x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\n', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1933.535726][T19834] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1933.565919][T19849] bond0: Releasing backup interface bond_slave_1 [ 1933.598700][T19849] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1933.619827][T19834] CPU: 0 PID: 19834 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1933.627869][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.638137][T19834] Call Trace: [ 1933.641450][T19834] dump_stack+0x172/0x1f0 02:37:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x8, 0xd7}) syz_open_dev$loop(&(0x7f0000001580)='/dev/loop#\x00', 0xc03a, 0x100) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001540)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000001140)={0x3f8, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8633}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc48b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xda83}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffff81}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x20}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100000000, @empty, 0x401}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @remote, 0x3}}}}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29ab7e43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffbe4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff00}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x141}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf983}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 02:37:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\v', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1933.645806][T19834] dump_header+0x10f/0xb6c [ 1933.650238][T19834] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1933.656064][T19834] ? ___ratelimit+0x60/0x595 [ 1933.660679][T19834] ? do_raw_spin_unlock+0x57/0x270 [ 1933.665812][T19834] oom_kill_process.cold+0x10/0x15 [ 1933.670961][T19834] out_of_memory+0x79a/0x1280 [ 1933.675647][T19834] ? lock_downgrade+0x880/0x880 [ 1933.680628][T19834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1933.686975][T19834] ? oom_killer_disable+0x280/0x280 [ 1933.692365][T19834] ? find_held_lock+0x35/0x130 [ 1933.697327][T19834] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1933.702889][T19834] ? memcg_event_wake+0x230/0x230 [ 1933.707940][T19834] ? do_raw_spin_unlock+0x57/0x270 [ 1933.713074][T19834] ? _raw_spin_unlock+0x2d/0x50 [ 1933.717950][T19834] try_charge+0x102c/0x15c0 [ 1933.722470][T19834] ? find_held_lock+0x35/0x130 [ 1933.727257][T19834] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1933.732803][T19834] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1933.738340][T19834] ? find_held_lock+0x35/0x130 [ 1933.743084][T19834] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1933.748713][T19834] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1933.754246][T19834] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1933.759527][T19834] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1933.765059][T19834] __memcg_kmem_charge+0x136/0x300 [ 1933.770156][T19834] __alloc_pages_nodemask+0x437/0x7e0 [ 1933.775606][T19834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1933.781830][T19834] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1933.787540][T19834] ? copy_process.part.0+0x1d08/0x7980 [ 1933.792981][T19834] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1933.798253][T19834] ? trace_hardirqs_on+0x67/0x230 [ 1933.803265][T19834] ? kasan_check_read+0x11/0x20 [ 1933.808102][T19834] copy_process.part.0+0x3e0/0x7980 [ 1933.813293][T19834] ? __lock_acquire+0x548/0x3fb0 [ 1933.818235][T19834] ? __might_fault+0x12b/0x1e0 [ 1933.823008][T19834] ? __cleanup_sighand+0x60/0x60 [ 1933.828567][T19834] ? lock_downgrade+0x880/0x880 [ 1933.833424][T19834] _do_fork+0x257/0xfd0 [ 1933.837826][T19834] ? fork_idle+0x1d0/0x1d0 [ 1933.842246][T19834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1933.848380][T19834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1933.853830][T19834] ? do_syscall_64+0x26/0x610 [ 1933.858522][T19834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1933.864569][T19834] ? do_syscall_64+0x26/0x610 [ 1933.869254][T19834] __x64_sys_clone+0xbf/0x150 [ 1933.873919][T19834] do_syscall_64+0x103/0x610 [ 1933.878497][T19834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1933.884370][T19834] RIP: 0033:0x458c29 [ 1933.888253][T19834] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1933.908185][T19834] RSP: 002b:00007ff9f1da3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1933.916580][T19834] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1933.924534][T19834] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 4000002102001ffb [ 