swapcached 0 [ 2213.238392][T11674] anon_thp 0 [ 2213.238392][T11674] file_thp 0 [ 2213.238392][T11674] shmem_thp 0 [ 2213.238392][T11674] inactive_anon 151552 [ 2213.238392][T11674] active_anon 163840 [ 2213.238392][T11674] inactive_file 0 [ 2213.238392][T11674] active_file 4096 [ 2213.238392][T11674] unevictable 0 [ 2213.238392][T11674] slab_reclaimable 19840 [ 2213.238392][T11674] slab_unreclaimable 309218488 [ 2213.238392][T11674] slab 309238328 [ 2213.333039][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2213.356155][T11697] bond93 (uninitialized): Released all slaves [ 2213.384988][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2213.530076][T11674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11670,uid=0 [ 2213.553857][T11674] Memory cgroup out of memory: Killed process 11670 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x74000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1300, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2213.732648][T11715] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2213.760802][T11688] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2213.810094][T11715] bond683 (uninitialized): Released all slaves 07:08:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2213.877557][T11688] CPU: 1 PID: 11688 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2213.888038][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2213.898120][T11688] Call Trace: [ 2213.901422][T11688] [ 2213.904378][T11688] dump_stack_lvl+0xcd/0x134 [ 2213.909014][T11688] dump_header+0x10b/0x7f9 [ 2213.913470][T11688] oom_kill_process.cold+0x10/0x15 [ 2213.918630][T11688] out_of_memory+0x358/0x14a0 [ 2213.923346][T11688] ? find_held_lock+0x2d/0x110 [ 2213.928140][T11688] ? oom_killer_disable+0x270/0x270 [ 2213.933378][T11688] ? find_held_lock+0x2d/0x110 [ 2213.938176][T11688] mem_cgroup_out_of_memory+0x206/0x270 [ 2213.943756][T11688] ? mem_cgroup_margin+0x130/0x130 [ 2213.948897][T11688] ? lock_downgrade+0x6e0/0x6e0 [ 2213.953783][T11688] try_charge_memcg+0xf67/0x13f0 [ 2213.958752][T11688] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2213.964765][T11688] ? lock_downgrade+0x6e0/0x6e0 [ 2213.969652][T11688] charge_memcg+0x31/0x320 [ 2213.974094][T11688] __mem_cgroup_charge+0x27/0x90 [ 2213.979045][T11688] ? _compound_head+0x5d/0x150 [ 2213.983836][T11688] wp_page_copy+0x27c/0x1b60 [ 2213.988493][T11688] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2213.993971][T11688] ? lock_downgrade+0x6e0/0x6e0 [ 2213.998844][T11688] ? vm_normal_page+0x146/0x2a0 [ 2214.003734][T11688] do_wp_page+0x1d1/0x1910 [ 2214.008174][T11688] __handle_mm_fault+0x1813/0x39b0 [ 2214.013312][T11688] ? vm_iomap_memory+0x190/0x190 [ 2214.018297][T11688] handle_mm_fault+0x1c8/0x780 [ 2214.023082][T11688] do_user_addr_fault+0x475/0x1210 [ 2214.028224][T11688] exc_page_fault+0x94/0x170 [ 2214.032843][T11688] asm_exc_page_fault+0x22/0x30 [ 2214.037706][T11688] RIP: 0033:0x7f23844374b0 [ 2214.042137][T11688] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2214.061765][T11688] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2214.067845][T11688] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2214.075833][T11688] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2214.083815][T11688] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2214.091800][T11688] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2214.099794][T11688] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2214.107783][T11688] ? apparmor_socket_create+0x1f8/0x660 [ 2214.113367][T11688] [ 2214.166301][T11688] memory: usage 307200kB, limit 307200kB, failcnt 30514 [ 2214.175835][T11688] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2214.183200][T11716] bond93 (uninitialized): Released all slaves [ 2214.185316][T11710] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2214.191297][T11688] Memory cgroup stats for /syz4: [ 2214.191504][T11688] anon 126976 [ 2214.191504][T11688] file 229376 [ 2214.191504][T11688] kernel 314216448 [ 2214.191504][T11688] kernel_stack 65536 [ 2214.191504][T11688] pagetables 69632 [ 2214.191504][T11688] percpu 4849664 [ 2214.191504][T11688] sock 0 [ 2214.191504][T11688] vmalloc 0 [ 2214.191504][T11688] shmem 229376 [ 2214.191504][T11688] zswap 0 [ 2214.191504][T11688] zswapped 0 [ 2214.191504][T11688] file_mapped 217088 [ 2214.191504][T11688] file_dirty 0 [ 2214.191504][T11688] file_writeback 0 [ 2214.191504][T11688] swapcached 0 [ 2214.191504][T11688] anon_thp 0 [ 2214.191504][T11688] file_thp 0 [ 2214.191504][T11688] shmem_thp 0 [ 2214.191504][T11688] inactive_anon 159744 [ 2214.191504][T11688] active_anon 196608 [ 2214.191504][T11688] inactive_file 0 [ 2214.191504][T11688] active_file 0 [ 2214.191504][T11688] unevictable 0 [ 2214.191504][T11688] slab_reclaimable 15872 [ 2214.191504][T11688] slab_unreclaimable 309179608 [ 2214.191504][T11688] slab 309195480 [ 2214.191570][T11688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11688,uid=0 [ 2214.191715][T11688] Memory cgroup out of memory: Killed process 11688 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x150000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4f190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x81000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2214.419610][T11733] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2214.439781][T11733] CPU: 0 PID: 11733 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2214.450250][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2214.460505][T11733] Call Trace: [ 2214.463803][T11733] [ 2214.466757][T11733] dump_stack_lvl+0xcd/0x134 [ 2214.471384][T11733] dump_header+0x10b/0x7f9 [ 2214.475840][T11733] oom_kill_process.cold+0x10/0x15 [ 2214.480999][T11733] out_of_memory+0x358/0x14a0 [ 2214.485717][T11733] ? find_held_lock+0x2d/0x110 [ 2214.490513][T11733] ? oom_killer_disable+0x270/0x270 [ 2214.495748][T11733] ? find_held_lock+0x2d/0x110 [ 2214.500546][T11733] mem_cgroup_out_of_memory+0x206/0x270 [ 2214.506128][T11733] ? mem_cgroup_margin+0x130/0x130 [ 2214.511269][T11733] ? lock_downgrade+0x6e0/0x6e0 [ 2214.516166][T11733] try_charge_memcg+0xf67/0x13f0 [ 2214.521147][T11733] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2214.527172][T11733] ? lock_downgrade+0x6e0/0x6e0 [ 2214.532071][T11733] charge_memcg+0x31/0x320 [ 2214.536528][T11733] __mem_cgroup_charge+0x27/0x90 [ 2214.541498][T11733] ? _compound_head+0x5d/0x150 [ 2214.546302][T11733] wp_page_copy+0x27c/0x1b60 [ 2214.550933][T11733] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2214.556428][T11733] ? lock_downgrade+0x6e0/0x6e0 [ 2214.561311][T11733] ? vm_normal_page+0x146/0x2a0 [ 2214.566210][T11733] do_wp_page+0x1d1/0x1910 [ 2214.570665][T11733] __handle_mm_fault+0x1813/0x39b0 [ 2214.575814][T11733] ? vm_iomap_memory+0x190/0x190 [ 2214.580811][T11733] handle_mm_fault+0x1c8/0x780 [ 2214.585611][T11733] do_user_addr_fault+0x475/0x1210 [ 2214.590771][T11733] exc_page_fault+0x94/0x170 [ 2214.595403][T11733] asm_exc_page_fault+0x22/0x30 [ 2214.600289][T11733] RIP: 0033:0x7f2941c374b0 [ 2214.604729][T11733] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2214.624370][T11733] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 [ 2214.630474][T11733] RAX: 00000000a25c24d7 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 [ 2214.638474][T11733] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000a1eab35 [ 2214.646476][T11733] RBP: 00000000a25c24d7 R08: 00000000000004d7 R09: 00000000a25c24db [ 2214.654481][T11733] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2214.662568][T11733] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83c43dce 07:08:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x88a8ffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x9effffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2214.670565][T11733] ? apparmor_socket_create+0xae/0x660 [ 2214.676079][T11733] [ 2214.790715][T11733] memory: usage 307196kB, limit 307200kB, failcnt 39481 [ 2214.800904][T11733] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2214.811154][T11733] Memory cgroup stats for /syz0: [ 2214.811396][T11733] anon 126976 [ 2214.811396][T11733] file 184320 [ 2214.811396][T11733] kernel 314249216 [ 2214.811396][T11733] kernel_stack 65536 [ 2214.811396][T11733] pagetables 73728 [ 2214.811396][T11733] percpu 4839008 [ 2214.811396][T11733] sock 0 [ 2214.811396][T11733] vmalloc 0 [ 2214.811396][T11733] shmem 180224 [ 2214.811396][T11733] zswap 0 [ 2214.811396][T11733] zswapped 0 [ 2214.811396][T11733] file_mapped 180224 [ 2214.811396][T11733] file_dirty 0 [ 2214.811396][T11733] file_writeback 0 [ 2214.811396][T11733] swapcached 0 [ 2214.811396][T11733] anon_thp 0 [ 2214.811396][T11733] file_thp 0 [ 2214.811396][T11733] shmem_thp 0 [ 2214.811396][T11733] inactive_anon 143360 [ 2214.811396][T11733] active_anon 163840 [ 2214.811396][T11733] inactive_file 0 [ 2214.811396][T11733] active_file 4096 [ 2214.811396][T11733] unevictable 0 [ 2214.811396][T11733] slab_reclaimable 16112 [ 2214.811396][T11733] slab_unreclaimable 309218488 [ 2214.811396][T11733] slab 309234600 07:08:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xd3190000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2214.982026][T11739] bond93 (uninitialized): Released all slaves 07:08:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2215.082878][T11757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2215.110693][T11733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11733,uid=0 [ 2215.172975][T11733] Memory cgroup out of memory: Killed process 11733 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffa888}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1301, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffe000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2215.431944][T11742] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2215.490633][T11760] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2215.502508][T11742] CPU: 1 PID: 11742 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2215.512973][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2215.523051][T11742] Call Trace: [ 2215.526348][T11742] [ 2215.529296][T11742] dump_stack_lvl+0xcd/0x134 [ 2215.533928][T11742] dump_header+0x10b/0x7f9 [ 2215.538382][T11742] oom_kill_process.cold+0x10/0x15 [ 2215.543530][T11742] out_of_memory+0x358/0x14a0 [ 2215.548252][T11742] ? find_held_lock+0x2d/0x110 [ 2215.553063][T11742] ? oom_killer_disable+0x270/0x270 [ 2215.558305][T11742] ? find_held_lock+0x2d/0x110 [ 2215.563109][T11742] mem_cgroup_out_of_memory+0x206/0x270 [ 2215.568687][T11742] ? mem_cgroup_margin+0x130/0x130 [ 2215.573824][T11742] ? lock_downgrade+0x6e0/0x6e0 [ 2215.578719][T11742] try_charge_memcg+0xf67/0x13f0 [ 2215.583695][T11742] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2215.589714][T11742] ? lock_downgrade+0x6e0/0x6e0 [ 2215.594610][T11742] charge_memcg+0x31/0x320 [ 2215.599063][T11742] __mem_cgroup_charge+0x27/0x90 [ 2215.604024][T11742] ? _compound_head+0x5d/0x150 [ 2215.608838][T11742] wp_page_copy+0x27c/0x1b60 [ 2215.613465][T11742] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2215.618954][T11742] ? lock_downgrade+0x6e0/0x6e0 [ 2215.623919][T11742] ? vm_normal_page+0x146/0x2a0 [ 2215.628820][T11742] do_wp_page+0x1d1/0x1910 [ 2215.633271][T11742] __handle_mm_fault+0x1813/0x39b0 [ 2215.638425][T11742] ? vm_iomap_memory+0x190/0x190 [ 2215.643420][T11742] handle_mm_fault+0x1c8/0x780 [ 2215.648218][T11742] do_user_addr_fault+0x475/0x1210 [ 2215.653386][T11742] exc_page_fault+0x94/0x170 [ 2215.658013][T11742] asm_exc_page_fault+0x22/0x30 [ 2215.662890][T11742] RIP: 0033:0x7f23844374b0 [ 2215.667357][T11742] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2215.686999][T11742] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2215.693098][T11742] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2215.701100][T11742] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2215.709096][T11742] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2215.717092][T11742] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2215.725090][T11742] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2215.733093][T11742] ? apparmor_socket_create+0x1f8/0x660 [ 2215.738699][T11742] [ 2215.810692][T11742] memory: usage 307200kB, limit 307200kB, failcnt 30601 [ 2215.833317][T11742] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2215.855083][T11760] bond683 (uninitialized): Released all slaves [ 2215.946300][T11742] Memory cgroup stats for /syz4: [ 2215.950848][T11742] anon 126976 [ 2215.950848][T11742] file 229376 [ 2215.950848][T11742] kernel 314216448 [ 2215.950848][T11742] kernel_stack 65536 [ 2215.950848][T11742] pagetables 69632 [ 2215.950848][T11742] percpu 4849664 [ 2215.950848][T11742] sock 0 [ 2215.950848][T11742] vmalloc 0 [ 2215.950848][T11742] shmem 229376 [ 2215.950848][T11742] zswap 0 [ 2215.950848][T11742] zswapped 0 [ 2215.950848][T11742] file_mapped 217088 [ 2215.950848][T11742] file_dirty 0 [ 2215.950848][T11742] file_writeback 0 [ 2215.950848][T11742] swapcached 0 [ 2215.950848][T11742] anon_thp 0 [ 2215.950848][T11742] file_thp 0 [ 2215.950848][T11742] shmem_thp 0 [ 2215.950848][T11742] inactive_anon 159744 [ 2215.950848][T11742] active_anon 196608 [ 2215.950848][T11742] inactive_file 0 [ 2215.950848][T11742] active_file 0 [ 2215.950848][T11742] unevictable 0 [ 2215.950848][T11742] slab_reclaimable 15872 [ 2215.950848][T11742] slab_unreclaimable 309179608 [ 2215.950848][T11742] slab 309195480 [ 2215.975561][T11768] device bridge969 entered promiscuous mode [ 2216.129936][T11765] __nla_validate_parse: 4 callbacks suppressed [ 2216.129958][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.222428][T11742] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11742,uid=0 07:08:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xfffff000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2216.256243][T11742] Memory cgroup out of memory: Killed process 11742 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffff7f}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2216.328896][T11781] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2216.403016][T11781] CPU: 1 PID: 11781 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2216.413498][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2216.423581][T11781] Call Trace: [ 2216.426883][T11781] [ 2216.429837][T11781] dump_stack_lvl+0xcd/0x134 [ 2216.434466][T11781] dump_header+0x10b/0x7f9 [ 2216.438930][T11781] oom_kill_process.cold+0x10/0x15 [ 2216.444081][T11781] out_of_memory+0x358/0x14a0 [ 2216.448804][T11781] ? find_held_lock+0x2d/0x110 [ 2216.453595][T11781] ? oom_killer_disable+0x270/0x270 [ 2216.458831][T11781] ? find_held_lock+0x2d/0x110 [ 2216.463629][T11781] mem_cgroup_out_of_memory+0x206/0x270 [ 2216.469210][T11781] ? mem_cgroup_margin+0x130/0x130 [ 2216.474351][T11781] ? lock_downgrade+0x6e0/0x6e0 [ 2216.479249][T11781] try_charge_memcg+0xf67/0x13f0 [ 2216.484219][T11781] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2216.490238][T11781] ? lock_downgrade+0x6e0/0x6e0 [ 2216.495137][T11781] charge_memcg+0x31/0x320 [ 2216.499594][T11781] __mem_cgroup_charge+0x27/0x90 [ 2216.504568][T11781] ? _compound_head+0x5d/0x150 [ 2216.509377][T11781] wp_page_copy+0x27c/0x1b60 [ 2216.514008][T11781] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2216.519500][T11781] ? lock_downgrade+0x6e0/0x6e0 [ 2216.524375][T11781] ? vm_normal_page+0x146/0x2a0 [ 2216.529270][T11781] do_wp_page+0x1d1/0x1910 [ 2216.533732][T11781] __handle_mm_fault+0x1813/0x39b0 [ 2216.538891][T11781] ? vm_iomap_memory+0x190/0x190 [ 2216.543883][T11781] handle_mm_fault+0x1c8/0x780 [ 2216.548683][T11781] do_user_addr_fault+0x475/0x1210 [ 2216.553843][T11781] exc_page_fault+0x94/0x170 [ 2216.558474][T11781] asm_exc_page_fault+0x22/0x30 [ 2216.563348][T11781] RIP: 0033:0x7f2941c374b0 [ 2216.567788][T11781] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2216.587431][T11781] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 [ 2216.593533][T11781] RAX: 00000000737de801 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 07:08:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2216.601534][T11781] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000a1eaa7d [ 2216.609535][T11781] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2216.617532][T11781] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2216.625528][T11781] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2216.633536][T11781] ? apparmor_socket_create+0x1f8/0x660 [ 2216.639163][T11781] [ 2216.724827][T11781] memory: usage 307200kB, limit 307200kB, failcnt 39602 [ 2216.752695][T11781] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2216.771174][T11781] Memory cgroup stats for /syz0: [ 2216.771425][T11781] anon 131072 [ 2216.771425][T11781] file 184320 [ 2216.771425][T11781] kernel 314249216 [ 2216.771425][T11781] kernel_stack 65536 [ 2216.771425][T11781] pagetables 73728 [ 2216.771425][T11781] percpu 4839008 [ 2216.771425][T11781] sock 0 [ 2216.771425][T11781] vmalloc 0 [ 2216.771425][T11781] shmem 180224 [ 2216.771425][T11781] zswap 0 [ 2216.771425][T11781] zswapped 0 [ 2216.771425][T11781] file_mapped 180224 [ 2216.771425][T11781] file_dirty 0 [ 2216.771425][T11781] file_writeback 0 [ 2216.771425][T11781] swapcached 0 [ 2216.771425][T11781] anon_thp 0 [ 2216.771425][T11781] file_thp 0 [ 2216.771425][T11781] shmem_thp 0 [ 2216.771425][T11781] inactive_anon 147456 [ 2216.771425][T11781] active_anon 163840 [ 2216.771425][T11781] inactive_file 0 [ 2216.771425][T11781] active_file 4096 [ 2216.771425][T11781] unevictable 0 [ 2216.771425][T11781] slab_reclaimable 16112 [ 2216.771425][T11781] slab_unreclaimable 309218488 [ 2216.771425][T11781] slab 309234600 07:08:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffff9e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xfffffff0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2216.917423][T11803] device bridge970 entered promiscuous mode [ 2216.948474][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.963091][T11781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11781,uid=0 [ 2216.990624][T11781] Memory cgroup out of memory: Killed process 11781 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x40030000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2217.024257][T11792] bond93 (uninitialized): Released all slaves [ 2217.062451][T11802] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2217.106037][T11793] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2217.134755][T11793] CPU: 0 PID: 11793 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2217.134777][T11802] bond683 (uninitialized): Released all slaves [ 2217.151370][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2217.161448][T11793] Call Trace: [ 2217.164746][T11793] [ 2217.167698][T11793] dump_stack_lvl+0xcd/0x134 [ 2217.172330][T11793] dump_header+0x10b/0x7f9 [ 2217.176786][T11793] oom_kill_process.cold+0x10/0x15 [ 2217.181941][T11793] out_of_memory+0x358/0x14a0 [ 2217.186655][T11793] ? find_held_lock+0x2d/0x110 [ 2217.191449][T11793] ? oom_killer_disable+0x270/0x270 [ 2217.196680][T11793] ? find_held_lock+0x2d/0x110 [ 2217.201473][T11793] mem_cgroup_out_of_memory+0x206/0x270 [ 2217.207048][T11793] ? mem_cgroup_margin+0x130/0x130 [ 2217.212189][T11793] ? lock_downgrade+0x6e0/0x6e0 [ 2217.217085][T11793] try_charge_memcg+0xf67/0x13f0 [ 2217.222061][T11793] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2217.228082][T11793] ? lock_downgrade+0x6e0/0x6e0 [ 2217.232980][T11793] charge_memcg+0x31/0x320 [ 2217.237412][T11793] __mem_cgroup_charge+0x27/0x90 [ 2217.242358][T11793] ? _compound_head+0x5d/0x150 [ 2217.247141][T11793] wp_page_copy+0x27c/0x1b60 [ 2217.251751][T11793] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2217.257215][T11793] ? lock_downgrade+0x6e0/0x6e0 [ 2217.262075][T11793] ? vm_normal_page+0x146/0x2a0 [ 2217.266945][T11793] do_wp_page+0x1d1/0x1910 [ 2217.271374][T11793] __handle_mm_fault+0x1813/0x39b0 [ 2217.276498][T11793] ? vm_iomap_memory+0x190/0x190 [ 2217.281469][T11793] handle_mm_fault+0x1c8/0x780 [ 2217.286245][T11793] do_user_addr_fault+0x475/0x1210 [ 2217.291379][T11793] exc_page_fault+0x94/0x170 [ 2217.295986][T11793] asm_exc_page_fault+0x22/0x30 [ 2217.300846][T11793] RIP: 0033:0x7f23844374b0 [ 2217.305268][T11793] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2217.324880][T11793] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2217.330953][T11793] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2217.338929][T11793] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2217.346902][T11793] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2217.354875][T11793] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2217.362850][T11793] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2217.370825][T11793] ? apparmor_socket_create+0x1f8/0x660 [ 2217.376398][T11793] 07:08:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1400, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe0ffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2217.461832][T11793] memory: usage 307200kB, limit 307200kB, failcnt 30695 [ 2217.468945][T11810] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2217.543163][T11793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2217.554037][T11793] Memory cgroup stats for /syz4: [ 2217.554258][T11793] anon 126976 [ 2217.554258][T11793] file 229376 [ 2217.554258][T11793] kernel 314216448 [ 2217.554258][T11793] kernel_stack 65536 [ 2217.554258][T11793] pagetables 69632 [ 2217.554258][T11793] percpu 4849664 [ 2217.554258][T11793] sock 0 [ 2217.554258][T11793] vmalloc 0 [ 2217.554258][T11793] shmem 229376 [ 2217.554258][T11793] zswap 0 [ 2217.554258][T11793] zswapped 0 [ 2217.554258][T11793] file_mapped 217088 [ 2217.554258][T11793] file_dirty 0 [ 2217.554258][T11793] file_writeback 0 [ 2217.554258][T11793] swapcached 0 [ 2217.554258][T11793] anon_thp 0 [ 2217.554258][T11793] file_thp 0 [ 2217.554258][T11793] shmem_thp 0 [ 2217.554258][T11793] inactive_anon 159744 [ 2217.554258][T11793] active_anon 196608 [ 2217.554258][T11793] inactive_file 0 [ 2217.554258][T11793] active_file 0 [ 2217.554258][T11793] unevictable 0 [ 2217.554258][T11793] slab_reclaimable 15872 [ 2217.554258][T11793] slab_unreclaimable 309179608 [ 2217.554258][T11793] slab 309195480 [ 2217.721580][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2217.775435][T11826] bond93 (uninitialized): Released all slaves [ 2217.799670][T11793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11793,uid=0 [ 2217.832403][T11793] Memory cgroup out of memory: Killed process 11793 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2217.873540][T11835] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2217.936844][T11835] CPU: 1 PID: 11835 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2217.947317][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2217.957404][T11835] Call Trace: [ 2217.960698][T11835] [ 2217.963635][T11835] dump_stack_lvl+0xcd/0x134 [ 2217.968694][T11835] dump_header+0x10b/0x7f9 [ 2217.973139][T11835] oom_kill_process.cold+0x10/0x15 [ 2217.978277][T11835] out_of_memory+0x358/0x14a0 [ 2217.982984][T11835] ? oom_killer_disable+0x270/0x270 [ 2217.988206][T11835] ? find_held_lock+0x2d/0x110 [ 2217.992992][T11835] mem_cgroup_out_of_memory+0x206/0x270 [ 2217.998559][T11835] ? mem_cgroup_margin+0x130/0x130 [ 2218.003689][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2218.008577][T11835] try_charge_memcg+0xf67/0x13f0 [ 2218.013541][T11835] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2218.019541][T11835] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2218.025280][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2218.030150][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2218.035032][T11835] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2218.040600][T11835] __alloc_pages+0x1ef/0x510 [ 2218.045210][T11835] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2218.052001][T11835] ? find_held_lock+0x2d/0x110 [ 2218.056791][T11835] alloc_pages+0x1a6/0x270 [ 2218.061236][T11835] pte_alloc_one+0x16/0x230 [ 2218.065749][T11835] __pte_alloc+0x69/0x250 [ 2218.070099][T11835] ? pmd_install+0x150/0x150 [ 2218.074706][T11835] ? hugepage_vma_check+0x44e/0x780 [ 2218.079923][T11835] ? __pmd_alloc+0x2ff/0x5c0 [ 2218.084530][T11835] __handle_mm_fault+0x310b/0x39b0 [ 2218.089671][T11835] ? vm_iomap_memory+0x190/0x190 [ 2218.094658][T11835] handle_mm_fault+0x1c8/0x780 [ 2218.099441][T11835] do_user_addr_fault+0x475/0x1210 [ 2218.104583][T11835] exc_page_fault+0x94/0x170 [ 2218.109200][T11835] asm_exc_page_fault+0x22/0x30 [ 2218.114070][T11835] RIP: 0033:0x7f2941c2a149 07:08:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2218.118501][T11835] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2218.138131][T11835] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2218.144218][T11835] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2218.152199][T11835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2218.160183][T11835] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2218.168176][T11835] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021d717 [ 2218.176166][T11835] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2218.184168][T11835] [ 2218.228209][T11843] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2218.332486][T11843] bond683 (uninitialized): Released all slaves [ 2218.352853][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2218.380028][T11845] bond93 (uninitialized): Released all slaves [ 2218.400103][T11846] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x200000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2218.556069][T11835] memory: usage 307200kB, limit 307200kB, failcnt 39637 [ 2218.571715][T11835] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2218.601169][T11835] Memory cgroup stats for /syz0: [ 2218.601399][T11835] anon 135168 [ 2218.601399][T11835] file 184320 [ 2218.601399][T11835] kernel 314253312 [ 2218.601399][T11835] kernel_stack 65536 [ 2218.601399][T11835] pagetables 77824 [ 2218.601399][T11835] percpu 4839008 [ 2218.601399][T11835] sock 0 [ 2218.601399][T11835] vmalloc 0 [ 2218.601399][T11835] shmem 180224 [ 2218.601399][T11835] zswap 0 [ 2218.601399][T11835] zswapped 0 [ 2218.601399][T11835] file_mapped 180224 [ 2218.601399][T11835] file_dirty 0 [ 2218.601399][T11835] file_writeback 0 [ 2218.601399][T11835] swapcached 0 [ 2218.601399][T11835] anon_thp 0 [ 2218.601399][T11835] file_thp 0 [ 2218.601399][T11835] shmem_thp 0 [ 2218.601399][T11835] inactive_anon 151552 [ 2218.601399][T11835] active_anon 163840 [ 2218.601399][T11835] inactive_file 0 [ 2218.601399][T11835] active_file 4096 [ 2218.601399][T11835] unevictable 0 [ 2218.601399][T11835] slab_reclaimable 18040 [ 2218.601399][T11835] slab_unreclaimable 309219136 [ 2218.601399][T11835] slab 309237176 07:08:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1150000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x300000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2218.814124][T11835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11835,uid=0 [ 2218.846498][T11847] device bridge971 entered promiscuous mode [ 2218.886147][T11835] Memory cgroup out of memory: Killed process 11835 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:08:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1401, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x400000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2218.971318][T11858] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2219.042614][T11858] CPU: 1 PID: 11858 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2219.053078][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2219.063149][T11858] Call Trace: [ 2219.066442][T11858] [ 2219.069391][T11858] dump_stack_lvl+0xcd/0x134 [ 2219.074013][T11858] dump_header+0x10b/0x7f9 [ 2219.078452][T11858] oom_kill_process.cold+0x10/0x15 [ 2219.083598][T11858] out_of_memory+0x358/0x14a0 [ 2219.088305][T11858] ? oom_killer_disable+0x270/0x270 [ 2219.093529][T11858] ? find_held_lock+0x2d/0x110 [ 2219.098317][T11858] mem_cgroup_out_of_memory+0x206/0x270 [ 2219.103883][T11858] ? mem_cgroup_margin+0x130/0x130 [ 2219.109015][T11858] ? lock_downgrade+0x6e0/0x6e0 [ 2219.113905][T11858] try_charge_memcg+0xf67/0x13f0 [ 2219.118873][T11858] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2219.124880][T11858] ? lock_downgrade+0x6e0/0x6e0 [ 2219.129767][T11858] charge_memcg+0x31/0x320 [ 2219.134215][T11858] __mem_cgroup_charge+0x27/0x90 [ 2219.139167][T11858] ? _compound_head+0x5d/0x150 [ 2219.143952][T11858] wp_page_copy+0x27c/0x1b60 [ 2219.148576][T11858] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2219.154053][T11858] ? lock_downgrade+0x6e0/0x6e0 [ 2219.158922][T11858] ? vm_normal_page+0x146/0x2a0 [ 2219.163806][T11858] do_wp_page+0x1d1/0x1910 [ 2219.168244][T11858] __handle_mm_fault+0x1813/0x39b0 [ 2219.173382][T11858] ? vm_iomap_memory+0x190/0x190 [ 2219.178363][T11858] handle_mm_fault+0x1c8/0x780 [ 2219.183155][T11858] do_user_addr_fault+0x475/0x1210 [ 2219.188319][T11858] exc_page_fault+0x94/0x170 [ 2219.192937][T11858] asm_exc_page_fault+0x22/0x30 [ 2219.197827][T11858] RIP: 0033:0x7f23844374b0 [ 2219.202259][T11858] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2219.221911][T11858] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2219.228000][T11858] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2219.235989][T11858] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2219.243978][T11858] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2219.251971][T11858] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2219.259960][T11858] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2219.267969][T11858] ? apparmor_socket_create+0x1f8/0x660 [ 2219.273555][T11858] [ 2219.375329][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2219.382044][T11858] memory: usage 307200kB, limit 307200kB, failcnt 30754 [ 2219.423755][T11866] bond93 (uninitialized): Released all slaves [ 2219.434107][T11858] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2219.434132][T11858] Memory cgroup stats for /syz4: [ 2219.434363][T11858] anon 126976 [ 2219.434363][T11858] file 229376 [ 2219.434363][T11858] kernel 314216448 [ 2219.434363][T11858] kernel_stack 65536 [ 2219.434363][T11858] pagetables 69632 [ 2219.434363][T11858] percpu 4849664 [ 2219.434363][T11858] sock 0 [ 2219.434363][T11858] vmalloc 0 [ 2219.434363][T11858] shmem 229376 [ 2219.434363][T11858] zswap 0 [ 2219.434363][T11858] zswapped 0 [ 2219.434363][T11858] file_mapped 217088 [ 2219.434363][T11858] file_dirty 0 [ 2219.434363][T11858] file_writeback 0 [ 2219.434363][T11858] swapcached 0 [ 2219.434363][T11858] anon_thp 0 [ 2219.434363][T11858] file_thp 0 [ 2219.434363][T11858] shmem_thp 0 [ 2219.434363][T11858] inactive_anon 159744 [ 2219.434363][T11858] active_anon 196608 [ 2219.434363][T11858] inactive_file 0 [ 2219.434363][T11858] active_file 0 [ 2219.434363][T11858] unevictable 0 [ 2219.434363][T11858] slab_reclaimable 15872 [ 2219.434363][T11858] slab_unreclaimable 309179608 [ 2219.434363][T11858] slab 309195480 [ 2219.434428][T11858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11858,uid=0 [ 2219.434608][T11858] Memory cgroup out of memory: Killed process 11858 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x500000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2219.607523][T11878] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 07:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x50b000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x600000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2219.685976][T11876] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2219.732221][T11878] CPU: 1 PID: 11878 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2219.742699][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2219.752781][T11878] Call Trace: [ 2219.756080][T11878] [ 2219.759034][T11878] dump_stack_lvl+0xcd/0x134 [ 2219.763659][T11878] dump_header+0x10b/0x7f9 [ 2219.768118][T11878] oom_kill_process.cold+0x10/0x15 [ 2219.773272][T11878] out_of_memory+0x358/0x14a0 [ 2219.777988][T11878] ? find_held_lock+0x2d/0x110 [ 2219.782780][T11878] ? oom_killer_disable+0x270/0x270 [ 2219.788015][T11878] ? find_held_lock+0x2d/0x110 [ 2219.792809][T11878] mem_cgroup_out_of_memory+0x206/0x270 [ 2219.798383][T11878] ? mem_cgroup_margin+0x130/0x130 [ 2219.803519][T11878] ? lock_downgrade+0x6e0/0x6e0 [ 2219.808418][T11878] try_charge_memcg+0xf67/0x13f0 [ 2219.813393][T11878] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2219.819399][T11878] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2219.825151][T11878] ? lock_downgrade+0x6e0/0x6e0 [ 2219.830028][T11878] ? lock_downgrade+0x6e0/0x6e0 [ 2219.834927][T11878] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2219.844841][T11878] __alloc_pages+0x1ef/0x510 [ 2219.849453][T11878] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2219.856245][T11878] ? find_held_lock+0x2d/0x110 [ 2219.861026][T11878] alloc_pages+0x1a6/0x270 [ 2219.865457][T11878] pte_alloc_one+0x16/0x230 [ 2219.869976][T11878] __pte_alloc+0x69/0x250 [ 2219.874317][T11878] ? pmd_install+0x150/0x150 [ 2219.878930][T11878] ? hugepage_vma_check+0x44e/0x780 [ 2219.884146][T11878] ? __pmd_alloc+0x2ff/0x5c0 [ 2219.888756][T11878] __handle_mm_fault+0x310b/0x39b0 [ 2219.893893][T11878] ? vm_iomap_memory+0x190/0x190 [ 2219.898874][T11878] handle_mm_fault+0x1c8/0x780 [ 2219.903659][T11878] do_user_addr_fault+0x475/0x1210 [ 2219.908801][T11878] exc_page_fault+0x94/0x170 [ 2219.913421][T11878] asm_exc_page_fault+0x22/0x30 [ 2219.918290][T11878] RIP: 0033:0x7f2941c2a149 [ 2219.922719][T11878] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2219.942368][T11878] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2219.948450][T11878] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2219.956444][T11878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2219.964439][T11878] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2219.972773][T11878] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021de0c 07:08:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x700000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2219.980759][T11878] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2219.988769][T11878] 07:08:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x800000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x900000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2220.158471][T11880] device bridge972 entered promiscuous mode [ 2220.232956][T11895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2220.290719][T11878] memory: usage 307200kB, limit 307200kB, failcnt 39689 [ 2220.302244][T11878] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2220.314120][T11895] bond764 (uninitialized): Released all slaves [ 2220.332954][T11878] Memory cgroup stats for /syz0: [ 2220.333202][T11878] anon 135168 [ 2220.333202][T11878] file 184320 [ 2220.333202][T11878] kernel 314253312 [ 2220.333202][T11878] kernel_stack 65536 [ 2220.333202][T11878] pagetables 77824 [ 2220.333202][T11878] percpu 4839008 [ 2220.333202][T11878] sock 0 [ 2220.333202][T11878] vmalloc 0 [ 2220.333202][T11878] shmem 180224 [ 2220.333202][T11878] zswap 0 [ 2220.333202][T11878] zswapped 0 [ 2220.333202][T11878] file_mapped 180224 [ 2220.333202][T11878] file_dirty 0 [ 2220.333202][T11878] file_writeback 0 [ 2220.333202][T11878] swapcached 0 [ 2220.333202][T11878] anon_thp 0 [ 2220.333202][T11878] file_thp 0 [ 2220.333202][T11878] shmem_thp 0 [ 2220.333202][T11878] inactive_anon 151552 [ 2220.333202][T11878] active_anon 163840 [ 2220.333202][T11878] inactive_file 0 [ 2220.333202][T11878] active_file 4096 [ 2220.333202][T11878] unevictable 0 [ 2220.333202][T11878] slab_reclaimable 18040 [ 2220.333202][T11878] slab_unreclaimable 309219136 [ 2220.333202][T11878] slab 309237176 [ 2220.475428][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2220.492810][T11904] bond93 (uninitialized): Released all slaves [ 2220.535361][T11878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11878,uid=0 [ 2220.572024][T11878] Memory cgroup out of memory: Killed process 11878 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2220.675889][T11889] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2220.693707][T11889] CPU: 0 PID: 11889 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2220.704169][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2220.714254][T11889] Call Trace: [ 2220.717549][T11889] [ 2220.720497][T11889] dump_stack_lvl+0xcd/0x134 [ 2220.725119][T11889] dump_header+0x10b/0x7f9 [ 2220.729568][T11889] oom_kill_process.cold+0x10/0x15 [ 2220.734718][T11889] out_of_memory+0x358/0x14a0 [ 2220.739433][T11889] ? find_held_lock+0x2d/0x110 [ 2220.744223][T11889] ? oom_killer_disable+0x270/0x270 [ 2220.749454][T11889] ? find_held_lock+0x2d/0x110 [ 2220.754249][T11889] mem_cgroup_out_of_memory+0x206/0x270 [ 2220.759822][T11889] ? mem_cgroup_margin+0x130/0x130 [ 2220.764949][T11889] ? lock_downgrade+0x6e0/0x6e0 [ 2220.769832][T11889] try_charge_memcg+0xf67/0x13f0 [ 2220.774811][T11889] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2220.780827][T11889] ? lock_downgrade+0x6e0/0x6e0 [ 2220.785720][T11889] charge_memcg+0x31/0x320 [ 2220.790167][T11889] __mem_cgroup_charge+0x27/0x90 [ 2220.795136][T11889] ? _compound_head+0x5d/0x150 [ 2220.799934][T11889] wp_page_copy+0x27c/0x1b60 [ 2220.804563][T11889] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2220.810044][T11889] ? lock_downgrade+0x6e0/0x6e0 [ 2220.814921][T11889] ? vm_normal_page+0x146/0x2a0 [ 2220.819810][T11889] do_wp_page+0x1d1/0x1910 [ 2220.824255][T11889] __handle_mm_fault+0x1813/0x39b0 [ 2220.829399][T11889] ? vm_iomap_memory+0x190/0x190 [ 2220.834385][T11889] handle_mm_fault+0x1c8/0x780 [ 2220.839188][T11889] do_user_addr_fault+0x475/0x1210 [ 2220.844342][T11889] exc_page_fault+0x94/0x170 [ 2220.848967][T11889] asm_exc_page_fault+0x22/0x30 [ 2220.853846][T11889] RIP: 0033:0x7f23844374b0 [ 2220.858286][T11889] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2220.878356][T11889] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2220.884448][T11889] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2220.892443][T11889] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2220.900439][T11889] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2220.908431][T11889] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2220.916421][T11889] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2220.924416][T11889] ? apparmor_socket_create+0x1f8/0x660 [ 2220.930014][T11889] 07:08:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1500, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xa00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2221.015666][T11917] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2221.041907][T11889] memory: usage 307200kB, limit 307200kB, failcnt 30839 [ 2221.060428][T11889] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2221.086583][T11917] bond683 (uninitialized): Released all slaves [ 2221.090751][T11889] Memory cgroup stats for /syz4: [ 2221.125853][T11889] anon 126976 [ 2221.125853][T11889] file 229376 [ 2221.125853][T11889] kernel 314216448 [ 2221.125853][T11889] kernel_stack 65536 [ 2221.125853][T11889] pagetables 69632 [ 2221.125853][T11889] percpu 4849664 [ 2221.125853][T11889] sock 0 [ 2221.125853][T11889] vmalloc 0 [ 2221.125853][T11889] shmem 229376 [ 2221.125853][T11889] zswap 0 [ 2221.125853][T11889] zswapped 0 [ 2221.125853][T11889] file_mapped 217088 [ 2221.125853][T11889] file_dirty 0 [ 2221.125853][T11889] file_writeback 0 [ 2221.125853][T11889] swapcached 0 [ 2221.125853][T11889] anon_thp 0 [ 2221.125853][T11889] file_thp 0 [ 2221.125853][T11889] shmem_thp 0 [ 2221.125853][T11889] inactive_anon 159744 [ 2221.125853][T11889] active_anon 196608 [ 2221.125853][T11889] inactive_file 0 [ 2221.125853][T11889] active_file 0 [ 2221.125853][T11889] unevictable 0 [ 2221.125853][T11889] slab_reclaimable 15872 [ 2221.125853][T11889] slab_unreclaimable 309179608 [ 2221.125853][T11889] slab 309195480 07:08:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x53190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xc00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2221.271304][T11889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11889,uid=0 [ 2221.277713][T11922] device bridge973 entered promiscuous mode [ 2221.294860][T11889] Memory cgroup out of memory: Killed process 11889 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2221.367836][T11919] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2221.387226][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2221.406089][T11919] CPU: 1 PID: 11919 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2221.416556][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2221.426636][T11919] Call Trace: [ 2221.429936][T11919] [ 2221.432888][T11919] dump_stack_lvl+0xcd/0x134 [ 2221.437538][T11919] dump_header+0x10b/0x7f9 [ 2221.441994][T11919] oom_kill_process.cold+0x10/0x15 [ 2221.447153][T11919] out_of_memory+0x358/0x14a0 [ 2221.451871][T11919] ? find_held_lock+0x2d/0x110 [ 2221.456667][T11919] ? oom_killer_disable+0x270/0x270 [ 2221.461903][T11919] ? find_held_lock+0x2d/0x110 [ 2221.466701][T11919] mem_cgroup_out_of_memory+0x206/0x270 [ 2221.472276][T11919] ? mem_cgroup_margin+0x130/0x130 [ 2221.477418][T11919] ? lock_downgrade+0x6e0/0x6e0 [ 2221.482317][T11919] try_charge_memcg+0xf67/0x13f0 [ 2221.487301][T11919] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2221.493315][T11919] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2221.499067][T11919] ? lock_downgrade+0x6e0/0x6e0 [ 2221.503952][T11919] ? lock_downgrade+0x6e0/0x6e0 [ 2221.508871][T11919] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2221.514453][T11919] __alloc_pages+0x1ef/0x510 [ 2221.519080][T11919] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2221.525947][T11919] ? find_held_lock+0x2d/0x110 [ 2221.530754][T11919] alloc_pages+0x1a6/0x270 [ 2221.535208][T11919] pte_alloc_one+0x16/0x230 [ 2221.539753][T11919] __pte_alloc+0x69/0x250 [ 2221.544112][T11919] ? pmd_install+0x150/0x150 [ 2221.548728][T11919] ? hugepage_vma_check+0x44e/0x780 [ 2221.553963][T11919] ? __pmd_alloc+0x2ff/0x5c0 [ 2221.558584][T11919] __handle_mm_fault+0x310b/0x39b0 [ 2221.563734][T11919] ? vm_iomap_memory+0x190/0x190 07:08:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xe00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2221.568730][T11919] handle_mm_fault+0x1c8/0x780 [ 2221.573528][T11919] do_user_addr_fault+0x475/0x1210 [ 2221.578696][T11919] exc_page_fault+0x94/0x170 [ 2221.583327][T11919] asm_exc_page_fault+0x22/0x30 [ 2221.588210][T11919] RIP: 0033:0x7f2941c2a149 [ 2221.592650][T11919] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2221.612291][T11919] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2221.618390][T11919] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2221.626385][T11919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2221.634382][T11919] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2221.642380][T11919] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021e471 [ 2221.650377][T11919] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2221.658391][T11919] [ 2221.728569][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.734932][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.744648][T11933] bond93 (uninitialized): Released all slaves [ 2221.750537][T11919] memory: usage 307200kB, limit 307200kB, failcnt 39749 07:08:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2221.775890][T11919] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 07:08:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c000280050007000200"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2221.820398][T11931] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x1000000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2221.823416][T11919] Memory cgroup stats for /syz0: [ 2221.891497][T11919] anon 135168 [ 2221.891497][T11919] file 184320 [ 2221.891497][T11919] kernel 314253312 [ 2221.891497][T11919] kernel_stack 65536 [ 2221.891497][T11919] pagetables 77824 [ 2221.891497][T11919] percpu 4839008 [ 2221.891497][T11919] sock 0 [ 2221.891497][T11919] vmalloc 0 [ 2221.891497][T11919] shmem 180224 [ 2221.891497][T11919] zswap 0 [ 2221.891497][T11919] zswapped 0 [ 2221.891497][T11919] file_mapped 180224 [ 2221.891497][T11919] file_dirty 0 [ 2221.891497][T11919] file_writeback 0 [ 2221.891497][T11919] swapcached 0 [ 2221.891497][T11919] anon_thp 0 [ 2221.891497][T11919] file_thp 0 [ 2221.891497][T11919] shmem_thp 0 [ 2221.891497][T11919] inactive_anon 151552 [ 2221.891497][T11919] active_anon 163840 [ 2221.891497][T11919] inactive_file 0 [ 2221.891497][T11919] active_file 4096 [ 2221.891497][T11919] unevictable 0 [ 2221.891497][T11919] slab_reclaimable 18040 [ 2221.891497][T11919] slab_unreclaimable 309219136 [ 2221.891497][T11919] slab 309237176 [ 2222.038376][T11955] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2222.070405][T11919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11919,uid=0 07:08:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2222.094199][T11919] Memory cgroup out of memory: Killed process 11919 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2222.154845][T11955] bond683 (uninitialized): Released all slaves [ 2222.166066][T11934] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2222.166104][T11934] CPU: 0 PID: 11934 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2222.166132][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2222.166147][T11934] Call Trace: [ 2222.166155][T11934] [ 2222.166166][T11934] dump_stack_lvl+0xcd/0x134 [ 2222.166202][T11934] dump_header+0x10b/0x7f9 [ 2222.166236][T11934] oom_kill_process.cold+0x10/0x15 [ 2222.166270][T11934] out_of_memory+0x358/0x14a0 [ 2222.166304][T11934] ? find_held_lock+0x2d/0x110 [ 2222.166333][T11934] ? oom_killer_disable+0x270/0x270 07:08:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1501, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x1f00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2222.166365][T11934] ? find_held_lock+0x2d/0x110 [ 2222.166394][T11934] mem_cgroup_out_of_memory+0x206/0x270 [ 2222.166422][T11934] ? mem_cgroup_margin+0x130/0x130 [ 2222.166445][T11934] ? lock_downgrade+0x6e0/0x6e0 [ 2222.166489][T11934] try_charge_memcg+0xf67/0x13f0 [ 2222.166526][T11934] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2222.166562][T11934] ? lock_downgrade+0x6e0/0x6e0 [ 2222.166605][T11934] charge_memcg+0x31/0x320 [ 2222.166636][T11934] __mem_cgroup_charge+0x27/0x90 [ 2222.166663][T11934] ? _compound_head+0x5d/0x150 [ 2222.166700][T11934] wp_page_copy+0x27c/0x1b60 [ 2222.166738][T11934] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2222.166763][T11934] ? lock_downgrade+0x6e0/0x6e0 [ 2222.166788][T11934] ? vm_normal_page+0x146/0x2a0 [ 2222.166830][T11934] do_wp_page+0x1d1/0x1910 [ 2222.166862][T11934] __handle_mm_fault+0x1813/0x39b0 [ 2222.166898][T11934] ? vm_iomap_memory+0x190/0x190 [ 2222.166953][T11934] handle_mm_fault+0x1c8/0x780 [ 2222.166986][T11934] do_user_addr_fault+0x475/0x1210 [ 2222.167029][T11934] exc_page_fault+0x94/0x170 [ 2222.167062][T11934] asm_exc_page_fault+0x22/0x30 [ 2222.167087][T11934] RIP: 0033:0x7f23844374b0 [ 2222.167111][T11934] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2222.167136][T11934] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2222.167159][T11934] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2222.167175][T11934] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2222.167192][T11934] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2222.167210][T11934] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2222.167226][T11934] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2222.167243][T11934] ? apparmor_socket_create+0x1f8/0x660 [ 2222.167290][T11934] [ 2222.171314][T11934] memory: usage 307200kB, limit 307200kB, failcnt 30908 [ 2222.171339][T11934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2222.171355][T11934] Memory cgroup stats for /syz4: [ 2222.171516][T11934] anon 126976 [ 2222.171516][T11934] file 229376 [ 2222.171516][T11934] kernel 314216448 [ 2222.171516][T11934] kernel_stack 65536 [ 2222.171516][T11934] pagetables 69632 [ 2222.171516][T11934] percpu 4849664 [ 2222.171516][T11934] sock 0 [ 2222.171516][T11934] vmalloc 0 [ 2222.171516][T11934] shmem 229376 [ 2222.171516][T11934] zswap 0 [ 2222.171516][T11934] zswapped 0 [ 2222.171516][T11934] file_mapped 217088 [ 2222.171516][T11934] file_dirty 0 [ 2222.171516][T11934] file_writeback 0 [ 2222.171516][T11934] swapcached 0 [ 2222.171516][T11934] anon_thp 0 [ 2222.171516][T11934] file_thp 0 [ 2222.171516][T11934] shmem_thp 0 [ 2222.171516][T11934] inactive_anon 159744 [ 2222.171516][T11934] active_anon 196608 [ 2222.171516][T11934] inactive_file 0 [ 2222.171516][T11934] active_file 0 [ 2222.171516][T11934] unevictable 0 [ 2222.171516][T11934] slab_reclaimable 15872 [ 2222.171516][T11934] slab_unreclaimable 309179608 [ 2222.171516][T11934] slab 309195480 [ 2222.171580][T11934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11934,uid=0 [ 2222.171724][T11934] Memory cgroup out of memory: Killed process 11934 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x2000000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2222.670839][T11973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2222.709749][T11963] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2222.751630][T11963] CPU: 0 PID: 11963 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2222.762114][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2222.772199][T11963] Call Trace: [ 2222.775493][T11963] [ 2222.778444][T11963] dump_stack_lvl+0xcd/0x134 [ 2222.783076][T11963] dump_header+0x10b/0x7f9 [ 2222.787535][T11963] oom_kill_process.cold+0x10/0x15 [ 2222.792708][T11963] out_of_memory+0x358/0x14a0 07:08:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4800000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2222.797440][T11963] ? find_held_lock+0x2d/0x110 [ 2222.802240][T11963] ? oom_killer_disable+0x270/0x270 [ 2222.807484][T11963] ? find_held_lock+0x2d/0x110 [ 2222.812288][T11963] mem_cgroup_out_of_memory+0x206/0x270 [ 2222.817873][T11963] ? mem_cgroup_margin+0x130/0x130 [ 2222.823017][T11963] ? lock_downgrade+0x6e0/0x6e0 [ 2222.827929][T11963] try_charge_memcg+0xf67/0x13f0 [ 2222.832916][T11963] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2222.838946][T11963] ? lock_downgrade+0x6e0/0x6e0 [ 2222.843853][T11963] charge_memcg+0x31/0x320 07:08:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x4c00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2222.848314][T11963] __mem_cgroup_charge+0x27/0x90 [ 2222.853287][T11963] ? _compound_head+0x5d/0x150 [ 2222.858085][T11963] wp_page_copy+0x27c/0x1b60 [ 2222.862716][T11963] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2222.868205][T11963] ? lock_downgrade+0x6e0/0x6e0 [ 2222.873087][T11963] ? vm_normal_page+0x146/0x2a0 [ 2222.877984][T11963] do_wp_page+0x1d1/0x1910 [ 2222.882438][T11963] __handle_mm_fault+0x1813/0x39b0 [ 2222.887606][T11963] ? vm_iomap_memory+0x190/0x190 [ 2222.892605][T11963] handle_mm_fault+0x1c8/0x780 07:08:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6000000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2222.897413][T11963] do_user_addr_fault+0x475/0x1210 [ 2222.902572][T11963] exc_page_fault+0x94/0x170 [ 2222.907203][T11963] asm_exc_page_fault+0x22/0x30 [ 2222.912079][T11963] RIP: 0033:0x7f23844374b0 [ 2222.916519][T11963] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2222.936158][T11963] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2222.942259][T11963] RAX: 00000000410a6e3c RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2222.950259][T11963] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000000000022 [ 2222.958258][T11963] RBP: 00000000410a6e3c R08: 0000000000000e3c R09: 00000000410a6e40 [ 2222.966253][T11963] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2222.974252][T11963] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32756 [ 2222.982257][T11963] ? trace_user_exit.constprop.0+0x6/0x210 [ 2222.988116][T11963] 07:08:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6558000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2223.095472][T11957] device bridge974 entered promiscuous mode [ 2223.123728][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2223.163622][T11967] bond93 (uninitialized): Released all slaves [ 2223.203278][T11963] memory: usage 307184kB, limit 307200kB, failcnt 30972 [ 2223.216283][T11963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2223.275162][T11963] Memory cgroup stats for /syz4: [ 2223.275388][T11963] anon 98304 [ 2223.275388][T11963] file 229376 [ 2223.275388][T11963] kernel 314228736 [ 2223.275388][T11963] kernel_stack 65536 [ 2223.275388][T11963] pagetables 69632 [ 2223.275388][T11963] percpu 4849664 [ 2223.275388][T11963] sock 0 [ 2223.275388][T11963] vmalloc 0 [ 2223.275388][T11963] shmem 229376 [ 2223.275388][T11963] zswap 0 [ 2223.275388][T11963] zswapped 0 [ 2223.275388][T11963] file_mapped 217088 [ 2223.275388][T11963] file_dirty 0 [ 2223.275388][T11963] file_writeback 0 [ 2223.275388][T11963] swapcached 0 [ 2223.275388][T11963] anon_thp 0 [ 2223.275388][T11963] file_thp 0 [ 2223.275388][T11963] shmem_thp 0 [ 2223.275388][T11963] inactive_anon 131072 [ 2223.275388][T11963] active_anon 196608 [ 2223.275388][T11963] inactive_file 0 [ 2223.275388][T11963] active_file 0 [ 2223.275388][T11963] unevictable 0 [ 2223.275388][T11963] slab_reclaimable 15872 [ 2223.275388][T11963] slab_unreclaimable 309191008 [ 2223.275388][T11963] slab 309206880 [ 2223.415675][T11963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11963,uid=0 [ 2223.441754][T11963] Memory cgroup out of memory: Killed process 11963 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2223.482684][T11960] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2223.511122][T11960] CPU: 0 PID: 11960 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2223.521801][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2223.531862][T11960] Call Trace: [ 2223.535142][T11960] [ 2223.538077][T11960] dump_stack_lvl+0xcd/0x134 [ 2223.542705][T11960] dump_header+0x10b/0x7f9 [ 2223.547223][T11960] oom_kill_process.cold+0x10/0x15 [ 2223.552384][T11960] out_of_memory+0x358/0x14a0 [ 2223.557097][T11960] ? find_held_lock+0x2d/0x110 [ 2223.561952][T11960] ? oom_killer_disable+0x270/0x270 [ 2223.567194][T11960] ? find_held_lock+0x2d/0x110 [ 2223.572004][T11960] mem_cgroup_out_of_memory+0x206/0x270 [ 2223.577590][T11960] ? mem_cgroup_margin+0x130/0x130 [ 2223.582718][T11960] ? lock_downgrade+0x6e0/0x6e0 [ 2223.587598][T11960] try_charge_memcg+0xf67/0x13f0 [ 2223.592555][T11960] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2223.598570][T11960] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2223.604301][T11960] ? lock_downgrade+0x6e0/0x6e0 [ 2223.609165][T11960] ? lock_downgrade+0x6e0/0x6e0 [ 2223.614037][T11960] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2223.619608][T11960] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2223.625780][T11960] copy_process+0x145a/0x7090 [ 2223.630473][T11960] ? __lock_acquire+0xbc3/0x56d0 [ 2223.635431][T11960] ? __cleanup_sighand+0xb0/0xb0 [ 2223.640396][T11960] kernel_clone+0xe7/0xab0 [ 2223.644836][T11960] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2223.650832][T11960] ? create_io_thread+0xe0/0xe0 [ 2223.655703][T11960] ? find_held_lock+0x2d/0x110 [ 2223.660569][T11960] ? __ct_user_exit+0xff/0x150 [ 2223.665349][T11960] __do_sys_clone+0xba/0x100 [ 2223.669949][T11960] ? kernel_clone+0xab0/0xab0 [ 2223.674670][T11960] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2223.680591][T11960] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2223.686514][T11960] do_syscall_64+0x35/0xb0 [ 2223.690946][T11960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2223.696851][T11960] RIP: 0033:0x7f2941c8a6a1 [ 2223.701279][T11960] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2223.720901][T11960] RSP: 002b:00007ffda265d4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2223.729324][T11960] RAX: ffffffffffffffda RBX: 00007f2942e01700 RCX: 00007f2941c8a6a1 [ 2223.737303][T11960] RDX: 00007f2942e019d0 RSI: 00007f2942e012f0 RDI: 00000000003d0f00 [ 2223.745280][T11960] RBP: 00007ffda265d700 R08: 00007f2942e01700 R09: 00007f2942e01700 [ 2223.753255][T11960] R10: 00007f2942e019d0 R11: 0000000000000206 R12: 00007ffda265d56e [ 2223.761249][T11960] R13: 00007ffda265d56f R14: 00007f2942e01300 R15: 0000000000022000 [ 2223.769242][T11960] 07:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6800000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2223.889826][T11960] memory: usage 307200kB, limit 307200kB, failcnt 39817 [ 2223.890525][T12000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2223.909944][T11960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2223.922809][T11960] Memory cgroup stats for /syz0: [ 2223.923045][T11960] anon 102400 [ 2223.923045][T11960] file 184320 [ 2223.923045][T11960] kernel 314286080 [ 2223.923045][T11960] kernel_stack 65536 [ 2223.923045][T11960] pagetables 73728 [ 2223.923045][T11960] percpu 4839008 [ 2223.923045][T11960] sock 0 [ 2223.923045][T11960] vmalloc 0 [ 2223.923045][T11960] shmem 180224 [ 2223.923045][T11960] zswap 0 [ 2223.923045][T11960] zswapped 0 [ 2223.923045][T11960] file_mapped 180224 [ 2223.923045][T11960] file_dirty 0 [ 2223.923045][T11960] file_writeback 0 [ 2223.923045][T11960] swapcached 0 [ 2223.923045][T11960] anon_thp 0 [ 2223.923045][T11960] file_thp 0 [ 2223.923045][T11960] shmem_thp 0 [ 2223.923045][T11960] inactive_anon 118784 [ 2223.923045][T11960] active_anon 163840 [ 2223.923045][T11960] inactive_file 0 [ 2223.923045][T11960] active_file 4096 [ 2223.923045][T11960] unevictable 0 [ 2223.923045][T11960] slab_reclaimable 16112 [ 2223.923045][T11960] slab_unreclaimable 309226992 [ 2223.923045][T11960] slab 309243104 [ 2224.072749][T11960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11960,uid=0 [ 2224.094961][T11960] Memory cgroup out of memory: Killed process 11960 (syz-executor.0) total-vm:54644kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1600, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x55190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x6c00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7400000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2224.150859][T12002] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2224.190627][T12002] bond683 (uninitialized): Released all slaves 07:08:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2224.285052][T12018] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2224.383123][T12007] device bridge975 entered promiscuous mode [ 2224.405107][T12018] CPU: 1 PID: 12018 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2224.415629][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2224.425705][T12018] Call Trace: [ 2224.429008][T12018] [ 2224.431975][T12018] dump_stack_lvl+0xcd/0x134 [ 2224.436610][T12018] dump_header+0x10b/0x7f9 [ 2224.441073][T12018] oom_kill_process.cold+0x10/0x15 [ 2224.446237][T12018] out_of_memory+0x358/0x14a0 [ 2224.450954][T12018] ? find_held_lock+0x2d/0x110 [ 2224.455746][T12018] ? oom_killer_disable+0x270/0x270 [ 2224.460983][T12018] ? find_held_lock+0x2d/0x110 [ 2224.462766][T12027] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2224.465762][T12018] mem_cgroup_out_of_memory+0x206/0x270 [ 2224.465799][T12018] ? mem_cgroup_margin+0x130/0x130 [ 2224.465824][T12018] ? lock_downgrade+0x6e0/0x6e0 [ 2224.489403][T12018] try_charge_memcg+0xf67/0x13f0 [ 2224.494369][T12018] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2224.500376][T12018] ? lock_downgrade+0x6e0/0x6e0 [ 2224.505253][T12018] charge_memcg+0x31/0x320 [ 2224.509681][T12018] __mem_cgroup_charge+0x27/0x90 [ 2224.514629][T12018] ? _compound_head+0x5d/0x150 [ 2224.519405][T12018] wp_page_copy+0x27c/0x1b60 [ 2224.524011][T12018] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2224.529480][T12018] ? lock_downgrade+0x6e0/0x6e0 [ 2224.534341][T12018] ? vm_normal_page+0x146/0x2a0 [ 2224.539213][T12018] do_wp_page+0x52c/0x1910 [ 2224.543652][T12018] __handle_mm_fault+0x1813/0x39b0 [ 2224.548779][T12018] ? vm_iomap_memory+0x190/0x190 [ 2224.553748][T12018] handle_mm_fault+0x1c8/0x780 [ 2224.558527][T12018] do_user_addr_fault+0x475/0x1210 [ 2224.563663][T12018] exc_page_fault+0x94/0x170 [ 2224.568268][T12018] asm_exc_page_fault+0x22/0x30 [ 2224.573126][T12018] RIP: 0033:0x7f2941c34e1e [ 2224.577564][T12018] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 57 71 16 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2224.597177][T12018] RSP: 002b:00007ffda265d5f0 EFLAGS: 00010246 [ 2224.603263][T12018] RAX: 00007f2941d9bf80 RBX: 00007f2941d9bf8c RCX: 0000000000000000 [ 2224.611242][T12018] RDX: 0000000000000000 RSI: 00007f2941d9bf88 RDI: 0000000000000000 [ 2224.619219][T12018] RBP: 00007f2941d9bf80 R08: 00007f2942e22700 R09: 00007f2942e22700 [ 2224.627194][T12018] R10: 00007f2942e229d0 R11: 0000000000000206 R12: 00007f2941d9bf8c [ 2224.635172][T12018] R13: 00007f2941da0060 R14: 00007f2941d9bf80 R15: 0000000000000000 [ 2224.643168][T12018] 07:08:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x7a00000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2224.730128][T12027] bond767 (uninitialized): Released all slaves [ 2224.763973][T12018] memory: usage 307164kB, limit 307200kB, failcnt 39859 [ 2224.765164][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2224.774279][T12018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2224.795214][T12018] Memory cgroup stats for /syz0: [ 2224.795446][T12018] anon 90112 [ 2224.795446][T12018] file 184320 [ 2224.795446][T12018] kernel 314261504 [ 2224.795446][T12018] kernel_stack 65536 [ 2224.795446][T12018] pagetables 69632 [ 2224.795446][T12018] percpu 4839008 [ 2224.795446][T12018] sock 0 [ 2224.795446][T12018] vmalloc 0 [ 2224.795446][T12018] shmem 180224 [ 2224.795446][T12018] zswap 0 [ 2224.795446][T12018] zswapped 0 [ 2224.795446][T12018] file_mapped 180224 [ 2224.795446][T12018] file_dirty 0 [ 2224.795446][T12018] file_writeback 0 [ 2224.795446][T12018] swapcached 0 [ 2224.795446][T12018] anon_thp 0 [ 2224.795446][T12018] file_thp 0 [ 2224.795446][T12018] shmem_thp 0 [ 2224.795446][T12018] inactive_anon 106496 [ 2224.795446][T12018] active_anon 163840 [ 2224.795446][T12018] inactive_file 0 [ 2224.795446][T12018] active_file 4096 [ 2224.795446][T12018] unevictable 0 07:08:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x8100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2224.795446][T12018] slab_reclaimable 26200 [ 2224.795446][T12018] slab_unreclaimable 309226056 [ 2224.795446][T12018] slab 309252256 [ 2224.852596][T12016] bond93 (uninitialized): Released all slaves 07:08:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2224.989489][T12018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12018,uid=0 07:08:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2225.071466][T12041] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2225.133331][T12041] bond683 (uninitialized): Released all slaves [ 2225.194312][T12018] Memory cgroup out of memory: Killed process 12018 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2225.257950][T12011] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2225.345855][T12011] CPU: 1 PID: 12011 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2225.356428][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2225.366516][T12011] Call Trace: [ 2225.369813][T12011] [ 2225.372763][T12011] dump_stack_lvl+0xcd/0x134 [ 2225.377398][T12011] dump_header+0x10b/0x7f9 [ 2225.381914][T12011] oom_kill_process.cold+0x10/0x15 [ 2225.387077][T12011] out_of_memory+0x358/0x14a0 [ 2225.391795][T12011] ? find_held_lock+0x2d/0x110 [ 2225.396583][T12011] ? oom_killer_disable+0x270/0x270 [ 2225.401802][T12011] ? find_held_lock+0x2d/0x110 [ 2225.406579][T12011] mem_cgroup_out_of_memory+0x206/0x270 [ 2225.412136][T12011] ? mem_cgroup_margin+0x130/0x130 [ 2225.417264][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2225.422139][T12011] try_charge_memcg+0xf67/0x13f0 [ 2225.427127][T12011] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2225.433126][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2225.437998][T12011] charge_memcg+0x31/0x320 [ 2225.442430][T12011] __mem_cgroup_charge+0x27/0x90 [ 2225.447378][T12011] ? _compound_head+0x5d/0x150 [ 2225.452165][T12011] wp_page_copy+0x27c/0x1b60 [ 2225.456774][T12011] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2225.462239][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2225.467100][T12011] ? vm_normal_page+0x146/0x2a0 [ 2225.471972][T12011] do_wp_page+0x1d1/0x1910 [ 2225.476407][T12011] __handle_mm_fault+0x1813/0x39b0 [ 2225.481534][T12011] ? vm_iomap_memory+0x190/0x190 [ 2225.486504][T12011] handle_mm_fault+0x1c8/0x780 [ 2225.491283][T12011] do_user_addr_fault+0x475/0x1210 [ 2225.496424][T12011] exc_page_fault+0x94/0x170 [ 2225.501031][T12011] asm_exc_page_fault+0x22/0x30 [ 2225.505908][T12011] RIP: 0033:0x7f23844374b0 [ 2225.510331][T12011] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2225.529961][T12011] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2225.536041][T12011] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2225.544044][T12011] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2225.552022][T12011] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2225.559998][T12011] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2225.567973][T12011] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2225.575950][T12011] ? apparmor_socket_create+0x1f8/0x660 [ 2225.581527][T12011] 07:08:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1601, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2225.657539][T12045] device bridge976 entered promiscuous mode [ 2225.685055][T12011] memory: usage 307184kB, limit 307200kB, failcnt 31031 [ 2225.699046][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2225.699305][T12011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2225.727741][T12011] Memory cgroup stats for /syz4: [ 2225.727980][T12011] anon 126976 [ 2225.727980][T12011] file 229376 [ 2225.727980][T12011] kernel 314200064 [ 2225.727980][T12011] kernel_stack 65536 [ 2225.727980][T12011] pagetables 69632 [ 2225.727980][T12011] percpu 4849664 [ 2225.727980][T12011] sock 0 [ 2225.727980][T12011] vmalloc 0 [ 2225.727980][T12011] shmem 229376 [ 2225.727980][T12011] zswap 0 [ 2225.727980][T12011] zswapped 0 [ 2225.727980][T12011] file_mapped 217088 [ 2225.727980][T12011] file_dirty 0 [ 2225.727980][T12011] file_writeback 0 [ 2225.727980][T12011] swapcached 0 [ 2225.727980][T12011] anon_thp 0 [ 2225.727980][T12011] file_thp 0 [ 2225.727980][T12011] shmem_thp 0 [ 2225.727980][T12011] inactive_anon 159744 [ 2225.727980][T12011] active_anon 196608 [ 2225.727980][T12011] inactive_file 0 [ 2225.727980][T12011] active_file 0 [ 2225.727980][T12011] unevictable 0 [ 2225.727980][T12011] slab_reclaimable 15872 [ 2225.727980][T12011] slab_unreclaimable 309168512 [ 2225.727980][T12011] slab 309184384 [ 2225.870721][T12011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 2225.870775][T12048] bond93 (uninitialized): Released all slaves [ 2225.891370][T12011] syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12011,uid=0 [ 2225.905220][T12011] Memory cgroup out of memory: Killed process 12011 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2225.918868][T12049] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xd319000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2226.010101][T12057] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2226.051411][T12057] CPU: 0 PID: 12057 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2226.061900][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2226.071990][T12057] Call Trace: [ 2226.075297][T12057] [ 2226.078249][T12057] dump_stack_lvl+0xcd/0x134 [ 2226.082881][T12057] dump_header+0x10b/0x7f9 [ 2226.087346][T12057] oom_kill_process.cold+0x10/0x15 [ 2226.092507][T12057] out_of_memory+0x358/0x14a0 [ 2226.097226][T12057] ? find_held_lock+0x2d/0x110 [ 2226.102024][T12057] ? oom_killer_disable+0x270/0x270 [ 2226.107263][T12057] ? find_held_lock+0x2d/0x110 [ 2226.112076][T12057] mem_cgroup_out_of_memory+0x206/0x270 [ 2226.117663][T12057] ? mem_cgroup_margin+0x130/0x130 [ 2226.118102][T12068] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2226.122786][T12057] ? lock_downgrade+0x6e0/0x6e0 [ 2226.122839][T12057] try_charge_memcg+0xf67/0x13f0 [ 2226.140694][T12057] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2226.146706][T12057] ? lock_downgrade+0x6e0/0x6e0 [ 2226.151607][T12057] charge_memcg+0x31/0x320 [ 2226.156062][T12057] __mem_cgroup_charge+0x27/0x90 [ 2226.161046][T12057] ? _compound_head+0x5d/0x150 [ 2226.165851][T12057] wp_page_copy+0x27c/0x1b60 [ 2226.170471][T12057] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2226.175959][T12057] ? lock_downgrade+0x6e0/0x6e0 [ 2226.180822][T12057] ? vm_normal_page+0x146/0x2a0 [ 2226.185717][T12057] do_wp_page+0x1d1/0x1910 [ 2226.190162][T12057] __handle_mm_fault+0x1813/0x39b0 [ 2226.195290][T12057] ? vm_iomap_memory+0x190/0x190 [ 2226.200259][T12057] handle_mm_fault+0x1c8/0x780 [ 2226.205039][T12057] do_user_addr_fault+0x475/0x1210 [ 2226.210173][T12057] exc_page_fault+0x94/0x170 [ 2226.214779][T12057] asm_exc_page_fault+0x22/0x30 [ 2226.219638][T12057] RIP: 0033:0x7f2941c374b0 [ 2226.224065][T12057] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2226.243683][T12057] RSP: 002b:00007ffda265d500 EFLAGS: 00010246 07:08:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2226.249778][T12057] RAX: 00000000a42b5f26 RBX: 00007f2941d9c018 RCX: 0000001b2e520000 [ 2226.257787][T12057] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 0000000008ec0f19 [ 2226.265765][T12057] RBP: 00000000a42b5f26 R08: 0000000000001f26 R09: 00000000a42b5f2a [ 2226.273742][T12057] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 00007f2941d90000 [ 2226.281722][T12057] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a328b6 [ 2226.289698][T12057] ? trace_user_exit.constprop.0+0x166/0x210 [ 2226.295714][T12057] 07:08:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c00028005000700020000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2226.392026][T12057] memory: usage 307200kB, limit 307200kB, failcnt 39908 [ 2226.408040][T12057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2226.417688][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2226.459635][T12057] Memory cgroup stats for /syz0: [ 2226.459855][T12057] anon 114688 [ 2226.459855][T12057] file 184320 [ 2226.459855][T12057] kernel 314249216 [ 2226.459855][T12057] kernel_stack 65536 [ 2226.459855][T12057] pagetables 73728 [ 2226.459855][T12057] percpu 4839008 [ 2226.459855][T12057] sock 0 [ 2226.459855][T12057] vmalloc 0 [ 2226.459855][T12057] shmem 180224 [ 2226.459855][T12057] zswap 0 [ 2226.459855][T12057] zswapped 0 [ 2226.459855][T12057] file_mapped 180224 [ 2226.459855][T12057] file_dirty 0 [ 2226.459855][T12057] file_writeback 0 [ 2226.459855][T12057] swapcached 0 [ 2226.459855][T12057] anon_thp 0 [ 2226.459855][T12057] file_thp 0 [ 2226.459855][T12057] shmem_thp 0 [ 2226.459855][T12057] inactive_anon 131072 [ 2226.459855][T12057] active_anon 163840 [ 2226.459855][T12057] inactive_file 0 [ 2226.459855][T12057] active_file 4096 [ 2226.459855][T12057] unevictable 0 [ 2226.459855][T12057] slab_reclaimable 16112 [ 2226.459855][T12057] slab_unreclaimable 309218792 [ 2226.459855][T12057] slab 309234904 [ 2226.624177][T12072] bond93 (uninitialized): Released all slaves [ 2226.632032][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 07:08:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2226.679923][T12057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12057,uid=0 [ 2226.695749][T12079] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2226.744643][T12057] Memory cgroup out of memory: Killed process 12057 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 07:08:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2226.790594][T12079] bond683 (uninitialized): Released all slaves [ 2226.816160][T12066] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 07:08:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1700, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2226.909814][T12066] CPU: 1 PID: 12066 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2226.920299][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2226.930386][T12066] Call Trace: [ 2226.933686][T12066] [ 2226.936647][T12066] dump_stack_lvl+0xcd/0x134 [ 2226.941285][T12066] dump_header+0x10b/0x7f9 [ 2226.945748][T12066] oom_kill_process.cold+0x10/0x15 [ 2226.950938][T12066] out_of_memory+0x358/0x14a0 [ 2226.955652][T12066] ? find_held_lock+0x2d/0x110 [ 2226.960441][T12066] ? oom_killer_disable+0x270/0x270 [ 2226.965677][T12066] ? find_held_lock+0x2d/0x110 [ 2226.970473][T12066] mem_cgroup_out_of_memory+0x206/0x270 [ 2226.976055][T12066] ? mem_cgroup_margin+0x130/0x130 [ 2226.981203][T12066] ? lock_downgrade+0x6e0/0x6e0 [ 2226.986098][T12066] try_charge_memcg+0xf67/0x13f0 [ 2226.991087][T12066] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2226.997152][T12066] ? lock_downgrade+0x6e0/0x6e0 [ 2227.002070][T12066] charge_memcg+0x31/0x320 [ 2227.006522][T12066] __mem_cgroup_charge+0x27/0x90 [ 2227.011489][T12066] ? _compound_head+0x5d/0x150 [ 2227.016304][T12066] wp_page_copy+0x27c/0x1b60 [ 2227.020931][T12066] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2227.026415][T12066] ? lock_downgrade+0x6e0/0x6e0 [ 2227.031300][T12066] ? vm_normal_page+0x146/0x2a0 [ 2227.036197][T12066] do_wp_page+0x1d1/0x1910 [ 2227.040677][T12066] __handle_mm_fault+0x1813/0x39b0 [ 2227.045835][T12066] ? vm_iomap_memory+0x190/0x190 [ 2227.050824][T12066] handle_mm_fault+0x1c8/0x780 [ 2227.055624][T12066] do_user_addr_fault+0x475/0x1210 [ 2227.060791][T12066] exc_page_fault+0x94/0x170 [ 2227.065006][T12088] device bridge977 entered promiscuous mode [ 2227.065401][T12066] asm_exc_page_fault+0x22/0x30 [ 2227.076286][T12066] RIP: 0033:0x7f23844374b0 [ 2227.080725][T12066] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2227.100370][T12066] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2227.106470][T12066] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2227.114478][T12066] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2227.122488][T12066] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2227.130491][T12066] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2227.138498][T12066] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2227.140859][T12103] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2227.146477][T12066] ? apparmor_socket_create+0x1f8/0x660 [ 2227.146535][T12066] [ 2227.365424][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2227.434006][T12066] memory: usage 307200kB, limit 307200kB, failcnt 31114 [ 2227.451546][T12066] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2227.462773][T12066] Memory cgroup stats for /syz4: [ 2227.463013][T12066] anon 126976 [ 2227.463013][T12066] file 229376 [ 2227.463013][T12066] kernel 314216448 [ 2227.463013][T12066] kernel_stack 65536 [ 2227.463013][T12066] pagetables 69632 [ 2227.463013][T12066] percpu 4849664 [ 2227.463013][T12066] sock 0 [ 2227.463013][T12066] vmalloc 0 [ 2227.463013][T12066] shmem 229376 [ 2227.463013][T12066] zswap 0 [ 2227.463013][T12066] zswapped 0 [ 2227.463013][T12066] file_mapped 217088 [ 2227.463013][T12066] file_dirty 0 [ 2227.463013][T12066] file_writeback 0 [ 2227.463013][T12066] swapcached 0 [ 2227.463013][T12066] anon_thp 0 [ 2227.463013][T12066] file_thp 0 [ 2227.463013][T12066] shmem_thp 0 [ 2227.463013][T12066] inactive_anon 159744 [ 2227.463013][T12066] active_anon 196608 [ 2227.463013][T12066] inactive_file 0 [ 2227.463013][T12066] active_file 0 [ 2227.463013][T12066] unevictable 0 [ 2227.463013][T12066] slab_reclaimable 15872 [ 2227.463013][T12066] slab_unreclaimable 309179608 [ 2227.463013][T12066] slab 309195480 [ 2227.570840][T12066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12066,uid=0 [ 2227.600742][T12066] Memory cgroup out of memory: Killed process 12066 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x57190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2227.688277][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:08:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2227.732899][T12122] bond93 (uninitialized): Released all slaves [ 2227.744982][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.757083][T12096] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2227.816401][T12119] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2227.846702][T12096] CPU: 1 PID: 12096 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2227.857184][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2227.867271][T12096] Call Trace: [ 2227.870574][T12096] [ 2227.873532][T12096] dump_stack_lvl+0xcd/0x134 [ 2227.878170][T12096] dump_header+0x10b/0x7f9 [ 2227.882624][T12096] oom_kill_process.cold+0x10/0x15 [ 2227.887774][T12096] out_of_memory+0x358/0x14a0 [ 2227.892498][T12096] ? find_held_lock+0x2d/0x110 [ 2227.897297][T12096] ? oom_killer_disable+0x270/0x270 [ 2227.902542][T12096] ? find_held_lock+0x2d/0x110 [ 2227.907343][T12096] mem_cgroup_out_of_memory+0x206/0x270 [ 2227.912919][T12096] ? mem_cgroup_margin+0x130/0x130 [ 2227.918057][T12096] ? lock_downgrade+0x6e0/0x6e0 [ 2227.922955][T12096] try_charge_memcg+0xf67/0x13f0 [ 2227.927935][T12096] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2227.933949][T12096] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2227.939701][T12096] ? lock_downgrade+0x6e0/0x6e0 [ 2227.944584][T12096] ? lock_downgrade+0x6e0/0x6e0 [ 2227.949487][T12096] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2227.955063][T12096] __alloc_pages+0x1ef/0x510 [ 2227.959680][T12096] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2227.966488][T12096] ? find_held_lock+0x2d/0x110 [ 2227.971294][T12096] alloc_pages+0x1a6/0x270 [ 2227.975746][T12096] pte_alloc_one+0x16/0x230 [ 2227.980287][T12096] __pte_alloc+0x69/0x250 [ 2227.984646][T12096] ? pmd_install+0x150/0x150 [ 2227.989263][T12096] ? hugepage_vma_check+0x44e/0x780 [ 2227.994494][T12096] ? __pmd_alloc+0x2ff/0x5c0 [ 2227.999118][T12096] __handle_mm_fault+0x310b/0x39b0 [ 2228.004273][T12096] ? vm_iomap_memory+0x190/0x190 [ 2228.009269][T12096] handle_mm_fault+0x1c8/0x780 [ 2228.014069][T12096] do_user_addr_fault+0x475/0x1210 [ 2228.019278][T12096] exc_page_fault+0x94/0x170 [ 2228.023904][T12096] asm_exc_page_fault+0x22/0x30 [ 2228.028784][T12096] RIP: 0033:0x7f2941c2a149 [ 2228.033428][T12096] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2228.053072][T12096] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2228.059178][T12096] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2228.067187][T12096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2228.075188][T12096] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2228.083189][T12096] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 000000000021fdeb [ 2228.091194][T12096] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2228.099231][T12096] 07:08:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2228.181115][T12125] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2228.241822][T12096] memory: usage 307200kB, limit 307200kB, failcnt 39989 [ 2228.251186][T12125] bond683 (uninitialized): Released all slaves [ 2228.253038][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2228.265341][T12096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2228.286184][T12096] Memory cgroup stats for /syz0: [ 2228.286486][T12096] anon 135168 [ 2228.286486][T12096] file 184320 [ 2228.286486][T12096] kernel 314253312 [ 2228.286486][T12096] kernel_stack 65536 [ 2228.286486][T12096] pagetables 77824 [ 2228.286486][T12096] percpu 4839008 [ 2228.286486][T12096] sock 0 [ 2228.286486][T12096] vmalloc 0 [ 2228.286486][T12096] shmem 180224 [ 2228.286486][T12096] zswap 0 [ 2228.286486][T12096] zswapped 0 [ 2228.286486][T12096] file_mapped 180224 [ 2228.286486][T12096] file_dirty 0 [ 2228.286486][T12096] file_writeback 0 [ 2228.286486][T12096] swapcached 0 [ 2228.286486][T12096] anon_thp 0 [ 2228.286486][T12096] file_thp 0 [ 2228.286486][T12096] shmem_thp 0 [ 2228.286486][T12096] inactive_anon 151552 [ 2228.286486][T12096] active_anon 163840 [ 2228.286486][T12096] inactive_file 0 [ 2228.286486][T12096] active_file 4096 [ 2228.286486][T12096] unevictable 0 [ 2228.286486][T12096] slab_reclaimable 18040 [ 2228.286486][T12096] slab_unreclaimable 309219136 [ 2228.286486][T12096] slab 309237176 07:08:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2228.436270][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 07:08:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2228.476848][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2228.534562][T12144] bond93 (uninitialized): Released all slaves [ 2228.590430][T12152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:08:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2228.670488][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2228.734264][T12159] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2228.754805][T12096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12096,uid=0 [ 2228.806091][T12096] Memory cgroup out of memory: Killed process 12096 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2228.815432][T12159] bond683 (uninitialized): Released all slaves [ 2228.860976][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 07:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1701, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2228.901514][T12132] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2228.964880][T12171] bond93 (uninitialized): Released all slaves [ 2229.012984][T12179] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2229.046446][T12132] CPU: 1 PID: 12132 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2229.056923][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2229.067027][T12132] Call Trace: [ 2229.070328][T12132] [ 2229.073283][T12132] dump_stack_lvl+0xcd/0x134 [ 2229.077918][T12132] dump_header+0x10b/0x7f9 [ 2229.082377][T12132] oom_kill_process.cold+0x10/0x15 [ 2229.087531][T12132] out_of_memory+0x358/0x14a0 [ 2229.092267][T12132] ? oom_killer_disable+0x270/0x270 [ 2229.097505][T12132] ? find_held_lock+0x2d/0x110 [ 2229.102305][T12132] mem_cgroup_out_of_memory+0x206/0x270 [ 2229.107885][T12132] ? mem_cgroup_margin+0x130/0x130 [ 2229.113031][T12132] ? lock_downgrade+0x6e0/0x6e0 [ 2229.117920][T12132] try_charge_memcg+0xef5/0x13f0 [ 2229.122893][T12132] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2229.128924][T12132] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2229.134670][T12132] ? lock_downgrade+0x6e0/0x6e0 [ 2229.139544][T12132] ? lock_downgrade+0x6e0/0x6e0 [ 2229.144432][T12132] obj_cgroup_charge+0x2ab/0x5e0 [ 2229.149431][T12132] kmem_cache_alloc_lru+0x13e/0x720 [ 2229.154650][T12132] ? sock_alloc_inode+0x23/0x1d0 [ 2229.159620][T12132] sock_alloc_inode+0x23/0x1d0 [ 2229.164421][T12132] ? sock_free_inode+0x20/0x20 [ 2229.169204][T12132] alloc_inode+0x61/0x230 [ 2229.173571][T12132] new_inode_pseudo+0x13/0x80 [ 2229.178269][T12132] sock_alloc+0x3c/0x260 [ 2229.182535][T12132] __sock_create+0xb9/0x790 [ 2229.187061][T12132] ? lock_downgrade+0x6e0/0x6e0 [ 2229.191942][T12132] __sys_socket+0x12f/0x240 [ 