1933.932578][T19834] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1933.940626][T19834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9f1da46d4 [ 1933.948582][T19834] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1934.010483][T19834] memory: usage 307200kB, limit 307200kB, failcnt 107 [ 1934.011551][T19849] device bond_slave_1 left promiscuous mode [ 1934.022342][T19834] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1934.034578][T19834] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1934.041739][T19834] Memory cgroup stats for /syz1: cache:7368KB rss:254824KB rss_huge:233472KB shmem:7424KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:7416KB active_anon:254876KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1934.070858][T19834] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27837,uid=0 [ 1934.087588][T19834] Memory cgroup out of memory: Killed process 27837 (syz-executor.1) total-vm:72712kB, anon-rss:2228kB, file-rss:35808kB, shmem-rss:0kB [ 1934.132591][T19828] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1934.166367][T19828] CPU: 1 PID: 19828 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1934.175945][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.185998][T19828] Call Trace: [ 1934.189310][T19828] dump_stack+0x172/0x1f0 [ 1934.193651][T19828] dump_header+0x10f/0xb6c [ 1934.198069][T19828] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1934.203884][T19828] ? ___ratelimit+0x60/0x595 [ 1934.208479][T19828] ? do_raw_spin_unlock+0x57/0x270 [ 1934.213684][T19828] oom_kill_process.cold+0x10/0x15 [ 1934.218809][T19828] out_of_memory+0x79a/0x1280 [ 1934.223501][T19828] ? oom_killer_disable+0x280/0x280 [ 1934.228705][T19828] ? find_held_lock+0x35/0x130 [ 1934.233496][T19828] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1934.239135][T19828] ? memcg_event_wake+0x230/0x230 [ 1934.244170][T19828] ? do_raw_spin_unlock+0x57/0x270 [ 1934.249287][T19828] ? _raw_spin_unlock+0x2d/0x50 [ 1934.254144][T19828] try_charge+0xa87/0x15c0 [ 1934.258565][T19828] ? find_held_lock+0x35/0x130 [ 1934.263338][T19828] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1934.268901][T19828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1934.275149][T19828] ? kasan_check_read+0x11/0x20 [ 1934.280006][T19828] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1934.285558][T19828] mem_cgroup_try_charge+0x24d/0x5e0 [ 1934.290858][T19828] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1934.296506][T19828] __handle_mm_fault+0x1e1f/0x3ec0 [ 1934.301630][T19828] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1934.307183][T19828] ? find_held_lock+0x35/0x130 [ 1934.311960][T19828] ? handle_mm_fault+0x322/0xb30 [ 1934.316913][T19828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1934.323188][T19828] ? kasan_check_read+0x11/0x20 [ 1934.328073][T19828] handle_mm_fault+0x43f/0xb30 [ 1934.332867][T19828] __do_page_fault+0x5ef/0xda0 [ 1934.337657][T19828] do_page_fault+0x71/0x581 [ 1934.342196][T19828] ? page_fault+0x8/0x30 [ 1934.346445][T19828] page_fault+0x1e/0x30 [ 1934.350681][T19828] RIP: 0033:0x43ff21 [ 1934.354578][T19828] Code: 8d 15 83 70 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1934.374187][T19828] RSP: 002b:0000000000a4fbd8 EFLAGS: 00010202 [ 1934.380253][T19828] RAX: 000000002000aff5 RBX: 0000000000740228 RCX: 0000000000000061 [ 1934.380260][T19828] RDX: 000000000000000b RSI: 0000000000740248 RDI: 000000002000aff5 [ 1934.380267][T19828] RBP: 0000000000740230 R08: 00000000001d8077 R09: 00000000001d8077 [ 1934.380274][T19828] R10: 0000000000a4fca0 R11: 0000000000000246 R12: fffffffffffffffe [ 1934.380280][T19828] R13: 00000000001d8096 R14: 00000000001d80c3 R15: 000000000073bf0c [ 1934.420985][T19828] memory: usage 304920kB, limit 307200kB, failcnt 107 [ 1934.429424][T19828] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1934.429762][T19890] device bond_slave_1 entered promiscuous mode [ 1934.437370][T19828] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1934.448317][T19890] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1934.450461][T19828] Memory cgroup stats for /syz1: cache:7368KB rss:252728KB rss_huge:231424KB shmem:7424KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:7416KB active_anon:252760KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1934.466580][T19867] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1934.480871][T19828] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27937,uid=0 [ 1934.497076][T19867] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1934.507082][T19828] Memory cgroup out of memory: Killed process 27937 (syz-executor.1) total-vm:72844kB, anon-rss:2236kB, file-rss:35788kB, shmem-rss:0kB 02:37:14 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:14 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x40000000000002}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000140)=""/4096, 0x1000) [ 1934.535128][T19872] bond0: Error: Device is in use and cannot be enslaved [ 1934.621257][T19901] bond0: Releasing backup interface bond_slave_1 [ 1934.646706][T19901] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1934.697770][T19901] device bond_slave_1 left promiscuous mode 02:37:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9effffff00000000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\r', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) 02:37:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x101, 0x1, [], &(0x7f00000000c0)=0x4}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000005140)=""/4096, 0x1000) pipe(&(0x7f0000000000)) [ 1934.853643][T19913] device bond_slave_1 entered promiscuous mode [ 1934.861072][T19913] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0e', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1934.903127][T19917] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) [ 1934.952039][T19917] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1934.967570][T19901] bond0: Releasing backup interface bond_slave_1 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1935.013102][T19901] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1935.096857][T19901] device bond_slave_1 left promiscuous mode [ 1935.174750][T19913] device bond_slave_1 entered promiscuous mode [ 1935.181851][T19913] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:15 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x1, 0xffffffff, 0x1011, 0x9, 0xf, 0x3, 0x3, 0x6}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x8209, 0x1f, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000011c0)=@sack_info={r1, 0x2, 0x1}, &(0x7f0000001180)=0xc) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x02\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\t%ist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xe81a000000000000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x03\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) 02:37:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1935.282892][T19980] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1935.333142][T19980] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1935.372866][T19984] bond0: Releasing backup interface bond_slave_1 02:37:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0x0, @remote, 0x80}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001140)="6181ec3369bc895c2cc101afad0fd1c21a26e7c449162bd7ae3106509a9ed33e321d8005bb42dba25e6731c64534c4e546066cb4a40e6fba50d5ebf347976234ef813aaa6e", 0x45}, {&(0x7f00000011c0)="8bf1613c524e7b04889f4b61577c40cf352569dd9fc1fb0f5d54411a847f93c83ca18768f7112dc41154a304e5f5c316274e2696e7ca179601090bb3d3867cfddd1c35e773f3312c11faa569922c8459ec756b1bc9b9b30bea7b477b5d440a585a6d87b2cecb67ec4a7386e8cd19dc6a81e6e33bf0a6670edd00463193dd5d", 0x7f}, {&(0x7f0000001240)="36d154b2c1ce9be868a32d67d531533e2f1542a225b9fd9878e10a86", 0x1c}, {&(0x7f0000001280)="86cbb3051ad01772c40f96edfaefa65f56c21696d5a2fb22aad77d085069edde7e711fc322b2620394a4c55f0671d75a80", 0x31}, {&(0x7f00000012c0)="3f72c3f399f2bf3d2e8fb90928388d9026b679005a856923fa7923f1991d4af014657c9c51f9f81a3a107cacd84d54c7a6b4ab6644cc358168d21b19b1cfdb4c832bc127b2e859d0a16e8664adef1a971d14e977811cc65639b5119f25ab890e21eb2e10c3cc0576e9a163dfe07a9f6a271e668a57fcb1ec2d2c06c4d7414d56446ac1210236c036b616a0de4b488379c4a6598551b25b3ec962a2a602010d767af55e4cdd", 0xa5}, {&(0x7f0000001380)="f72f200e", 0x4}], 0x6, &(0x7f0000001440)=[{0x58, 0x113, 0x5da7, "f84daba42e1bae7043a1b89f68a762031f7c7d780e863d1268270307a1d5ea048d33f10d45d19ec892ecd6a839260bf1cb68160a458e7d3e47c7316c8ff924c777b7e5ed81"}], 0x58}, 0x8001) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000140)=""/4096, 0x1000) [ 1935.393139][T19984] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x04\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1935.468338][T19984] device bond_slave_1 left promiscuous mode 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x05\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000140)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x2, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x1) [ 1935.865497][T19990] device bond_slave_1 entered promiscuous mode [ 1935.873229][T19990] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:15 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) personality(0xfffffb) uname(&(0x7f0000000000)=""/176) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) 02:37:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff00000000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c%sgrVid:De', 0x0) 02:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c*sgrVid:De', 0x0) 