2229.196475][T12132] ? __sys_socket_file+0x1f0/0x1f0 [ 2229.201613][T12132] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2229.207538][T12132] __x64_sys_socket+0x6f/0xb0 [ 2229.212245][T12132] do_syscall_64+0x35/0xb0 [ 2229.216709][T12132] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2229.222625][T12132] RIP: 0033:0x7f2384489279 [ 2229.227065][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2229.246704][T12132] RSP: 002b:00007f2385553168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2229.255155][T12132] RAX: ffffffffffffffda RBX: 00007f238459bf80 RCX: 00007f2384489279 [ 2229.263165][T12132] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2229.271163][T12132] RBP: 00007f23844e32e9 R08: 0000000000000000 R09: 0000000000000000 [ 2229.279157][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2229.287161][T12132] R13: 00007ffcaabcb78f R14: 00007f2385553300 R15: 0000000000022000 [ 2229.295174][T12132] [ 2229.402613][T12132] memory: usage 307200kB, limit 307200kB, failcnt 31228 [ 2229.442111][T12132] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2229.481134][T12132] Memory cgroup stats for /syz4: [ 2229.481379][T12132] anon 98304 [ 2229.481379][T12132] file 229376 [ 2229.481379][T12132] kernel 314245120 [ 2229.481379][T12132] kernel_stack 65536 [ 2229.481379][T12132] pagetables 69632 [ 2229.481379][T12132] percpu 4849664 [ 2229.481379][T12132] sock 0 [ 2229.481379][T12132] vmalloc 0 [ 2229.481379][T12132] shmem 229376 [ 2229.481379][T12132] zswap 0 [ 2229.481379][T12132] zswapped 0 [ 2229.481379][T12132] file_mapped 217088 [ 2229.481379][T12132] file_dirty 0 [ 2229.481379][T12132] file_writeback 0 [ 2229.481379][T12132] swapcached 0 [ 2229.481379][T12132] anon_thp 0 [ 2229.481379][T12132] file_thp 0 [ 2229.481379][T12132] shmem_thp 0 [ 2229.481379][T12132] inactive_anon 131072 [ 2229.481379][T12132] active_anon 196608 [ 2229.481379][T12132] inactive_file 0 [ 2229.481379][T12132] active_file 0 [ 2229.481379][T12132] unevictable 0 [ 2229.481379][T12132] slab_reclaimable 13944 [ 2229.481379][T12132] slab_unreclaimable 309187464 [ 2229.481379][T12132] slab 309201408 [ 2229.642931][T12132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12128,uid=0 [ 2229.675832][T12132] Memory cgroup out of memory: Killed process 12128 (syz-executor.4) total-vm:54644kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2229.714498][T12180] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2229.743782][T12180] CPU: 0 PID: 12180 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2229.754262][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2229.764343][T12180] Call Trace: [ 2229.767639][T12180] [ 2229.770597][T12180] dump_stack_lvl+0xcd/0x134 [ 2229.775225][T12180] dump_header+0x10b/0x7f9 [ 2229.779677][T12180] oom_kill_process.cold+0x10/0x15 [ 2229.784826][T12180] out_of_memory+0x358/0x14a0 [ 2229.789536][T12180] ? find_held_lock+0x2d/0x110 [ 2229.794326][T12180] ? oom_killer_disable+0x270/0x270 [ 2229.799561][T12180] ? find_held_lock+0x2d/0x110 [ 2229.804360][T12180] mem_cgroup_out_of_memory+0x206/0x270 [ 2229.809940][T12180] ? mem_cgroup_margin+0x130/0x130 [ 2229.815082][T12180] ? lock_downgrade+0x6e0/0x6e0 [ 2229.819988][T12180] try_charge_memcg+0xf67/0x13f0 [ 2229.824963][T12180] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2229.830976][T12180] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2229.836724][T12180] ? lock_downgrade+0x6e0/0x6e0 [ 2229.841614][T12180] ? lock_downgrade+0x6e0/0x6e0 [ 2229.846492][T12180] ? rcu_read_unlock+0x9/0x60 [ 2229.851216][T12180] obj_cgroup_charge+0x2ab/0x5e0 [ 2229.856194][T12180] ? alloc_pid+0xcf/0xd70 [ 2229.860566][T12180] kmem_cache_alloc+0x96/0x3b0 [ 2229.865367][T12180] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2229.870984][T12180] alloc_pid+0xcf/0xd70 [ 2229.875177][T12180] ? copy_thread+0x5dc/0xa00 [ 2229.879796][T12180] ? copy_namespaces+0x1c1/0x480 [ 2229.884765][T12180] copy_process+0x3dcc/0x7090 [ 2229.889507][T12180] ? __cleanup_sighand+0xb0/0xb0 [ 2229.894492][T12180] kernel_clone+0xe7/0xab0 [ 2229.898939][T12180] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2229.904973][T12180] ? create_io_thread+0xe0/0xe0 [ 2229.909865][T12180] ? find_held_lock+0x2d/0x110 [ 2229.914664][T12180] ? __ct_user_exit+0xff/0x150 [ 2229.919483][T12180] __do_sys_clone+0xba/0x100 [ 2229.924108][T12180] ? kernel_clone+0xab0/0xab0 [ 2229.928826][T12180] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2229.934758][T12180] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2229.940688][T12180] do_syscall_64+0x35/0xb0 [ 2229.945133][T12180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2229.951080][T12180] RIP: 0033:0x7f2941c8a6a1 [ 2229.955521][T12180] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2229.975165][T12180] RSP: 002b:00007ffda265d4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2229.983606][T12180] RAX: ffffffffffffffda RBX: 00007f2942e01700 RCX: 00007f2941c8a6a1 [ 2229.991685][T12180] RDX: 00007f2942e019d0 RSI: 00007f2942e012f0 RDI: 00000000003d0f00 [ 2229.999683][T12180] RBP: 00007ffda265d700 R08: 00007f2942e01700 R09: 00007f2942e01700 [ 2230.007680][T12180] R10: 00007f2942e019d0 R11: 0000000000000206 R12: 00007ffda265d56e [ 2230.015676][T12180] R13: 00007ffda265d56f R14: 00007f2942e01300 R15: 0000000000022000 [ 2230.023694][T12180] 07:08:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58010000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:08:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:08:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2230.113841][T12189] bond93 (uninitialized): Released all slaves [ 2230.113992][T12180] memory: usage 307200kB, limit 307200kB, failcnt 40087 [ 2230.132921][T12180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2230.152631][T12180] Memory cgroup stats for /syz0: [ 2230.152858][T12180] anon 102400 [ 2230.152858][T12180] file 184320 [ 2230.152858][T12180] kernel 314286080 [ 2230.152858][T12180] kernel_stack 98304 [ 2230.152858][T12180] pagetables 73728 [ 2230.152858][T12180] percpu 4839008 [ 2230.152858][T12180] sock 0 [ 2230.152858][T12180] vmalloc 0 [ 2230.152858][T12180] shmem 180224 [ 2230.152858][T12180] zswap 0 [ 2230.152858][T12180] zswapped 0 [ 2230.152858][T12180] file_mapped 180224 [ 2230.152858][T12180] file_dirty 0 [ 2230.152858][T12180] file_writeback 0 [ 2230.152858][T12180] swapcached 0 [ 2230.152858][T12180] anon_thp 0 [ 2230.152858][T12180] file_thp 0 [ 2230.152858][T12180] shmem_thp 0 [ 2230.152858][T12180] inactive_anon 118784 [ 2230.152858][T12180] active_anon 163840 [ 2230.152858][T12180] inactive_file 0 [ 2230.152858][T12180] active_file 4096 [ 2230.152858][T12180] unevictable 0 [ 2230.152858][T12180] slab_reclaimable 14184 [ 2230.152858][T12180] slab_unreclaimable 309226344 [ 2230.152858][T12180] slab 309240528 [ 2230.154491][T12192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:08:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2230.204747][T12180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2230.422814][T12192] bond683 (uninitialized): Released all slaves [ 2230.491922][T12194] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2230.510086][T12180] ,cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12180,uid=0 [ 2230.582334][T12180] Memory cgroup out of memory: Killed process 12180 (syz-executor.0) total-vm:54644kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2230.673699][T12210] bond93 (uninitialized): Released all slaves 07:08:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1800, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2230.767792][T12203] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 07:08:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:08:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:08:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2230.882850][T12223] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2230.934791][T12203] CPU: 1 PID: 12203 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2230.945284][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2230.955361][T12203] Call Trace: [ 2230.958653][T12203] [ 2230.961600][T12203] dump_stack_lvl+0xcd/0x134 [ 2230.966241][T12203] dump_header+0x10b/0x7f9 [ 2230.970734][T12203] oom_kill_process.cold+0x10/0x15 [ 2230.975888][T12203] out_of_memory+0x358/0x14a0 [ 2230.980588][T12203] ? find_held_lock+0x2d/0x110 [ 2230.985367][T12203] ? oom_killer_disable+0x270/0x270 [ 2230.990589][T12203] ? find_held_lock+0x2d/0x110 [ 2230.995377][T12203] mem_cgroup_out_of_memory+0x206/0x270 [ 2231.000947][T12203] ? mem_cgroup_margin+0x130/0x130 [ 2231.006071][T12203] ? lock_downgrade+0x6e0/0x6e0 [ 2231.010956][T12203] try_charge_memcg+0xf67/0x13f0 [ 2231.015919][T12203] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2231.021928][T12203] ? lock_downgrade+0x6e0/0x6e0 [ 2231.026843][T12203] charge_memcg+0x31/0x320 [ 2231.031289][T12203] __mem_cgroup_charge+0x27/0x90 [ 2231.036239][T12203] ? _compound_head+0x5d/0x150 [ 2231.041021][T12203] wp_page_copy+0x27c/0x1b60 [ 2231.045634][T12203] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2231.051109][T12203] ? lock_downgrade+0x6e0/0x6e0 [ 2231.055974][T12203] ? vm_normal_page+0x146/0x2a0 [ 2231.060856][T12203] do_wp_page+0x1d1/0x1910 [ 2231.065314][T12203] __handle_mm_fault+0x1813/0x39b0 [ 2231.070449][T12203] ? vm_iomap_memory+0x190/0x190 [ 2231.075427][T12203] handle_mm_fault+0x1c8/0x780 [ 2231.080214][T12203] do_user_addr_fault+0x475/0x1210 [ 2231.085351][T12203] exc_page_fault+0x94/0x170 [ 2231.089976][T12203] asm_exc_page_fault+0x22/0x30 [ 2231.094867][T12203] RIP: 0033:0x7f23844374b0 [ 2231.099297][T12203] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2231.118935][T12203] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2231.125022][T12203] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2231.133053][T12203] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2231.141037][T12203] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2231.149026][T12203] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2231.157020][T12203] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2231.165009][T12203] ? apparmor_socket_create+0x1f8/0x660 [ 2231.170599][T12203] [ 2231.240403][T12225] bond93 (uninitialized): Released all slaves [ 2231.253560][T12203] memory: usage 307200kB, limit 307200kB, failcnt 31291 [ 2231.269345][T12203] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2231.283696][T12203] Memory cgroup stats for /syz4: [ 2231.283986][T12203] anon 126976 [ 2231.283986][T12203] file 229376 [ 2231.283986][T12203] kernel 314216448 [ 2231.283986][T12203] kernel_stack 65536 [ 2231.283986][T12203] pagetables 69632 [ 2231.283986][T12203] percpu 4849664 [ 2231.283986][T12203] sock 0 [ 2231.283986][T12203] vmalloc 0 [ 2231.283986][T12203] shmem 229376 [ 2231.283986][T12203] zswap 0 [ 2231.283986][T12203] zswapped 0 [ 2231.283986][T12203] file_mapped 217088 [ 2231.283986][T12203] file_dirty 0 [ 2231.283986][T12203] file_writeback 0 [ 2231.283986][T12203] swapcached 0 [ 2231.283986][T12203] anon_thp 0 [ 2231.283986][T12203] file_thp 0 [ 2231.283986][T12203] shmem_thp 0 [ 2231.283986][T12203] inactive_anon 159744 [ 2231.283986][T12203] active_anon 196608 [ 2231.283986][T12203] inactive_file 0 [ 2231.283986][T12203] active_file 0 [ 2231.283986][T12203] unevictable 0 [ 2231.283986][T12203] slab_reclaimable 15872 [ 2231.283986][T12203] slab_unreclaimable 309179608 [ 2231.283986][T12203] slab 309195480 [ 2231.297983][T12240] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2231.469652][T12203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12203,uid=0 [ 2231.494838][T12203] Memory cgroup out of memory: Killed process 12203 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:08:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2231.495681][T12240] bond683 (uninitialized): Released all slaves 07:08:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2231.776444][T12220] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2231.877967][T12220] CPU: 1 PID: 12220 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2231.888445][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2231.898526][T12220] Call Trace: [ 2231.901827][T12220] [ 2231.904772][T12220] dump_stack_lvl+0xcd/0x134 [ 2231.909397][T12220] dump_header+0x10b/0x7f9 [ 2231.913847][T12220] oom_kill_process.cold+0x10/0x15 [ 2231.918993][T12220] out_of_memory+0x358/0x14a0 [ 2231.923704][T12220] ? find_held_lock+0x2d/0x110 [ 2231.928489][T12220] ? oom_killer_disable+0x270/0x270 [ 2231.933715][T12220] ? find_held_lock+0x2d/0x110 [ 2231.938504][T12220] mem_cgroup_out_of_memory+0x206/0x270 [ 2231.944076][T12220] ? mem_cgroup_margin+0x130/0x130 [ 2231.949205][T12220] ? lock_downgrade+0x6e0/0x6e0 [ 2231.954092][T12220] try_charge_memcg+0xf67/0x13f0 [ 2231.959062][T12220] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2231.965065][T12220] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2231.970803][T12220] ? lock_downgrade+0x6e0/0x6e0 [ 2231.975671][T12220] ? lock_downgrade+0x6e0/0x6e0 [ 2231.980549][T12220] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2231.986124][T12220] __alloc_pages+0x1ef/0x510 [ 2231.990735][T12220] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2231.997557][T12220] ? find_held_lock+0x2d/0x110 [ 2232.002355][T12220] alloc_pages+0x1a6/0x270 [ 2232.006798][T12220] pte_alloc_one+0x16/0x230 [ 2232.011330][T12220] __pte_alloc+0x69/0x250 [ 2232.015675][T12220] ? pmd_install+0x150/0x150 [ 2232.020283][T12220] ? hugepage_vma_check+0x44e/0x780 [ 2232.025497][T12220] ? __pmd_alloc+0x2ff/0x5c0 [ 2232.030108][T12220] __handle_mm_fault+0x310b/0x39b0 [ 2232.035263][T12220] ? vm_iomap_memory+0x190/0x190 [ 2232.040261][T12220] handle_mm_fault+0x1c8/0x780 [ 2232.045052][T12220] do_user_addr_fault+0x475/0x1210 [ 2232.050195][T12220] exc_page_fault+0x94/0x170 [ 2232.054808][T12220] asm_exc_page_fault+0x22/0x30 [ 2232.059684][T12220] RIP: 0033:0x7f2941c2a149 [ 2232.064114][T12220] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2232.083742][T12220] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2232.089834][T12220] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2232.097832][T12220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2232.105823][T12220] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2232.113815][T12220] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000220ce7 [ 2232.121806][T12220] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2232.129817][T12220] [ 2232.362648][T12227] __nla_validate_parse: 10 callbacks suppressed [ 2232.362668][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 07:09:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2232.485964][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2232.510539][T12220] memory: usage 307200kB, limit 307200kB, failcnt 40159 [ 2232.523306][T12220] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2232.550390][T12220] Memory cgroup stats for /syz0: [ 2232.550622][T12220] anon 135168 [ 2232.550622][T12220] file 184320 [ 2232.550622][T12220] kernel 314253312 [ 2232.550622][T12220] kernel_stack 65536 [ 2232.550622][T12220] pagetables 77824 [ 2232.550622][T12220] percpu 4839008 [ 2232.550622][T12220] sock 0 [ 2232.550622][T12220] vmalloc 0 [ 2232.550622][T12220] shmem 180224 [ 2232.550622][T12220] zswap 0 [ 2232.550622][T12220] zswapped 0 [ 2232.550622][T12220] file_mapped 180224 [ 2232.550622][T12220] file_dirty 0 [ 2232.550622][T12220] file_writeback 0 [ 2232.550622][T12220] swapcached 0 [ 2232.550622][T12220] anon_thp 0 [ 2232.550622][T12220] file_thp 0 [ 2232.550622][T12220] shmem_thp 0 [ 2232.550622][T12220] inactive_anon 151552 [ 2232.550622][T12220] active_anon 163840 [ 2232.550622][T12220] inactive_file 0 [ 2232.550622][T12220] active_file 4096 [ 2232.550622][T12220] unevictable 0 [ 2232.550622][T12220] slab_reclaimable 18040 [ 2232.550622][T12220] slab_unreclaimable 309219136 [ 2232.550622][T12220] slab 309237176 07:09:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2232.655871][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2232.702535][T12261] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2232.771936][T12261] bond683 (uninitialized): Released all slaves [ 2232.902195][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:09:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2232.964460][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2233.049581][T12271] bond93 (uninitialized): Released all slaves [ 2233.242149][T12285] validate_nla: 1 callbacks suppressed [ 2233.242171][T12285] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2233.456963][T12289] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2233.621351][T12220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12220,uid=0 [ 2233.644767][T12220] Memory cgroup out of memory: Killed process 12220 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:09:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1801, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:09:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x31050000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000000000000000000002", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2233.692569][T12250] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2233.743430][T12294] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2233.774014][T12250] CPU: 1 PID: 12250 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2233.784492][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2233.794573][T12250] Call Trace: [ 2233.797863][T12250] [ 2233.800812][T12250] dump_stack_lvl+0xcd/0x134 [ 2233.805425][T12250] dump_header+0x10b/0x7f9 [ 2233.809873][T12250] oom_kill_process.cold+0x10/0x15 [ 2233.815105][T12250] out_of_memory+0x358/0x14a0 [ 2233.819812][T12250] ? find_held_lock+0x2d/0x110 [ 2233.824597][T12250] ? oom_killer_disable+0x270/0x270 [ 2233.829828][T12250] ? find_held_lock+0x2d/0x110 [ 2233.834630][T12250] mem_cgroup_out_of_memory+0x206/0x270 [ 2233.840257][T12250] ? mem_cgroup_margin+0x130/0x130 [ 2233.845393][T12250] ? lock_downgrade+0x6e0/0x6e0 [ 2233.850275][T12250] try_charge_memcg+0xf67/0x13f0 [ 2233.855234][T12250] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2233.861234][T12250] ? lock_downgrade+0x6e0/0x6e0 [ 2233.866111][T12250] charge_memcg+0x31/0x320 [ 2233.870541][T12250] __mem_cgroup_charge+0x27/0x90 [ 2233.875928][T12250] ? _compound_head+0x5d/0x150 [ 2233.880709][T12250] __handle_mm_fault+0x17df/0x39b0 [ 2233.885844][T12250] ? vm_iomap_memory+0x190/0x190 [ 2233.890813][T12250] handle_mm_fault+0x1c8/0x780 [ 2233.895598][T12250] do_user_addr_fault+0x475/0x1210 [ 2233.900761][T12250] exc_page_fault+0x94/0x170 [ 2233.905365][T12250] asm_exc_page_fault+0x22/0x30 [ 2233.910223][T12250] RIP: 0033:0x7f238442a149 [ 2233.914647][T12250] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2233.934259][T12250] RSP: 002b:00007ffcaabcb7d0 EFLAGS: 00010246 [ 2233.940377][T12250] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2233.948420][T12250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555556a32e8 [ 2233.956403][T12250] RBP: 00007ffcaabcb8c8 R08: 0000000000000000 R09: 0000000000000000 [ 2233.964386][T12250] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 0000000000221543 [ 2233.972366][T12250] R13: 00007ffcaabcb8f0 R14: 00007f238459bf80 R15: 0000000000000032 [ 2233.980362][T12250] [ 2234.039703][T12294] bond683 (uninitialized): Released all slaves [ 2234.060814][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2234.083873][T12250] memory: usage 307200kB, limit 307200kB, failcnt 31371 [ 2234.101397][T12295] bond93 (uninitialized): Released all slaves [ 2234.110136][T12250] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2234.139743][T12296] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2234.148170][T12250] Memory cgroup stats for /syz4: [ 2234.148399][T12250] anon 131072 [ 2234.148399][T12250] file 229376 [ 2234.148399][T12250] kernel 314212352 [ 2234.148399][T12250] kernel_stack 65536 [ 2234.148399][T12250] pagetables 77824 [ 2234.148399][T12250] percpu 4849664 [ 2234.148399][T12250] sock 0 [ 2234.148399][T12250] vmalloc 0 [ 2234.148399][T12250] shmem 229376 [ 2234.148399][T12250] zswap 0 [ 2234.148399][T12250] zswapped 0 [ 2234.148399][T12250] file_mapped 217088 [ 2234.148399][T12250] file_dirty 0 [ 2234.148399][T12250] file_writeback 0 [ 2234.148399][T12250] swapcached 0 [ 2234.148399][T12250] anon_thp 0 [ 2234.148399][T12250] file_thp 0 [ 2234.148399][T12250] shmem_thp 0 [ 2234.148399][T12250] inactive_anon 163840 [ 2234.148399][T12250] active_anon 196608 [ 2234.148399][T12250] inactive_file 0 [ 2234.148399][T12250] active_file 0 [ 2234.148399][T12250] unevictable 0 [ 2234.148399][T12250] slab_reclaimable 17800 [ 2234.148399][T12250] slab_unreclaimable 309169256 [ 2234.148399][T12250] slab 309187056 07:09:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x33000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2234.341296][T12250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12250,uid=0 [ 2234.404297][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2234.424880][T12250] Memory cgroup out of memory: Killed process 12250 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:09:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x59190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2234.501224][T12310] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2234.531408][T12305] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2234.581117][T12310] CPU: 0 PID: 12310 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2234.591593][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2234.601675][T12310] Call Trace: [ 2234.604975][T12310] [ 2234.607928][T12310] dump_stack_lvl+0xcd/0x134 [ 2234.612547][T12310] dump_header+0x10b/0x7f9 [ 2234.617189][T12310] oom_kill_process.cold+0x10/0x15 [ 2234.622357][T12310] out_of_memory+0x358/0x14a0 [ 2234.627084][T12310] ? find_held_lock+0x2d/0x110 [ 2234.631881][T12310] ? oom_killer_disable+0x270/0x270 [ 2234.637116][T12310] ? find_held_lock+0x2d/0x110 [ 2234.641915][T12310] mem_cgroup_out_of_memory+0x206/0x270 [ 2234.647491][T12310] ? mem_cgroup_margin+0x130/0x130 [ 2234.652635][T12310] ? lock_downgrade+0x6e0/0x6e0 [ 2234.657540][T12310] try_charge_memcg+0xf67/0x13f0 [ 2234.662541][T12310] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2234.668555][T12310] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2234.674303][T12310] ? lock_downgrade+0x6e0/0x6e0 [ 2234.679194][T12310] ? lock_downgrade+0x6e0/0x6e0 [ 2234.684106][T12310] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2234.689698][T12310] __alloc_pages+0x1ef/0x510 [ 2234.694327][T12310] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2234.701159][T12310] ? find_held_lock+0x2d/0x110 [ 2234.705960][T12310] alloc_pages+0x1a6/0x270 [ 2234.710408][T12310] pte_alloc_one+0x16/0x230 [ 2234.714946][T12310] __pte_alloc+0x69/0x250 [ 2234.719307][T12310] ? pmd_install+0x150/0x150 [ 2234.723927][T12310] ? hugepage_vma_check+0x44e/0x780 07:09:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000000000000000000002", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2234.729156][T12310] ? __pmd_alloc+0x2ff/0x5c0 [ 2234.733778][T12310] __handle_mm_fault+0x310b/0x39b0 [ 2234.738929][T12310] ? vm_iomap_memory+0x190/0x190 [ 2234.743929][T12310] handle_mm_fault+0x1c8/0x780 [ 2234.748740][T12310] do_user_addr_fault+0x475/0x1210 [ 2234.753898][T12310] exc_page_fault+0x94/0x170 [ 2234.758523][T12310] asm_exc_page_fault+0x22/0x30 [ 2234.763407][T12310] RIP: 0033:0x7f2941c2a149 07:09:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2234.767841][T12310] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2234.770967][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2234.787473][T12310] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2234.787500][T12310] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2234.787515][T12310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2234.787532][T12310] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2234.787551][T12310] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000221850 [ 2234.787567][T12310] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2234.787602][T12310] [ 2234.932197][T12310] memory: usage 307200kB, limit 307200kB, failcnt 40208 [ 2234.943628][T12310] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2234.951850][T12315] bond93 (uninitialized): Released all slaves [ 2234.962650][T12310] Memory cgroup stats for /syz0: [ 2234.962868][T12310] anon 135168 [ 2234.962868][T12310] file 184320 [ 2234.962868][T12310] kernel 314253312 [ 2234.962868][T12310] kernel_stack 65536 [ 2234.962868][T12310] pagetables 77824 [ 2234.962868][T12310] percpu 4839008 [ 2234.962868][T12310] sock 0 [ 2234.962868][T12310] vmalloc 0 [ 2234.962868][T12310] shmem 180224 [ 2234.962868][T12310] zswap 0 [ 2234.962868][T12310] zswapped 0 [ 2234.962868][T12310] file_mapped 180224 [ 2234.962868][T12310] file_dirty 0 [ 2234.962868][T12310] file_writeback 0 [ 2234.962868][T12310] swapcached 0 [ 2234.962868][T12310] anon_thp 0 [ 2234.962868][T12310] file_thp 0 [ 2234.962868][T12310] shmem_thp 0 [ 2234.962868][T12310] inactive_anon 151552 [ 2234.962868][T12310] active_anon 163840 [ 2234.962868][T12310] inactive_file 0 [ 2234.962868][T12310] active_file 4096 [ 2234.962868][T12310] unevictable 0 [ 2234.962868][T12310] slab_reclaimable 18040 [ 2234.962868][T12310] slab_unreclaimable 309219136 [ 2234.962868][T12310] slab 309237176 [ 2234.977133][T12327] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2235.107728][T12310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12310,uid=0 [ 2235.121369][T12327] bond683 (uninitialized): Released all slaves [ 2235.162313][T12325] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2235.195101][T12310] Memory cgroup out of memory: Killed process 12310 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 07:09:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1900, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2235.291745][T12320] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2235.310565][T12320] CPU: 0 PID: 12320 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2235.321041][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2235.331132][T12320] Call Trace: [ 2235.334440][T12320] [ 2235.337398][T12320] dump_stack_lvl+0xcd/0x134 [ 2235.342033][T12320] dump_header+0x10b/0x7f9 [ 2235.346496][T12320] oom_kill_process.cold+0x10/0x15 [ 2235.351652][T12320] out_of_memory+0x358/0x14a0 [ 2235.356374][T12320] ? find_held_lock+0x2d/0x110 [ 2235.361168][T12320] ? oom_killer_disable+0x270/0x270 [ 2235.366418][T12320] ? find_held_lock+0x2d/0x110 [ 2235.371217][T12320] mem_cgroup_out_of_memory+0x206/0x270 [ 2235.376793][T12320] ? mem_cgroup_margin+0x130/0x130 [ 2235.381932][T12320] ? lock_downgrade+0x6e0/0x6e0 [ 2235.386827][T12320] try_charge_memcg+0xf67/0x13f0 [ 2235.391814][T12320] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2235.397828][T12320] ? lock_downgrade+0x6e0/0x6e0 [ 2235.402721][T12320] charge_memcg+0x31/0x320 [ 2235.407225][T12320] __mem_cgroup_charge+0x27/0x90 [ 2235.412229][T12320] ? _compound_head+0x5d/0x150 [ 2235.417033][T12320] wp_page_copy+0x27c/0x1b60 [ 2235.421666][T12320] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2235.427158][T12320] ? lock_downgrade+0x6e0/0x6e0 [ 2235.432060][T12320] ? vm_normal_page+0x146/0x2a0 [ 2235.436954][T12320] do_wp_page+0x1d1/0x1910 [ 2235.441407][T12320] __handle_mm_fault+0x1813/0x39b0 [ 2235.446563][T12320] ? vm_iomap_memory+0x190/0x190 [ 2235.451561][T12320] handle_mm_fault+0x1c8/0x780 [ 2235.456363][T12320] do_user_addr_fault+0x475/0x1210 [ 2235.461524][T12320] exc_page_fault+0x94/0x170 [ 2235.466149][T12320] asm_exc_page_fault+0x22/0x30 [ 2235.471027][T12320] RIP: 0033:0x7f23844374b0 07:09:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000000000000000000002", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2235.475469][T12320] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2235.495114][T12320] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2235.501207][T12320] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2235.509203][T12320] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2235.517246][T12320] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2235.525246][T12320] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2235.533240][T12320] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2235.541236][T12320] ? apparmor_socket_create+0x1f8/0x660 [ 2235.546834][T12320] 07:09:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2235.614123][T12320] memory: usage 307200kB, limit 307200kB, failcnt 31445 [ 2235.644605][T12354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2235.662253][T12320] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2235.673343][T12320] Memory cgroup stats for /syz4: [ 2235.673568][T12320] anon 126976 [ 2235.673568][T12320] file 229376 [ 2235.673568][T12320] kernel 314216448 [ 2235.673568][T12320] kernel_stack 65536 [ 2235.673568][T12320] pagetables 69632 [ 2235.673568][T12320] percpu 4849664 [ 2235.673568][T12320] sock 0 [ 2235.673568][T12320] vmalloc 0 [ 2235.673568][T12320] shmem 229376 [ 2235.673568][T12320] zswap 0 [ 2235.673568][T12320] zswapped 0 [ 2235.673568][T12320] file_mapped 217088 [ 2235.673568][T12320] file_dirty 0 [ 2235.673568][T12320] file_writeback 0 [ 2235.673568][T12320] swapcached 0 [ 2235.673568][T12320] anon_thp 0 [ 2235.673568][T12320] file_thp 0 [ 2235.673568][T12320] shmem_thp 0 [ 2235.673568][T12320] inactive_anon 159744 [ 2235.673568][T12320] active_anon 196608 [ 2235.673568][T12320] inactive_file 0 [ 2235.673568][T12320] active_file 0 [ 2235.673568][T12320] unevictable 0 [ 2235.673568][T12320] slab_reclaimable 15872 [ 2235.673568][T12320] slab_unreclaimable 309179608 [ 2235.673568][T12320] slab 309195480 [ 2235.773566][T12320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12320,uid=0 [ 2235.825307][T12320] Memory cgroup out of memory: Killed process 12320 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2235.854103][T12354] bond683 (uninitialized): Released all slaves [ 2235.879122][T12353] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:09:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2236.000525][T12362] bond93 (uninitialized): Released all slaves 07:09:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2236.152154][T12344] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2236.164471][T12372] bond93 (uninitialized): Released all slaves [ 2236.183057][T12344] CPU: 1 PID: 12344 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2236.193535][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2236.203619][T12344] Call Trace: [ 2236.206914][T12344] [ 2236.209863][T12344] dump_stack_lvl+0xcd/0x134 [ 2236.214484][T12344] dump_header+0x10b/0x7f9 [ 2236.218926][T12344] oom_kill_process.cold+0x10/0x15 [ 2236.224069][T12344] out_of_memory+0x358/0x14a0 [ 2236.228771][T12344] ? find_held_lock+0x2d/0x110 [ 2236.233555][T12344] ? oom_killer_disable+0x270/0x270 [ 2236.238778][T12344] ? find_held_lock+0x2d/0x110 [ 2236.243568][T12344] mem_cgroup_out_of_memory+0x206/0x270 [ 2236.249135][T12344] ? mem_cgroup_margin+0x130/0x130 [ 2236.254264][T12344] ? lock_downgrade+0x6e0/0x6e0 [ 2236.259149][T12344] try_charge_memcg+0xf67/0x13f0 [ 2236.264113][T12344] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2236.270113][T12344] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2236.275855][T12344] ? lock_downgrade+0x6e0/0x6e0 [ 2236.280725][T12344] ? lock_downgrade+0x6e0/0x6e0 [ 2236.285600][T12344] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2236.291182][T12344] __alloc_pages+0x1ef/0x510 [ 2236.295790][T12344] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2236.302581][T12344] ? find_held_lock+0x2d/0x110 [ 2236.307379][T12344] alloc_pages+0x1a6/0x270 [ 2236.311827][T12344] pte_alloc_one+0x16/0x230 [ 2236.316350][T12344] __pte_alloc+0x69/0x250 [ 2236.320688][T12344] ? pmd_install+0x150/0x150 [ 2236.325293][T12344] ? hugepage_vma_check+0x44e/0x780 [ 2236.330510][T12344] ? __pmd_alloc+0x2ff/0x5c0 [ 2236.335111][T12344] __handle_mm_fault+0x310b/0x39b0 [ 2236.340242][T12344] ? vm_iomap_memory+0x190/0x190 [ 2236.345238][T12344] handle_mm_fault+0x1c8/0x780 [ 2236.350015][T12344] do_user_addr_fault+0x475/0x1210 [ 2236.355149][T12344] exc_page_fault+0x94/0x170 [ 2236.359762][T12344] asm_exc_page_fault+0x22/0x30 [ 2236.364620][T12344] RIP: 0033:0x7f2941c2a149 [ 2236.369041][T12344] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2236.388653][T12344] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2236.394752][T12344] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2236.402729][T12344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2236.410702][T12344] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2236.418676][T12344] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000221e8b [ 2236.426652][T12344] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2236.434648][T12344] [ 2236.491136][T12344] memory: usage 307200kB, limit 307200kB, failcnt 40297 [ 2236.500279][T12380] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2236.530740][T12344] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2236.557396][T12344] Memory cgroup stats for /syz0: [ 2236.557579][T12344] anon 135168 [ 2236.557579][T12344] file 184320 [ 2236.557579][T12344] kernel 314253312 [ 2236.557579][T12344] kernel_stack 65536 [ 2236.557579][T12344] pagetables 77824 [ 2236.557579][T12344] percpu 4839008 [ 2236.557579][T12344] sock 0 [ 2236.557579][T12344] vmalloc 0 [ 2236.557579][T12344] shmem 180224 [ 2236.557579][T12344] zswap 0 [ 2236.557579][T12344] zswapped 0 [ 2236.557579][T12344] file_mapped 180224 [ 2236.557579][T12344] file_dirty 0 [ 2236.557579][T12344] file_writeback 0 [ 2236.557579][T12344] swapcached 0 [ 2236.557579][T12344] anon_thp 0 [ 2236.557579][T12344] file_thp 0 [ 2236.557579][T12344] shmem_thp 0 [ 2236.557579][T12344] inactive_anon 151552 [ 2236.557579][T12344] active_anon 163840 [ 2236.557579][T12344] inactive_file 0 [ 2236.557579][T12344] active_file 4096 [ 2236.557579][T12344] unevictable 0 [ 2236.557579][T12344] slab_reclaimable 18040 [ 2236.557579][T12344] slab_unreclaimable 309219136 [ 2236.557579][T12344] slab 309237176 07:09:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2236.743012][T12380] bond683 (uninitialized): Released all slaves [ 2236.770476][T12381] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2236.841084][T12344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12344,uid=0 07:09:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2236.986130][T12344] Memory cgroup out of memory: Killed process 12344 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2237.023950][T12396] bond93 (uninitialized): Released all slaves 07:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1901, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:09:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2237.107869][T12382] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2237.145038][T12407] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2237.171639][T12382] CPU: 1 PID: 12382 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2237.182116][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2237.192199][T12382] Call Trace: [ 2237.195504][T12382] [ 2237.198458][T12382] dump_stack_lvl+0xcd/0x134 [ 2237.203087][T12382] dump_header+0x10b/0x7f9 [ 2237.207540][T12382] oom_kill_process.cold+0x10/0x15 [ 2237.212691][T12382] out_of_memory+0x358/0x14a0 [ 2237.217410][T12382] ? find_held_lock+0x2d/0x110 [ 2237.222207][T12382] ? oom_killer_disable+0x270/0x270 [ 2237.227441][T12382] ? find_held_lock+0x2d/0x110 [ 2237.232246][T12382] mem_cgroup_out_of_memory+0x206/0x270 [ 2237.237822][T12382] ? mem_cgroup_margin+0x130/0x130 [ 2237.242955][T12382] ? lock_downgrade+0x6e0/0x6e0 [ 2237.247850][T12382] try_charge_memcg+0xf67/0x13f0 [ 2237.252824][T12382] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2237.258843][T12382] ? lock_downgrade+0x6e0/0x6e0 [ 2237.263749][T12382] charge_memcg+0x31/0x320 [ 2237.268203][T12382] __mem_cgroup_charge+0x27/0x90 [ 2237.273164][T12382] ? _compound_head+0x5d/0x150 [ 2237.277951][T12382] wp_page_copy+0x27c/0x1b60 [ 2237.282568][T12382] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2237.288044][T12382] ? lock_downgrade+0x6e0/0x6e0 [ 2237.292913][T12382] ? vm_normal_page+0x146/0x2a0 [ 2237.297804][T12382] do_wp_page+0x1d1/0x1910 [ 2237.302244][T12382] __handle_mm_fault+0x1813/0x39b0 [ 2237.307385][T12382] ? vm_iomap_memory+0x190/0x190 [ 2237.312374][T12382] handle_mm_fault+0x1c8/0x780 [ 2237.317160][T12382] do_user_addr_fault+0x475/0x1210 [ 2237.322310][T12382] exc_page_fault+0x94/0x170 [ 2237.326927][T12382] asm_exc_page_fault+0x22/0x30 [ 2237.331799][T12382] RIP: 0033:0x7f23844374b0 [ 2237.336249][T12382] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2237.355878][T12382] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2237.361971][T12382] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2237.369965][T12382] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2237.377957][T12382] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2237.385947][T12382] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2237.393936][T12382] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2237.401923][T12382] ? apparmor_socket_create+0x1f8/0x660 [ 2237.407512][T12382] [ 2237.491484][T12407] bond683 (uninitialized): Released all slaves [ 2237.651915][T12413] __nla_validate_parse: 7 callbacks suppressed [ 2237.651936][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2237.672069][T12382] memory: usage 307200kB, limit 307200kB, failcnt 31522 [ 2237.685803][T12382] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2237.701695][T12382] Memory cgroup stats for /syz4: [ 2237.701879][T12382] anon 126976 [ 2237.701879][T12382] file 229376 [ 2237.701879][T12382] kernel 314216448 [ 2237.701879][T12382] kernel_stack 65536 [ 2237.701879][T12382] pagetables 69632 [ 2237.701879][T12382] percpu 4849664 [ 2237.701879][T12382] sock 0 [ 2237.701879][T12382] vmalloc 0 [ 2237.701879][T12382] shmem 229376 [ 2237.701879][T12382] zswap 0 [ 2237.701879][T12382] zswapped 0 [ 2237.701879][T12382] file_mapped 217088 [ 2237.701879][T12382] file_dirty 0 [ 2237.701879][T12382] file_writeback 0 [ 2237.701879][T12382] swapcached 0 [ 2237.701879][T12382] anon_thp 0 [ 2237.701879][T12382] file_thp 0 [ 2237.701879][T12382] shmem_thp 0 [ 2237.701879][T12382] inactive_anon 159744 [ 2237.701879][T12382] active_anon 196608 [ 2237.701879][T12382] inactive_file 0 [ 2237.701879][T12382] active_file 0 [ 2237.701879][T12382] unevictable 0 [ 2237.701879][T12382] slab_reclaimable 15872 [ 2237.701879][T12382] slab_unreclaimable 309179608 [ 2237.701879][T12382] slab 309195480 07:09:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2237.886011][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2237.903957][T12382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12382,uid=0 [ 2237.954594][T12421] bond93 (uninitialized): Released all slaves 07:09:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2238.055571][T12435] bond683 (uninitialized): Released all slaves [ 2238.073780][T12382] Memory cgroup out of memory: Killed process 12382 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2238.106529][T12419] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2238.130290][T12419] CPU: 0 PID: 12419 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2238.140774][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2238.150854][T12419] Call Trace: [ 2238.154165][T12419] 07:09:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2238.157126][T12419] dump_stack_lvl+0xcd/0x134 [ 2238.161772][T12419] dump_header+0x10b/0x7f9 [ 2238.166232][T12419] oom_kill_process.cold+0x10/0x15 [ 2238.171384][T12419] out_of_memory+0x358/0x14a0 [ 2238.176106][T12419] ? oom_killer_disable+0x270/0x270 [ 2238.181343][T12419] ? find_held_lock+0x2d/0x110 [ 2238.186164][T12419] mem_cgroup_out_of_memory+0x206/0x270 [ 2238.191751][T12419] ? mem_cgroup_margin+0x130/0x130 [ 2238.196887][T12419] ? lock_downgrade+0x6e0/0x6e0 [ 2238.201784][T12419] try_charge_memcg+0xf67/0x13f0 [ 2238.206757][T12419] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2238.212756][T12419] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2238.218493][T12419] ? lock_downgrade+0x6e0/0x6e0 [ 2238.223358][T12419] ? lock_downgrade+0x6e0/0x6e0 [ 2238.228232][T12419] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2238.233796][T12419] __alloc_pages+0x1ef/0x510 [ 2238.238399][T12419] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2238.245190][T12419] ? find_held_lock+0x2d/0x110 [ 2238.249970][T12419] alloc_pages+0x1a6/0x270 [ 2238.254405][T12419] pte_alloc_one+0x16/0x230 [ 2238.258918][T12419] __pte_alloc+0x69/0x250 [ 2238.263261][T12419] ? pmd_install+0x150/0x150 [ 2238.267858][T12419] ? hugepage_vma_check+0x44e/0x780 [ 2238.273066][T12419] ? __pmd_alloc+0x2ff/0x5c0 [ 2238.277668][T12419] __handle_mm_fault+0x310b/0x39b0 [ 2238.282798][T12419] ? vm_iomap_memory+0x190/0x190 [ 2238.287768][T12419] handle_mm_fault+0x1c8/0x780 [ 2238.292560][T12419] do_user_addr_fault+0x475/0x1210 [ 2238.297695][T12419] exc_page_fault+0x94/0x170 [ 2238.302302][T12419] asm_exc_page_fault+0x22/0x30 [ 2238.307168][T12419] RIP: 0033:0x7f2941c2a149 [ 2238.311610][T12419] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2238.331227][T12419] RSP: 002b:00007ffda265d5b0 EFLAGS: 00010246 [ 2238.337320][T12419] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2238.345299][T12419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555714b2e8 [ 2238.353292][T12419] RBP: 00007ffda265d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 2238.361278][T12419] R10: 00007ffda265d6d0 R11: 0000000000000246 R12: 0000000000222473 [ 