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x89, "c70d56", "3a0ec939891513743e5e1a88ffda2a45b9eb7fd7b629c017036f25118cdd137dcdd93088628acdb970ad325c620e5c9dd3599ade57b9588695acc9412a1f0946e272cf25e846d5aed22524a591ab30f51c2a79b38969fa3017f67f78f8c34ee55e724962a9ffe96538d1e2dd3d19ccdefead8d0c7b6d7b36b466c69c8f2546a11357e3194324c839592fb5f157e3b58593f44fb9efaad218d73b64e21f7e315506bc5de139dfdaceb460ffb58245f1f88eb16ee45ca18c60a9d28254cdad961cdc05234ea3832d7592aa246150ca85209b68ea78c352b4fb83d4f564c669c7016017c7936fa548c6342eaafdeafab661c005585e4c85ca8dc27090e331c4efb6"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @mcast2, 0x9}, r1}}, 0x30) read$alg(r0, &(0x7f0000001140)=""/4096, 0x1000) [ 1935.976838][T20047] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1935.997761][T20047] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.087088][T20062] bond0: Releasing backup interface bond_slave_1 [ 1936.112346][T20062] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1936.189012][T20062] device bond_slave_1 left promiscuous mode 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x0f\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00H\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.660561][T20075] device bond_slave_1 entered promiscuous mode [ 1936.674758][T20075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1936.691100][T20062] bond0: Releasing backup interface bond_slave_1 [ 1936.703224][T20062] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1936.746565][T20062] device bond_slave_1 left promiscuous mode 02:37:16 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00L\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c+sgrVid:De', 0x0) 02:37:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.803092][T20075] device bond_slave_1 entered promiscuous mode [ 1936.809756][T20075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1936.816375][ C0] net_ratelimit: 20 callbacks suppressed [ 1936.816383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.829498][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.835352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.841175][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.864853][T20115] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1936.886158][T20115] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c-sgrVid:De', 0x0) 02:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00l\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.928870][T20131] bond0: Releasing backup interface bond_slave_1 02:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1936.993430][T20131] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1937.055098][T20131] device bond_slave_1 left promiscuous mode [ 1937.216381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.222342][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.228354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.234131][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.350119][T20159] device bond_slave_1 entered promiscuous mode [ 1937.367019][T20159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1937.403910][T20131] bond0: Releasing backup interface bond_slave_1 [ 1937.412277][T20131] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1937.450764][T20131] device bond_slave_1 left promiscuous mode [ 1937.457184][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.457515][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:37:17 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) personality(0xfffffb) uname(&(0x7f0000000000)=""/176) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) 02:37:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00t\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffff000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c.sgrVid:De', 0x0) 02:37:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1937.520824][T20159] device bond_slave_1 entered promiscuous mode [ 1937.527770][T20159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1937.574975][T20193] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1937.592384][T20194] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1937.615031][T20193] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1937.615479][T20194] CPU: 1 PID: 20194 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1937.632650][T20194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.632664][T20194] Call Trace: [ 1937.646028][T20194] dump_stack+0x172/0x1f0 [ 1937.650392][T20194] dump_header+0x10f/0xb6c [ 1937.654834][T20194] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1937.660655][T20194] ? ___ratelimit+0x60/0x595 [ 1937.660670][T20194] ? do_raw_spin_unlock+0x57/0x270 [ 1937.660685][T20194] oom_kill_process.cold+0x10/0x15 [ 1937.660700][T20194] out_of_memory+0x79a/0x1280 [ 1937.660716][T20194] ? lock_downgrade+0x880/0x880 [ 1937.660729][T20194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.660745][T20194] ? oom_killer_disable+0x280/0x280 [ 1937.675650][T20194] ? find_held_lock+0x35/0x130 [ 1937.675677][T20194] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1937.675690][T20194] ? memcg_event_wake+0x230/0x230 [ 1937.675714][T20194] ? do_raw_spin_unlock+0x57/0x270 [ 1937.696756][T20194] ? _raw_spin_unlock+0x2d/0x50 [ 1937.696777][T20194] try_charge+0x102c/0x15c0 [ 1937.696792][T20194] ? find_held_lock+0x35/0x130 [ 1937.696810][T20194] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1937.696826][T20194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.696849][T20194] ? kasan_check_read+0x11/0x20 [ 1937.707228][T20194] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1937.707247][T20194] mem_cgroup_try_charge+0x24d/0x5e0 [ 1937.707265][T20194] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1937.743764][T20194] __handle_mm_fault+0x1e1f/0x3ec0 [ 1937.743786][T20194] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1937.743813][T20194] ? find_held_lock+0x35/0x130 [ 1937.780792][T20194] ? handle_mm_fault+0x322/0xb30 [ 1937.785843][T20194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.785864][T20194] ? kasan_check_read+0x11/0x20 [ 1937.785883][T20194] handle_mm_fault+0x43f/0xb30 [ 1937.785917][T20194] __do_page_fault+0x5ef/0xda0 [ 1937.806564][T20194] do_page_fault+0x71/0x581 [ 1937.811278][T20194] ? page_fault+0x8/0x30 [ 1937.815578][T20194] page_fault+0x1e/0x30 [ 1937.819760][T20194] RIP: 0033:0x41063f 02:37:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0x0, @remote, 0x80}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001140)="6181ec3369bc895c2cc101afad0fd1c21a26e7c449162bd7ae3106509a9ed33e321d8005bb42dba25e6731c64534c4e546066cb4a40e6fba50d5ebf347976234ef813aaa6e", 0x45}, {&(0x7f00000011c0)="8bf1613c524e7b04889f4b61577c40cf352569dd9fc1fb0f5d54411a847f93c83ca18768f7112dc41154a304e5f5c316274e2696e7ca179601090bb3d3867cfddd1c35e773f3312c11faa569922c8459ec756b1bc9b9b30bea7b477b5d440a585a6d87b2cecb67ec4a7386e8cd19dc6a81e6e33bf0a6670edd00463193dd5d", 0x7f}, {&(0x7f0000001240)="36d154b2c1ce9be868a32d67d531533e2f1542a225b9fd9878e10a86", 0x1c}, {&(0x7f0000001280)="86cbb3051ad01772c40f96edfaefa65f56c21696d5a2fb22aad77d085069edde7e711fc322b2620394a4c55f0671d75a80", 0x31}, {&(0x7f00000012c0)="3f72c3f399f2bf3d2e8fb90928388d9026b679005a856923fa7923f1991d4af014657c9c51f9f81a3a107cacd84d54c7a6b4ab6644cc358168d21b19b1cfdb4c832bc127b2e859d0a16e8664adef1a971d14e977811cc65639b5119f25ab890e21eb2e10c3cc0576e9a163dfe07a9f6a271e668a57fcb1ec2d2c06c4d7414d56446ac1210236c036b616a0de4b488379c4a6598551b25b3ec962a2a602010d767af55e4cdd", 0xa5}, {&(0x7f0000001380)="f72f200e", 0x4}], 0x6, &(0x7f0000001440)=[{0x58, 0x113, 0x5da7, "f84daba42e1bae7043a1b89f68a762031f7c7d780e863d1268270307a1d5ea048d33f10d45d19ec892ecd6a839260bf1cb68160a458e7d3e47c7316c8ff924c777b7e5ed81"}], 0x58}, 0x8001) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000140)=""/4096, 0x1000) 02:37:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x11', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1937.823673][T20194] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1937.843281][T20194] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 1937.843294][T20194] RAX: 00007fb4599d6000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 1937.843301][T20194] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1937.843307][T20194] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 1937.843313][T20194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 1937.843319][T20194] R13: 00007fb4599f6700 R14: 0000000000000003 R15: 000000000073bf0c [ 1937.899983][T20194] memory: usage 307200kB, limit 307200kB, failcnt 1766 [ 1937.908278][T20194] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1937.916044][T20194] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1937.916194][T20198] bond0: Releasing backup interface bond_slave_1 [ 1937.923656][T20194] Memory cgroup stats for /syz4: cache:4KB rss:243232KB rss_huge:212992KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:243404KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1937.923738][T20194] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22144,uid=0 02:37:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1937.970031][T20194] Memory cgroup out of memory: Killed process 22144 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1937.973178][T20198] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1938.069213][T20198] device bond_slave_1 left promiscuous mode [ 1938.271019][T20205] device bond_slave_1 entered promiscuous mode [ 1938.277898][T20205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1938.313601][T20198] bond0: Releasing backup interface bond_slave_1 [ 1938.345004][T20198] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1938.387362][T20198] device bond_slave_1 left promiscuous mode 02:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x12', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\t', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c0sgrVid:De', 0x0) 02:37:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1938.447493][T20205] device bond_slave_1 