2238.369255][T12419] R13: 00007ffda265d6d0 R14: 00007f2941d9bf80 R15: 0000000000000032 [ 2238.377254][T12419] 07:09:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0xa}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2238.430159][T12439] validate_nla: 2 callbacks suppressed [ 2238.430178][T12439] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2238.563685][T12419] memory: usage 307200kB, limit 307200kB, failcnt 40367 [ 2238.576176][T12419] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2238.593059][T12419] Memory cgroup stats for /syz0: [ 2238.593244][T12419] anon 135168 [ 2238.593244][T12419] file 184320 [ 2238.593244][T12419] kernel 314253312 [ 2238.593244][T12419] kernel_stack 65536 [ 2238.593244][T12419] pagetables 77824 [ 2238.593244][T12419] percpu 4839008 [ 2238.593244][T12419] sock 0 [ 2238.593244][T12419] vmalloc 0 [ 2238.593244][T12419] shmem 180224 [ 2238.593244][T12419] zswap 0 [ 2238.593244][T12419] zswapped 0 [ 2238.593244][T12419] file_mapped 180224 [ 2238.593244][T12419] file_dirty 0 [ 2238.593244][T12419] file_writeback 0 [ 2238.593244][T12419] swapcached 0 [ 2238.593244][T12419] anon_thp 0 [ 2238.593244][T12419] file_thp 0 [ 2238.593244][T12419] shmem_thp 0 [ 2238.593244][T12419] inactive_anon 151552 [ 2238.593244][T12419] active_anon 163840 [ 2238.593244][T12419] inactive_file 0 [ 2238.593244][T12419] active_file 4096 [ 2238.593244][T12419] unevictable 0 [ 2238.593244][T12419] slab_reclaimable 18040 [ 2238.593244][T12419] slab_unreclaimable 309219136 [ 2238.593244][T12419] slab 309237176 [ 2238.605280][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:09:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1a00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2238.743480][T12419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12419,uid=0 [ 2238.765882][T12419] Memory cgroup out of memory: Killed process 12419 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2238.812460][T12444] bond93 (uninitialized): Released all slaves 07:09:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2238.899912][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2238.933491][T12450] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2238.962201][T12450] CPU: 1 PID: 12450 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2238.972681][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2238.982764][T12450] Call Trace: [ 2238.986087][T12450] [ 2238.989041][T12450] dump_stack_lvl+0xcd/0x134 [ 2238.993673][T12450] dump_header+0x10b/0x7f9 [ 2238.998136][T12450] oom_kill_process.cold+0x10/0x15 [ 2239.003291][T12450] out_of_memory+0x358/0x14a0 [ 2239.008008][T12450] ? find_held_lock+0x2d/0x110 [ 2239.012801][T12450] ? oom_killer_disable+0x270/0x270 [ 2239.018043][T12450] ? find_held_lock+0x2d/0x110 [ 2239.022843][T12450] mem_cgroup_out_of_memory+0x206/0x270 [ 2239.028422][T12450] ? mem_cgroup_margin+0x130/0x130 [ 2239.033561][T12450] ? lock_downgrade+0x6e0/0x6e0 [ 2239.038466][T12450] try_charge_memcg+0xf67/0x13f0 [ 2239.043449][T12450] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2239.049475][T12450] ? lock_downgrade+0x6e0/0x6e0 [ 2239.054370][T12450] charge_memcg+0x31/0x320 [ 2239.058809][T12450] __mem_cgroup_charge+0x27/0x90 [ 2239.063758][T12450] ? _compound_head+0x5d/0x150 [ 2239.068539][T12450] __handle_mm_fault+0x17df/0x39b0 [ 2239.073667][T12450] ? vm_iomap_memory+0x190/0x190 [ 2239.078640][T12450] handle_mm_fault+0x1c8/0x780 [ 2239.083418][T12450] do_user_addr_fault+0x475/0x1210 [ 2239.088551][T12450] exc_page_fault+0x94/0x170 [ 2239.093161][T12450] asm_exc_page_fault+0x22/0x30 [ 2239.098020][T12450] RIP: 0033:0x7f2384434e7d [ 2239.102440][T12450] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 2239.122057][T12450] RSP: 002b:00007ffcaabcb810 EFLAGS: 00010217 [ 2239.128138][T12450] RAX: 0000000000000000 RBX: 00007f238459bf8c RCX: 00007f2384489279 [ 2239.136140][T12450] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f238459bf88 [ 2239.144125][T12450] RBP: 00007f238459bf80 R08: 00007f2385553700 R09: 0000000000000000 [ 2239.152104][T12450] R10: 00007f2385553700 R11: 0000000000000246 R12: 00007f238459bf8c [ 2239.160083][T12450] R13: 00007f23845a0060 R14: 00007f238459bf80 R15: 0000000000000000 [ 2239.168083][T12450] [ 2239.282642][T12450] memory: usage 307200kB, limit 307200kB, failcnt 31606 [ 2239.293974][T12450] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2239.310267][T12450] Memory cgroup stats for /syz4: [ 2239.310449][T12450] anon 90112 [ 2239.310449][T12450] file 229376 [ 2239.310449][T12450] kernel 314253312 [ 2239.310449][T12450] kernel_stack 65536 [ 2239.310449][T12450] pagetables 69632 [ 2239.310449][T12450] percpu 4849664 [ 2239.310449][T12450] sock 0 [ 2239.310449][T12450] vmalloc 0 [ 2239.310449][T12450] shmem 229376 [ 2239.310449][T12450] zswap 0 [ 2239.310449][T12450] zswapped 0 [ 2239.310449][T12450] file_mapped 217088 [ 2239.310449][T12450] file_dirty 0 [ 2239.310449][T12450] file_writeback 0 [ 2239.310449][T12450] swapcached 0 [ 2239.310449][T12450] anon_thp 0 [ 2239.310449][T12450] file_thp 0 [ 2239.310449][T12450] shmem_thp 0 [ 2239.310449][T12450] inactive_anon 122880 [ 2239.310449][T12450] active_anon 196608 [ 2239.310449][T12450] inactive_file 0 [ 2239.310449][T12450] active_file 0 [ 2239.310449][T12450] unevictable 0 [ 2239.310449][T12450] slab_reclaimable 50664 [ 2239.310449][T12450] slab_unreclaimable 309183824 [ 2239.310449][T12450] slab 309234488 [ 2239.455154][T12450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12450,uid=0 [ 2239.484478][T12450] Memory cgroup out of memory: Killed process 12450 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:09:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5c190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2239.581101][T12463] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2239.601827][T12463] CPU: 0 PID: 12463 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2239.612303][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2239.622384][T12463] Call Trace: [ 2239.625682][T12463] [ 2239.628618][T12463] dump_stack_lvl+0xcd/0x134 [ 2239.633228][T12463] dump_header+0x10b/0x7f9 [ 2239.637663][T12463] oom_kill_process.cold+0x10/0x15 [ 2239.642794][T12463] out_of_memory+0x358/0x14a0 [ 2239.647504][T12463] ? find_held_lock+0x2d/0x110 [ 2239.652292][T12463] ? oom_killer_disable+0x270/0x270 [ 2239.657517][T12463] ? find_held_lock+0x2d/0x110 [ 2239.662314][T12463] mem_cgroup_out_of_memory+0x206/0x270 [ 2239.667871][T12463] ? mem_cgroup_margin+0x130/0x130 [ 2239.673003][T12463] ? lock_downgrade+0x6e0/0x6e0 [ 2239.677899][T12463] try_charge_memcg+0xf67/0x13f0 [ 2239.682873][T12463] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2239.688891][T12463] ? lock_downgrade+0x6e0/0x6e0 [ 2239.693780][T12463] charge_memcg+0x31/0x320 [ 2239.698213][T12463] __mem_cgroup_charge+0x27/0x90 [ 2239.703162][T12463] ? _compound_head+0x5d/0x150 [ 2239.707941][T12463] __handle_mm_fault+0x17df/0x39b0 [ 2239.713070][T12463] ? vm_iomap_memory+0x190/0x190 [ 2239.718041][T12463] handle_mm_fault+0x1c8/0x780 [ 2239.722827][T12463] do_user_addr_fault+0x475/0x1210 [ 2239.727966][T12463] exc_page_fault+0x94/0x170 [ 2239.732573][T12463] asm_exc_page_fault+0x22/0x30 [ 2239.737469][T12463] RIP: 0033:0x7f2941c34e7d [ 2239.741916][T12463] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 2239.761544][T12463] RSP: 002b:00007ffda265d5f0 EFLAGS: 00010217 [ 2239.767623][T12463] RAX: 0000000000000000 RBX: 00007f2941d9bf8c RCX: 00007f2941c89279 [ 2239.775602][T12463] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2941d9bf88 [ 2239.783578][T12463] RBP: 00007f2941d9bf80 R08: 00007f2942e22700 R09: 0000000000000000 [ 2239.791554][T12463] R10: 00007f2942e22700 R11: 0000000000000246 R12: 00007f2941d9bf8c [ 2239.799531][T12463] R13: 00007f2941da0060 R14: 00007f2941d9bf80 R15: 0000000000000000 [ 2239.807525][T12463] [ 2239.896102][T12463] memory: usage 307200kB, limit 307200kB, failcnt 40474 [ 2239.919665][T12463] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2239.953264][T12463] Memory cgroup stats for /syz0: [ 2239.953442][T12463] anon 94208 [ 2239.953442][T12463] file 184320 [ 2239.953442][T12463] kernel 314294272 [ 2239.953442][T12463] kernel_stack 65536 [ 2239.953442][T12463] pagetables 73728 [ 2239.953442][T12463] percpu 4839008 [ 2239.953442][T12463] sock 0 [ 2239.953442][T12463] vmalloc 0 [ 2239.953442][T12463] shmem 180224 [ 2239.953442][T12463] zswap 0 [ 2239.953442][T12463] zswapped 0 [ 2239.953442][T12463] file_mapped 180224 [ 2239.953442][T12463] file_dirty 0 [ 2239.953442][T12463] file_writeback 0 [ 2239.953442][T12463] swapcached 0 [ 2239.953442][T12463] anon_thp 0 [ 2239.953442][T12463] file_thp 0 [ 2239.953442][T12463] shmem_thp 0 [ 2239.953442][T12463] inactive_anon 110592 [ 2239.953442][T12463] active_anon 163840 [ 2239.953442][T12463] inactive_file 4096 [ 2239.953442][T12463] active_file 0 [ 2239.953442][T12463] unevictable 0 [ 2239.953442][T12463] slab_reclaimable 51288 [ 2239.953442][T12463] slab_unreclaimable 309230592 [ 2239.953442][T12463] slab 309281880 [ 2240.123432][T12449] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2240.139526][T12463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12463,uid=0 07:09:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 07:09:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1a01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2240.139704][T12463] Memory cgroup out of memory: Killed process 12463 (syz-executor.0) total-vm:54512kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2240.244796][T12476] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2240.256414][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:09:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2240.306012][T12476] CPU: 0 PID: 12476 Comm: syz-executor.0 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2240.316498][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2240.326581][T12476] Call Trace: [ 2240.329882][T12476] [ 2240.332838][T12476] dump_stack_lvl+0xcd/0x134 [ 2240.337470][T12476] dump_header+0x10b/0x7f9 [ 2240.341924][T12476] oom_kill_process.cold+0x10/0x15 [ 2240.347090][T12476] out_of_memory+0x358/0x14a0 [ 2240.351811][T12476] ? find_held_lock+0x2d/0x110 [ 2240.356620][T12476] ? oom_killer_disable+0x270/0x270 [ 2240.361864][T12476] ? find_held_lock+0x2d/0x110 [ 2240.366671][T12476] mem_cgroup_out_of_memory+0x206/0x270 [ 2240.371570][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2240.372236][T12476] ? mem_cgroup_margin+0x130/0x130 [ 2240.372269][T12476] ? lock_downgrade+0x6e0/0x6e0 [ 2240.391560][T12476] try_charge_memcg+0xf67/0x13f0 [ 2240.396545][T12476] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2240.402571][T12476] ? lock_downgrade+0x6e0/0x6e0 [ 2240.407475][T12476] charge_memcg+0x31/0x320 [ 2240.411931][T12476] __mem_cgroup_charge+0x27/0x90 [ 2240.416899][T12476] ? _compound_head+0x5d/0x150 [ 2240.421701][T12476] wp_page_copy+0x27c/0x1b60 [ 2240.426327][T12476] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2240.431824][T12476] ? lock_downgrade+0x6e0/0x6e0 [ 2240.436703][T12476] ? vm_normal_page+0x146/0x2a0 [ 2240.441598][T12476] do_wp_page+0x52c/0x1910 [ 2240.446050][T12476] __handle_mm_fault+0x1813/0x39b0 [ 2240.451193][T12476] ? vm_iomap_memory+0x190/0x190 [ 2240.456190][T12476] handle_mm_fault+0x1c8/0x780 [ 2240.460985][T12476] do_user_addr_fault+0x475/0x1210 [ 2240.466127][T12476] exc_page_fault+0x94/0x170 [ 2240.470735][T12476] asm_exc_page_fault+0x22/0x30 [ 2240.475593][T12476] RIP: 0033:0x7f2941c38086 [ 2240.480017][T12476] Code: 49 8d 82 c0 02 00 00 48 89 05 6e d3 09 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 3a d3 09 01 <4c> 89 0d 6b 7e 13 00 31 d2 48 c7 05 3e d3 09 01 00 00 00 00 4c 89 [ 2240.499635][T12476] RSP: 002b:00007ffda265d778 EFLAGS: 00010246 [ 2240.505718][T12476] RAX: 000055555714b6c0 RBX: 0000000000000001 RCX: 00007f2942cd53c0 [ 2240.513699][T12476] RDX: 00007f2942cd53c0 RSI: 00007f2941d6fef0 RDI: 0000000000000001 [ 2240.521688][T12476] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2941d6fef0 [ 2240.529674][T12476] R10: 000055555714b400 R11: 0000000000000202 R12: 0000000000000001 [ 2240.537656][T12476] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffda265d890 [ 2240.545654][T12476] 07:09:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2240.623636][T12476] memory: usage 307076kB, limit 307200kB, failcnt 40495 [ 2240.633384][T12476] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2240.643612][T12476] Memory cgroup stats for /syz0: [ 2240.643845][T12476] anon 65536 [ 2240.643845][T12476] file 184320 [ 2240.643845][T12476] kernel 314195968 [ 2240.643845][T12476] kernel_stack 32768 [ 2240.643845][T12476] pagetables 57344 [ 2240.643845][T12476] percpu 4839008 [ 2240.643845][T12476] sock 0 [ 2240.643845][T12476] vmalloc 0 [ 2240.643845][T12476] shmem 180224 [ 2240.643845][T12476] zswap 0 [ 2240.643845][T12476] zswapped 0 [ 2240.643845][T12476] file_mapped 180224 [ 2240.643845][T12476] file_dirty 0 [ 2240.643845][T12476] file_writeback 0 [ 2240.643845][T12476] swapcached 0 [ 2240.643845][T12476] anon_thp 0 [ 2240.643845][T12476] file_thp 0 [ 2240.643845][T12476] shmem_thp 0 [ 2240.643845][T12476] inactive_anon 81920 [ 2240.643845][T12476] active_anon 163840 [ 2240.643845][T12476] inactive_file 0 [ 2240.643845][T12476] active_file 4096 [ 2240.643845][T12476] unevictable 0 [ 2240.643845][T12476] slab_reclaimable 10280 [ 2240.643845][T12476] slab_unreclaimable 309220272 [ 2240.643845][T12476] slab 309230552 [ 2240.793165][T12476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=3637,uid=0 [ 2240.815781][T12476] Memory cgroup out of memory: Killed process 3637 (syz-executor.0) total-vm:50540kB, anon-rss:396kB, file-rss:9068kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2240.841177][T12473] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2240.882833][T12473] CPU: 0 PID: 12473 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2240.893310][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2240.903393][T12473] Call Trace: [ 2240.906690][T12473] [ 2240.909637][T12473] dump_stack_lvl+0xcd/0x134 [ 2240.914270][T12473] dump_header+0x10b/0x7f9 [ 2240.918728][T12473] oom_kill_process.cold+0x10/0x15 [ 2240.923858][T12473] out_of_memory+0x358/0x14a0 [ 2240.928580][T12473] ? oom_killer_disable+0x270/0x270 [ 2240.933793][T12473] ? find_held_lock+0x2d/0x110 [ 2240.938570][T12473] mem_cgroup_out_of_memory+0x206/0x270 [ 2240.944126][T12473] ? mem_cgroup_margin+0x130/0x130 [ 2240.949243][T12473] ? lock_downgrade+0x6e0/0x6e0 [ 2240.954119][T12473] try_charge_memcg+0xf67/0x13f0 [ 2240.959074][T12473] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2240.965075][T12473] ? lock_downgrade+0x6e0/0x6e0 [ 2240.969952][T12473] charge_memcg+0x31/0x320 [ 2240.974381][T12473] __mem_cgroup_charge+0x27/0x90 [ 2240.979327][T12473] ? _compound_head+0x5d/0x150 [ 2240.984106][T12473] wp_page_copy+0x27c/0x1b60 [ 2240.988716][T12473] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2240.994183][T12473] ? lock_downgrade+0x6e0/0x6e0 [ 2240.999041][T12473] ? vm_normal_page+0x146/0x2a0 [ 2241.003914][T12473] do_wp_page+0x1d1/0x1910 [ 2241.008344][T12473] __handle_mm_fault+0x1813/0x39b0 [ 2241.013478][T12473] ? vm_iomap_memory+0x190/0x190 [ 2241.018450][T12473] handle_mm_fault+0x1c8/0x780 [ 2241.023233][T12473] do_user_addr_fault+0x475/0x1210 [ 2241.028386][T12473] exc_page_fault+0x94/0x170 [ 2241.032994][T12473] asm_exc_page_fault+0x22/0x30 [ 2241.037879][T12473] RIP: 0033:0x7f23844374b0 [ 2241.042300][T12473] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2241.061915][T12473] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2241.067992][T12473] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2241.075972][T12473] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2241.083948][T12473] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2241.091927][T12473] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2241.099903][T12473] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2241.107879][T12473] ? apparmor_socket_create+0x1f8/0x660 [ 2241.113466][T12473] [ 2241.203019][T12473] memory: usage 307200kB, limit 307200kB, failcnt 31690 [ 2241.244167][T12473] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2241.295280][T12473] Memory cgroup stats for /syz4: [ 2241.295520][T12473] anon 126976 [ 2241.295520][T12473] file 229376 [ 2241.295520][T12473] kernel 314216448 [ 2241.295520][T12473] kernel_stack 65536 [ 2241.295520][T12473] pagetables 69632 [ 2241.295520][T12473] percpu 4849664 [ 2241.295520][T12473] sock 0 [ 2241.295520][T12473] vmalloc 0 [ 2241.295520][T12473] shmem 229376 [ 2241.295520][T12473] zswap 0 [ 2241.295520][T12473] zswapped 0 [ 2241.295520][T12473] file_mapped 217088 [ 2241.295520][T12473] file_dirty 0 [ 2241.295520][T12473] file_writeback 0 [ 2241.295520][T12473] swapcached 0 [ 2241.295520][T12473] anon_thp 0 [ 2241.295520][T12473] file_thp 0 [ 2241.295520][T12473] shmem_thp 0 [ 2241.295520][T12473] inactive_anon 159744 [ 2241.295520][T12473] active_anon 196608 [ 2241.295520][T12473] inactive_file 0 [ 2241.295520][T12473] active_file 0 [ 2241.295520][T12473] unevictable 0 [ 2241.295520][T12473] slab_reclaimable 15872 [ 2241.295520][T12473] slab_unreclaimable 309179608 [ 2241.295520][T12473] slab 309195480 07:09:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5d190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2241.455397][T12473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12473,uid=0 [ 2241.481577][T12473] Memory cgroup out of memory: Killed process 12473 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:09:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) [ 2241.604170][T12481] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2241.654396][T12506] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2241.683081][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2241.686611][T12506] CPU: 1 PID: 12506 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2241.702831][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2241.712910][T12506] Call Trace: [ 2241.716205][T12506] [ 2241.719160][T12506] dump_stack_lvl+0xcd/0x134 [ 2241.723794][T12506] dump_header+0x10b/0x7f9 [ 2241.728256][T12506] oom_kill_process.cold+0x10/0x15 [ 2241.733425][T12506] out_of_memory+0x358/0x14a0 [ 2241.738151][T12506] ? find_held_lock+0x2d/0x110 [ 2241.742944][T12506] ? oom_killer_disable+0x270/0x270 [ 2241.748184][T12506] ? find_held_lock+0x2d/0x110 07:09:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0xe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2241.752986][T12506] mem_cgroup_out_of_memory+0x206/0x270 [ 2241.758575][T12506] ? mem_cgroup_margin+0x130/0x130 [ 2241.763719][T12506] ? lock_downgrade+0x6e0/0x6e0 [ 2241.768631][T12506] try_charge_memcg+0xf67/0x13f0 [ 2241.773618][T12506] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2241.779643][T12506] ? lock_downgrade+0x6e0/0x6e0 [ 2241.784545][T12506] charge_memcg+0x31/0x320 [ 2241.788999][T12506] __mem_cgroup_charge+0x27/0x90 [ 2241.793981][T12506] ? _compound_head+0x5d/0x150 [ 2241.798791][T12506] wp_page_copy+0x27c/0x1b60 [ 2241.803441][T12506] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2241.808929][T12506] ? lock_downgrade+0x6e0/0x6e0 [ 2241.813808][T12506] ? vm_normal_page+0x146/0x2a0 [ 2241.818702][T12506] do_wp_page+0x1d1/0x1910 [ 2241.823161][T12506] __handle_mm_fault+0x1813/0x39b0 [ 2241.828318][T12506] ? vm_iomap_memory+0x190/0x190 [ 2241.833316][T12506] handle_mm_fault+0x1c8/0x780 [ 2241.838116][T12506] do_user_addr_fault+0x475/0x1210 [ 2241.843271][T12506] exc_page_fault+0x94/0x170 [ 2241.847903][T12506] asm_exc_page_fault+0x22/0x30 [ 2241.852783][T12506] RIP: 0033:0x7f23844374b0 [ 2241.857219][T12506] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2241.865598][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2241.876851][T12506] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2241.876880][T12506] RAX: 00000000737de801 RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2241.876898][T12506] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000a1eaa7d [ 2241.876914][T12506] RBP: 00000000737de801 R08: 0000000000000801 R09: 00000000737de805 [ 2241.876929][T12506] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2241.876946][T12506] R13: 0000000000000001 R14: 0000000000000016 R15: ffffffff83c43f18 [ 2241.876962][T12506] ? apparmor_socket_create+0x1f8/0x660 [ 2241.877013][T12506] [ 2241.963524][T12506] memory: usage 307200kB, limit 307200kB, failcnt 31751 [ 2241.974238][T12506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2241.992120][T12506] Memory cgroup stats for /syz4: [ 2241.992427][T12506] anon 126976 [ 2241.992427][T12506] file 229376 [ 2241.992427][T12506] kernel 314216448 [ 2241.992427][T12506] kernel_stack 65536 [ 2241.992427][T12506] pagetables 69632 [ 2241.992427][T12506] percpu 4849664 [ 2241.992427][T12506] sock 0 [ 2241.992427][T12506] vmalloc 0 [ 2241.992427][T12506] shmem 229376 [ 2241.992427][T12506] zswap 0 [ 2241.992427][T12506] zswapped 0 [ 2241.992427][T12506] file_mapped 217088 [ 2241.992427][T12506] file_dirty 0 [ 2241.992427][T12506] file_writeback 0 [ 2241.992427][T12506] swapcached 0 [ 2241.992427][T12506] anon_thp 0 [ 2241.992427][T12506] file_thp 0 [ 2241.992427][T12506] shmem_thp 0 [ 2241.992427][T12506] inactive_anon 159744 [ 2241.992427][T12506] active_anon 196608 [ 2241.992427][T12506] inactive_file 0 [ 2241.992427][T12506] active_file 0 [ 2241.992427][T12506] unevictable 0 [ 2241.992427][T12506] slab_reclaimable 15872 [ 2241.992427][T12506] slab_unreclaimable 309179608 [ 2241.992427][T12506] slab 309195480 07:09:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) [ 2242.135535][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2242.274402][T12506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12506,uid=0 [ 2242.305568][T12506] Memory cgroup out of memory: Killed process 12506 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 07:09:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5e190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1b00, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2242.375637][T12518] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2242.454731][T12518] bond782 (uninitialized): Released all slaves [ 2242.470663][T12533] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2242.500333][T12533] CPU: 0 PID: 12533 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2242.510828][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2242.520892][T12533] Call Trace: [ 2242.524175][T12533] [ 2242.527111][T12533] dump_stack_lvl+0xcd/0x134 [ 2242.531737][T12533] dump_header+0x10b/0x7f9 [ 2242.536169][T12533] oom_kill_process.cold+0x10/0x15 [ 2242.541299][T12533] out_of_memory+0x358/0x14a0 [ 2242.545992][T12533] ? find_held_lock+0x2d/0x110 [ 2242.550781][T12533] ? oom_killer_disable+0x270/0x270 [ 2242.556032][T12533] ? find_held_lock+0x2d/0x110 [ 2242.560841][T12533] mem_cgroup_out_of_memory+0x206/0x270 [ 2242.566421][T12533] ? mem_cgroup_margin+0x130/0x130 [ 2242.571546][T12533] ? lock_downgrade+0x6e0/0x6e0 [ 2242.576432][T12533] try_charge_memcg+0xf67/0x13f0 [ 2242.581388][T12533] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2242.587386][T12533] ? lock_downgrade+0x6e0/0x6e0 [ 2242.592267][T12533] charge_memcg+0x31/0x320 [ 2242.596697][T12533] __mem_cgroup_charge+0x27/0x90 [ 2242.601643][T12533] ? _compound_head+0x5d/0x150 [ 2242.606424][T12533] wp_page_copy+0x27c/0x1b60 [ 2242.611032][T12533] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2242.616502][T12533] ? lock_downgrade+0x6e0/0x6e0 [ 2242.621365][T12533] ? vm_normal_page+0x146/0x2a0 [ 2242.626241][T12533] do_wp_page+0x1d1/0x1910 [ 2242.630693][T12533] __handle_mm_fault+0x1813/0x39b0 [ 2242.635821][T12533] ? vm_iomap_memory+0x190/0x190 [ 2242.640790][T12533] handle_mm_fault+0x1c8/0x780 [ 2242.645570][T12533] do_user_addr_fault+0x475/0x1210 [ 2242.650711][T12533] exc_page_fault+0x94/0x170 [ 2242.655350][T12533] asm_exc_page_fault+0x22/0x30 [ 2242.660211][T12533] RIP: 0033:0x7f23844374b0 [ 2242.664636][T12533] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2242.684272][T12533] RSP: 002b:00007ffcaabcb720 EFLAGS: 00010246 [ 2242.690355][T12533] RAX: 00000000410a6e3c RBX: 00007f238459c018 RCX: 0000001b2e920000 [ 2242.698341][T12533] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000000000022 [ 2242.706323][T12533] RBP: 00000000410a6e3c R08: 0000000000000e3c R09: 00000000410a6e40 [ 2242.714301][T12533] R10: 00007ffcaabcb8f0 R11: 0000000000000246 R12: 00007f2384590000 [ 2242.722279][T12533] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32756 [ 2242.730257][T12533] ? trace_user_exit.constprop.0+0x6/0x210 [ 2242.736097][T12533] 07:09:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0xf}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2242.810561][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2242.837192][T12533] memory: usage 307184kB, limit 307200kB, failcnt 31791 [ 2242.844308][T12529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2242.871493][T12533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2242.882724][T12533] Memory cgroup stats for /syz4: [ 2242.882954][T12533] anon 98304 [ 2242.882954][T12533] file 229376 [ 2242.882954][T12533] kernel 314228736 [ 2242.882954][T12533] kernel_stack 65536 [ 2242.882954][T12533] pagetables 69632 [ 2242.882954][T12533] percpu 4849664 [ 2242.882954][T12533] sock 0 [ 2242.882954][T12533] vmalloc 0 [ 2242.882954][T12533] shmem 229376 [ 2242.882954][T12533] zswap 0 [ 2242.882954][T12533] zswapped 0 [ 2242.882954][T12533] file_mapped 217088 [ 2242.882954][T12533] file_dirty 0 [ 2242.882954][T12533] file_writeback 0 [ 2242.882954][T12533] swapcached 0 [ 2242.882954][T12533] anon_thp 0 [ 2242.882954][T12533] file_thp 0 [ 2242.882954][T12533] shmem_thp 0 [ 2242.882954][T12533] inactive_anon 131072 [ 2242.882954][T12533] active_anon 196608 [ 2242.882954][T12533] inactive_file 0 [ 2242.882954][T12533] active_file 0 [ 2242.882954][T12533] unevictable 0 [ 2242.882954][T12533] slab_reclaimable 15872 [ 2242.882954][T12533] slab_unreclaimable 309191008 [ 2242.882954][T12533] slab 309206880 [ 2242.902509][T12529] bond683 (uninitialized): Released all slaves 07:09:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5f190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2243.024899][T12533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12533,uid=0 [ 2243.050668][T12533] Memory cgroup out of memory: Killed process 12533 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2243.259989][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2243.277205][T12549] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2243.277242][T12549] CPU: 1 PID: 12549 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2243.277270][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2243.277284][T12549] Call Trace: [ 2243.277292][T12549] [ 2243.277302][T12549] dump_stack_lvl+0xcd/0x134 [ 2243.277339][T12549] dump_header+0x10b/0x7f9 [ 2243.277374][T12549] oom_kill_process.cold+0x10/0x15 [ 2243.277409][T12549] out_of_memory+0x358/0x14a0 [ 2243.277445][T12549] ? find_held_lock+0x2d/0x110 [ 2243.277472][T12549] ? oom_killer_disable+0x270/0x270 [ 2243.277505][T12549] ? find_held_lock+0x2d/0x110 [ 2243.277534][T12549] mem_cgroup_out_of_memory+0x206/0x270 [ 2243.277562][T12549] ? mem_cgroup_margin+0x130/0x130 [ 2243.277586][T12549] ? lock_downgrade+0x6e0/0x6e0 [ 2243.277629][T12549] try_charge_memcg+0xf67/0x13f0 [ 2243.277664][T12549] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2243.277693][T12549] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2243.277720][T12549] ? lock_downgrade+0x6e0/0x6e0 [ 2243.277749][T12549] ? lock_downgrade+0x6e0/0x6e0 [ 2243.277775][T12549] ? rcu_read_unlock+0x9/0x60 [ 2243.277818][T12549] obj_cgroup_charge+0x2ab/0x5e0 [ 2243.277851][T12549] ? copy_process+0x4ce/0x7090 [ 2243.277877][T12549] kmem_cache_alloc_node+0x92/0x3f0 [ 2243.277904][T12549] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2243.277935][T12549] copy_process+0x4ce/0x7090 [ 2243.277969][T12549] ? __lock_acquire+0xbc3/0x56d0 [ 2243.278007][T12549] ? __cleanup_sighand+0xb0/0xb0 [ 2243.278055][T12549] kernel_clone+0xe7/0xab0 [ 2243.278082][T12549] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2243.278113][T12549] ? create_io_thread+0xe0/0xe0 [ 2243.278149][T12549] ? find_held_lock+0x2d/0x110 [ 2243.278184][T12549] ? __ct_user_exit+0xff/0x150 [ 2243.278219][T12549] __do_sys_clone+0xba/0x100 [ 2243.278247][T12549] ? kernel_clone+0xab0/0xab0 [ 2243.278289][T12549] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2243.278320][T12549] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2243.278358][T12549] do_syscall_64+0x35/0xb0 [ 2243.278385][T12549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2243.278411][T12549] RIP: 0033:0x7f238448a6a1 [ 2243.278433][T12549] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2243.278458][T12549] RSP: 002b:00007ffcaabcb6d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2243.278484][T12549] RAX: ffffffffffffffda RBX: 00007f2385553700 RCX: 00007f238448a6a1 [ 2243.278503][T12549] RDX: 00007f23855539d0 RSI: 00007f23855532f0 RDI: 00000000003d0f00 [ 2243.278520][T12549] RBP: 00007ffcaabcb920 R08: 00007f2385553700 R09: 00007f2385553700 [ 2243.278538][T12549] R10: 00007f23855539d0 R11: 0000000000000206 R12: 00007ffcaabcb78e [ 2243.278555][T12549] R13: 00007ffcaabcb78f R14: 00007f2385553300 R15: 0000000000022000 [ 2243.278593][T12549] [ 2243.281150][T12549] memory: usage 307196kB, limit 307200kB, failcnt 31829 [ 2243.281173][T12549] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2243.281193][T12549] Memory cgroup stats for /syz4: [ 2243.281349][T12549] anon 86016 [ 2243.281349][T12549] file 229376 [ 2243.281349][T12549] kernel 314253312 [ 2243.281349][T12549] kernel_stack 32768 [ 2243.281349][T12549] pagetables 65536 [ 2243.281349][T12549] percpu 4849664 [ 2243.281349][T12549] sock 0 [ 2243.281349][T12549] vmalloc 0 [ 2243.281349][T12549] shmem 229376 [ 2243.281349][T12549] zswap 0 [ 2243.281349][T12549] zswapped 0 [ 2243.281349][T12549] file_mapped 217088 [ 2243.281349][T12549] file_dirty 0 [ 2243.281349][T12549] file_writeback 0 [ 2243.281349][T12549] swapcached 0 [ 2243.281349][T12549] anon_thp 0 [ 2243.281349][T12549] file_thp 0 [ 2243.281349][T12549] shmem_thp 0 [ 2243.281349][T12549] inactive_anon 86016 07:09:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) 07:09:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1b01, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2243.281349][T12549] active_anon 196608 [ 2243.281349][T12549] inactive_file 0 [ 2243.281349][T12549] active_file 0 [ 2243.281349][T12549] unevictable 0 [ 2243.281349][T12549] slab_reclaimable 53624 [ 2243.281349][T12549] slab_unreclaimable 309206488 [ 2243.281349][T12549] slab 309260112 [ 2243.281412][T12549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12549,uid=0 [ 2243.281530][T12549] Memory cgroup out of memory: Killed process 12549 (syz-executor.4) total-vm:54512kB, anon-rss:392kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2243.789428][T12550] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2243.816373][T12550] CPU: 0 PID: 12550 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 2243.826859][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2243.836943][T12550] Call Trace: [ 2243.840247][T12550] [ 2243.843203][T12550] dump_stack_lvl+0xcd/0x134 [ 2243.847833][T12550] dump_header+0x10b/0x7f9 [ 2243.852289][T12550] oom_kill_process.cold+0x10/0x15 [ 2243.857439][T12550] out_of_memory+0x358/0x14a0 [ 2243.862154][T12550] ? find_held_lock+0x2d/0x110 [ 2243.866951][T12550] ? oom_killer_disable+0x270/0x270 [ 2243.872182][T12550] ? find_held_lock+0x2d/0x110 [ 2243.876977][T12550] mem_cgroup_out_of_memory+0x206/0x270 [ 2243.882553][T12550] ? mem_cgroup_margin+0x130/0x130 [ 2243.887688][T12550] ? lock_downgrade+0x6e0/0x6e0 [ 2243.892579][T12550] try_charge_memcg+0xf67/0x13f0 [ 2243.897551][T12550] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2243.903578][T12550] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2243.909322][T12550] ? lock_downgrade+0x6e0/0x6e0 [ 2243.914232][T12550] obj_cgroup_charge+0x2ab/0x5e0 [ 2243.919214][T12550] kmem_cache_alloc_lru+0x13e/0x720 [ 2243.924444][T12550] ? __d_alloc+0x32/0x960 [ 2243.928815][T12550] __d_alloc+0x32/0x960 [ 2243.933014][T12550] d_alloc+0x4a/0x230 [ 2243.937027][T12550] __lookup_hash+0xc8/0x180 [ 2243.941560][T12550] filename_create+0x1d6/0x4a0 [ 2243.946356][T12550] ? filename_parentat+0x5a0/0x5a0 [ 2243.951501][T12550] ? __phys_addr+0xc4/0x140 [ 2243.956030][T12550] ? __phys_addr_symbol+0x2c/0x70 [ 2243.961082][T12550] ? __check_object_size+0x2de/0x700 [ 2243.966409][T12550] do_symlinkat+0xc4/0x2e0 [ 2243.970862][T12550] ? __ia32_sys_unlink+0x110/0x110 [ 2243.976003][T12550] ? getname_flags.part.0+0x1dd/0x4f0 [ 2243.981424][T12550] __x64_sys_symlinkat+0x93/0xc0 [ 2243.986401][T12550] do_syscall_64+0x35/0xb0 [ 2243.990848][T12550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2243.996772][T12550] RIP: 0033:0x7f2384488b87 [ 2244.001216][T12550] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2244.020857][T12550] RSP: 002b:00007ffcaabcb9e8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 2244.029308][T12550] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2384488b87 [ 2244.037304][T12550] RDX: 00007f23844e33ab RSI: 00000000ffffff9c RDI: 00007ffcaabcbab0 [ 2244.045303][T12550] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcaabcb880 [ 2244.053306][T12550] R10: 00007ffcaabcb737 R11: 0000000000000206 R12: 0000000000000001 [ 2244.061307][T12550] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcaabcbab0 [ 2244.069331][T12550] [ 2244.540620][T12550] memory: usage 307108kB, limit 307200kB, failcnt 31894 [ 2244.556021][T12550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2244.572086][T12550] Memory cgroup stats for /syz4: [ 2244.572635][T12550] anon 69632 [ 2244.572635][T12550] file 229376 [ 2244.572635][T12550] kernel 314167296 [ 2244.572635][T12550] kernel_stack 32768 [ 2244.572635][T12550] pagetables 57344 [ 2244.572635][T12550] percpu 4849664 [ 2244.572635][T12550] sock 0 [ 2244.572635][T12550] vmalloc 0 [ 2244.572635][T12550] shmem 229376 [ 2244.572635][T12550] zswap 0 [ 2244.572635][T12550] zswapped 0 [ 2244.572635][T12550] file_mapped 217088 [ 2244.572635][T12550] file_dirty 0 [ 2244.572635][T12550] file_writeback 0 [ 2244.572635][T12550] swapcached 0 [ 2244.572635][T12550] anon_thp 0 [ 2244.572635][T12550] file_thp 0 [ 2244.572635][T12550] shmem_thp 0 [ 2244.572635][T12550] inactive_anon 102400 [ 2244.572635][T12550] active_anon 196608 [ 2244.572635][T12550] inactive_file 0 [ 2244.572635][T12550] active_file 0 [ 2244.572635][T12550] unevictable 0 [ 2244.572635][T12550] slab_reclaimable 13000 [ 2244.572635][T12550] slab_unreclaimable 309181392 [ 2244.572635][T12550] slab 309194392 [ 2244.721382][T12550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3638,uid=0 [ 2244.763337][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2244.786190][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2244.826011][T12550] Memory cgroup out of memory: Killed process 3638 (syz-executor.4) total-vm:50540kB, anon-rss:392kB, file-rss:9072kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 07:09:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) [ 2245.245400][T24821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:09:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 07:09:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2245.544423][T12561] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:09:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2245.650630][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2245.685973][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2245.713710][T12564] bond93 (uninitialized): Released all slaves 07:09:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2246.021273][T24821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:09:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x1900, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2246.114260][T12574] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2246.203475][T12574] bond683 (uninitialized): Released all slaves [ 2246.242568][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2246.290131][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:09:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32=r6, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x94}}, 0x0) 07:09:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61190a00}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffe0, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}}, 0x0) [ 2246.353589][T12583] bond93 (uninitialized): Released all slaves 07:09:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2246.460765][T12588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:09:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000006400001c0012000c000100626f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 2246.905356][T24821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.123042][T12591] device bridge948 entered promiscuous mode [ 2247.290055][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2247.345967][T12599] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2247.404464][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2247.674016][T24821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.665602][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2248.704677][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2248.741768][T12628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2248.753860][T12628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2248.770498][T12628] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2248.795815][T12628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2249.702802][T12616] chnl_net:caif_netlink_parms(): no params data found [ 2250.182015][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2250.202386][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2250.214213][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2250.233773][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2250.246200][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2250.264785][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2250.869748][T13232] Bluetooth: hci1: command 0x0409 tx timeout [ 2252.393515][ T6424] Bluetooth: hci5: command 0x0409 tx timeout [ 2252.953094][ T6316] Bluetooth: hci1: command 0x041b tx timeout [ 2254.472400][ T6424] Bluetooth: hci5: command 0x041b tx timeout [ 2255.042276][ T6424] Bluetooth: hci1: command 0x040f tx timeout [ 2255.406156][T24821] device hsr_slave_0 left promiscuous mode [ 2255.416165][T24821] device hsr_slave_1 left promiscuous mode [ 2255.432881][T24821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.445608][T24821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.469981][T24821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.482072][T24821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.509654][T24821] device bridge_slave_1 left promiscuous mode [ 2255.518484][T24821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2255.554975][T24821] device bridge_slave_0 left promiscuous mode [ 2255.564026][T24821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.551978][ T6316] Bluetooth: hci5: command 0x040f tx timeout [ 2257.141976][ T6316] Bluetooth: hci1: command 0x0419 tx timeout [ 2257.631435][T24821] device veth1_macvtap left promiscuous mode [ 2257.642166][T24821] device veth0_macvtap left promiscuous mode [ 2257.676268][T24821] device veth1_vlan left promiscuous mode [ 2257.683871][T24821] device veth0_vlan left promiscuous mode [ 2258.642384][ T3695] Bluetooth: hci5: command 0x0419 tx timeout [ 2277.135450][T24821] bond1417 (unregistering): Released all slaves [ 2277.248546][T24821] bond1416 (unregistering): (slave vlan1185): Releasing active interface [ 2277.333898][T24821] bond1416 (unregistering): Released all slaves [ 2277.425949][T24821] bond1415 (unregistering): (slave vlan1184): Releasing active interface [ 2277.507431][T24821] bond1415 (unregistering): Released all slaves [ 2277.614632][T24821] bond1414 (unregistering): (slave vlan1183): Releasing active interface [ 2277.701083][T24821] bond1414 (unregistering): Released all slaves [ 2277.772505][T24821] bond1413 (unregistering): (slave vlan1182): Releasing active interface [ 2277.855793][T24821] bond1413 (unregistering): Released all slaves [ 2277.960318][T24821] bond1412 (unregistering): (slave vlan1181): Releasing active interface [ 2277.984300][T24821] bond1412 (unregistering): Released all slaves [ 2278.152367][T24821] bond1411 (unregistering): (slave vlan1180): Releasing active interface [ 2278.214032][T24821] bond1411 (unregistering): Released all slaves [ 2278.234870][T24821] bond1410 (unregistering): (slave vlan1179): Releasing active interface [ 2278.412404][T24821] bond1410 (unregistering): Released all slaves [ 2278.435640][T24821] bond1409 (unregistering): (slave vlan1178): Releasing active interface [ 2278.523998][T24821] bond1409 (unregistering): Released all slaves [ 2278.614624][T24821] bond1408 (unregistering): (slave vlan1177): Releasing active interface [ 2278.725652][T24821] bond1408 (unregistering): Released all slaves [ 2278.751470][T24821] bond1407 (unregistering): (slave vlan1176): Releasing active interface [ 2278.844606][T24821] bond1407 (unregistering): Released all slaves [ 2278.871072][T24821] bond1406 (unregistering): (slave vlan1175): Releasing active interface [ 2278.960618][T24821] bond1406 (unregistering): Released all slaves [ 2279.135267][T24821] bond1405 (unregistering): (slave vlan1174): Releasing active interface [ 2279.204318][T24821] bond1405 (unregistering): Released all slaves [ 2279.232454][T24821] bond1404 (unregistering): (slave vlan1173): Releasing active interface [ 2279.304641][T24821] bond1404 (unregistering): Released all slaves [ 2279.331078][T24821] bond1403 (unregistering): (slave vlan1172): Releasing active interface [ 2279.410003][T24821] bond1403 (unregistering): Released all slaves [ 2279.505596][T24821] bond1402 (unregistering): (slave vlan1171): Releasing active interface [ 2279.589719][T24821] bond1402 (unregistering): Released all slaves [ 2279.612509][T24821] bond1401 (unregistering): (slave vlan1170): Releasing active interface [ 2279.704594][T24821] bond1401 (unregistering): Released all slaves [ 2279.725486][T24821] bond1400 (unregistering): (slave vlan1169): Releasing active interface [ 2279.816025][T24821] bond1400 (unregistering): Released all slaves [ 2279.842775][T24821] bond1399 (unregistering): (slave vlan1168): Releasing active interface [ 2279.925853][T24821] bond1399 (unregistering): Released all slaves [ 2279.952450][T24821] bond1398 (unregistering): (slave vlan1167): Releasing active interface [ 2280.043721][T24821] bond1398 (unregistering): Released all slaves [ 2280.174303][T24821] bond1397 (unregistering): Released all slaves [ 2280.200752][T24821] bond1396 (unregistering): (slave vlan1166): Releasing active interface [ 2280.293137][T24821] bond1396 (unregistering): Released all slaves [ 2280.490468][T24821] bond1395 (unregistering): (slave vlan1165): Releasing active interface [ 2280.575246][T24821] bond1395 (unregistering): Released all slaves [ 2280.658906][T24821] bond1394 (unregistering): (slave vlan1164): Releasing active interface [ 2280.743837][T24821] bond1394 (unregistering): Released all slaves [ 2280.814471][T24821] bond1393 (unregistering): Released all slaves [ 2280.841049][T24821] bond1392 (unregistering): (slave vlan1163): Releasing active interface [ 2280.920893][T24821] bond1392 (unregistering): Released all slaves [ 2281.019350][T24821] bond1391 (unregistering): Released all slaves [ 2281.042804][T24821] bond1390 (unregistering): (slave vlan1162): Releasing active interface [ 2281.133010][T24821] bond1390 (unregistering): Released all slaves [ 2281.213633][T24821] bond1389 (unregistering): Released all slaves [ 2281.244445][T24821] bond1388 (unregistering): (slave vlan1161): Releasing active interface [ 2281.344824][T24821] bond1388 (unregistering): Released all slaves [ 2281.643962][T24821] bond1387 (unregistering): Released all slaves [ 2281.663886][T24821] bond1386 (unregistering): (slave vlan1160): Releasing active interface [ 2281.744374][T24821] bond1386 (unregistering): Released all slaves [ 2281.843872][T24821] bond1385 (unregistering): Released all slaves [ 2281.872424][T24821] bond1384 (unregistering): (slave vlan1159): Releasing active interface [ 2281.945855][T24821] bond1384 (unregistering): Released all slaves [ 2282.034601][T24821] bond1383 (unregistering): Released all slaves [ 2282.055863][T24821] bond1382 (unregistering): (slave vlan1158): Releasing active interface [ 2282.085210][T24821] bond1382 (unregistering): Released all slaves [ 2282.245564][T24821] bond1381 (unregistering): Released all slaves [ 2282.273165][T24821] bond1380 (unregistering): (slave vlan1157): Releasing active interface [ 2282.355542][T24821] bond1380 (unregistering): Released all slaves [ 2282.439477][T24821] bond1379 (unregistering): Released all slaves [ 2282.462737][T24821] bond1378 (unregistering): (slave vlan1156): Releasing active interface [ 2282.562828][T24821] bond1378 (unregistering): Released all slaves [ 2282.633574][T24821] bond1377 (unregistering): Released all slaves [ 2282.662636][T24821] bond1376 (unregistering): (slave vlan1155): Releasing active interface [ 2282.739923][T24821] bond1376 (unregistering): Released all slaves [ 2282.816576][T24821] bond1375 (unregistering): Released all slaves [ 2282.839696][T24821] bond1374 (unregistering): (slave vlan1154): Releasing active interface [ 2282.885800][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.892198][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.974648][T24821] bond1374 (unregistering): Released all slaves [ 2283.075295][T24821] bond1373 (unregistering): Released all slaves [ 2283.096086][T24821] bond1372 (unregistering): (slave vlan1153): Releasing active interface [ 2283.184717][T24821] bond1372 (unregistering): Released all slaves [ 2283.281265][T24821] bond1371 (unregistering): Released all slaves [ 2283.302489][T24821] bond1370 (unregistering): (slave vlan1152): Releasing active interface [ 2283.374026][T24821] bond1370 (unregistering): Released all slaves [ 2283.444282][T24821] bond1369 (unregistering): Released all slaves [ 2283.464968][T24821] bond1368 (unregistering): (slave vlan1151): Releasing active interface [ 2283.544815][T24821] bond1368 (unregistering): Released all slaves [ 2283.634281][T24821] bond1367 (unregistering): Released all slaves [ 2283.774326][T24821] bond1366 (unregistering): Released all slaves [ 2283.800441][T24821] bond1365 (unregistering): (slave vlan1150): Releasing active interface [ 2283.895075][T24821] bond1365 (unregistering): Released all slaves [ 2283.979871][T24821] bond1364 (unregistering): Released all slaves [ 2284.003027][T24821] bond1363 (unregistering): (slave vlan1149): Releasing active interface [ 2284.105565][T24821] bond1363 (unregistering): Released all slaves [ 2284.209666][T24821] bond1362 (unregistering): Released all slaves [ 2284.232823][T24821] bond1361 (unregistering): (slave vlan1148): Releasing active interface [ 2284.326118][T24821] bond1361 (unregistering): Released all slaves [ 2284.419532][T24821] bond1360 (unregistering): Released all slaves [ 2284.444500][T24821] bond1359 (unregistering): (slave vlan1147): Releasing active interface [ 2284.534812][T24821] bond1359 (unregistering): Released all slaves [ 2284.624370][T24821] bond1358 (unregistering): Released all slaves [ 2284.653570][T24821] bond1357 (unregistering): (slave vlan1146): Releasing active interface [ 2284.775180][T24821] bond1357 (unregistering): Released all slaves [ 2284.864820][T24821] bond1356 (unregistering): Released all slaves [ 2284.906118][T24821] bond1355 (unregistering): (slave vlan1145): Releasing active interface [ 2284.975218][T24821] bond1355 (unregistering): Released all slaves [ 2285.043525][T24821] bond1354 (unregistering): Released all slaves [ 2285.072257][T24821] bond1353 (unregistering): (slave vlan1144): Releasing active interface [ 2285.144153][T24821] bond1353 (unregistering): Released all slaves [ 2285.226266][T24821] bond1352 (unregistering): Released all slaves [ 2285.254206][T24821] bond1351 (unregistering): (slave vlan1143): Releasing active interface [ 2285.334544][T24821] bond1351 (unregistering): Released all slaves [ 2285.405408][T24821] bond1350 (unregistering): Released all slaves [ 2285.425358][T24821] bond1349 (unregistering): (slave vlan1142): Releasing active interface [ 2285.544544][T24821] bond1349 (unregistering): Released all slaves [ 2285.630542][T24821] bond1348 (unregistering): Released all slaves [ 2285.653264][T24821] bond1347 (unregistering): (slave vlan1141): Releasing active interface [ 2285.723645][T24821] bond1347 (unregistering): Released all slaves [ 2285.815765][T24821] bond1346 (unregistering): Released all slaves [ 2285.844706][T24821] bond1345 (unregistering): (slave vlan1140): Releasing active interface [ 2285.932748][T24821] bond1345 (unregistering): Released all slaves [ 2286.004804][T24821] bond1344 (unregistering): Released all slaves [ 2286.031915][T24821] bond1343 (unregistering): (slave vlan1139): Releasing active interface [ 2286.144668][T24821] bond1343 (unregistering): Released all slaves [ 2286.235496][T24821] bond1342 (unregistering): Released all slaves [ 2286.261726][T24821] bond1341 (unregistering): (slave vlan1138): Releasing active interface [ 2286.346008][T24821] bond1341 (unregistering): Released all slaves [ 2286.453709][T24821] bond1340 (unregistering): Released all slaves [ 2286.480132][T24821] bond1339 (unregistering): (slave vlan1137): Releasing active interface [ 2286.556184][T24821] bond1339 (unregistering): Released all slaves [ 2286.640226][T24821] bond1338 (unregistering): Released all slaves [ 2286.662816][T24821] bond1337 (unregistering): (slave vlan1136): Releasing active interface [ 2286.744630][T24821] bond1337 (unregistering): Released all slaves [ 2286.836146][T24821] bond1336 (unregistering): Released all slaves [ 2286.863046][T24821] bond1335 (unregistering): (slave vlan1135): Releasing active interface [ 2286.962896][T24821] bond1335 (unregistering): Released all slaves [ 2287.060368][T24821] bond1334 (unregistering): Released all slaves [ 2287.084807][T24821] bond1333 (unregistering): (slave vlan1134): Releasing active interface [ 2287.189788][T24821] bond1333 (unregistering): Released all slaves [ 2287.284325][T24821] bond1332 (unregistering): Released all slaves [ 2287.304520][T24821] bond1331 (unregistering): (slave vlan1133): Releasing active interface [ 2287.394767][T24821] bond1331 (unregistering): Released all slaves [ 2287.474848][T24821] bond1330 (unregistering): Released all slaves [ 2287.495080][T24821] bond1329 (unregistering): (slave vlan1132): Releasing active interface [ 2287.595128][T24821] bond1329 (unregistering): Released all slaves [ 2287.720895][T24821] bond1328 (unregistering): Released all slaves [ 2287.745590][T24821] bond1327 (unregistering): (slave vlan1131): Releasing active interface [ 2287.830846][T24821] bond1327 (unregistering): Released all slaves [ 2287.926085][T24821] bond1326 (unregistering): Released all slaves [ 2287.954420][T24821] bond1325 (unregistering): (slave vlan1130): Releasing active interface [ 2288.060361][T24821] bond1325 (unregistering): Released all slaves [ 2288.144099][T24821] bond1324 (unregistering): Released all slaves [ 2288.173820][T24821] bond1323 (unregistering): (slave vlan1129): Releasing active interface [ 2288.244117][T24821] bond1323 (unregistering): Released all slaves [ 2288.325430][T24821] bond1322 (unregistering): Released all slaves [ 2288.345787][T24821] bond1321 (unregistering): (slave vlan1128): Releasing active interface [ 2288.424810][T24821] bond1321 (unregistering): Released all slaves [ 2288.445554][T24821] bond1320 (unregistering): (slave vlan1127): Releasing active interface [ 2288.525734][T24821] bond1320 (unregistering): Released all slaves [ 2288.589289][T24821] bond1319 (unregistering): Released all slaves [ 2288.615398][T24821] bond1318 (unregistering): (slave vlan1126): Releasing active interface [ 2288.700126][T24821] bond1318 (unregistering): Released all slaves [ 2288.729682][T24821] bond1317 (unregistering): (slave vlan1125): Releasing active interface [ 2288.821561][T24821] bond1317 (unregistering): Released all slaves [ 2288.903750][T24821] bond1316 (unregistering): Released all slaves [ 2288.994428][T24821] bond1315 (unregistering): Released all slaves [ 2289.080707][T24821] bond1314 (unregistering): Released all slaves [ 2289.103626][T24821] bond1313 (unregistering): (slave vlan1124): Releasing active interface [ 2289.180627][T24821] bond1313 (unregistering): Released all slaves [ 2289.270009][T24821] bond1312 (unregistering): Released all slaves [ 2289.294850][T24821] bond1311 (unregistering): (slave vlan1123): Releasing active interface [ 2289.414222][T24821] bond1311 (unregistering): Released all slaves [ 2289.504976][T24821] bond1310 (unregistering): Released all slaves [ 2289.531529][T24821] bond1309 (unregistering): (slave vlan1122): Releasing active interface [ 2289.655552][T24821] bond1309 (unregistering): Released all slaves [ 2289.681959][T24821] bond1308 (unregistering): (slave vlan1121): Releasing active interface [ 2289.764770][T24821] bond1308 (unregistering): Released all slaves [ 2289.790525][T24821] bond1307 (unregistering): (slave vlan1120): Releasing active interface [ 2289.894106][T24821] bond1307 (unregistering): Released all slaves [ 2289.925718][T24821] bond1306 (unregistering): (slave vlan1119): Releasing active interface [ 2290.039505][T24821] bond1306 (unregistering): Released all slaves [ 2290.062902][T24821] bond1305 (unregistering): (slave vlan1118): Releasing active interface [ 2290.165007][T24821] bond1305 (unregistering): Released all slaves [ 2290.184807][T24821] bond1304 (unregistering): (slave vlan1117): Releasing active interface [ 2290.277547][T24821] bond1304 (unregistering): Released all slaves [ 2290.301897][T24821] bond1303 (unregistering): (slave vlan1116): Releasing active interface [ 2290.338331][T24821] bond1303 (unregistering): Released all slaves [ 2290.466342][T24821] bond1302 (unregistering): (slave vlan1115): Releasing active interface [ 2290.556831][T24821] bond1302 (unregistering): Released all slaves [ 2290.582334][T24821] bond1301 (unregistering): (slave vlan1114): Releasing active interface [ 2290.654086][T24821] bond1301 (unregistering): Released all slaves [ 2290.676086][T24821] bond1300 (unregistering): (slave vlan1113): Releasing active interface [ 2290.830808][T24821] bond1300 (unregistering): Released all slaves [ 2290.852204][T24821] bond1299 (unregistering): (slave vlan1112): Releasing active interface [ 2290.937321][T24821] bond1299 (unregistering): Released all slaves [ 2291.051909][T24821] bond1298 (unregistering): Released all slaves [ 2291.072412][T24821] bond1297 (unregistering): (slave vlan1111): Releasing active interface [ 2291.156956][T24821] bond1297 (unregistering): Released all slaves [ 2291.182416][T24821] bond1296 (unregistering): (slave vlan1110): Releasing active interface [ 2291.380241][T24821] bond1296 (unregistering): Released all slaves [ 2291.404476][T24821] bond1295 (unregistering): (slave vlan1109): Releasing active interface [ 2291.487848][T24821] bond1295 (unregistering): Released all slaves [ 2291.512326][T24821] bond1294 (unregistering): (slave vlan1108): Releasing active interface [ 2291.605728][T24821] bond1294 (unregistering): Released all slaves [ 2291.632270][T24821] bond1293 (unregistering): (slave vlan1107): Releasing active interface [ 2291.713748][T24821] bond1293 (unregistering): Released all slaves [ 2291.826264][T24821] bond1292 (unregistering): (slave vlan1106): Releasing active interface [ 2291.906171][T24821] bond1292 (unregistering): Released all slaves [ 2291.933276][T24821] bond1291 (unregistering): (slave vlan1105): Releasing active interface [ 2292.050446][T24821] bond1291 (unregistering): Released all slaves [ 2292.072959][T24821] bond1290 (unregistering): (slave vlan1104): Releasing active interface [ 2292.170896][T24821] bond1290 (unregistering): Released all slaves [ 2292.194324][T24821] bond1289 (unregistering): (slave vlan1103): Releasing active interface [ 2292.276167][T24821] bond1289 (unregistering): Released all slaves [ 2292.380516][T24821] bond1288 (unregistering): Released all slaves [ 2292.404127][T24821] bond1287 (unregistering): (slave vlan1102): Releasing active interface [ 2292.474520][T24821] bond1287 (unregistering): Released all slaves [ 2292.575553][T24821] bond1286 (unregistering): Released all slaves [ 2292.605321][T24821] bond1285 (unregistering): (slave vlan1101): Releasing active interface [ 2292.674305][T24821] bond1285 (unregistering): Released all slaves [ 2292.694630][T24821] bond1284 (unregistering): (slave vlan1100): Releasing active interface [ 2292.790455][T24821] bond1284 (unregistering): Released all slaves [ 2292.813428][T24821] bond1283 (unregistering): (slave vlan1099): Releasing active interface [ 2292.935123][T24821] bond1283 (unregistering): Released all slaves [ 2292.962172][T24821] bond1282 (unregistering): (slave vlan1098): Releasing active interface [ 2293.034506][T24821] bond1282 (unregistering): Released all slaves [ 2293.060844][T24821] bond1281 (unregistering): (slave vlan1097): Releasing active interface [ 2293.170811][T24821] bond1281 (unregistering): Released all slaves [ 2293.216145][T24821] bond1280 (unregistering): (slave vlan1096): Releasing active interface [ 2293.356721][T24821] bond1280 (unregistering): Released all slaves [ 2293.417156][T24821] bond1279 (unregistering): (slave vlan1095): Releasing active interface [ 2293.520954][T24821] bond1279 (unregistering): Released all slaves [ 2293.576079][T24821] bond1278 (unregistering): (slave vlan1094): Releasing active interface [ 2293.764403][T24821] bond1278 (unregistering): Released all slaves [ 2293.813678][T24821] bond1277 (unregistering): (slave vlan1093): Releasing active interface [ 2293.929725][T24821] bond1277 (unregistering): Released all slaves [ 2293.954784][T24821] bond1276 (unregistering): (slave vlan1092): Releasing active interface [ 2294.064884][T24821] bond1276 (unregistering): Released all slaves [ 2294.094024][T24821] bond1275 (unregistering): (slave vlan1091): Releasing active interface [ 2294.175675][T24821] bond1275 (unregistering): Released all slaves [ 2294.338863][T24821] bond1274 (unregistering): (slave vlan1090): Releasing active interface [ 2294.419859][T24821] bond1274 (unregistering): Released all slaves [ 2294.442632][T24821] bond1273 (unregistering): (slave vlan1089): Releasing active interface [ 2294.534662][T24821] bond1273 (unregistering): Released all slaves [ 2294.555110][T24821] bond1272 (unregistering): (slave vlan1088): Releasing active interface [ 2294.634915][T24821] bond1272 (unregistering): Released all slaves [ 2294.674564][T24821] bond1271 (unregistering): (slave vlan1087): Releasing active interface [ 2294.784248][T24821] bond1271 (unregistering): Released all slaves [ 2294.810259][T24821] bond1270 (unregistering): (slave vlan1086): Releasing active interface [ 2294.895200][T24821] bond1270 (unregistering): Released all slaves [ 2294.923100][T24821] bond1269 (unregistering): (slave vlan1085): Releasing active interface [ 2295.035266][T24821] bond1269 (unregistering): Released all slaves [ 2295.114345][T24821] bond1268 (unregistering): Released all slaves [ 2295.140591][T24821] bond1267 (unregistering): (slave vlan1084): Releasing active interface [ 2295.230376][T24821] bond1267 (unregistering): Released all slaves [ 2295.253322][T24821] bond1266 (unregistering): (slave vlan1083): Releasing active interface [ 2295.363888][T24821] bond1266 (unregistering): Released all slaves [ 2295.494223][T24821] bond1265 (unregistering): Released all slaves [ 2295.631353][T24821] bond1264 (unregistering): Released all slaves [ 2295.655140][T24821] bond1263 (unregistering): (slave vlan1082): Releasing active interface [ 2295.753329][T24821] bond1263 (unregistering): Released all slaves [ 2295.815932][T24821] bond1262 (unregistering): Released all slaves [ 2295.960870][T24821] bond1261 (unregistering): Released all slaves [ 2295.984686][T24821] bond1260 (unregistering): (slave vlan1081): Releasing active interface [ 2296.067489][T24821] bond1260 (unregistering): Released all slaves [ 2296.154719][T24821] bond1259 (unregistering): Released all slaves [ 2296.175923][T24821] bond1258 (unregistering): (slave vlan1080): Releasing active interface [ 2296.264107][T24821] bond1258 (unregistering): Released all slaves [ 2296.284063][T24821] bond1257 (unregistering): (slave vlan1079): Releasing active interface [ 2296.374159][T24821] bond1257 (unregistering): Released all slaves [ 2296.456412][T24821] bond1256 (unregistering): (slave vlan1078): Releasing active interface [ 2296.525996][T24821] bond1256 (unregistering): Released all slaves [ 2296.552134][T24821] bond1255 (unregistering): (slave vlan1077): Releasing active interface [ 2296.650415][T24821] bond1255 (unregistering): Released all slaves [ 2296.672930][T24821] bond1254 (unregistering): (slave vlan1076): Releasing active interface [ 2296.744468][T24821] bond1254 (unregistering): Released all slaves [ 2296.771501][T24821] bond1253 (unregistering): (slave vlan1075): Releasing active interface [ 2296.880374][T24821] bond1253 (unregistering): Released all slaves [ 2296.995089][T24821] bond1252 (unregistering): (slave vlan1074): Releasing active interface [ 2297.085526][T24821] bond1252 (unregistering): Released all slaves [ 2297.112518][T24821] bond1251 (unregistering): (slave vlan1073): Releasing active interface [ 2297.185824][T24821] bond1251 (unregistering): Released all slaves [ 2297.281062][T24821] bond1250 (unregistering): (slave vlan1072): Releasing active interface [ 2297.374090][T24821] bond1250 (unregistering): Released all slaves [ 2297.492313][T24821] bond1249 (unregistering): (slave vlan1071): Releasing active interface [ 2297.603872][T24821] bond1249 (unregistering): Released all slaves [ 2297.630015][T24821] bond1248 (unregistering): (slave vlan1070): Releasing active interface [ 2297.706751][T24821] bond1248 (unregistering): Released all slaves [ 2297.732068][T24821] bond1247 (unregistering): (slave vlan1069): Releasing active interface [ 2297.825495][T24821] bond1247 (unregistering): Released all slaves [ 2297.846142][T24821] bond1246 (unregistering): (slave vlan1068): Releasing active interface [ 2297.914472][T24821] bond1246 (unregistering): Released all slaves [ 2297.997159][T24821] bond1245 (unregistering): (slave vlan1067): Releasing active interface [ 2298.075580][T24821] bond1245 (unregistering): Released all slaves [ 2298.101312][T24821] bond1244 (unregistering): (slave vlan1066): Releasing active interface [ 2298.132016][T24821] bond1244 (unregistering): Released all slaves [ 2298.189838][T24821] bond1243 (unregistering): (slave vlan1065): Releasing active interface [ 2298.270936][T24821] bond1243 (unregistering): Released all slaves [ 2298.354960][T24821] bond1242 (unregistering): (slave vlan1064): Releasing active interface [ 2298.446029][T24821] bond1242 (unregistering): Released all slaves [ 2298.531286][T24821] bond1241 (unregistering): (slave vlan1063): Releasing active interface [ 2298.600684][T24821] bond1241 (unregistering): Released all slaves [ 2298.623217][T24821] bond1240 (unregistering): (slave vlan1062): Releasing active interface [ 2298.715161][T24821] bond1240 (unregistering): Released all slaves [ 2298.741082][T24821] bond1239 (unregistering): (slave vlan1061): Releasing active interface [ 2298.826166][T24821] bond1239 (unregistering): Released all slaves [ 2298.852741][T24821] bond1238 (unregistering): (slave vlan1060): Releasing active interface [ 2298.954946][T24821] bond1238 (unregistering): Released all slaves [ 2298.975264][T24821] bond1237 (unregistering): (slave vlan1059): Releasing active interface [ 2299.043724][T24821] bond1237 (unregistering): Released all slaves [ 2299.073202][T24821] bond1236 (unregistering): (slave vlan1058): Releasing active interface [ 2299.134219][T24821] bond1236 (unregistering): Released all slaves [ 2299.259903][T24821] bond1235 (unregistering): (slave vlan1057): Releasing active interface [ 2299.344073][T24821] bond1235 (unregistering): Released all slaves [ 2299.373558][T24821] bond1234 (unregistering): (slave vlan1056): Releasing active interface [ 2299.445161][T24821] bond1234 (unregistering): Released all slaves [ 2299.474445][T24821] bond1233 (unregistering): (slave vlan1055): Releasing active interface [ 2299.555094][T24821] bond1233 (unregistering): Released all slaves [ 2299.583724][T24821] bond1232 (unregistering): (slave vlan1054): Releasing active interface [ 2299.663077][T24821] bond1232 (unregistering): Released all slaves [ 2299.685953][T24821] bond1231 (unregistering): (slave vlan1053): Releasing active interface [ 2299.780379][T24821] bond1231 (unregistering): Released all slaves [ 2299.802050][T24821] bond1230 (unregistering): (slave vlan1052): Releasing active interface [ 2299.887002][T24821] bond1230 (unregistering): Released all slaves [ 2299.913053][T24821] bond1229 (unregistering): (slave vlan1051): Releasing active interface [ 2300.000539][T24821] bond1229 (unregistering): Released all slaves [ 2300.025582][T24821] bond1228 (unregistering): (slave vlan1050): Releasing active interface [ 2300.124427][T24821] bond1228 (unregistering): Released all slaves [ 2300.153683][T24821] bond1227 (unregistering): (slave vlan1049): Releasing active interface [ 2300.224402][T24821] bond1227 (unregistering): Released all slaves [ 2300.255139][T24821] bond1226 (unregistering): (slave vlan1048): Releasing active interface [ 2300.325041][T24821] bond1226 (unregistering): Released all slaves [ 2300.353176][T24821] bond1225 (unregistering): (slave vlan1047): Releasing active interface [ 2300.424497][T24821] bond1225 (unregistering): Released all slaves [ 2300.453726][T24821] bond1224 (unregistering): (slave vlan1046): Releasing active interface [ 2300.575952][T24821] bond1224 (unregistering): Released all slaves [ 2300.604911][T24821] bond1223 (unregistering): (slave vlan1045): Releasing active interface [ 2300.674590][T24821] bond1223 (unregistering): Released all slaves [ 2300.703445][T24821] bond1222 (unregistering): (slave vlan1044): Releasing active interface [ 2300.785992][T24821] bond1222 (unregistering): Released all slaves [ 2300.820332][T24821] bond1221 (unregistering): (slave vlan1043): Releasing active interface [ 2300.905866][T24821] bond1221 (unregistering): Released all slaves [ 2300.936018][T24821] bond1220 (unregistering): (slave vlan1042): Releasing active interface [ 2301.015802][T24821] bond1220 (unregistering): Released all slaves [ 2301.050179][T24821] bond1219 (unregistering): (slave vlan1041): Releasing active interface [ 2301.155707][T24821] bond1219 (unregistering): Released all slaves [ 2301.294096][T24821] bond1218 (unregistering): (slave vlan1040): Releasing active interface [ 2301.389078][T24821] bond1218 (unregistering): Released all slaves [ 2301.412261][T24821] bond1217 (unregistering): (slave vlan1039): Releasing active interface [ 2301.523007][T24821] bond1217 (unregistering): Released all slaves [ 2301.550601][T24821] bond1216 (unregistering): (slave vlan1038): Releasing active interface [ 2301.634277][T24821] bond1216 (unregistering): Released all slaves [ 2301.654193][T24821] bond1215 (unregistering): (slave vlan1037): Releasing active interface [ 2301.730809][T24821] bond1215 (unregistering): Released all slaves [ 2301.754232][T24821] bond1214 (unregistering): (slave vlan1036): Releasing active interface [ 2301.823875][T24821] bond1214 (unregistering): Released all slaves [ 2301.855157][T24821] bond1213 (unregistering): (slave vlan1035): Releasing active interface [ 2301.931938][T24821] bond1213 (unregistering): Released all slaves [ 2301.956013][T24821] bond1212 (unregistering): (slave vlan1034): Releasing active interface [ 2302.045735][T24821] bond1212 (unregistering): Released all slaves [ 2302.072283][T24821] bond1211 (unregistering): (slave vlan1033): Releasing active interface [ 2302.195704][T24821] bond1211 (unregistering): Released all slaves [ 2302.305360][T24821] bond1210 (unregistering): (slave vlan1032): Releasing active interface [ 2302.396136][T24821] bond1210 (unregistering): Released all slaves [ 2302.421747][T24821] bond1209 (unregistering): (slave vlan1031): Releasing active interface [ 2302.514387][T24821] bond1209 (unregistering): Released all slaves [ 2302.541968][T24821] bond1208 (unregistering): (slave vlan1030): Releasing active interface [ 2302.646258][T24821] bond1208 (unregistering): Released all slaves [ 2302.668920][T24821] bond1207 (unregistering): (slave vlan1029): Releasing active interface [ 2302.809936][T24821] bond1207 (unregistering): Released all slaves [ 2302.832811][T24821] bond1206 (unregistering): (slave vlan1028): Releasing active interface [ 2302.915926][T24821] bond1206 (unregistering): Released all slaves [ 2302.942665][T24821] bond1205 (unregistering): (slave vlan1027): Releasing active interface [ 2303.044912][T24821] bond1205 (unregistering): Released all slaves [ 2303.065162][T24821] bond1204 (unregistering): (slave vlan1026): Releasing active interface [ 2303.147576][T24821] bond1204 (unregistering): Released all slaves [ 2303.171705][T24821] bond1203 (unregistering): (slave vlan1025): Releasing active interface [ 2303.253785][T24821] bond1203 (unregistering): Released all slaves [ 2303.279187][T24821] bond1202 (unregistering): (slave vlan1024): Releasing active interface [ 2303.369314][T24821] bond1202 (unregistering): Released all slaves [ 2303.392200][T24821] bond1201 (unregistering): (slave vlan1023): Releasing active interface [ 2303.502177][T24821] bond1201 (unregistering): Released all slaves [ 2303.525295][T24821] bond1200 (unregistering): (slave vlan1022): Releasing active interface [ 2303.605483][T24821] bond1200 (unregistering): Released all slaves [ 2303.630847][T24821] bond1199 (unregistering): (slave vlan1021): Releasing active interface [ 2303.724100][T24821] bond1199 (unregistering): Released all slaves [ 2303.750487][T24821] bond1198 (unregistering): (slave vlan1020): Releasing active interface [ 2303.845717][T24821] bond1198 (unregistering): Released all slaves [ 2303.949065][T24821] bond1197 (unregistering): Released all slaves [ 2303.972031][T24821] bond1196 (unregistering): (slave vlan1019): Releasing active interface [ 2304.055244][T24821] bond1196 (unregistering): Released all slaves [ 2304.184003][T24821] bond1195 (unregistering): (slave vlan1018): Releasing active interface [ 2304.265423][T24821] bond1195 (unregistering): Released all slaves [ 2304.291641][T24821] bond1194 (unregistering): (slave vlan1017): Releasing active interface [ 2304.380564][T24821] bond1194 (unregistering): Released all slaves [ 2304.403020][T24821] bond1193 (unregistering): (slave vlan1016): Releasing active interface [ 2304.489642][T24821] bond1193 (unregistering): Released all slaves [ 2304.655416][T24821] bond1192 (unregistering): (slave vlan1015): Releasing active interface [ 2304.754042][T24821] bond1192 (unregistering): Released all slaves [ 2304.782659][T24821] bond1191 (unregistering): (slave vlan1014): Releasing active interface [ 2304.853275][T24821] bond1191 (unregistering): Released all slaves [ 2304.881682][T24821] bond1190 (unregistering): (slave vlan1013): Releasing active interface [ 2304.963262][T24821] bond1190 (unregistering): Released all slaves [ 2304.990816][T24821] bond1189 (unregistering): (slave vlan1012): Releasing active interface [ 2305.074331][T24821] bond1189 (unregistering): Released all slaves [ 2305.100612][T24821] bond1188 (unregistering): (slave vlan1011): Releasing active interface [ 2305.200838][T24821] bond1188 (unregistering): Released all slaves [ 2305.225826][T24821] bond1187 (unregistering): (slave vlan1010): Releasing active interface [ 2305.295676][T24821] bond1187 (unregistering): Released all slaves [ 2305.374124][T24821] bond1186 (unregistering): Released all slaves [ 2305.394300][T24821] bond1185 (unregistering): (slave vlan1009): Releasing active interface [ 2305.486017][T24821] bond1185 (unregistering): Released all slaves [ 2305.512128][T24821] bond1184 (unregistering): (slave vlan1008): Releasing active interface [ 2305.594839][T24821] bond1184 (unregistering): Released all slaves [ 2305.618764][T24821] bond1183 (unregistering): (slave vlan1007): Releasing active interface [ 2305.704722][T24821] bond1183 (unregistering): Released all slaves [ 2305.725261][T24821] bond1182 (unregistering): (slave vlan1006): Releasing active interface [ 2305.813989][T24821] bond1182 (unregistering): Released all slaves [ 2305.834482][T24821] bond1181 (unregistering): (slave vlan1005): Releasing active interface [ 2305.923148][T24821] bond1181 (unregistering): Released all slaves [ 2305.945955][T24821] bond1180 (unregistering): (slave vlan1004): Releasing active interface [ 2306.045899][T24821] bond1180 (unregistering): Released all slaves [ 2306.081912][T24821] bond1179 (unregistering): (slave vlan1003): Releasing active interface [ 2306.156889][T24821] bond1179 (unregistering): Released all slaves [ 2306.181454][T24821] bond1178 (unregistering): (slave vlan1002): Releasing active interface [ 2306.287833][T24821] bond1178 (unregistering): Released all slaves [ 2306.312084][T24821] bond1177 (unregistering): (slave vlan1001): Releasing active interface [ 2306.414459][T24821] bond1177 (unregistering): Released all slaves [ 2306.435855][T24821] bond1176 (unregistering): (slave vlan1000): Releasing active interface [ 2306.534101][T24821] bond1176 (unregistering): Released all slaves [ 2306.562873][T24821] bond1175 (unregistering): (slave vlan999): Releasing active interface [ 2306.651913][T24821] bond1175 (unregistering): Released all slaves [ 2306.794951][T24821] bond1174 (unregistering): (slave vlan998): Releasing active interface [ 2306.884487][T24821] bond1174 (unregistering): Released all slaves [ 2306.910349][T24821] bond1173 (unregistering): (slave vlan997): Releasing active interface [ 2306.985539][T24821] bond1173 (unregistering): Released all slaves [ 2307.012980][T24821] bond1172 (unregistering): (slave vlan996): Releasing active interface [ 2307.105483][T24821] bond1172 (unregistering): Released all slaves [ 2307.131816][T24821] bond1171 (unregistering): (slave vlan995): Releasing active interface [ 2307.219372][T24821] bond1171 (unregistering): Released all slaves [ 2307.242533][T24821] bond1170 (unregistering): (slave vlan994): Releasing active interface [ 2307.320094][T24821] bond1170 (unregistering): Released all slaves [ 2307.344104][T24821] bond1169 (unregistering): (slave vlan993): Releasing active interface [ 2307.434463][T24821] bond1169 (unregistering): Released all slaves [ 2307.459947][T24821] bond1168 (unregistering): (slave vlan992): Releasing active interface [ 2307.583975][T24821] bond1168 (unregistering): Released all slaves [ 2307.610107][T24821] bond1167 (unregistering): (slave vlan991): Releasing active interface [ 2307.694145][T24821] bond1167 (unregistering): Released all slaves [ 2307.720972][T24821] bond1166 (unregistering): (slave vlan990): Releasing active interface [ 2307.829670][T24821] bond1166 (unregistering): Released all slaves [ 2307.854853][T24821] bond1165 (unregistering): (slave vlan989): Releasing active interface [ 2307.955684][T24821] bond1165 (unregistering): Released all slaves [ 2307.985191][T24821] bond1164 (unregistering): (slave vlan988): Releasing active interface [ 2308.063160][T24821] bond1164 (unregistering): Released all slaves [ 2308.092126][T24821] bond1163 (unregistering): (slave vlan987): Releasing active interface [ 2308.164220][T24821] bond1163 (unregistering): Released all slaves [ 2308.191808][T24821] bond1162 (unregistering): (slave vlan986): Releasing active interface [ 2308.285464][T24821] bond1162 (unregistering): Released all slaves [ 2308.313461][T24821] bond1161 (unregistering): (slave vlan985): Releasing active interface [ 2308.400580][T24821] bond1161 (unregistering): Released all slaves [ 2308.425596][T24821] bond1160 (unregistering): (slave vlan984): Releasing active interface [ 2308.545228][T24821] bond1160 (unregistering): Released all slaves [ 2308.571870][T24821] bond1159 (unregistering): (slave vlan983): Releasing active interface [ 2308.644914][T24821] bond1159 (unregistering): Released all slaves [ 2308.672841][T24821] bond1158 (unregistering): (slave vlan982): Releasing active interface [ 2308.743432][T24821] bond1158 (unregistering): Released all slaves [ 2308.771011][T24821] bond1157 (unregistering): (slave vlan981): Releasing active interface [ 2308.862245][T24821] bond1157 (unregistering): Released all slaves [ 2308.885008][T24821] bond1156 (unregistering): (slave vlan980): Releasing active interface [ 2308.980103][T24821] bond1156 (unregistering): Released all slaves [ 2309.003992][T24821] bond1155 (unregistering): (slave vlan979): Releasing active interface [ 2309.086723][T24821] bond1155 (unregistering): Released all slaves [ 2309.112826][T24821] bond1154 (unregistering): (slave vlan978): Releasing active interface [ 2309.220730][T24821] bond1154 (unregistering): Released all slaves [ 2309.243334][T24821] bond1153 (unregistering): (slave vlan977): Releasing active interface [ 2309.327428][T24821] bond1153 (unregistering): Released all slaves [ 2309.351321][T24821] bond1152 (unregistering): (slave vlan976): Releasing active interface [ 2309.424999][T24821] bond1152 (unregistering): Released all slaves [ 2309.445412][T24821] bond1151 (unregistering): (slave vlan975): Releasing active interface [ 2309.526007][T24821] bond1151 (unregistering): Released all slaves [ 2309.594530][T24821] bond1150 (unregistering): (slave vlan974): Releasing active interface [ 2309.750558][T24821] bond1150 (unregistering): Released all slaves [ 2309.773293][T24821] bond1149 (unregistering): (slave vlan973): Releasing active interface [ 2309.857755][T24821] bond1149 (unregistering): Released all slaves [ 2309.881643][T24821] bond1148 (unregistering): (slave vlan972): Releasing active interface [ 2309.985390][T24821] bond1148 (unregistering): Released all slaves [ 2310.006031][T24821] bond1147 (unregistering): (slave vlan971): Releasing active interface [ 2310.034413][T24821] bond1147 (unregistering): Released all slaves [ 2310.136934][T24821] bond1146 (unregistering): (slave vlan970): Releasing active interface [ 2310.215223][T24821] bond1146 (unregistering): Released all slaves [ 2310.240928][T24821] bond1145 (unregistering): (slave vlan969): Releasing active interface [ 2310.324090][T24821] bond1145 (unregistering): Released all slaves [ 2310.349232][T24821] bond1144 (unregistering): (slave vlan968): Releasing active interface [ 2310.464495][T24821] bond1144 (unregistering): Released all slaves [ 2310.489702][T24821] bond1143 (unregistering): (slave vlan967): Releasing active interface [ 2310.574107][T24821] bond1143 (unregistering): Released all slaves [ 2310.599812][T24821] bond1142 (unregistering): (slave vlan966): Releasing active interface [ 2310.705324][T24821] bond1142 (unregistering): Released all slaves [ 2310.733737][T24821] bond1141 (unregistering): (slave vlan965): Releasing active interface [ 2310.805664][T24821] bond1141 (unregistering): Released all slaves [ 2310.833149][T24821] bond1140 (unregistering): (slave vlan964): Releasing active interface [ 2310.924069][T24821] bond1140 (unregistering): Released all slaves [ 2310.951565][T24821] bond1139 (unregistering): (slave vlan963): Releasing active interface [ 2311.054496][T24821] bond1139 (unregistering): Released all slaves [ 2311.082050][T24821] bond1138 (unregistering): (slave vlan962): Releasing active interface [ 2311.112818][T24821] bond1138 (unregistering): Released all slaves [ 2311.180583][T24821] bond1137 (unregistering): (slave vlan961): Releasing active interface [ 2311.209825][T24821] bond1137 (unregistering): Released all slaves [ 2311.296174][T24821] bond1136 (unregistering): (slave vlan960): Releasing active interface [ 2311.364282][T24821] bond1136 (unregistering): Released all slaves [ 2311.445161][T24821] bond1135 (unregistering): Released all slaves [ 2311.501629][T24821] bond1134 (unregistering): (slave vlan959): Releasing active interface [ 2311.594779][T24821] bond1134 (unregistering): Released all slaves [ 2311.689926][T24821] bond1133 (unregistering): (slave vlan958): Releasing active interface [ 2311.794435][T24821] bond1133 (unregistering): Released all slaves [ 2311.832506][T24821] bond1132 (unregistering): (slave vlan957): Releasing active interface [ 2311.936163][T24821] bond1132 (unregistering): Released all slaves [ 2311.962659][T24821] bond1131 (unregistering): (slave vlan956): Releasing active interface [ 2312.044439][T24821] bond1131 (unregistering): Released all slaves [ 2312.074044][T24821] bond1130 (unregistering): (slave vlan955): Releasing active interface [ 2312.173726][T24821] bond1130 (unregistering): Released all slaves [ 2312.200013][T24821] bond1129 (unregistering): (slave vlan954): Releasing active interface [ 2312.271172][T24821] bond1129 (unregistering): Released all slaves [ 2312.295218][T24821] bond1128 (unregistering): (slave vlan953): Releasing active interface [ 2312.385038][T24821] bond1128 (unregistering): Released all slaves [ 2312.411894][T24821] bond1127 (unregistering): (slave vlan952): Releasing active interface [ 2312.484975][T24821] bond1127 (unregistering): Released all slaves [ 2312.513868][T24821] bond1126 (unregistering): (slave vlan951): Releasing active interface [ 2312.601401][T24821] bond1126 (unregistering): Released all slaves [ 2312.685237][T24821] bond1125 (unregistering): Released all slaves [ 2312.705212][T24821] bond1124 (unregistering): (slave vlan950): Releasing active interface [ 2312.823856][T24821] bond1124 (unregistering): Released all slaves [ 2312.862305][T24821] bond1123 (unregistering): (slave vlan949): Releasing active interface [ 2312.974294][T24821] bond1123 (unregistering): Released all slaves [ 2313.011687][T24821] bond1122 (unregistering): (slave vlan948): Releasing active interface [ 2313.123706][T24821] bond1122 (unregistering): Released all slaves [ 2313.164087][T24821] bond1121 (unregistering): (slave vlan947): Releasing active interface [ 2313.266917][T24821] bond1121 (unregistering): Released all slaves [ 2313.291266][T24821] bond1120 (unregistering): (slave vlan946): Releasing active interface [ 2313.376185][T24821] bond1120 (unregistering): Released all slaves [ 2313.395900][T24821] bond1119 (unregistering): (slave vlan945): Releasing active interface [ 2313.474145][T24821] bond1119 (unregistering): Released all slaves [ 2313.495312][T24821] bond1118 (unregistering): (slave vlan944): Releasing active interface [ 2313.565954][T24821] bond1118 (unregistering): Released all slaves [ 2313.585973][T24821] bond1117 (unregistering): (slave vlan943): Releasing active interface [ 2313.684110][T24821] bond1117 (unregistering): Released all slaves [ 2313.797562][T24821] bond1116 (unregistering): Released all slaves [ 2313.844614][T24821] bond1115 (unregistering): (slave vlan942): Releasing active interface [ 2313.963366][T24821] bond1115 (unregistering): Released all slaves [ 2314.031156][T24821] bond1114 (unregistering): (slave vlan941): Releasing active interface [ 2314.155442][T24821] bond1114 (unregistering): Released all slaves [ 2314.234840][T24821] bond1113 (unregistering): (slave vlan940): Releasing active interface [ 2314.330401][ T3649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2314.348985][ T3649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2314.363824][ T3649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2314.374773][ T3649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2314.392426][T24821] bond1113 (unregistering): Released all slaves [ 2314.401851][ T3649] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2314.412640][ T3649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2314.453767][T24821] bond1112 (unregistering): (slave vlan939): Releasing active interface [ 2314.535652][T24821] bond1112 (unregistering): Released all slaves [ 2314.555933][T24821] bond1111 (unregistering): (slave vlan938): Releasing active interface [ 2314.644783][T24821] bond1111 (unregistering): Released all slaves [ 2314.725562][T24821] bond1110 (unregistering): (slave vlan937): Releasing active interface [ 2314.813556][T24821] bond1110 (unregistering): Released all slaves [ 2314.840689][T24821] bond1109 (unregistering): (slave vlan936): Releasing active interface [ 2314.915271][T24821] bond1109 (unregistering): Released all slaves [ 2314.944981][T24821] bond1108 (unregistering): (slave vlan935): Releasing active interface [ 2315.025668][T24821] bond1108 (unregistering): Released all slaves [ 2315.070221][T24821] bond1107 (unregistering): (slave vlan934): Releasing active interface [ 2315.143223][T24821] bond1107 (unregistering): Released all slaves [ 2315.171348][T24821] bond1106 (unregistering): (slave vlan933): Releasing active interface [ 2315.264493][T24821] bond1106 (unregistering): Released all slaves [ 2315.312323][T24821] bond1105 (unregistering): (slave vlan932): Releasing active interface [ 2315.445285][T24821] bond1105 (unregistering): Released all slaves [ 2315.494122][T24821] bond1104 (unregistering): (slave vlan931): Releasing active interface [ 2315.573770][T24821] bond1104 (unregistering): Released all slaves [ 2315.601884][T24821] bond1103 (unregistering): (slave vlan930): Releasing active interface [ 2315.674445][T24821] bond1103 (unregistering): Released all slaves [ 2315.700646][T24821] bond1102 (unregistering): (slave vlan929): Releasing active interface [ 2315.786253][T24821] bond1102 (unregistering): Released all slaves [ 2315.864191][T24821] bond1101 (unregistering): (slave vlan928): Releasing active interface [ 2315.951126][T24821] bond1101 (unregistering): Released all slaves [ 2316.026886][T24821] bond1100 (unregistering): (slave vlan927): Releasing active interface [ 2316.113688][T24821] bond1100 (unregistering): Released all slaves [ 2316.141259][T24821] bond1099 (unregistering): (slave vlan926): Releasing active interface [ 2316.234435][T24821] bond1099 (unregistering): Released all slaves [ 2316.254221][T24821] bond1098 (unregistering): (slave vlan925): Releasing active interface [ 2316.374857][T24821] bond1098 (unregistering): Released all slaves [ 2316.394862][T24821] bond1097 (unregistering): (slave vlan924): Releasing active interface [ 2316.469332][ T3695] Bluetooth: hci6: command 0x0409 tx timeout [ 2316.497448][T24821] bond1097 (unregistering): Released all slaves [ 2316.521873][T24821] bond1096 (unregistering): (slave vlan923): Releasing active interface [ 2316.565659][T12628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2316.580849][T12628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2316.592175][T12628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2316.605267][T12628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2316.615612][T12628] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2316.630975][T24821] bond1096 (unregistering): Released all slaves [ 2316.640563][T12628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2316.684915][T24821] bond1095 (unregistering): (slave vlan922): Releasing active interface [ 2316.785642][T24821] bond1095 (unregistering): Released all slaves [ 2316.812353][T24821] bond1094 (unregistering): (slave vlan921): Releasing active interface [ 2316.894172][T24821] bond1094 (unregistering): Released all slaves [ 2316.913853][T24821] bond1093 (unregistering): (slave vlan920): Releasing active interface [ 2317.044922][T24821] bond1093 (unregistering): Released all slaves [ 2317.071457][T24821] bond1092 (unregistering): (slave vlan919): Releasing active interface [ 2317.166041][T24821] bond1092 (unregistering): Released all slaves [ 2317.191536][T24821] bond1091 (unregistering): (slave vlan918): Releasing active interface [ 2317.264961][T24821] bond1091 (unregistering): Released all slaves [ 2317.292058][T24821] bond1090 (unregistering): (slave vlan917): Releasing active interface [ 2317.386237][T24821] bond1090 (unregistering): Released all slaves [ 2317.411164][T24821] bond1089 (unregistering): (slave vlan916): Releasing active interface [ 2317.525766][T24821] bond1089 (unregistering): Released all slaves [ 2317.551236][T24821] bond1088 (unregistering): (slave vlan915): Releasing active interface [ 2317.623417][T24821] bond1088 (unregistering): Released all slaves [ 2317.651187][T24821] bond1087 (unregistering): (slave vlan914): Releasing active interface [ 2317.735397][T24821] bond1087 (unregistering): Released all slaves [ 2317.755249][T24821] bond1086 (unregistering): (slave vlan913): Releasing active interface [ 2317.846572][T24821] bond1086 (unregistering): Released all slaves [ 2317.870919][T24821] bond1085 (unregistering): (slave vlan912): Releasing active interface [ 2317.955243][T24821] bond1085 (unregistering): Released all slaves [ 2317.975811][T24821] bond1084 (unregistering): (slave vlan911): Releasing active interface [ 2318.075834][T24821] bond1084 (unregistering): Released all slaves [ 2318.164995][T24821] bond1083 (unregistering): (slave vlan910): Releasing active interface [ 2318.255826][T24821] bond1083 (unregistering): Released all slaves [ 2318.282179][T24821] bond1082 (unregistering): (slave vlan909): Releasing active interface [ 2318.355709][T24821] bond1082 (unregistering): Released all slaves [ 2318.382871][T24821] bond1081 (unregistering): (slave vlan908): Releasing active interface [ 2318.466736][T24821] bond1081 (unregistering): Released all slaves [ 2318.491884][T24821] bond1080 (unregistering): (slave vlan907): Releasing active interface [ 2318.548995][ T3736] Bluetooth: hci6: command 0x041b tx timeout [ 2318.580204][T24821] bond1080 (unregistering): Released all slaves [ 2318.606262][T24821] bond1079 (unregistering): (slave vlan906): Releasing active interface [ 2318.706943][T24821] bond1079 (unregistering): Released all slaves [ 2318.713573][ T3736] Bluetooth: hci7: command 0x0409 tx timeout [ 2318.733466][T24821] bond1078 (unregistering): (slave vlan905): Releasing active interface [ 2318.803929][T24821] bond1078 (unregistering): Released all slaves [ 2318.833603][T24821] bond1077 (unregistering): (slave vlan904): Releasing active interface [ 2318.927248][T24821] bond1077 (unregistering): Released all slaves [ 2318.951455][T24821] bond1076 (unregistering): (slave vlan903): Releasing active interface [ 2319.040398][T24821] bond1076 (unregistering): Released all slaves [ 2319.114495][T24821] bond1075 (unregistering): Released all slaves [ 2319.135358][T24821] bond1074 (unregistering): (slave vlan902): Releasing active interface [ 2319.216972][T24821] bond1074 (unregistering): Released all slaves [ 2319.241618][T24821] bond1073 (unregistering): (slave vlan901): Releasing active interface [ 2319.345236][T24821] bond1073 (unregistering): Released all slaves [ 2319.371588][T24821] bond1072 (unregistering): (slave vlan900): Releasing active interface [ 2319.505426][T24821] bond1072 (unregistering): Released all slaves [ 2319.533519][T24821] bond1071 (unregistering): (slave vlan899): Releasing active interface [ 2319.635168][T24821] bond1071 (unregistering): Released all slaves [ 2319.661041][T24821] bond1070 (unregistering): (slave vlan898): Releasing active interface [ 2319.769719][T24821] bond1070 (unregistering): Released all slaves [ 2319.793522][T24821] bond1069 (unregistering): (slave vlan897): Releasing active interface [ 2319.920240][T24821] bond1069 (unregistering): Released all slaves [ 2319.943151][T24821] bond1068 (unregistering): (slave vlan896): Releasing active interface [ 2320.013581][T24821] bond1068 (unregistering): Released all slaves [ 2320.043959][T24821] bond1067 (unregistering): (slave vlan895): Releasing active interface [ 2320.137126][T24821] bond1067 (unregistering): Released all slaves [ 2320.161127][T24821] bond1066 (unregistering): (slave vlan894): Releasing active interface [ 2320.196731][T24821] bond1066 (unregistering): Released all slaves [ 2320.296198][T24821] bond1065 (unregistering): (slave vlan893): Releasing active interface [ 2320.384191][T24821] bond1065 (unregistering): Released all slaves [ 2320.445462][T24821] bond1064 (unregistering): (slave vlan892): Releasing active interface [ 2320.534671][T24821] bond1064 (unregistering): Released all slaves [ 2320.561096][T24821] bond1063 (unregistering): (slave vlan891): Releasing active interface [ 2320.629165][ T6575] Bluetooth: hci6: command 0x040f tx timeout [ 2320.653469][T24821] bond1063 (unregistering): Released all slaves [ 2320.682634][T24821] bond1062 (unregistering): (slave vlan890): Releasing active interface [ 2320.755120][T24821] bond1062 (unregistering): Released all slaves [ 2320.774987][T24821] bond1061 (unregistering): (slave vlan889): Releasing active interface [ 2320.789039][ T6575] Bluetooth: hci7: command 0x041b tx timeout [ 2320.866689][T24821] bond1061 (unregistering): Released all slaves [ 2320.895348][T24821] bond1060 (unregistering): (slave vlan888): Releasing active interface [ 2320.977509][T24821] bond1060 (unregistering): Released all slaves [ 2321.001247][T24821] bond1059 (unregistering): (slave vlan887): Releasing active interface [ 2321.091242][T24821] bond1059 (unregistering): Released all slaves [ 2321.113348][T24821] bond1058 (unregistering): (slave vlan886): Releasing active interface [ 2321.194715][T24821] bond1058 (unregistering): Released all slaves [ 2321.215612][T24821] bond1057 (unregistering): (slave vlan885): Releasing active interface [ 2321.306996][T24821] bond1057 (unregistering): Released all slaves [ 2321.330975][T24821] bond1056 (unregistering): (slave vlan884): Releasing active interface [ 2321.435417][T24821] bond1056 (unregistering): Released all slaves [ 2321.462493][T24821] bond1055 (unregistering): (slave vlan883): Releasing active interface [ 2321.567505][T24821] bond1055 (unregistering): Released all slaves [ 2321.591185][T24821] bond1054 (unregistering): (slave vlan882): Releasing active interface [ 2321.685760][T24821] bond1054 (unregistering): Released all slaves [ 2321.711453][T24821] bond1053 (unregistering): (slave vlan881): Releasing active interface [ 2321.794880][T24821] bond1053 (unregistering): Released all slaves [ 2321.820703][T24821] bond1052 (unregistering): (slave vlan880): Releasing active interface [ 2321.930828][T24821] bond1052 (unregistering): Released all slaves [ 2321.954275][T24821] bond1051 (unregistering): (slave vlan879): Releasing active interface [ 2322.055508][T24821] bond1051 (unregistering): Released all slaves [ 2322.082911][T24821] bond1050 (unregistering): (slave vlan878): Releasing active interface [ 2322.174835][T24821] bond1050 (unregistering): Released all slaves [ 2322.202798][T24821] bond1049 (unregistering): (slave vlan877): Releasing active interface [ 2322.274956][T24821] bond1049 (unregistering): Released all slaves [ 2322.301054][T24821] bond1048 (unregistering): (slave vlan876): Releasing active interface [ 2322.389269][T24821] bond1048 (unregistering): Released all slaves [ 2322.413785][T24821] bond1047 (unregistering): (slave vlan875): Releasing active interface [ 2322.486099][T24821] bond1047 (unregistering): Released all slaves [ 2322.513134][T24821] bond1046 (unregistering): (slave vlan874): Releasing active interface [ 2322.583701][T24821] bond1046 (unregistering): Released all slaves [ 2322.609627][T24821] bond1045 (unregistering): (slave vlan873): Releasing active interface [ 2322.699900][T24821] bond1045 (unregistering): Released all slaves [ 2322.709403][ T6575] Bluetooth: hci6: command 0x0419 tx timeout [ 2322.733759][T24821] bond1044 (unregistering): (slave vlan872): Releasing active interface [ 2322.821491][T24821] bond1044 (unregistering): Released all slaves [ 2322.844834][T24821] bond1043 (unregistering): (slave vlan871): Releasing active interface [ 2322.869565][ T6575] Bluetooth: hci7: command 0x040f tx timeout [ 2322.906327][T24821] bond1043 (unregistering): Released all slaves [ 2322.931895][T24821] bond1042 (unregistering): (slave vlan870): Releasing active interface [ 2323.020460][T24821] bond1042 (unregistering): Released all slaves [ 2323.042855][T24821] bond1041 (unregistering): (slave vlan869): Releasing active interface [ 2323.113877][T24821] bond1041 (unregistering): Released all slaves [ 2323.144696][T24821] bond1040 (unregistering): (slave vlan868): Releasing active interface [ 2323.215342][T24821] bond1040 (unregistering): Released all slaves [ 2323.241170][T24821] bond1039 (unregistering): (slave vlan867): Releasing active interface [ 2323.329370][T24821] bond1039 (unregistering): Released all slaves [ 2323.365522][T24821] bond1038 (unregistering): (slave vlan866): Releasing active interface [ 2323.459574][T24821] bond1038 (unregistering): Released all slaves [ 2323.487883][T24821] bond1037 (unregistering): (slave vlan865): Releasing active interface [ 2323.554344][T24821] bond1037 (unregistering): Released all slaves [ 2323.574512][T24821] bond1036 (unregistering): (slave vlan864): Releasing active interface [ 2323.740639][T24821] bond1036 (unregistering): Released all slaves [ 2323.777469][T24821] bond1035 (unregistering): (slave vlan863): Releasing active interface [ 2323.864804][T24821] bond1035 (unregistering): Released all slaves [ 2323.883685][T24821] bond1034 (unregistering): (slave vlan862): Releasing active interface [ 2323.955436][T24821] bond1034 (unregistering): Released all slaves [ 2323.983255][T24821] bond1033 (unregistering): (slave vlan861): Releasing active interface [ 2324.013150][T24821] bond1033 (unregistering): Released all slaves [ 2324.080592][T24821] bond1032 (unregistering): (slave vlan860): Releasing active interface [ 2324.153582][T24821] bond1032 (unregistering): Released all slaves [ 2324.175938][T24821] bond1031 (unregistering): (slave vlan859): Releasing active interface [ 2324.244660][T24821] bond1031 (unregistering): Released all slaves [ 2324.272091][T24821] bond1030 (unregistering): (slave vlan858): Releasing active interface [ 2324.360520][T24821] bond1030 (unregistering): Released all slaves [ 2324.382947][T24821] bond1029 (unregistering): (slave vlan857): Releasing active interface [ 2324.474558][T24821] bond1029 (unregistering): Released all slaves [ 2324.501669][T24821] bond1028 (unregistering): (slave vlan856): Releasing active interface [ 2324.619924][T24821] bond1028 (unregistering): Released all slaves [ 2324.645386][T24821] bond1027 (unregistering): (slave vlan855): Releasing active interface [ 2324.716119][T24821] bond1027 (unregistering): Released all slaves [ 2324.743763][T24821] bond1026 (unregistering): (slave vlan854): Releasing active interface [ 2324.825987][T24821] bond1026 (unregistering): Released all slaves [ 2324.945283][T24821] bond1025 (unregistering): (slave vlan853): Releasing active interface [ 2324.948976][ T6575] Bluetooth: hci7: command 0x0419 tx timeout [ 2325.036145][T24821] bond1025 (unregistering): Released all slaves [ 2325.055955][T24821] bond1024 (unregistering): (slave vlan852): Releasing active interface [ 2325.164626][T24821] bond1024 (unregistering): Released all slaves [ 2325.185774][T24821] bond1023 (unregistering): (slave vlan851): Releasing active interface [ 2325.254485][T24821] bond1023 (unregistering): Released all slaves [ 2325.279525][T24821] bond1022 (unregistering): (slave vlan850): Releasing active interface [ 2325.364808][T24821] bond1022 (unregistering): Released all slaves [ 2325.389939][T24821] bond1021 (unregistering): (slave vlan849): Releasing active interface [ 2325.470649][T24821] bond1021 (unregistering): Released all slaves [ 2325.493872][T24821] bond1020 (unregistering): (slave vlan848): Releasing active interface [ 2325.574257][T24821] bond1020 (unregistering): Released all slaves [ 2325.602490][T24821] bond1019 (unregistering): (slave vlan847): Releasing active interface [ 2325.673424][T24821] bond1019 (unregistering): Released all slaves [ 2325.761572][T24821] bond1018 (unregistering): (slave vlan846): Releasing active interface [ 2325.843581][T24821] bond1018 (unregistering): Released all slaves [ 2325.872186][T24821] bond1017 (unregistering): (slave vlan845): Releasing active interface [ 2325.954637][T24821] bond1017 (unregistering): Released all slaves [ 2325.974008][T24821] bond1016 (unregistering): (slave vlan844): Releasing active interface [ 2326.060434][T24821] bond1016 (unregistering): Released all slaves [ 2326.084688][T24821] bond1015 (unregistering): (slave vlan843): Releasing active interface [ 2326.154202][T24821] bond1015 (unregistering): Released all slaves [ 2326.182353][T24821] bond1014 (unregistering): (slave vlan842): Releasing active interface [ 2326.254239][T24821] bond1014 (unregistering): Released all slaves [ 2326.345036][T24821] bond1013 (unregistering): (slave vlan841): Releasing active interface [ 2326.435305][T24821] bond1013 (unregistering): Released all slaves [ 2326.674023][T24821] bond1012 (unregistering): (slave vlan840): Releasing active interface [ 2326.762333][T24821] bond1012 (unregistering): Released all slaves [ 2326.781444][T24821] bond1011 (unregistering): (slave vlan839): Releasing active interface [ 2326.853715][T24821] bond1011 (unregistering): Released all slaves [ 2326.895264][T24821] bond1010 (unregistering): (slave vlan838): Releasing active interface [ 2326.965612][T24821] bond1010 (unregistering): Released all slaves [ 2326.991092][T24821] bond1009 (unregistering): (slave vlan837): Releasing active interface [ 2327.074877][T24821] bond1009 (unregistering): Released all slaves [ 2327.101268][T24821] bond1008 (unregistering): (slave vlan836): Releasing active interface [ 2327.194432][T24821] bond1008 (unregistering): Released all slaves [ 2327.214621][T24821] bond1007 (unregistering): (slave vlan835): Releasing active interface [ 2327.295362][T24821] bond1007 (unregistering): Released all slaves [ 2327.321083][T24821] bond1006 (unregistering): (slave vlan834): Releasing active interface [ 2327.387555][T24821] bond1006 (unregistering): Released all slaves [ 2327.474912][T24821] bond1005 (unregistering): (slave vlan833): Releasing active interface [ 2327.603487][T24821] bond1005 (unregistering): Released all slaves [ 2327.633940][T24821] bond1004 (unregistering): (slave vlan832): Releasing active interface [ 2327.714934][T24821] bond1004 (unregistering): Released all slaves [ 2327.734287][T24821] bond1003 (unregistering): (slave vlan831): Releasing active interface [ 2327.833958][T24821] bond1003 (unregistering): Released all slaves [ 2327.856162][T24821] bond1002 (unregistering): (slave vlan830): Releasing active interface [ 2327.967111][T24821] bond1002 (unregistering): Released all slaves [ 2327.992343][T24821] bond1001 (unregistering): (slave vlan829): Releasing active interface [ 2328.065731][T24821] bond1001 (unregistering): Released all slaves [ 2328.090880][T24821] bond1000 (unregistering): (slave vlan828): Releasing active interface [ 2328.174248][T24821] bond1000 (unregistering): Released all slaves [ 2328.200612][T24821] bond999 (unregistering): (slave vlan827): Releasing active interface [ 2328.324687][T24821] bond999 (unregistering): Released all slaves [ 2328.351047][T24821] bond998 (unregistering): (slave vlan826): Releasing active interface [ 2328.457289][T24821] bond998 (unregistering): Released all slaves [ 2328.480754][T24821] bond997 (unregistering): (slave vlan825): Releasing active interface [ 2328.504848][T24821] bond997 (unregistering): Released all slaves [ 2328.614259][T24821] bond996 (unregistering): (slave vlan824): Releasing active interface [ 2328.694206][T24821] bond996 (unregistering): Released all slaves [ 2328.721440][T24821] bond995 (unregistering): (slave vlan823): Releasing active interface [ 2328.794799][T24821] bond995 (unregistering): Released all slaves [ 2328.815191][T24821] bond994 (unregistering): (slave vlan822): Releasing active interface [ 2328.927006][T24821] bond994 (unregistering): Released all slaves [ 2328.948741][T24821] bond993 (unregistering): (slave vlan821): Releasing active interface [ 2329.037693][T24821] bond993 (unregistering): Released all slaves [ 2329.060939][T24821] bond992 (unregistering): (slave vlan820): Releasing active interface [ 2329.133080][T24821] bond992 (unregistering): Released all slaves [ 2329.155527][T24821] bond991 (unregistering): (slave vlan819): Releasing active interface [ 2329.235883][T24821] bond991 (unregistering): Released all slaves [ 2329.255639][T24821] bond990 (unregistering): (slave vlan818): Releasing active interface [ 2329.327121][T24821] bond990 (unregistering): Released all slaves [ 2329.351784][T24821] bond989 (unregistering): (slave vlan817): Releasing active interface [ 2329.434109][T24821] bond989 (unregistering): Released all slaves [ 2329.504395][T24821] bond988 (unregistering): (slave vlan816): Releasing active interface [ 2329.584174][T24821] bond988 (unregistering): Released all slaves [ 2329.624576][T24821] bond987 (unregistering): (slave vlan815): Releasing active interface [ 2329.706107][T24821] bond987 (unregistering): Released all slaves [ 2329.732420][T24821] bond986 (unregistering): (slave vlan814): Releasing active interface [ 2329.804298][T24821] bond986 (unregistering): Released all slaves [ 2329.830570][T24821] bond985 (unregistering): (slave vlan813): Releasing active interface [ 2329.924104][T24821] bond985 (unregistering): Released all slaves [ 2329.950249][T24821] bond984 (unregistering): (slave vlan812): Releasing active interface [ 2330.045687][T24821] bond984 (unregistering): Released all slaves [ 2330.072845][T24821] bond983 (unregistering): (slave vlan811): Releasing active interface [ 2330.161098][T24821] bond983 (unregistering): Released all slaves [ 2330.183157][T24821] bond982 (unregistering): (slave vlan810): Releasing active interface [ 2330.293042][T24821] bond982 (unregistering): Released all slaves [ 2330.316580][T24821] bond981 (unregistering): (slave vlan809): Releasing active interface [ 2330.405234][T24821] bond981 (unregistering): Released all slaves [ 2330.432817][T24821] bond980 (unregistering): (slave vlan808): Releasing active interface [ 2330.524575][T24821] bond980 (unregistering): Released all slaves [ 2330.551272][T24821] bond979 (unregistering): (slave vlan807): Releasing active interface [ 2330.645681][T24821] bond979 (unregistering): Released all slaves [ 2330.671665][T24821] bond978 (unregistering): (slave vlan806): Releasing active interface [ 2330.753838][T24821] bond978 (unregistering): Released all slaves [ 2330.780447][T24821] bond977 (unregistering): (slave vlan805): Releasing active interface [ 2330.874653][T24821] bond977 (unregistering): Released all slaves [ 2330.901024][T24821] bond976 (unregistering): (slave vlan804): Releasing active interface [ 2330.976114][T24821] bond976 (unregistering): Released all slaves [ 2331.002489][T24821] bond975 (unregistering): (slave vlan803): Releasing active interface [ 2331.095232][T24821] bond975 (unregistering): Released all slaves [ 2331.122488][T24821] bond974 (unregistering): (slave vlan802): Releasing active interface [ 2331.204544][T24821] bond974 (unregistering): Released all slaves [ 2331.230601][T24821] bond973 (unregistering): (slave vlan801): Releasing active interface [ 2331.334098][T24821] bond973 (unregistering): Released all slaves [ 2331.359524][T24821] bond972 (unregistering): (slave vlan800): Releasing active interface [ 2331.435937][T24821] bond972 (unregistering): Released all slaves [ 2331.460785][T24821] bond971 (unregistering): (slave vlan799): Releasing active interface [ 2331.535444][T24821] bond971 (unregistering): Released all slaves [ 2331.554293][T24821] bond970 (unregistering): (slave vlan798): Releasing active interface [ 2331.635991][T24821] bond970 (unregistering): Released all slaves [ 2331.661243][T24821] bond969 (unregistering): (slave vlan797): Releasing active interface [ 2331.746694][T24821] bond969 (unregistering): Released all slaves [ 2331.780889][T24821] bond968 (unregistering): (slave vlan796): Releasing active interface [ 2331.854329][T24821] bond968 (unregistering): Released all slaves [ 2331.965282][T24821] bond967 (unregistering): (slave vlan795): Releasing active interface [ 2332.065913][T24821] bond967 (unregistering): Released all slaves [ 2332.101570][T24821] bond966 (unregistering): (slave vlan794): Releasing active interface [ 2332.174521][T24821] bond966 (unregistering): Released all slaves [ 2332.254031][T24821] bond965 (unregistering): (slave vlan793): Releasing active interface [ 2332.319156][T24821] bond965 (unregistering): Released all slaves [ 2332.336001][T24821] bond964 (unregistering): (slave vlan792): Releasing active interface [ 2332.420188][T24821] bond964 (unregistering): Released all slaves [ 2332.442040][T24821] bond963 (unregistering): (slave vlan791): Releasing active interface [ 2332.532822][T24821] bond963 (unregistering): Released all slaves [ 2332.555403][T24821] bond962 (unregistering): (slave vlan790): Releasing active interface [ 2332.663531][T24821] bond962 (unregistering): Released all slaves [ 2332.734869][T24821] bond961 (unregistering): (slave vlan789): Releasing active interface [ 2332.835637][T24821] bond961 (unregistering): Released all slaves [ 2332.863449][T24821] bond960 (unregistering): (slave vlan788): Releasing active interface [ 2332.945460][T24821] bond960 (unregistering): Released all slaves [ 2332.972695][T24821] bond959 (unregistering): (slave vlan787): Releasing active interface [ 2333.044031][T24821] bond959 (unregistering): Released all slaves [ 2333.069632][T24821] bond958 (unregistering): (slave vlan786): Releasing active interface [ 2333.137670][T24821] bond958 (unregistering): Released all slaves [ 2333.160760][T24821] bond957 (unregistering): (slave vlan785): Releasing active interface [ 2333.235142][T24821] bond957 (unregistering): Released all slaves [ 2333.260883][T24821] bond956 (unregistering): (slave vlan784): Releasing active interface [ 2333.345314][T24821] bond956 (unregistering): Released all slaves [ 2333.372864][T24821] bond955 (unregistering): (slave vlan783): Releasing active interface [ 2333.464623][T24821] bond955 (unregistering): Released all slaves [ 2333.487632][T24821] bond954 (unregistering): (slave vlan782): Releasing active interface [ 2333.566193][T24821] bond954 (unregistering): Released all slaves [ 2333.584906][T24821] bond953 (unregistering): (slave vlan781): Releasing active interface [ 2333.665360][T24821] bond953 (unregistering): Released all slaves [ 2333.688444][T24821] bond952 (unregistering): (slave vlan780): Releasing active interface [ 2333.765741][T24821] bond952 (unregistering): Released all slaves [ 2333.785488][T24821] bond951 (unregistering): (slave vlan779): Releasing active interface [ 2333.814370][T24821] bond951 (unregistering): Released all slaves [ 2333.924974][T24821] bond950 (unregistering): (slave vlan778): Releasing active interface [ 2334.031532][T24821] bond950 (unregistering): Released all slaves [ 2334.053850][T24821] bond949 (unregistering): (slave vlan777): Releasing active interface [ 2334.139370][T24821] bond949 (unregistering): Released all slaves [ 2334.205369][T24821] bond948 (unregistering): Released all slaves [ 2334.224731][T24821] bond947 (unregistering): (slave vlan776): Releasing active interface [ 2334.304909][T24821] bond947 (unregistering): Released all slaves [ 2334.330144][T24821] bond946 (unregistering): (slave vlan775): Releasing active interface [ 2334.434202][T24821] bond946 (unregistering): Released all slaves [ 2334.461269][T24821] bond945 (unregistering): (slave vlan774): Releasing active interface [ 2334.553131][T24821] bond945 (unregistering): Released all slaves [ 2334.575949][T24821] bond944 (unregistering): (slave vlan773): Releasing active interface [ 2334.665067][T24821] bond944 (unregistering): Released all slaves [ 2334.690431][T24821] bond943 (unregistering): (slave vlan772): Releasing active interface [ 2334.780844][T24821] bond943 (unregistering): Released all slaves [ 2334.816079][T24821] bond942 (unregistering): (slave vlan771): Releasing active interface [ 2334.897343][T24821] bond942 (unregistering): Released all slaves [ 2334.920510][T24821] bond941 (unregistering): (slave vlan770): Releasing active interface [ 2335.025178][T24821] bond941 (unregistering): Released all slaves [ 2335.045475][T24821] bond940 (unregistering): (slave vlan769): Releasing active interface [ 2335.134186][T24821] bond940 (unregistering): Released all slaves [ 2335.155278][T24821] bond939 (unregistering): (slave vlan768): Releasing active interface [ 2335.245383][T24821] bond939 (unregistering): Released all slaves [ 2335.264712][T24821] bond938 (unregistering): (slave vlan767): Releasing active interface [ 2335.356041][T24821] bond938 (unregistering): Released all slaves [ 2335.374960][T24821] bond937 (unregistering): (slave vlan766): Releasing active interface [ 2335.454919][T24821] bond937 (unregistering): Released all slaves [ 2335.474484][T24821] bond936 (unregistering): (slave vlan765): Releasing active interface [ 2335.544245][T24821] bond936 (unregistering): Released all slaves [ 2335.565418][T24821] bond935 (unregistering): (slave vlan764): Releasing active interface [ 2335.636567][T24821] bond935 (unregistering): Released all slaves [ 2335.658382][T24821] bond934 (unregistering): (slave vlan763): Releasing active interface [ 2335.734853][T24821] bond934 (unregistering): Released all slaves [ 2335.754333][T24821] bond933 (unregistering): (slave vlan762): Releasing active interface [ 2335.825607][T24821] bond933 (unregistering): Released all slaves [ 2335.851715][T24821] bond932 (unregistering): (slave vlan761): Releasing active interface [ 2335.933801][T24821] bond932 (unregistering): Released all slaves [ 2335.959942][T24821] bond931 (unregistering): (slave vlan760): Releasing active interface [ 2336.034060][T24821] bond931 (unregistering): Released all slaves [ 2336.061137][T24821] bond930 (unregistering): (slave vlan759): Releasing active interface [ 2336.146053][T24821] bond930 (unregistering): Released all slaves [ 2336.235284][T24821] bond929 (unregistering): Released all slaves [ 2336.261560][T24821] bond928 (unregistering): (slave vlan758): Releasing active interface [ 2336.355090][T24821] bond928 (unregistering): Released all slaves [ 2336.380814][T24821] bond927 (unregistering): (slave vlan757): Releasing active interface [ 2336.464583][T24821] bond927 (unregistering): Released all slaves [ 2336.490697][T24821] bond926 (unregistering): (slave vlan756): Releasing active interface [ 2336.564227][T24821] bond926 (unregistering): Released all slaves [ 2336.586130][T24821] bond925 (unregistering): (slave vlan755): Releasing active interface [ 2336.715655][T24821] bond925 (unregistering): Released all slaves [ 2336.742466][T24821] bond924 (unregistering): (slave vlan754): Releasing active interface [ 2336.833540][T24821] bond924 (unregistering): Released all slaves [ 2336.858897][T24821] bond923 (unregistering): (slave vlan753): Releasing active interface [ 2336.961361][T24821] bond923 (unregistering): Released all slaves [ 2336.983593][T24821] bond922 (unregistering): (slave vlan752): Releasing active interface [ 2337.074281][T24821] bond922 (unregistering): Released all slaves [ 2337.093726][T24821] bond921 (unregistering): (slave vlan751): Releasing active interface [ 2337.176625][T24821] bond921 (unregistering): Released all slaves [ 2337.200667][T24821] bond920 (unregistering): (slave vlan750): Releasing active interface [ 2337.314739][T24821] bond920 (unregistering): Released all slaves [ 2337.333509][T24821] bond919 (unregistering): (slave vlan749): Releasing active interface [ 2337.414522][T24821] bond919 (unregistering): Released all slaves [ 2337.440319][T24821] bond918 (unregistering): (slave vlan748): Releasing active interface [ 2337.545567][T24821] bond918 (unregistering): Released all slaves [ 2337.569329][T24821] bond917 (unregistering): (slave vlan747): Releasing active interface [ 2337.674270][T24821] bond917 (unregistering): Released all slaves [ 2337.695625][T24821] bond916 (unregistering): (slave vlan746): Releasing active interface [ 2337.769613][T24821] bond916 (unregistering): Released all slaves [ 2337.791417][T24821] bond915 (unregistering): (slave vlan745): Releasing active interface [ 2337.897514][T24821] bond915 (unregistering): Released all slaves [ 2337.924532][T24821] bond914 (unregistering): (slave vlan744): Releasing active interface [ 2338.024399][T24821] bond914 (unregistering): Released all slaves [ 2338.050822][T24821] bond913 (unregistering): (slave vlan743): Releasing active interface [ 2338.145230][T24821] bond913 (unregistering): Released all slaves [ 2338.170951][T24821] bond912 (unregistering): (slave vlan742): Releasing active interface [ 2338.244008][T24821] bond912 (unregistering): Released all slaves [ 2338.335540][T24821] bond911 (unregistering): Released all slaves [ 2338.354280][T24821] bond910 (unregistering): (slave vlan741): Releasing active interface [ 2338.445048][T24821] bond910 (unregistering): Released all slaves [ 2338.464305][T24821] bond909 (unregistering): (slave vlan740): Releasing active interface [ 2338.555349][T24821] bond909 (unregistering): Released all slaves [ 2338.573991][T24821] bond908 (unregistering): (slave vlan739): Releasing active interface [ 2338.645117][T24821] bond908 (unregistering): Released all slaves [ 2338.669068][T24821] bond907 (unregistering): (slave vlan738): Releasing active interface [ 2338.750018][T24821] bond907 (unregistering): Released all slaves [ 2338.772833][T24821] bond906 (unregistering): (slave vlan737): Releasing active interface [ 2338.844405][T24821] bond906 (unregistering): Released all slaves [ 2338.874123][T24821] bond905 (unregistering): (slave vlan736): Releasing active interface [ 2338.944816][T24821] bond905 (unregistering): Released all slaves [ 2338.971921][T24821] bond904 (unregistering): (slave vlan735): Releasing active interface [ 2339.084198][T24821] bond904 (unregistering): Released all slaves [ 2339.105130][T24821] bond903 (unregistering): (slave vlan734): Releasing active interface [ 2339.185616][T24821] bond903 (unregistering): Released all slaves [ 2339.214542][T24821] bond902 (unregistering): (slave vlan733): Releasing active interface [ 2339.304291][T24821] bond902 (unregistering): Released all slaves [ 2339.329631][T24821] bond901 (unregistering): (slave vlan732): Releasing active interface [ 2339.414198][T24821] bond901 (unregistering): Released all slaves [ 2339.441093][T24821] bond900 (unregistering): (slave vlan731): Releasing active interface [ 2339.549477][T24821] bond900 (unregistering): Released all slaves [ 2339.571383][T24821] bond899 (unregistering): (slave vlan730): Releasing active interface [ 2339.645197][T24821] bond899 (unregistering): Released all slaves [ 2339.670298][T24821] bond898 (unregistering): (slave vlan729): Releasing active interface [ 2339.755379][T24821] bond898 (unregistering): Released all slaves [ 2339.780976][T24821] bond897 (unregistering): (slave vlan728): Releasing active interface [ 2339.866041][T24821] bond897 (unregistering): Released all slaves [ 2339.890758][T24821] bond896 (unregistering): (slave vlan727): Releasing active interface [ 2340.017056][T24821] bond896 (unregistering): Released all slaves [ 2340.038267][T24821] bond895 (unregistering): (slave vlan726): Releasing active interface [ 2340.115003][T24821] bond895 (unregistering): Released all slaves [ 2340.133852][T24821] bond894 (unregistering): (slave vlan725): Releasing active interface [ 2340.204989][T24821] bond894 (unregistering): Released all slaves [ 2340.275369][T24821] bond893 (unregistering): Released all slaves [ 2340.294085][T24821] bond892 (unregistering): (slave vlan724): Releasing active interface [ 2340.406030][T24821] bond892 (unregistering): Released all slaves [ 2340.430878][T24821] bond891 (unregistering): (slave vlan723): Releasing active interface [ 2340.514414][T24821] bond891 (unregistering): Released all slaves [ 2340.540997][T24821] bond890 (unregistering): (slave vlan722): Releasing active interface [ 2340.625790][T24821] bond890 (unregistering): Released all slaves [ 2340.650339][T24821] bond889 (unregistering): (slave vlan721): Releasing active interface [ 2340.673734][T24821] bond889 (unregistering): Released all slaves [ 2340.755199][T24821] bond888 (unregistering): (slave vlan720): Releasing active interface [ 2340.832908][T24821] bond888 (unregistering): Released all slaves [ 2340.861873][T24821] bond887 (unregistering): (slave vlan719): Releasing active interface [ 2340.945531][T24821] bond887 (unregistering): Released all slaves [ 2340.965311][T24821] bond886 (unregistering): (slave vlan718): Releasing active interface [ 2341.063438][T24821] bond886 (unregistering): Released all slaves [ 2341.088012][T24821] bond885 (unregistering): (slave vlan717): Releasing active interface [ 2341.175520][T24821] bond885 (unregistering): Released all slaves [ 2341.202384][T24821] bond884 (unregistering): (slave vlan716): Releasing active interface [ 2341.274433][T24821] bond884 (unregistering): Released all slaves [ 2341.301309][T24821] bond883 (unregistering): (slave vlan715): Releasing active interface [ 2341.413249][T24821] bond883 (unregistering): Released all slaves [ 2341.435692][T24821] bond882 (unregistering): (slave vlan714): Releasing active interface [ 2341.524487][T24821] bond882 (unregistering): Released all slaves [ 2341.543630][T24821] bond881 (unregistering): (slave vlan713): Releasing active interface [ 2341.613626][T24821] bond881 (unregistering): Released all slaves [ 2341.634674][T24821] bond880 (unregistering): (slave vlan712): Releasing active interface [ 2341.714823][T24821] bond880 (unregistering): Released all slaves [ 2341.739930][T24821] bond879 (unregistering): (slave vlan711): Releasing active interface [ 2341.815301][T24821] bond879 (unregistering): Released all slaves [ 2341.841676][T24821] bond878 (unregistering): (slave vlan710): Releasing active interface [ 2341.929744][T24821] bond878 (unregistering): Released all slaves [ 2341.954660][T24821] bond877 (unregistering): (slave vlan709): Releasing active interface [ 2342.024017][T24821] bond877 (unregistering): Released all slaves [ 2342.044694][T24821] bond876 (unregistering): (slave vlan708): Releasing active interface [ 2342.164971][T24821] bond876 (unregistering): Released all slaves [ 2342.243460][T24821] bond875 (unregistering): (slave vlan707): Releasing active interface [ 2342.345343][T24821] bond875 (unregistering): Released all slaves [ 2342.371878][T24821] bond874 (unregistering): (slave vlan706): Releasing active interface [ 2342.459335][T24821] bond874 (unregistering): Released all slaves [ 2342.481929][T24821] bond873 (unregistering): (slave vlan705): Releasing active interface [ 2342.565216][T24821] bond873 (unregistering): Released all slaves [ 2342.592796][T24821] bond872 (unregistering): (slave vlan704): Releasing active interface [ 2342.684317][T24821] bond872 (unregistering): Released all slaves [ 2342.709885][T24821] bond871 (unregistering): (slave vlan703): Releasing active interface [ 2342.814199][T24821] bond871 (unregistering): Released all slaves [ 2342.840695][T24821] bond870 (unregistering): (slave vlan702): Releasing active interface [ 2342.924210][T24821] bond870 (unregistering): Released all slaves [ 2342.943004][T24821] bond869 (unregistering): (slave vlan701): Releasing active interface [ 2343.013571][T24821] bond869 (unregistering): Released all slaves [ 2343.035101][T24821] bond868 (unregistering): (slave vlan700): Releasing active interface [ 2343.169178][T24821] bond868 (unregistering): Released all slaves [ 2343.185388][T24821] bond867 (unregistering): (slave vlan699): Releasing active interface [ 2343.223600][T24821] bond867 (unregistering): Released all slaves [ 2343.298159][T24821] bond866 (unregistering): (slave vlan698): Releasing active interface [ 2343.409975][T24821] bond866 (unregistering): Released all slaves [ 2343.431523][T24821] bond865 (unregistering): (slave vlan697): Releasing active interface [ 2343.533165][T24821] bond865 (unregistering): Released all slaves [ 2343.552323][T24821] bond864 (unregistering): (slave vlan696): Releasing active interface [ 2343.629539][T24821] bond864 (unregistering): Released all slaves [ 2343.651536][T24821] bond863 (unregistering): (slave vlan695): Releasing active interface [ 2343.729280][T24821] bond863 (unregistering): Released all slaves [ 2343.752016][T24821] bond862 (unregistering): (slave vlan694): Releasing active interface [ 2343.844806][T24821] bond862 (unregistering): Released all slaves [ 2343.865787][T24821] bond861 (unregistering): (slave vlan693): Releasing active interface [ 2343.955338][T24821] bond861 (unregistering): Released all slaves [ 2343.980740][T24821] bond860 (unregistering): (slave vlan692): Releasing active interface [ 2344.073793][T24821] bond860 (unregistering): Released all slaves [ 2344.100080][T24821] bond859 (unregistering): (slave vlan691): Releasing active interface [ 2344.173311][T24821] bond859 (unregistering): Released all slaves [ 2344.194772][T24821] bond858 (unregistering): (slave vlan690): Releasing active interface [ 2344.274196][T24821] bond858 (unregistering): Released all slaves [ 2344.296257][T24821] bond857 (unregistering): (slave vlan689): Releasing active interface [ 2344.312647][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.321336][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.385512][T24821] bond857 (unregistering): Released all slaves [ 2344.411801][T24821] bond856 (unregistering): (slave vlan688): Releasing active interface [ 2344.483193][T24821] bond856 (unregistering): Released all slaves [ 2344.510722][T24821] bond855 (unregistering): (slave vlan687): Releasing active interface [ 2344.592998][T24821] bond855 (unregistering): Released all slaves [ 2344.655487][T24821] bond854 (unregistering): Released all slaves [ 2344.683099][T24821] bond853 (unregistering): (slave vlan686): Releasing active interface [ 2344.765616][T24821] bond853 (unregistering): Released all slaves [ 2344.791552][T24821] bond852 (unregistering): (slave vlan685): Releasing active interface [ 2344.883535][T24821] bond852 (unregistering): Released all slaves [ 2344.902154][T24821] bond851 (unregistering): (slave vlan684): Releasing active interface [ 2344.995169][T24821] bond851 (unregistering): Released all slaves [ 2345.022796][T24821] bond850 (unregistering): (slave vlan683): Releasing active interface [ 2345.126943][T24821] bond850 (unregistering): Released all slaves [ 2345.148890][T24821] bond849 (unregistering): (slave vlan682): Releasing active interface [ 2345.245018][T24821] bond849 (unregistering): Released all slaves [ 2345.270034][T24821] bond848 (unregistering): (slave vlan681): Releasing active interface [ 2345.344115][T24821] bond848 (unregistering): Released all slaves [ 2345.366164][T24821] bond847 (unregistering): (slave vlan680): Releasing active interface [ 2345.434242][T24821] bond847 (unregistering): Released all slaves [ 2345.460909][T24821] bond846 (unregistering): (slave vlan679): Releasing active interface [ 2345.535429][T24821] bond846 (unregistering): Released all slaves [ 2345.563027][T24821] bond845 (unregistering): (slave vlan678): Releasing active interface [ 2345.634173][T24821] bond845 (unregistering): Released all slaves [ 2345.656151][T24821] bond844 (unregistering): (slave vlan677): Releasing active interface [ 2345.764248][T24821] bond844 (unregistering): Released all slaves [ 2345.790650][T24821] bond843 (unregistering): (slave vlan676): Releasing active interface [ 2345.873967][T24821] bond843 (unregistering): Released all slaves [ 2345.892703][T24821] bond842 (unregistering): (slave vlan675): Releasing active interface [ 2345.984773][T24821] bond842 (unregistering): Released all slaves [ 2346.005235][T24821] bond841 (unregistering): (slave vlan674): Releasing active interface [ 2346.074910][T24821] bond841 (unregistering): Released all slaves [ 2346.101692][T24821] bond840 (unregistering): (slave vlan673): Releasing active interface [ 2346.173593][T24821] bond840 (unregistering): Released all slaves [ 2346.264324][T24821] bond839 (unregistering): (slave vlan672): Releasing active interface [ 2346.354285][T24821] bond839 (unregistering): Released all slaves [ 2346.380437][T24821] bond838 (unregistering): (slave vlan671): Releasing active interface [ 2346.455351][T24821] bond838 (unregistering): Released all slaves [ 2346.480474][T24821] bond837 (unregistering): (slave vlan670): Releasing active interface [ 2346.560721][T24821] bond837 (unregistering): Released all slaves [ 2346.582335][T24821] bond836 (unregistering): (slave vlan669): Releasing active interface [ 2346.665538][T24821] bond836 (unregistering): Released all slaves [ 2346.689769][T24821] bond835 (unregistering): (slave vlan668): Releasing active interface [ 2346.783818][T24821] bond835 (unregistering): Released all slaves [ 2346.805714][T24821] bond834 (unregistering): (slave vlan667): Releasing active interface [ 2346.894492][T24821] bond834 (unregistering): Released all slaves [ 2346.954929][T24821] bond833 (unregistering): Released all slaves [ 2346.980318][T24821] bond832 (unregistering): (slave vlan666): Releasing active interface [ 2347.045155][T24821] bond832 (unregistering): Released all slaves [ 2347.064375][T24821] bond831 (unregistering): (slave vlan665): Releasing active interface [ 2347.159940][T24821] bond831 (unregistering): Released all slaves [ 2347.180919][T24821] bond830 (unregistering): (slave vlan664): Releasing active interface [ 2347.292252][T24821] bond830 (unregistering): Released all slaves [ 2347.311261][T24821] bond829 (unregistering): (slave vlan663): Releasing active interface [ 2347.403369][T24821] bond829 (unregistering): Released all slaves [ 2347.422389][T24821] bond828 (unregistering): (slave vlan662): Releasing active interface [ 2347.504305][T24821] bond828 (unregistering): Released all slaves [ 2347.522860][T24821] bond827 (unregistering): (slave vlan661): Releasing active interface [ 2347.595456][T24821] bond827 (unregistering): Released all slaves [ 2347.620441][T24821] bond826 (unregistering): (slave vlan660): Releasing active interface [ 2347.725391][T24821] bond826 (unregistering): Released all slaves [ 2347.750942][T24821] bond825 (unregistering): (slave vlan659): Releasing active interface [ 2347.844947][T24821] bond825 (unregistering): Released all slaves [ 2347.871005][T24821] bond824 (unregistering): (slave vlan658): Releasing active interface [ 2347.943955][T24821] bond824 (unregistering): Released all slaves [ 2347.969307][T24821] bond823 (unregistering): (slave vlan657): Releasing active interface [ 2348.045000][T24821] bond823 (unregistering): Released all slaves [ 2348.069530][T24821] bond822 (unregistering): (slave vlan656): Releasing active interface [ 2348.145192][T24821] bond822 (unregistering): Released all slaves [ 2348.170637][T24821] bond821 (unregistering): (slave vlan655): Releasing active interface [ 2348.243815][T24821] bond821 (unregistering): Released all slaves [ 2348.270613][T24821] bond820 (unregistering): (slave vlan654): Releasing active interface [ 2348.370411][T24821] bond820 (unregistering): Released all slaves [ 2348.401065][T24821] bond819 (unregistering): (slave vlan653): Releasing active interface [ 2348.488960][T24821] bond819 (unregistering): Released all slaves [ 2348.510499][T24821] bond818 (unregistering): (slave vlan652): Releasing active interface [ 2348.614031][T24821] bond818 (unregistering): Released all slaves [ 2348.635606][T24821] bond817 (unregistering): (slave vlan651): Releasing active interface [ 2348.724807][T24821] bond817 (unregistering): Released all slaves [ 2348.747193][T24821] bond816 (unregistering): (slave vlan650): Releasing active interface [ 2348.824420][T24821] bond816 (unregistering): Released all slaves [ 2348.845749][T24821] bond815 (unregistering): (slave vlan649): Releasing active interface [ 2348.929392][T24821] bond815 (unregistering): Released all slaves [ 2348.951225][T24821] bond814 (unregistering): (slave vlan648): Releasing active interface [ 2349.053047][T24821] bond814 (unregistering): Released all slaves [ 2349.075724][T24821] bond813 (unregistering): (slave vlan647): Releasing active interface [ 2349.159441][T24821] bond813 (unregistering): Released all slaves [ 2349.180714][T24821] bond812 (unregistering): (slave vlan646): Releasing active interface [ 2349.270484][T24821] bond812 (unregistering): Released all slaves [ 2349.291163][T24821] bond811 (unregistering): (slave vlan645): Releasing active interface [ 2349.472958][T24821] bond811 (unregistering): Released all slaves [ 2349.503746][T24821] bond810 (unregistering): (slave vlan644): Releasing active interface [ 2349.585508][T24821] bond810 (unregistering): Released all slaves [ 2349.605063][T24821] bond809 (unregistering): (slave vlan643): Releasing active interface [ 2349.685777][T24821] bond809 (unregistering): Released all slaves [ 2349.704753][T24821] bond808 (unregistering): (slave vlan642): Releasing active interface [ 2349.785249][T24821] bond808 (unregistering): Released all slaves [ 2349.810614][T24821] bond807 (unregistering): (slave vlan641): Releasing active interface [ 2349.884397][T24821] bond807 (unregistering): Released all slaves [ 2349.905646][T24821] bond806 (unregistering): (slave vlan640): Releasing active interface [ 2349.983232][T24821] bond806 (unregistering): Released all slaves [ 2350.005898][T24821] bond805 (unregistering): (slave vlan639): Releasing active interface [ 2350.090758][T24821] bond805 (unregistering): Released all slaves [ 2350.112901][T24821] bond804 (unregistering): (slave vlan638): Releasing active interface [ 2350.172799][T24821] bond804 (unregistering): Released all slaves [ 2350.203848][T24821] bond803 (unregistering): (slave vlan637): Releasing active interface [ 2350.273956][T24821] bond803 (unregistering): Released all slaves [ 2350.293197][T24821] bond802 (unregistering): (slave vlan636): Releasing active interface [ 2350.363521][T24821] bond802 (unregistering): Released all slaves [ 2350.384994][T24821] bond801 (unregistering): (slave vlan635): Releasing active interface [ 2350.490150][T24821] bond801 (unregistering): Released all slaves [ 2350.511597][T24821] bond800 (unregistering): (slave vlan634): Releasing active interface [ 2350.583341][T24821] bond800 (unregistering): Released all slaves [ 2350.605440][T24821] bond799 (unregistering): (slave vlan633): Releasing active interface [ 2350.683985][T24821] bond799 (unregistering): Released all slaves [ 2350.703756][T24821] bond798 (unregistering): (slave vlan632): Releasing active interface [ 2350.817653][T24821] bond798 (unregistering): Released all slaves [ 2350.841528][T24821] bond797 (unregistering): (slave vlan631): Releasing active interface [ 2350.924667][T24821] bond797 (unregistering): Released all slaves [ 2350.943258][T24821] bond796 (unregistering): (slave vlan630): Releasing active interface [ 2351.024220][T24821] bond796 (unregistering): Released all slaves [ 2351.050393][T24821] bond795 (unregistering): (slave vlan629): Releasing active interface [ 2351.113727][T24821] bond795 (unregistering): Released all slaves [ 2351.136239][T24821] bond794 (unregistering): (slave vlan628): Releasing active interface [ 2351.260574][T24821] bond794 (unregistering): Released all slaves [ 2351.282008][T24821] bond793 (unregistering): (slave vlan627): Releasing active interface [ 2351.353288][T24821] bond793 (unregistering): Released all slaves [ 2351.373729][T24821] bond792 (unregistering): (slave vlan626): Releasing active interface [ 2351.484808][T24821] bond792 (unregistering): Released all slaves [ 2351.512329][T24821] bond791 (unregistering): (slave vlan625): Releasing active interface [ 2351.646876][T24821] bond791 (unregistering): Released all slaves [ 2351.671182][T24821] bond790 (unregistering): (slave vlan624): Releasing active interface [ 2351.743872][T24821] bond790 (unregistering): Released all slaves [ 2351.770367][T24821] bond789 (unregistering): (slave vlan623): Releasing active interface [ 2351.874841][T24821] bond789 (unregistering): Released all slaves [ 2351.894826][T24821] bond788 (unregistering): (slave vlan622): Releasing active interface [ 2351.976133][T24821] bond788 (unregistering): Released all slaves [ 2351.994538][T24821] bond787 (unregistering): (slave vlan621): Releasing active interface [ 2352.090068][T24821] bond787 (unregistering): Released all slaves [ 2352.111614][T24821] bond786 (unregistering): (slave vlan620): Releasing active interface [ 2352.183273][T24821] bond786 (unregistering): Released all slaves [ 2352.205049][T24821] bond785 (unregistering): (slave vlan619): Releasing active interface [ 2352.273197][T24821] bond785 (unregistering): Released all slaves [ 2352.355670][T24821] bond784 (unregistering): Released all slaves [ 2352.373970][T24821] bond783 (unregistering): (slave vlan618): Releasing active interface [ 2352.453291][T24821] bond783 (unregistering): Released all slaves [ 2352.485822][T24821] bond782 (unregistering): (slave vlan617): Releasing active interface [ 2352.569847][T24821] bond782 (unregistering): Released all slaves [ 2352.591991][T24821] bond781 (unregistering): (slave vlan616): Releasing active interface [ 2352.644180][T24821] bond781 (unregistering): Released all slaves [ 2352.663079][T24821] bond780 (unregistering): (slave vlan615): Releasing active interface [ 2352.745031][T24821] bond780 (unregistering): Released all slaves [ 2352.763999][T24821] bond779 (unregistering): (slave vlan614): Releasing active interface [ 2352.859432][T24821] bond779 (unregistering): Released all slaves [ 2352.896212][T24821] bond778 (unregistering): (slave vlan613): Releasing active interface [ 2352.965829][T24821] bond778 (unregistering): Released all slaves [ 2352.984345][T24821] bond777 (unregistering): (slave vlan612): Releasing active interface [ 2353.054931][T24821] bond777 (unregistering): Released all slaves [ 2353.075732][T24821] bond776 (unregistering): (slave vlan611): Releasing active interface [ 2353.148926][T24821] bond776 (unregistering): Released all slaves [ 2353.171532][T24821] bond775 (unregistering): (slave vlan610): Releasing active interface [ 2353.299076][T24821] bond775 (unregistering): Released all slaves [ 2353.321533][T24821] bond774 (unregistering): (slave vlan609): Releasing active interface [ 2353.415918][T24821] bond774 (unregistering): Released all slaves [ 2353.440163][T24821] bond773 (unregistering): (slave vlan608): Releasing active interface [ 2353.551125][T24821] bond773 (unregistering): Released all slaves [ 2353.572331][T24821] bond772 (unregistering): (slave vlan607): Releasing active interface [ 2353.659468][T24821] bond772 (unregistering): Released all slaves [ 2353.680906][T24821] bond771 (unregistering): (slave vlan606): Releasing active interface [ 2353.766411][T24821] bond771 (unregistering): Released all slaves [ 2353.789764][T24821] bond770 (unregistering): (slave vlan605): Releasing active interface [ 2353.877334][T24821] bond770 (unregistering): Released all slaves [ 2353.900161][T24821] bond769 (unregistering): (slave vlan604): Releasing active interface [ 2354.014684][T24821] bond769 (unregistering): Released all slaves [ 2354.035890][T24821] bond768 (unregistering): (slave vlan603): Releasing active interface [ 2354.113771][T24821] bond768 (unregistering): Released all slaves [ 2354.135436][T24821] bond767 (unregistering): (slave vlan602): Releasing active interface [ 2354.223648][T24821] bond767 (unregistering): Released all slaves [ 2354.244718][T24821] bond766 (unregistering): (slave vlan601): Releasing active interface [ 2354.340184][T24821] bond766 (unregistering): Released all slaves [ 2354.361569][T24821] bond765 (unregistering): (slave vlan600): Releasing active interface [ 2354.385499][T24821] bond765 (unregistering): Released all slaves [ 2354.513956][T24821] bond764 (unregistering): (slave vlan599): Releasing active interface [ 2354.596496][T24821] bond764 (unregistering): Released all slaves [ 2354.641175][T24821] bond763 (unregistering): (slave vlan598): Releasing active interface [ 2354.803875][T24821] bond763 (unregistering): Released all slaves [ 2354.871153][T24821] bond762 (unregistering): (slave vlan597): Releasing active interface [ 2355.000890][T24821] bond762 (unregistering): Released all slaves [ 2355.040385][T24821] bond761 (unregistering): (slave vlan596): Releasing active interface [ 2355.180477][T24821] bond761 (unregistering): Released all slaves [ 2355.300507][T24821] bond760 (unregistering): Released all slaves [ 2355.360529][T24821] bond759 (unregistering): (slave vlan595): Releasing active interface [ 2355.510570][T24821] bond759 (unregistering): Released all slaves [ 2355.545902][T24821] bond758 (unregistering): (slave vlan594): Releasing active interface [ 2355.630310][T24821] bond758 (unregistering): Released all slaves [ 2355.651259][T24821] bond757 (unregistering): (slave vlan593): Releasing active interface [ 2355.753844][T24821] bond757 (unregistering): Released all slaves [ 2355.774726][T24821] bond756 (unregistering): (slave vlan592): Releasing active interface [ 2355.873019][T24821] bond756 (unregistering): Released all slaves [ 2355.895074][T24821] bond755 (unregistering): (slave vlan591): Releasing active interface [ 2355.974152][T24821] bond755 (unregistering): Released all slaves [ 2355.999987][T24821] bond754 (unregistering): (slave vlan590): Releasing active interface [ 2356.093369][T24821] bond754 (unregistering): Released all slaves [ 2356.115952][T24821] bond753 (unregistering): (slave vlan589): Releasing active interface [ 2356.195544][T24821] bond753 (unregistering): Released all slaves [ 2356.220451][T24821] bond752 (unregistering): (slave vlan588): Releasing active interface [ 2356.293639][T24821] bond752 (unregistering): Released all slaves [ 2356.314278][T24821] bond751 (unregistering): (slave vlan587): Releasing active interface [ 2356.394029][T24821] bond751 (unregistering): Released all slaves [ 2356.412189][T24821] bond750 (unregistering): (slave vlan586): Releasing active interface [ 2356.487569][T24821] bond750 (unregistering): Released all slaves [ 2356.510383][T24821] bond749 (unregistering): (slave vlan585): Releasing active interface [ 2356.574320][T24821] bond749 (unregistering): Released all slaves [ 2356.593340][T24821] bond748 (unregistering): (slave vlan584): Releasing active interface [ 2356.675791][T24821] bond748 (unregistering): Released all slaves [ 2356.702193][T24821] bond747 (unregistering): (slave vlan583): Releasing active interface [ 2356.773718][T24821] bond747 (unregistering): Released all slaves [ 2356.865336][T24821] bond746 (unregistering): Released all slaves [ 2356.891199][T24821] bond745 (unregistering): (slave vlan582): Releasing active interface [ 2356.953541][T24821] bond745 (unregistering): Released all slaves [ 2356.972055][T24821] bond744 (unregistering): (slave vlan581): Releasing active interface [ 2357.054548][T24821] bond744 (unregistering): Released all slaves [ 2357.075992][T24821] bond743 (unregistering): (slave vlan580): Releasing active interface [ 2357.142772][T24821] bond743 (unregistering): Released all slaves [ 2357.170084][T24821] bond742 (unregistering): (slave vlan579): Releasing active interface [ 2357.245687][T24821] bond742 (unregistering): Released all slaves [ 2357.269900][T24821] bond741 (unregistering): (slave vlan578): Releasing active interface [ 2357.350745][T24821] bond741 (unregistering): Released all slaves [ 2357.371579][T24821] bond740 (unregistering): (slave vlan577): Releasing active interface [ 2357.456136][T24821] bond740 (unregistering): Released all slaves [ 2357.474763][T24821] bond739 (unregistering): (slave vlan576): Releasing active interface [ 2357.585312][T24821] bond739 (unregistering): Released all slaves [ 2357.610530][T24821] bond738 (unregistering): (slave vlan575): Releasing active interface [ 2357.743756][T24821] bond738 (unregistering): Released all slaves [ 2357.774355][T24821] bond737 (unregistering): (slave vlan574): Releasing active interface [ 2357.863530][T24821] bond737 (unregistering): Released all slaves [ 2357.882059][T24821] bond736 (unregistering): (slave vlan573): Releasing active interface [ 2358.034932][T24821] bond736 (unregistering): Released all slaves [ 2358.053984][T24821] bond735 (unregistering): (slave vlan572): Releasing active interface [ 2358.146788][T24821] bond735 (unregistering): Released all slaves [ 2358.170030][T24821] bond734 (unregistering): (slave vlan571): Releasing active interface [ 2358.193341][T24821] bond734 (unregistering): Released all slaves [ 2358.274210][T24821] bond733 (unregistering): (slave vlan570): Releasing active interface [ 2358.354961][T24821] bond733 (unregistering): Released all slaves [ 2358.380005][T24821] bond732 (unregistering): (slave vlan569): Releasing active interface [ 2358.463761][T24821] bond732 (unregistering): Released all slaves [ 2358.485553][T24821] bond731 (unregistering): (slave vlan568): Releasing active interface [ 2358.573537][T24821] bond731 (unregistering): Released all slaves [ 2358.600401][T24821] bond730 (unregistering): (slave vlan567): Releasing active interface [ 2358.705796][T24821] bond730 (unregistering): Released all slaves [ 2358.742878][T24821] bond729 (unregistering): (slave vlan566): Releasing active interface [ 2358.822834][T24821] bond729 (unregistering): Released all slaves [ 2358.844474][T24821] bond728 (unregistering): (slave vlan565): Releasing active interface [ 2358.925219][T24821] bond728 (unregistering): Released all slaves [ 2358.949567][T24821] bond727 (unregistering): (slave vlan564): Releasing active interface [ 2358.972255][T24821] bond727 (unregistering): Released all slaves [ 2359.046085][T24821] bond726 (unregistering): (slave vlan563): Releasing active interface [ 2359.129206][T24821] bond726 (unregistering): Released all slaves [ 2359.151261][T24821] bond725 (unregistering): (slave vlan562): Releasing active interface [ 2359.233195][T24821] bond725 (unregistering): Released all slaves [ 2359.254575][T24821] bond724 (unregistering): (slave vlan561): Releasing active interface [ 2359.339139][T24821] bond724 (unregistering): Released all slaves [ 2359.361075][T24821] bond723 (unregistering): (slave vlan560): Releasing active interface [ 2359.450995][T24821] bond723 (unregistering): Released all slaves [ 2359.471732][T24821] bond722 (unregistering): (slave vlan559): Releasing active interface [ 2359.535550][T24821] bond722 (unregistering): Released all slaves [ 2359.562900][T24821] bond721 (unregistering): (slave vlan558): Releasing active interface [ 2359.645462][T24821] bond721 (unregistering): Released all slaves [ 2359.675878][T24821] bond720 (unregistering): (slave vlan557): Releasing active interface [ 2359.733958][T24821] bond720 (unregistering): Released all slaves [ 2359.774102][T24821] bond719 (unregistering): (slave vlan556): Releasing active interface [ 2359.853222][T24821] bond719 (unregistering): Released all slaves [ 2359.881373][T24821] bond718 (unregistering): (slave vlan555): Releasing active interface [ 2359.956521][T24821] bond718 (unregistering): Released all slaves [ 2359.979943][T24821] bond717 (unregistering): (slave vlan554): Releasing active interface [ 2360.146710][T24821] bond717 (unregistering): Released all slaves [ 2360.185209][T24821] bond716 (unregistering): (slave vlan553): Releasing active interface [ 2360.254454][T24821] bond716 (unregistering): Released all slaves [ 2360.272594][T24821] bond715 (unregistering): (slave vlan552): Releasing active interface [ 2360.353745][T24821] bond715 (unregistering): Released all slaves [ 2360.375492][T24821] bond714 (unregistering): (slave vlan551): Releasing active interface [ 2360.443063][T24821] bond714 (unregistering): Released all slaves [ 2360.464237][T24821] bond713 (unregistering): (slave vlan550): Releasing active interface [ 2360.546035][T24821] bond713 (unregistering): Released all slaves [ 2360.569889][T24821] bond712 (unregistering): (slave vlan549): Releasing active interface [ 2360.654689][T24821] bond712 (unregistering): Released all slaves [ 2360.675787][T24821] bond711 (unregistering): (slave vlan548): Releasing active interface [ 2360.776096][T24821] bond711 (unregistering): Released all slaves [ 2360.813632][T24821] bond710 (unregistering): (slave vlan547): Releasing active interface [ 2360.892966][T24821] bond710 (unregistering): Released all slaves [ 2360.914879][T24821] bond709 (unregistering): (slave vlan546): Releasing active interface [ 2360.989812][T24821] bond709 (unregistering): Released all slaves [ 2361.011021][T24821] bond708 (unregistering): (slave vlan545): Releasing active interface [ 2361.105588][T24821] bond708 (unregistering): Released all slaves [ 2361.131144][T24821] bond707 (unregistering): (slave vlan544): Releasing active interface [ 2361.209352][T24821] bond707 (unregistering): Released all slaves [ 2361.230972][T24821] bond706 (unregistering): (slave vlan543): Releasing active interface [ 2361.324226][T24821] bond706 (unregistering): Released all slaves [ 2361.350162][T24821] bond705 (unregistering): (slave vlan542): Releasing active interface [ 2361.373003][T24821] bond705 (unregistering): Released all slaves [ 2361.442548][T24821] bond704 (unregistering): (slave vlan541): Releasing active interface [ 2361.531652][T24821] bond704 (unregistering): Released all slaves [ 2361.552877][T24821] bond703 (unregistering): (slave vlan540): Releasing active interface [ 2361.635065][T24821] bond703 (unregistering): Released all slaves [ 2361.662721][T24821] bond702 (unregistering): (slave vlan539): Releasing active interface [ 2361.755513][T24821] bond702 (unregistering): Released all slaves [ 2361.780045][T24821] bond701 (unregistering): (slave vlan538): Releasing active interface [ 2361.853720][T24821] bond701 (unregistering): Released all slaves [ 2361.872462][T24821] bond700 (unregistering): (slave vlan537): Releasing active interface [ 2361.994543][T24821] bond700 (unregistering): Released all slaves [ 2362.013193][T24821] bond699 (unregistering): (slave vlan536): Releasing active interface [ 2362.086156][T24821] bond699 (unregistering): Released all slaves [ 2362.104951][T24821] bond698 (unregistering): (slave vlan535): Releasing active interface [ 2362.196058][T24821] bond698 (unregistering): Released all slaves [ 2362.214423][T24821] bond697 (unregistering): (slave vlan534): Releasing active interface [ 2362.253826][T24821] bond697 (unregistering): Released all slaves [ 2362.315637][T24821] bond696 (unregistering): (slave vlan533): Releasing active interface [ 2362.342588][T24821] bond696 (unregistering): Released all slaves [ 2362.402945][T24821] bond695 (unregistering): (slave vlan532): Releasing active interface [ 2362.495650][T24821] bond695 (unregistering): Released all slaves [ 2362.513870][T24821] bond694 (unregistering): (slave vlan531): Releasing active interface [ 2362.603976][T24821] bond694 (unregistering): Released all slaves [ 2362.624729][T24821] bond693 (unregistering): (slave vlan530): Releasing active interface [ 2362.654432][T24821] bond693 (unregistering): Released all slaves [ 2362.723434][T24821] bond692 (unregistering): (slave vlan529): Releasing active interface [ 2362.814103][T24821] bond692 (unregistering): Released all slaves [ 2362.835778][T24821] bond691 (unregistering): (slave vlan528): Releasing active interface [ 2362.935157][T24821] bond691 (unregistering): Released all slaves [ 2362.963140][T24821] bond690 (unregistering): (slave vlan527): Releasing active interface [ 2363.055193][T24821] bond690 (unregistering): Released all slaves [ 2363.081648][T24821] bond689 (unregistering): (slave vlan526): Releasing active interface [ 2363.165165][T24821] bond689 (unregistering): Released all slaves [ 2363.191774][T24821] bond688 (unregistering): (slave vlan525): Releasing active interface [ 2363.264197][T24821] bond688 (unregistering): Released all slaves [ 2363.291258][T24821] bond687 (unregistering): (slave vlan524): Releasing active interface [ 2363.364006][T24821] bond687 (unregistering): Released all slaves [ 2363.384649][T24821] bond686 (unregistering): (slave vlan523): Releasing active interface [ 2363.464270][T24821] bond686 (unregistering): Released all slaves [ 2363.535855][T24821] bond685 (unregistering): Released all slaves [ 2363.561608][T24821] bond684 (unregistering): (slave vlan522): Releasing active interface [ 2363.633771][T24821] bond684 (unregistering): Released all slaves [ 2363.662177][T24821] bond683 (unregistering): (slave vlan521): Releasing active interface [ 2363.746021][T24821] bond683 (unregistering): Released all slaves [ 2363.772770][T24821] bond682 (unregistering): (slave vlan520): Releasing active interface [ 2363.884754][T24821] bond682 (unregistering): Released all slaves [ 2363.905688][T24821] bond681 (unregistering): (slave vlan519): Releasing active interface [ 2364.014412][T24821] bond681 (unregistering): Released all slaves [ 2364.039680][T24821] bond680 (unregistering): (slave vlan518): Releasing active interface [ 2364.103752][T24821] bond680 (unregistering): Released all slaves [ 2364.124986][T24821] bond679 (unregistering): (slave vlan517): Releasing active interface [ 2364.214839][T24821] bond679 (unregistering): Released all slaves [ 2364.235765][T24821] bond678 (unregistering): (slave vlan516): Releasing active interface [ 2364.335554][T24821] bond678 (unregistering): Released all slaves [ 2364.359022][T24821] bond677 (unregistering): (slave vlan515): Releasing active interface [ 2364.440142][T24821] bond677 (unregistering): Released all slaves [ 2364.461221][T24821] bond676 (unregistering): (slave vlan514): Releasing active interface [ 2364.535478][T24821] bond676 (unregistering): Released all slaves [ 2364.562670][T24821] bond675 (unregistering): (slave vlan513): Releasing active interface [ 2364.654204][T24821] bond675 (unregistering): Released all slaves [ 2364.675756][T24821] bond674 (unregistering): (slave vlan512): Releasing active interface [ 2364.751215][T24821] bond674 (unregistering): Released all slaves [ 2364.772786][T24821] bond673 (unregistering): (slave vlan511): Releasing active interface [ 2364.855243][T24821] bond673 (unregistering): Released all slaves [ 2364.881507][T24821] bond672 (unregistering): (slave vlan510): Releasing active interface [ 2364.945078][T24821] bond672 (unregistering): Released all slaves [ 2364.990717][T24821] bond671 (unregistering): (slave vlan509): Releasing active interface [ 2365.086057][T24821] bond671 (unregistering): Released all slaves [ 2365.110355][T24821] bond670 (unregistering): (slave vlan508): Releasing active interface [ 2365.200099][T24821] bond670 (unregistering): Released all slaves [ 2365.221297][T24821] bond669 (unregistering): (slave vlan507): Releasing active interface [ 2365.293926][T24821] bond669 (unregistering): Released all slaves [ 2365.329420][T24821] bond668 (unregistering): (slave vlan506): Releasing active interface [ 2365.413735][T24821] bond668 (unregistering): Released all slaves [ 2365.442171][T24821] bond667 (unregistering): (slave vlan505): Releasing active interface [ 2365.545861][T24821] bond667 (unregistering): Released all slaves [ 2365.622811][T24821] bond666 (unregistering): Released all slaves [ 2365.650474][T24821] bond665 (unregistering): (slave vlan504): Releasing active interface [ 2365.713173][T24821] bond665 (unregistering): Released all slaves [ 2365.734285][T24821] bond664 (unregistering): (slave vlan503): Releasing active interface [ 2365.836159][T24821] bond664 (unregistering): Released all slaves [ 2365.882427][T24821] bond663 (unregistering): (slave vlan502): Releasing active interface [ 2365.989496][T24821] bond663 (unregistering): Released all slaves [ 2366.030966][T24821] bond662 (unregistering): (slave vlan501): Releasing active interface [ 2366.125180][T24821] bond662 (unregistering): Released all slaves [ 2366.160540][T24821] bond661 (unregistering): (slave vlan500): Releasing active interface [ 2366.246663][T24821] bond661 (unregistering): Released all slaves [ 2366.290335][T24821] bond660 (unregistering): (slave vlan499): Releasing active interface [ 2366.373236][T24821] bond660 (unregistering): Released all slaves [ 2366.395899][T24821] bond659 (unregistering): (slave vlan498): Releasing active interface [ 2366.496122][T24821] bond659 (unregistering): Released all slaves [ 2366.523669][T24821] bond658 (unregistering): (slave vlan497): Releasing active interface [ 2366.594482][T24821] bond658 (unregistering): Released all slaves [ 2366.619463][T24821] bond657 (unregistering): (slave vlan496): Releasing active interface [ 2366.723916][T24821] bond657 (unregistering): Released all slaves [ 2366.749763][T24821] bond656 (unregistering): (slave vlan495): Releasing active interface [ 2366.829709][T24821] bond656 (unregistering): Released all slaves [ 2366.852983][T24821] bond655 (unregistering): (slave vlan494): Releasing active interface [ 2366.923995][T24821] bond655 (unregistering): Released all slaves [ 2366.945692][T24821] bond654 (unregistering): (slave vlan493): Releasing active interface [ 2367.054725][T24821] bond654 (unregistering): Released all slaves [ 2367.080797][T24821] bond653 (unregistering): (slave vlan492): Releasing active interface [ 2367.174621][T24821] bond653 (unregistering): Released all slaves [ 2367.200415][T24821] bond652 (unregistering): (slave vlan491): Releasing active interface [ 2367.275673][T24821] bond652 (unregistering): Released all slaves [ 2367.294962][T24821] bond651 (unregistering): (slave vlan490): Releasing active interface [ 2367.373566][T24821] bond651 (unregistering): Released all slaves [ 2367.392308][T24821] bond650 (unregistering): (slave vlan489): Releasing active interface [ 2367.540362][T24821] bond650 (unregistering): Released all slaves [ 2367.562829][T24821] bond649 (unregistering): (slave vlan488): Releasing active interface [ 2367.650026][T24821] bond649 (unregistering): Released all slaves [ 2367.671834][T24821] bond648 (unregistering): (slave vlan487): Releasing active interface [ 2367.804019][T24821] bond648 (unregistering): Released all slaves [ 2367.821927][T24821] bond647 (unregistering): (slave vlan486): Releasing active interface [ 2367.905134][T24821] bond647 (unregistering): Released all slaves [ 2367.929854][T24821] bond646 (unregistering): (slave vlan485): Releasing active interface [ 2368.012446][T24821] bond646 (unregistering): Released all slaves [ 2368.033634][T24821] bond645 (unregistering): (slave vlan484): Releasing active interface [ 2368.214977][T24821] bond645 (unregistering): Released all slaves [ 2368.240448][T24821] bond644 (unregistering): (slave vlan483): Releasing active interface [ 2368.331354][T24821] bond644 (unregistering): Released all slaves [ 2368.402838][T24821] bond643 (unregistering): Released all slaves [ 2368.423725][T24821] bond642 (unregistering): (slave vlan482): Releasing active interface [ 2368.511689][T24821] bond642 (unregistering): Released all slaves [ 2368.530155][T24821] bond641 (unregistering): (slave vlan481): Releasing active interface [ 2368.593510][T24821] bond641 (unregistering): Released all slaves [ 2368.612325][T24821] bond640 (unregistering): (slave vlan480): Releasing active interface [ 2368.695178][T24821] bond640 (unregistering): Released all slaves [ 2368.714013][T24821] bond639 (unregistering): (slave vlan479): Releasing active interface [ 2368.813886][T24821] bond639 (unregistering): Released all slaves [ 2368.835189][T24821] bond638 (unregistering): (slave vlan478): Releasing active interface [ 2368.963647][T24821] bond638 (unregistering): Released all slaves [ 2368.982511][T24821] bond637 (unregistering): (slave vlan477): Releasing active interface [ 2369.064530][T24821] bond637 (unregistering): Released all slaves [ 2369.089895][T24821] bond636 (unregistering): (slave vlan476): Releasing active interface [ 2369.174269][T24821] bond636 (unregistering): Released all slaves [ 2369.210143][T24821] bond635 (unregistering): (slave vlan475): Releasing active interface [ 2369.344430][T24821] bond635 (unregistering): Released all slaves [ 2369.362492][T24821] bond634 (unregistering): (slave vlan474): Releasing active interface [ 2369.445696][T24821] bond634 (unregistering): Released all slaves [ 2369.470001][T24821] bond633 (unregistering): (slave vlan473): Releasing active interface [ 2369.583998][T24821] bond633 (unregistering): Released all slaves [ 2369.605191][T24821] bond632 (unregistering): (slave vlan472): Releasing active interface [ 2369.683302][T24821] bond632 (unregistering): Released all slaves [ 2369.713413][T24821] bond631 (unregistering): (slave vlan471): Releasing active interface [ 2369.773623][T24821] bond631 (unregistering): Released all slaves [ 2369.792229][T24821] bond630 (unregistering): (slave vlan470): Releasing active interface [ 2369.865091][T24821] bond630 (unregistering): Released all slaves [ 2369.883242][T24821] bond629 (unregistering): (slave vlan469): Releasing active interface [ 2369.975261][T24821] bond629 (unregistering): Released all slaves [ 2369.995604][T24821] bond628 (unregistering): (slave vlan468): Releasing active interface [ 2370.069701][T24821] bond628 (unregistering): Released all slaves [ 2370.091165][T24821] bond627 (unregistering): (slave vlan467): Releasing active interface [ 2370.209383][T24821] bond627 (unregistering): Released all slaves [ 2370.230419][T24821] bond626 (unregistering): (slave vlan466): Releasing active interface [ 2370.295870][T24821] bond626 (unregistering): Released all slaves [ 2370.321403][T24821] bond625 (unregistering): (slave vlan465): Releasing active interface [ 2370.393976][T24821] bond625 (unregistering): Released all slaves [ 2370.415038][T24821] bond624 (unregistering): (slave vlan464): Releasing active interface [ 2370.484960][T24821] bond624 (unregistering): Released all slaves [ 2370.510899][T24821] bond623 (unregistering): (slave vlan463): Releasing active interface [ 2370.582972][T24821] bond623 (unregistering): Released all slaves [ 2370.610366][T24821] bond622 (unregistering): (slave vlan462): Releasing active interface [ 2370.695870][T24821] bond622 (unregistering): Released all slaves [ 2370.775706][T24821] bond621 (unregistering): Released all slaves [ 2370.800242][T24821] bond620 (unregistering): (slave vlan461): Releasing active interface [ 2370.894480][T24821] bond620 (unregistering): Released all slaves [ 2370.919602][T24821] bond619 (unregistering): (slave vlan460): Releasing active interface [ 2371.003271][T24821] bond619 (unregistering): Released all slaves [ 2371.023872][T24821] bond618 (unregistering): (slave vlan459): Releasing active interface [ 2371.109301][T24821] bond618 (unregistering): Released all slaves [ 2371.130611][T24821] bond617 (unregistering): (slave vlan458): Releasing active interface [ 2371.223090][T24821] bond617 (unregistering): Released all slaves [ 2371.244163][T24821] bond616 (unregistering): (slave vlan457): Releasing active interface [ 2371.324601][T24821] bond616 (unregistering): Released all slaves [ 2371.345771][T24821] bond615 (unregistering): (slave vlan456): Releasing active interface [ 2371.424894][T24821] bond615 (unregistering): Released all slaves [ 2371.445818][T24821] bond614 (unregistering): (slave vlan455): Releasing active interface [ 2371.515001][T24821] bond614 (unregistering): Released all slaves [ 2371.535224][T24821] bond613 (unregistering): (slave vlan454): Releasing active interface [ 2371.616119][T24821] bond613 (unregistering): Released all slaves [ 2371.634315][T24821] bond612 (unregistering): (slave vlan453): Releasing active interface [ 2371.726829][T24821] bond612 (unregistering): Released all slaves [ 2371.841041][T24821] bond611 (unregistering): Released all slaves [ 2371.862313][T24821] bond610 (unregistering): (slave vlan452): Releasing active interface [ 2371.947050][T24821] bond610 (unregistering): Released all slaves [ 2371.969763][T24821] bond609 (unregistering): (slave vlan451): Releasing active interface [ 2371.988298][ T145] Bluetooth: hci1: command 0x0406 tx timeout [ 2372.051510][T24821] bond609 (unregistering): Released all slaves [ 2372.072657][T24821] bond608 (unregistering): (slave vlan450): Releasing active interface [ 2372.159854][T24821] bond608 (unregistering): Released all slaves [ 2372.181369][T24821] bond607 (unregistering): (slave vlan449): Releasing active interface [ 2372.254170][T24821] bond607 (unregistering): Released all slaves [ 2372.275342][T24821] bond606 (unregistering): (slave vlan448): Releasing active interface [ 2372.382802][T24821] bond606 (unregistering): Released all slaves [ 2372.404554][T24821] bond605 (unregistering): (slave vlan447): Releasing active interface [ 2372.491041][T24821] bond605 (unregistering): Released all slaves [ 2372.512595][T24821] bond604 (unregistering): (slave vlan446): Releasing active interface [ 2372.598861][T24821] bond604 (unregistering): Released all slaves [ 2372.620354][T24821] bond603 (unregistering): (slave vlan445): Releasing active interface [ 2372.702888][T24821] bond603 (unregistering): Released all slaves [ 2372.724195][T24821] bond602 (unregistering): (slave vlan444): Releasing active interface [ 2372.809888][T24821] bond602 (unregistering): Released all slaves [ 2372.831225][T24821] bond601 (unregistering): (slave vlan443): Releasing active interface [ 2372.903698][T24821] bond601 (unregistering): Released all slaves [ 2372.921332][T24821] bond600 (unregistering): (slave vlan442): Releasing active interface [ 2372.984558][T24821] bond600 (unregistering): Released all slaves [ 2373.002711][T24821] bond599 (unregistering): (slave vlan441): Releasing active interface [ 2373.083939][T24821] bond599 (unregistering): Released all slaves [ 2373.102569][T24821] bond598 (unregistering): (slave vlan440): Releasing active interface [ 2373.225793][T24821] bond598 (unregistering): Released all slaves [ 2373.244884][T24821] bond597 (unregistering): (slave vlan439): Releasing active interface [ 2373.373618][T24821] bond597 (unregistering): Released all slaves [ 2373.394358][T24821] bond596 (unregistering): (slave vlan438): Releasing active interface [ 2373.475059][T24821] bond596 (unregistering): Released all slaves [ 2373.500123][T24821] bond595 (unregistering): (slave vlan437): Releasing active interface [ 2373.584066][T24821] bond595 (unregistering): Released all slaves [ 2373.605153][T24821] bond594 (unregistering): (slave vlan436): Releasing active interface [ 2373.710590][T24821] bond594 (unregistering): Released all slaves [ 2373.732381][T24821] bond593 (unregistering): (slave vlan435): Releasing active interface [ 2373.833043][T24821] bond593 (unregistering): Released all slaves [ 2373.854184][T24821] bond592 (unregistering): (slave vlan434): Releasing active interface [ 2373.944273][T24821] bond592 (unregistering): Released all slaves [ 2373.965818][T24821] bond591 (unregistering): (slave vlan433): Releasing active interface [ 2374.099029][T24821] bond591 (unregistering): Released all slaves [ 2374.117210][T24821] bond590 (unregistering): (slave vlan432): Releasing active interface [ 2374.193418][T24821] bond590 (unregistering): Released all slaves [ 2374.214894][T24821] bond589 (unregistering): (slave vlan431): Releasing active interface [ 2374.283550][T24821] bond589 (unregistering): Released all slaves [ 2374.304855][T24821] bond588 (unregistering): (slave vlan430): Releasing active interface [ 2374.405905][T24821] bond588 (unregistering): Released all slaves [ 2374.429867][T24821] bond587 (unregistering): (slave vlan429): Releasing active interface [ 2374.509252][T24821] bond587 (unregistering): Released all slaves [ 2374.530622][T24821] bond586 (unregistering): (slave vlan428): Releasing active interface [ 2374.612234][T24821] bond586 (unregistering): Released all slaves [ 2374.695251][T24821] bond585 (unregistering): Released all slaves [ 2374.720554][T24821] bond584 (unregistering): (slave vlan427): Releasing active interface [ 2374.793201][T24821] bond584 (unregistering): Released all slaves [ 2374.814565][T24821] bond583 (unregistering): (slave vlan426): Releasing active interface [ 2374.893917][T24821] bond583 (unregistering): Released all slaves [ 2375.006081][T24821] bond582 (unregistering): Released all slaves [ 2375.024516][T24821] bond581 (unregistering): (slave vlan425): Releasing active interface [ 2375.104968][T24821] bond581 (unregistering): Released all slaves [ 2375.163332][T24821] bond580 (unregistering): Released all slaves [ 2375.181821][T24821] bond579 (unregistering): (slave vlan424): Releasing active interface [ 2375.265163][T24821] bond579 (unregistering): Released all slaves [ 2375.363825][T24821] bond578 (unregistering): Released all slaves [ 2375.384717][T24821] bond577 (unregistering): (slave vlan423): Releasing active interface [ 2375.463627][T24821] bond577 (unregistering): Released all slaves [ 2375.532486][T24821] bond576 (unregistering): Released all slaves [ 2375.554145][T24821] bond575 (unregistering): (slave vlan422): Releasing active interface [ 2375.635232][T24821] bond575 (unregistering): Released all slaves [ 2375.734816][T24821] bond574 (unregistering): Released all slaves [ 2375.804098][T24821] bond573 (unregistering): Released all slaves [ 2375.892914][T24821] bond572 (unregistering): Released all slaves [ 2375.983674][T24821] bond571 (unregistering): Released all slaves [ 2376.114479][T24821] bond570 (unregistering): Released all slaves [ 2376.214446][T24821] bond569 (unregistering): Released all slaves [ 2376.284591][T24821] bond568 (unregistering): Released all slaves [ 2376.344340][T24821] bond567 (unregistering): Released all slaves [ 2376.402554][T24821] bond566 (unregistering): Released all slaves [ 2376.465664][T24821] bond565 (unregistering): Released all slaves [ 2376.565493][T24821] bond564 (unregistering): Released all slaves [ 2376.643438][T24821] bond563 (unregistering): Released all slaves [ 2376.734482][T24821] bond562 (unregistering): Released all slaves [ 2376.815700][T24821] bond561 (unregistering): Released all slaves [ 2376.899572][T24821] bond560 (unregistering): Released all slaves [ 2377.003726][T24821] bond559 (unregistering): Released all slaves [ 2377.084957][T24821] bond558 (unregistering): Released all slaves [ 2377.109200][ T6575] Bluetooth: hci5: command 0x0406 tx timeout [ 2377.174450][T24821] bond557 (unregistering): Released all slaves [ 2377.235216][T24821] bond556 (unregistering): Released all slaves [ 2377.315456][T24821] bond555 (unregistering): Released all slaves [ 2377.453734][T24821] bond554 (unregistering): Released all slaves [ 2377.522261][T24821] bond553 (unregistering): Released all slaves [ 2377.585455][T24821] bond552 (unregistering): Released all slaves [ 2377.664740][T24821] bond551 (unregistering): Released all slaves [ 2377.755829][T24821] bond550 (unregistering): Released all slaves [ 2377.824040][T24821] bond549 (unregistering): Released all slaves [ 2377.902500][T24821] bond548 (unregistering): Released all slaves [ 2377.996728][T24821] bond547 (unregistering): Released all slaves [ 2378.065620][T24821] bond546 (unregistering): Released all slaves [ 2378.157064][T24821] bond545 (unregistering): Released all slaves [ 2378.242428][T24821] bond544 (unregistering): Released all slaves [ 2378.344210][T24821] bond543 (unregistering): Released all slaves [ 2378.424210][T24821] bond542 (unregistering): Released all slaves [ 2378.495368][T24821] bond541 (unregistering): Released all slaves [ 2378.513706][T24821] bond540 (unregistering): Released all slaves [ 2378.644026][T24821] bond539 (unregistering): Released all slaves [ 2378.723653][T24821] bond538 (unregistering): Released all slaves [ 2378.745512][T24821] bond537 (unregistering): (slave vlan421): Releasing active interface [ 2378.829259][T24821] bond537 (unregistering): Released all slaves [ 2378.851218][T24821] bond536 (unregistering): (slave vlan420): Releasing active interface [ 2378.923442][T24821] bond536 (unregistering): Released all slaves [ 2378.943740][T24821] bond535 (unregistering): (slave vlan419): Releasing active interface [ 2379.042972][T24821] bond535 (unregistering): Released all slaves [ 2379.063303][T24821] bond534 (unregistering): (slave vlan418): Releasing active interface [ 2379.152860][T24821] bond534 (unregistering): Released all slaves [ 2379.174793][T24821] bond533 (unregistering): (slave vlan417): Releasing active interface [ 2379.256189][T24821] bond533 (unregistering): Released all slaves [ 2379.280772][T24821] bond532 (unregistering): (slave vlan416): Releasing active interface [ 2379.365279][T24821] bond532 (unregistering): Released all slaves [ 2379.400442][T24821] bond531 (unregistering): (slave vlan415): Releasing active interface [ 2379.506131][T24821] bond531 (unregistering): Released all slaves [ 2379.542989][T24821] bond530 (unregistering): (slave vlan414): Releasing active interface [ 2379.664579][T24821] bond530 (unregistering): Released all slaves [ 2379.684908][T24821] bond529 (unregistering): (slave vlan413): Releasing active interface [ 2379.777344][T24821] bond529 (unregistering): Released all slaves [ 2379.799905][T24821] bond528 (unregistering): (slave vlan412): Releasing active interface [ 2379.874281][T24821] bond528 (unregistering): Released all slaves [ 2379.892445][T24821] bond527 (unregistering): (slave vlan411): Releasing active interface [ 2379.984103][T24821] bond527 (unregistering): Released all slaves [ 2380.002346][T24821] bond526 (unregistering): (slave vlan410): Releasing active interface [ 2380.094079][T24821] bond526 (unregistering): Released all slaves [ 2380.113030][T24821] bond525 (unregistering): (slave vlan409): Releasing active interface [ 2380.220169][T24821] bond525 (unregistering): Released all slaves [ 2380.270681][T24821] bond524 (unregistering): (slave vlan408): Releasing active interface [ 2380.355656][T24821] bond524 (unregistering): Released all slaves [ 2380.412280][T24821] bond523 (unregistering): (slave vlan407): Releasing active interface [ 2380.535481][T24821] bond523 (unregistering): Released all slaves [ 2380.572101][T24821] bond522 (unregistering): (slave vlan406): Releasing active interface [ 2380.654818][T24821] bond522 (unregistering): Released all slaves [ 2380.690262][T24821] bond521 (unregistering): (slave vlan405): Releasing active interface [ 2380.729302][ T3657] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2380.743603][ T3657] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2380.765151][ T3657] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2380.766545][T24821] bond521 (unregistering): Released all slaves [ 2380.785682][T12628] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2380.799366][T12628] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2380.811813][T12628] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2380.874033][T24821] bond520 (unregistering): (slave vlan404): Releasing active interface [ 2380.954903][T24821] bond520 (unregistering): Released all slaves [ 2380.981523][T24821] bond519 (unregistering): (slave vlan403): Releasing active interface [ 2381.065196][T24821] bond519 (unregistering): Released all slaves [ 2381.091163][T24821] bond518 (unregistering): (slave vlan402): Releasing active interface [ 2381.175087][T24821] bond518 (unregistering): Released all slaves [ 2381.202499][T24821] bond517 (unregistering): (slave vlan401): Releasing active interface [ 2381.285056][T24821] bond517 (unregistering): Released all slaves [ 2381.311712][T24821] bond516 (unregistering): (slave vlan400): Releasing active interface [ 2381.395027][T24821] bond516 (unregistering): Released all slaves [ 2381.421159][T24821] bond515 (unregistering): (slave vlan399): Releasing active interface [ 2381.493489][T24821] bond515 (unregistering): Released all slaves [ 2381.520556][T24821] bond514 (unregistering): (slave vlan398): Releasing active interface [ 2381.612875][T24821] bond514 (unregistering): Released all slaves [ 2381.634382][T24821] bond513 (unregistering): (slave vlan397): Releasing active interface [ 2381.715510][T24821] bond513 (unregistering): Released all slaves [ 2381.752191][T24821] bond512 (unregistering): (slave vlan396): Releasing active interface [ 2381.875496][T24821] bond512 (unregistering): Released all slaves [ 2381.919865][T24821] bond511 (unregistering): (slave vlan395): Releasing active interface [ 2382.014884][T24821] bond511 (unregistering): Released all slaves [ 2382.039954][T24821] bond510 (unregistering): (slave vlan394): Releasing active interface [ 2382.116232][T24821] bond510 (unregistering): Released all slaves [ 2382.139947][T24821] bond509 (unregistering): (slave vlan393): Releasing active interface [ 2382.223950][T24821] bond509 (unregistering): Released all slaves [ 2382.250008][T24821] bond508 (unregistering): (slave vlan392): Releasing active interface [ 2382.333166][T24821] bond508 (unregistering): Released all slaves [ 2382.354374][T24821] bond507 (unregistering): (slave vlan391): Releasing active interface [ 2382.425600][T24821] bond507 (unregistering): Released all slaves [ 2382.449099][T24821] bond506 (unregistering): (slave vlan390): Releasing active interface [ 2382.525700][T24821] bond506 (unregistering): Released all slaves [ 2382.553460][T24821] bond505 (unregistering): (slave vlan389): Releasing active interface [ 2382.652356][T24821] bond505 (unregistering): Released all slaves [ 2382.673201][T24821] bond504 (unregistering): (slave vlan388): Releasing active interface [ 2382.763562][T24821] bond504 (unregistering): Released all slaves [ 2382.785095][T24821] bond503 (unregistering): (slave vlan387): Releasing active interface [ 2382.865924][T24821] bond503 (unregistering): Released all slaves [ 2382.868866][ T145] Bluetooth: hci8: command 0x0409 tx timeout [ 2382.883534][T24821] bond502 (unregistering): (slave vlan386): Releasing active interface [ 2382.963126][T24821] bond502 (unregistering): Released all slaves [ 2382.980974][T24821] bond501 (unregistering): (slave vlan385): Releasing active interface [ 2383.053708][T24821] bond501 (unregistering): Released all slaves [ 2383.081905][T24821] bond500 (unregistering): (slave vlan384): Releasing active interface [ 2383.146614][T24821] bond500 (unregistering): Released all slaves [ 2383.224121][T24821] bond499 (unregistering): Released all slaves [ 2383.249512][T24821] bond498 (unregistering): (slave vlan383): Releasing active interface [ 2383.322669][T24821] bond498 (unregistering): Released all slaves [ 2383.343946][T24821] bond497 (unregistering): (slave vlan382): Releasing active interface [ 2383.416199][T24821] bond497 (unregistering): Released all slaves [ 2383.439987][T24821] bond496 (unregistering): (slave vlan381): Releasing active interface [ 2383.519154][T24821] bond496 (unregistering): Released all slaves [ 2383.540415][T24821] bond495 (unregistering): (slave vlan380): Releasing active interface [ 2383.604842][T24821] bond495 (unregistering): Released all slaves [ 2383.623107][T24821] bond494 (unregistering): (slave vlan379): Releasing active interface [ 2383.694118][T24821] bond494 (unregistering): Released all slaves [ 2383.713691][T24821] bond493 (unregistering): (slave vlan378): Releasing active interface [ 2383.844822][T24821] bond493 (unregistering): Released all slaves [ 2383.864858][T24821] bond492 (unregistering): (slave vlan377): Releasing active interface [ 2383.945433][T24821] bond492 (unregistering): Released all slaves [ 2383.970292][T24821] bond491 (unregistering): (slave vlan376): Releasing active interface [ 2384.036217][T24821] bond491 (unregistering): Released all slaves [ 2384.061269][T24821] bond490 (unregistering): (slave vlan375): Releasing active interface [ 2384.132530][T24821] bond490 (unregistering): Released all slaves [ 2384.154851][T24821] bond489 (unregistering): (slave vlan374): Releasing active interface [ 2384.242479][T24821] bond489 (unregistering): Released all slaves [ 2384.264155][T24821] bond488 (unregistering): (slave vlan373): Releasing active interface [ 2384.344529][T24821] bond488 (unregistering): Released all slaves [ 2384.365745][T24821] bond487 (unregistering): (slave vlan372): Releasing active interface [ 2384.444157][T24821] bond487 (unregistering): Released all slaves [ 2384.464089][T24821] bond486 (unregistering): (slave vlan371): Releasing active interface [ 2384.543255][T24821] bond486 (unregistering): Released all slaves [ 2384.561595][T24821] bond485 (unregistering): (slave vlan370): Releasing active interface [ 2384.646173][T24821] bond485 (unregistering): Released all slaves [ 2384.664188][T24821] bond484 (unregistering): (slave vlan369): Releasing active interface [ 2384.754577][T24821] bond484 (unregistering): Released all slaves [ 2384.774733][T24821] bond483 (unregistering): (slave vlan368): Releasing active interface [ 2384.854995][T24821] bond483 (unregistering): Released all slaves [ 2384.880367][T24821] bond482 (unregistering): (slave vlan367): Releasing active interface [ 2384.948964][ T145] Bluetooth: hci8: command 0x041b tx timeout [ 2384.964992][T24821] bond482 (unregistering): Released all slaves [ 2384.988841][T24821] bond481 (unregistering): (slave vlan366): Releasing active interface [ 2385.082198][T24821] bond481 (unregistering): Released all slaves [ 2385.100440][T24821] bond480 (unregistering): (slave vlan365): Releasing active interface [ 2385.109055][ T3649] Bluetooth: hci9: Opcode 0x c03 failed: -110 [ 2385.381672][T24821] bond480 (unregistering): Released all slaves [ 2385.402866][T24821] bond479 (unregistering): (slave vlan364): Releasing active interface [ 2385.499876][T24821] bond479 (unregistering): Released all slaves [ 2385.545945][T24821] bond478 (unregistering): (slave vlan363): Releasing active interface [ 2385.645125][T24821] bond478 (unregistering): Released all slaves [ 2385.680129][T24821] bond477 (unregistering): (slave vlan362): Releasing active interface [ 2385.795030][T24821] bond477 (unregistering): Released all slaves [ 2385.830596][T24821] bond476 (unregistering): (slave vlan361): Releasing active interface [ 2385.934186][T24821] bond476 (unregistering): Released all slaves [ 2385.961855][T24821] bond475 (unregistering): (slave vlan360): Releasing active interface [ 2386.024791][T24821] bond475 (unregistering): Released all slaves [ 2386.050178][T24821] bond474 (unregistering): (slave vlan359): Releasing active interface [ 2386.144746][T24821] bond474 (unregistering): Released all slaves [ 2386.173470][T24821] bond473 (unregistering): (slave vlan358): Releasing active interface [ 2386.243431][T24821] bond473 (unregistering): Released all slaves [ 2386.261483][T24821] bond472 (unregistering): (slave vlan357): Releasing active interface [ 2386.353498][T24821] bond472 (unregistering): Released all slaves [ 2386.371236][T24821] bond471 (unregistering): (slave vlan356): Releasing active interface [ 2386.443692][T24821] bond471 (unregistering): Released all slaves [ 2386.463204][T24821] bond470 (unregistering): (slave vlan355): Releasing active interface [ 2386.557165][T24821] bond470 (unregistering): Released all slaves [ 2386.579427][T24821] bond469 (unregistering): (slave vlan354): Releasing active interface [ 2386.652458][T24821] bond469 (unregistering): Released all slaves [ 2386.673321][T24821] bond468 (unregistering): (slave vlan353): Releasing active interface [ 2386.740100][T24821] bond468 (unregistering): Released all slaves [ 2386.810793][T24821] bond467 (unregistering): Released all slaves [ 2386.833806][T24821] bond466 (unregistering): (slave vlan352): Releasing active interface [ 2386.925487][T24821] bond466 (unregistering): Released all slaves [ 2386.982896][T24821] bond465 (unregistering): (slave vlan351): Releasing active interface [ 2387.041740][ T6316] Bluetooth: hci8: command 0x040f tx timeout [ 2387.096655][T24821] bond465 (unregistering): Released all slaves [ 2387.136505][T24821] bond464 (unregistering): (slave vlan350): Releasing active interface [ 2387.222956][T24821] bond464 (unregistering): Released all slaves [ 2387.244269][T24821] bond463 (unregistering): (slave vlan349): Releasing active interface [ 2387.313335][T24821] bond463 (unregistering): Released all slaves [ 2387.331065][T24821] bond462 (unregistering): (slave vlan348): Releasing active interface [ 2387.402881][T24821] bond462 (unregistering): Released all slaves [ 2387.424653][T24821] bond461 (unregistering): (slave vlan347): Releasing active interface [ 2387.496095][T24821] bond461 (unregistering): Released all slaves [ 2387.519990][T24821] bond460 (unregistering): (slave vlan346): Releasing active interface [ 2387.613519][T24821] bond460 (unregistering): Released all slaves [ 2387.635461][T24821] bond459 (unregistering): (slave vlan345): Releasing active interface [ 2387.723809][T24821] bond459 (unregistering): Released all slaves [ 2387.744608][T24821] bond458 (unregistering): (slave vlan344): Releasing active interface [ 2387.815584][T24821] bond458 (unregistering): Released all slaves [ 2387.854742][T24821] bond457 (unregistering): (slave vlan343): Releasing active interface [ 2387.939799][T24821] bond457 (unregistering): Released all slaves [ 2387.961588][T24821] bond456 (unregistering): (slave vlan342): Releasing active interface [ 2388.025160][T24821] bond456 (unregistering): Released all slaves [ 2388.052659][T24821] bond455 (unregistering): (slave vlan341): Releasing active interface [ 2388.115052][T24821] bond455 (unregistering): Released all slaves [ 2388.140200][T24821] bond454 (unregistering): (slave vlan340): Releasing active interface [ 2388.243012][T24821] bond454 (unregistering): Released all slaves [ 2388.264864][T24821] bond453 (unregistering): (slave vlan339): Releasing active interface [ 2388.342494][T24821] bond453 (unregistering): Released all slaves [ 2388.356239][T12628] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2388.373953][T12628] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2388.389699][T12628] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2388.401318][T12628] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2388.412554][T12628] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2388.422607][T12628] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2388.429055][T24821] bond452 (unregistering): (slave vlan338): Releasing active interface [ 2388.565579][T24821] bond452 (unregistering): Released all slaves [ 2388.585110][T24821] bond451 (unregistering): (slave vlan337): Releasing active interface [ 2388.653523][T24821] bond451 (unregistering): Released all slaves [ 2388.672012][T24821] bond450 (unregistering): (slave vlan336): Releasing active interface [ 2388.765472][T24821] bond450 (unregistering): Released all slaves [ 2388.783803][T24821] bond449 (unregistering): (slave vlan335): Releasing active interface [ 2388.853388][T24821] bond449 (unregistering): Released all slaves [ 2388.885994][T24821] bond448 (unregistering): (slave vlan334): Releasing active interface [ 2388.969799][T24821] bond448 (unregistering): Released all slaves [ 2388.990920][T24821] bond447 (unregistering): (slave vlan333): Releasing active interface [ 2389.073134][T24821] bond447 (unregistering): Released all slaves [ 2389.091883][T24821] bond446 (unregistering): (slave vlan332): Releasing active interface [ 2389.109205][ T145] Bluetooth: hci8: command 0x0419 tx timeout [ 2389.184674][T24821] bond446 (unregistering): Released all slaves [ 2389.211102][T24821] bond445 (unregistering): (slave vlan331): Releasing active interface [ 2389.295288][T24821] bond445 (unregistering): Released all slaves [ 2389.316067][T24821] bond444 (unregistering): (slave vlan330): Releasing active interface [ 2389.399851][T24821] bond444 (unregistering): Released all slaves [ 2389.420859][T24821] bond443 (unregistering): (slave vlan329): Releasing active interface [ 2389.507336][T24821] bond443 (unregistering): Released all slaves [ 2389.530079][T24821] bond442 (unregistering): (slave vlan328): Releasing active interface [ 2389.609323][T24821] bond442 (unregistering): Released all slaves [ 2389.631903][T24821] bond441 (unregistering): (slave vlan327): Releasing active interface [ 2389.703202][T24821] bond441 (unregistering): Released all slaves [ 2389.724557][T24821] bond440 (unregistering): (slave vlan326): Releasing active interface [ 2389.793328][T24821] bond440 (unregistering): Released all slaves [ 2389.819998][T24821] bond439 (unregistering): (slave vlan325): Releasing active interface [ 2389.903889][T24821] bond439 (unregistering): Released all slaves [ 2389.942917][T24821] bond438 (unregistering): (slave vlan324): Releasing active interface [ 2390.023644][T24821] bond438 (unregistering): Released all slaves [ 2390.052946][T24821] bond437 (unregistering): (slave vlan323): Releasing active interface [ 2390.142392][T24821] bond437 (unregistering): Released all slaves [ 2390.164852][T24821] bond436 (unregistering): (slave vlan322): Releasing active interface [ 2390.230475][T24821] bond436 (unregistering): Released all slaves [ 2390.250806][T24821] bond435 (unregistering): (slave vlan321): Releasing active interface [ 2390.314997][T24821] bond435 (unregistering): Released all slaves [ 2390.335949][T24821] bond434 (unregistering): (slave vlan320): Releasing active interface [ 2390.465286][T24821] bond434 (unregistering): Released all slaves [ 2390.481497][ T6316] Bluetooth: hci9: command 0x0409 tx timeout [ 2390.491526][T24821] bond433 (unregistering): (slave vlan319): Releasing active interface [ 2390.563824][T24821] bond433 (unregistering): Released all slaves [ 2390.583741][T24821] bond432 (unregistering): (slave vlan318): Releasing active interface [ 2390.664419][T24821] bond432 (unregistering): Released all slaves [ 2390.685441][T24821] bond431 (unregistering): (slave vlan317): Releasing active interface [ 2390.774308][T24821] bond431 (unregistering): Released all slaves [ 2390.800227][T24821] bond430 (unregistering): (slave vlan316): Releasing active interface [ 2390.883067][T24821] bond430 (unregistering): Released all slaves [ 2390.903505][T24821] bond429 (unregistering): (slave vlan315): Releasing active interface [ 2390.987353][T24821] bond429 (unregistering): Released all slaves [ 2391.009291][T24821] bond428 (unregistering): (slave vlan314): Releasing active interface [ 2391.031978][T24821] bond428 (unregistering): Released all slaves [ 2391.219433][T24821] bond427 (unregistering): Released all slaves [ 2391.240029][T24821] bond426 (unregistering): (slave vlan313): Releasing active interface [ 2391.303971][T24821] bond426 (unregistering): Released all slaves [ 2391.330307][T24821] bond425 (unregistering): (slave vlan312): Releasing active interface [ 2391.352387][T24821] bond425 (unregistering): Released all slaves [ 2391.433520][T24821] bond424 (unregistering): (slave vlan311): Releasing active interface [ 2391.555808][T24821] bond424 (unregistering): Released all slaves [ 2391.580184][T24821] bond423 (unregistering): (slave vlan310): Releasing active interface [ 2391.681986][T24821] bond423 (unregistering): Released all slaves [ 2391.703732][T24821] bond422 (unregistering): (slave vlan309): Releasing active interface [ 2391.774896][T24821] bond422 (unregistering): Released all slaves [ 2391.795933][T24821] bond421 (unregistering): (slave vlan308): Releasing active interface [ 2391.862592][T24821] bond421 (unregistering): Released all slaves [ 2391.886456][T24821] bond420 (unregistering): (slave vlan307): Releasing active interface [ 2391.966466][T24821] bond420 (unregistering): Released all slaves [ 2391.995353][T24821] bond419 (unregistering): (slave vlan306): Releasing active interface [ 2392.063759][T24821] bond419 (unregistering): Released all slaves [ 2392.092620][T24821] bond418 (unregistering): (slave vlan305): Releasing active interface [ 2392.175550][T24821] bond418 (unregistering): Released all slaves [ 2392.193274][T24821] bond417 (unregistering): (slave vlan304): Releasing active interface [ 2392.283787][T24821] bond417 (unregistering): Released all slaves [ 2392.304624][T24821] bond416 (unregistering): (slave vlan303): Releasing active interface [ 2392.384936][T24821] bond416 (unregistering): Released all slaves [ 2392.419647][T24821] bond415 (unregistering): (slave vlan302): Releasing active interface [ 2392.483747][T24821] bond415 (unregistering): Released all slaves [ 2392.502024][T24821] bond414 (unregistering): (slave vlan301): Releasing active interface [ 2392.548696][ T6424] Bluetooth: hci9: command 0x041b tx timeout [ 2392.573706][T24821] bond414 (unregistering): Released all slaves [ 2392.602449][T24821] bond413 (unregistering): (slave vlan300): Releasing active interface [ 2392.672861][T24821] bond413 (unregistering): Released all slaves [ 2392.695080][T24821] bond412 (unregistering): (slave vlan299): Releasing active interface [ 2392.776000][T24821] bond412 (unregistering): Released all slaves [ 2392.801200][T24821] bond411 (unregistering): (slave vlan298): Releasing active interface [ 2392.905159][T24821] bond411 (unregistering): Released all slaves [ 2392.932260][T24821] bond410 (unregistering): (slave vlan297): Releasing active interface [ 2393.013670][T24821] bond410 (unregistering): Released all slaves [ 2393.052988][T24821] bond409 (unregistering): (slave vlan296): Releasing active interface [ 2393.125690][T24821] bond409 (unregistering): Released all slaves [ 2393.151699][T24821] bond408 (unregistering): (slave vlan295): Releasing active interface [ 2393.256143][T24821] bond408 (unregistering): Released all slaves [ 2393.279808][T24821] bond407 (unregistering): (slave vlan294): Releasing active interface [ 2393.344752][T24821] bond407 (unregistering): Released all slaves [ 2393.369974][T24821] bond406 (unregistering): (slave vlan293): Releasing active interface [ 2393.453580][T24821] bond406 (unregistering): Released all slaves [ 2393.479753][T24821] bond405 (unregistering): (slave vlan292): Releasing active interface [ 2393.554536][T24821] bond405 (unregistering): Released all slaves [ 2393.644966][T24821] bond404 (unregistering): Released all slaves [ 2393.665640][T24821] bond403 (unregistering): (slave vlan291): Releasing active interface [ 2393.746003][T24821] bond403 (unregistering): Released all slaves [ 2393.769737][T24821] bond402 (unregistering): (slave vlan290): Releasing active interface [ 2393.864738][T24821] bond402 (unregistering): Released all slaves [ 2393.885595][T24821] bond401 (unregistering): (slave vlan289): Releasing active interface [ 2393.985057][T24821] bond401 (unregistering): Released all slaves [ 2394.012941][T24821] bond400 (unregistering): (slave vlan288): Releasing active interface [ 2394.092791][T24821] bond400 (unregistering): Released all slaves [ 2394.113380][T24821] bond399 (unregistering): (slave vlan287): Releasing active interface [ 2394.215788][T24821] bond399 (unregistering): Released all slaves [ 2394.240935][T24821] bond398 (unregistering): (slave vlan286): Releasing active interface [ 2394.335507][T24821] bond398 (unregistering): Released all slaves [ 2394.360403][T24821] bond397 (unregistering): (slave vlan285): Releasing active interface [ 2394.452764][T24821] bond397 (unregistering): Released all slaves [ 2394.473952][T24821] bond396 (unregistering): (slave vlan284): Releasing active interface [ 2394.563547][T24821] bond396 (unregistering): Released all slaves [ 2394.585856][T24821] bond395 (unregistering): (slave vlan283): Releasing active interface [ 2394.640729][ T6424] Bluetooth: hci9: command 0x040f tx timeout [ 2394.662107][T24821] bond395 (unregistering): Released all slaves [ 2394.684987][T24821] bond394 (unregistering): (slave vlan282): Releasing active interface [ 2394.764976][T24821] bond394 (unregistering): Released all slaves [ 2394.784841][T24821] bond393 (unregistering): (slave vlan281): Releasing active interface [ 2394.869330][T24821] bond393 (unregistering): Released all slaves [ 2394.890903][T24821] bond392 (unregistering): (slave vlan280): Releasing active interface [ 2394.973879][T24821] bond392 (unregistering): Released all slaves [ 2394.996160][T24821] bond391 (unregistering): (slave vlan279): Releasing active interface [ 2395.099794][T24821] bond391 (unregistering): Released all slaves [ 2395.139879][T24821] bond390 (unregistering): (slave vlan278): Releasing active interface [ 2395.200981][T24821] bond390 (unregistering): Released all slaves [ 2395.221639][T24821] bond389 (unregistering): (slave vlan277): Releasing active interface [ 2395.283054][T24821] bond389 (unregistering): Released all slaves [ 2395.364208][T24821] bond388 (unregistering): Released all slaves [ 2395.382806][T24821] bond387 (unregistering): (slave vlan276): Releasing active interface [ 2395.409699][T24821] bond387 (unregistering): Released all slaves [ 2395.476847][T24821] bond386 (unregistering): (slave vlan275): Releasing active interface [ 2395.556905][T24821] bond386 (unregistering): Released all slaves [ 2395.579231][T24821] bond385 (unregistering): (slave vlan274): Releasing active interface [ 2395.646190][T24821] bond385 (unregistering): Released all slaves [ 2395.664397][T24821] bond384 (unregistering): (slave vlan273): Releasing active interface [ 2395.733801][T24821] bond384 (unregistering): Released all slaves [ 2395.751928][T24821] bond383 (unregistering): (slave vlan272): Releasing active interface [ 2395.826751][T24821] bond383 (unregistering): Released all slaves [ 2395.850550][T24821] bond382 (unregistering): (slave vlan271): Releasing active interface [ 2395.934169][T24821] bond382 (unregistering): Released all slaves [ 2395.952604][T24821] bond381 (unregistering): (slave vlan270): Releasing active interface [ 2396.026674][T24821] bond381 (unregistering): Released all slaves [ 2396.048978][T24821] bond380 (unregistering): (slave vlan269): Releasing active interface [ 2396.141209][T24821] bond380 (unregistering): Released all slaves [ 2396.170551][T24821] bond379 (unregistering): (slave vlan268): Releasing active interface [ 2396.233105][T24821] bond379 (unregistering): Released all slaves [ 2396.254456][T24821] bond378 (unregistering): (slave vlan267): Releasing active interface [ 2396.323636][T24821] bond378 (unregistering): Released all slaves [ 2396.342543][T24821] bond377 (unregistering): (slave vlan266): Releasing active interface [ 2396.433861][T24821] bond377 (unregistering): Released all slaves [ 2396.451935][T24821] bond376 (unregistering): (slave vlan265): Releasing active interface [ 2396.523485][T24821] bond376 (unregistering): Released all slaves [ 2396.542582][T24821] bond375 (unregistering): (slave vlan264): Releasing active interface [ 2396.634634][T24821] bond375 (unregistering): Released all slaves [ 2396.652850][T24821] bond374 (unregistering): (slave vlan263): Releasing active interface [ 2396.713389][ T6316] Bluetooth: hci9: command 0x0419 tx timeout [ 2396.730342][T24821] bond374 (unregistering): Released all slaves [ 2396.750603][T24821] bond373 (unregistering): (slave vlan262): Releasing active interface [ 2396.824520][T24821] bond373 (unregistering): Released all slaves [ 2396.845771][T24821] bond372 (unregistering): (slave vlan261): Releasing active interface [ 2396.949697][T24821] bond372 (unregistering): Released all slaves [ 2396.971027][T24821] bond371 (unregistering): (slave vlan260): Releasing active interface [ 2397.057050][T24821] bond371 (unregistering): Released all slaves [ 2397.079193][T24821] bond370 (unregistering): (slave vlan259): Releasing active interface [ 2397.153806][T24821] bond370 (unregistering): Released all slaves [ 2397.173582][T24821] bond369 (unregistering): (slave vlan258): Releasing active interface [ 2397.294351][T24821] bond369 (unregistering): Released all slaves [ 2397.313073][T24821] bond368 (unregistering): (slave vlan257): Releasing active interface [ 2397.393500][T24821] bond368 (unregistering): Released all slaves [ 2397.415706][T24821] bond367 (unregistering): (slave vlan256): Releasing active interface [ 2397.495235][T24821] bond367 (unregistering): Released all slaves [ 2397.515767][T24821] bond366 (unregistering): (slave vlan255): Releasing active interface [ 2397.619432][T24821] bond366 (unregistering): Released all slaves [ 2397.640441][T24821] bond365 (unregistering): (slave vlan254): Releasing active interface [ 2397.715172][T24821] bond365 (unregistering): Released all slaves [ 2397.740103][T24821] bond364 (unregistering): (slave vlan253): Releasing active interface [ 2397.814185][T24821] bond364 (unregistering): Released all slaves [ 2397.831800][T24821] bond363 (unregistering): (slave vlan252): Releasing active interface [ 2397.936379][T24821] bond363 (unregistering): Released all slaves [ 2397.957296][T24821] bond362 (unregistering): (slave vlan251): Releasing active interface [ 2398.044180][T24821] bond362 (unregistering): Released all slaves [ 2398.065433][T24821] bond361 (unregistering): (slave vlan250): Releasing active interface [ 2398.169148][T24821] bond361 (unregistering): Released all slaves [ 2398.190630][T24821] bond360 (unregistering): (slave vlan249): Releasing active interface [ 2398.296007][T24821] bond360 (unregistering): Released all slaves [ 2398.322804][T24821] bond359 (unregistering): (slave vlan248): Releasing active interface [ 2398.405479][T24821] bond359 (unregistering): Released all slaves [ 2398.432008][T24821] bond358 (unregistering): (slave vlan247): Releasing active interface [ 2398.535963][T24821] bond358 (unregistering): Released all slaves [ 2398.555072][T24821] bond357 (unregistering): (slave vlan246): Releasing active interface [ 2398.644791][T24821] bond357 (unregistering): Released all slaves [ 2398.670619][T24821] bond356 (unregistering): (slave vlan245): Releasing active interface [ 2398.779214][T24821] bond356 (unregistering): Released all slaves [ 2398.800726][T24821] bond355 (unregistering): (slave vlan244): Releasing active interface [ 2398.895314][T24821] bond355 (unregistering): Released all slaves [ 2398.912983][T24821] bond354 (unregistering): (slave vlan243): Releasing active interface [ 2398.999949][T24821] bond354 (unregistering): Released all slaves [ 2399.020565][T24821] bond353 (unregistering): (slave vlan242): Releasing active interface [ 2399.163557][T24821] bond353 (unregistering): Released all slaves [ 2399.181295][T24821] bond352 (unregistering): (slave vlan241): Releasing active interface [ 2399.244295][T24821] bond352 (unregistering): Released all slaves [ 2399.262166][T24821] bond351 (unregistering): (slave vlan240): Releasing active interface [ 2399.333493][T24821] bond351 (unregistering): Released all slaves [ 2399.351574][T24821] bond350 (unregistering): (slave vlan239): Releasing active interface [ 2399.435372][T24821] bond350 (unregistering): Released all slaves [ 2399.454185][T24821] bond349 (unregistering): (slave vlan238): Releasing active interface [ 2399.525663][T24821] bond349 (unregistering): Released all slaves [ 2399.550481][T24821] bond348 (unregistering): (slave vlan237): Releasing active interface [ 2399.645921][T24821] bond348 (unregistering): Released all slaves [ 2399.669827][T24821] bond347 (unregistering): (slave vlan236): Releasing active interface [ 2399.755202][T24821] bond347 (unregistering): Released all slaves [ 2399.779373][T24821] bond346 (unregistering): (slave vlan235): Releasing active interface [ 2399.902618][T24821] bond346 (unregistering): Released all slaves [ 2399.924781][T24821] bond345 (unregistering): (slave vlan234): Releasing active interface [ 2400.015899][T24821] bond345 (unregistering): Released all slaves [ 2400.040056][T24821] bond344 (unregistering): (slave vlan233): Releasing active interface [ 2400.133815][T24821] bond344 (unregistering): Released all slaves [ 2400.155203][T24821] bond343 (unregistering): Released all slaves [ 2400.222470][T24821] bond342 (unregistering): (slave vlan232): Releasing active interface [ 2400.331352][T24821] bond342 (unregistering): Released all slaves [ 2400.352513][T24821] bond341 (unregistering): (slave vlan231): Releasing active interface [ 2400.436394][T24821] bond341 (unregistering): Released all slaves [ 2400.460222][T24821] bond340 (unregistering): (slave vlan230): Releasing active interface [ 2400.533500][T24821] bond340 (unregistering): Released all slaves [ 2400.551709][T24821] bond339 (unregistering): (slave vlan229): Releasing active interface [ 2400.663184][T24821] bond339 (unregistering): Released all slaves [ 2400.684604][T24821] bond338 (unregistering): (slave vlan228): Releasing active interface [ 2400.765041][T24821] bond338 (unregistering): Released all slaves [ 2400.785291][T24821] bond337 (unregistering): (slave vlan227): Releasing active interface [ 2400.855247][T24821] bond337 (unregistering): Released all slaves [ 2400.876002][T24821] bond336 (unregistering): (slave vlan226): Releasing active interface [ 2400.966039][T24821] bond336 (unregistering): Released all slaves [ 2400.989382][T24821] bond335 (unregistering): (slave vlan225): Releasing active interface [ 2401.065293][T24821] bond335 (unregistering): Released all slaves [ 2401.089942][T24821] bond334 (unregistering): (slave vlan224): Releasing active interface [ 2401.195350][T24821] bond334 (unregistering): Released all slaves [ 2401.215603][T24821] bond333 (unregistering): (slave vlan223): Releasing active interface [ 2401.284827][T24821] bond333 (unregistering): Released all slaves [ 2401.305695][T24821] bond332 (unregistering): (slave vlan222): Releasing active interface [ 2401.404996][T24821] bond332 (unregistering): Released all slaves [ 2401.429556][T24821] bond331 (unregistering): (slave vlan221): Releasing active interface [ 2401.533290][T24821] bond331 (unregistering): Released all slaves [ 2401.550695][T24821] bond330 (unregistering): (slave vlan220): Releasing active interface [ 2401.630815][T24821] bond330 (unregistering): Released all slaves [ 2401.649591][T24821] bond329 (unregistering): (slave vlan219): Releasing active interface [ 2401.725936][T24821] bond329 (unregistering): Released all slaves [ 2401.749751][T24821] bond328 (unregistering): (slave vlan218): Releasing active interface [ 2401.854145][T24821] bond328 (unregistering): Released all slaves [ 2401.874330][T24821] bond327 (unregistering): (slave vlan217): Releasing active interface [ 2401.963068][T24821] bond327 (unregistering): Released all slaves [ 2401.980499][T24821] bond326 (unregistering): (slave vlan216): Releasing active interface [ 2402.042734][T24821] bond326 (unregistering): Released all slaves [ 2402.065656][T24821] bond325 (unregistering): (slave vlan215): Releasing active interface [ 2402.153469][T24821] bond325 (unregistering): Released all slaves [ 2402.176195][T24821] bond324 (unregistering): (slave vlan214): Releasing active interface [ 2402.245524][T24821] bond324 (unregistering): Released all slaves [ 2402.263172][T24821] bond323 (unregistering): (slave vlan213): Releasing active interface [ 2402.333717][T24821] bond323 (unregistering): Released all slaves [ 2402.351681][T24821] bond322 (unregistering): (slave vlan212): Releasing active interface [ 2402.414537][T24821] bond322 (unregistering): Released all slaves [ 2402.433554][T24821] bond321 (unregistering): (slave vlan211): Releasing active interface [ 2402.519459][T24821] bond321 (unregistering): Released all slaves [ 2402.540181][T24821] bond320 (unregistering): (slave vlan210): Releasing active interface [ 2402.629770][T24821] bond320 (unregistering): Released all slaves [ 2402.650127][T24821] bond319 (unregistering): (slave vlan209): Releasing active interface [ 2402.739408][T24821] bond319 (unregistering): Released all slaves [ 2402.760139][T24821] bond318 (unregistering): (slave vlan208): Releasing active interface [ 2402.834318][T24821] bond318 (unregistering): Released all slaves [ 2402.904170][T24821] bond317 (unregistering): Released all slaves [ 2402.924783][T24821] bond316 (unregistering): (slave vlan207): Releasing active interface [ 2403.002607][T24821] bond316 (unregistering): Released all slaves [ 2403.024522][T24821] bond315 (unregistering): (slave vlan206): Releasing active interface [ 2403.089252][T24821] bond315 (unregistering): Released all slaves [ 2403.109849][T24821] bond314 (unregistering): (slave vlan205): Releasing active interface [ 2403.184967][T24821] bond314 (unregistering): Released all slaves