entered promiscuous mode [ 1938.453993][T20205] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cXsgrVid:De', 0x0) 02:37:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\t', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1938.509609][T20265] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x13\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1938.578017][T20265] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00/', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1938.622998][T20275] bond0: Releasing backup interface bond_slave_1 [ 1938.649371][T20275] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1938.718325][T20275] device bond_slave_1 left promiscuous mode [ 1938.909563][T20288] device bond_slave_1 entered promiscuous mode [ 1938.921905][T20288] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1938.970460][T20275] bond0: Releasing backup interface bond_slave_1 [ 1938.978718][T20275] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1939.026768][T20275] device bond_slave_1 left promiscuous mode 02:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x02', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3ccsgrVid:De', 0x0) 02:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1939.084137][T20288] device bond_slave_1 entered promiscuous mode [ 1939.092128][T20288] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cdsgrVid:De', 0x0) 02:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x03', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1939.169589][T20345] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) 02:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cisgrVid:De', 0x0) [ 1939.256587][T20345] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1939.299362][T20351] bond0: Releasing backup interface bond_slave_1 [ 1939.326140][T20351] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1939.418418][T20351] device bond_slave_1 left promiscuous mode [ 1939.597826][T20364] device bond_slave_1 entered promiscuous mode [ 1939.604521][T20364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1939.619678][T20364] bond0: Error: Device is in use and cannot be enslaved [ 1939.632971][T20351] bond0: Releasing backup interface bond_slave_1 [ 1939.645573][T20351] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1939.706750][T20351] device bond_slave_1 left promiscuous mode 02:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x04', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3clsgrVid:De', 0x0) 02:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x05', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1939.810773][T20407] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1939.829934][T20407] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x04', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x02\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1939.902803][T20412] device bond_slave_1 entered promiscuous mode [ 1939.942518][T20412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1940.021564][T20412] bond0: Releasing backup interface bond_slave_1 [ 1940.055952][T20412] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1940.127268][T20412] device bond_slave_1 left promiscuous mode 02:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x02\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cosgrVid:De', 0x0) 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\a', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1940.192092][T20452] device bond_slave_1 entered promiscuous mode [ 1940.199122][T20452] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x03\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cpsgrVid:De', 0x0) [ 1940.263412][T20478] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\t', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1940.331553][T20478] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1940.367576][T20483] bond0: Releasing backup interface bond_slave_1 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\a', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'H\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1940.374163][T20483] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1940.452972][T20483] device bond_slave_1 left promiscuous mode [ 1940.686517][T20497] device bond_slave_1 entered promiscuous mode [ 1940.699224][T20497] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1940.726975][T20483] bond0: Releasing backup interface bond_slave_1 [ 1940.733481][T20483] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1940.798917][T20483] device bond_slave_1 left promiscuous mode 02:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x03\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\n', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x0f\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x04\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cssgrVid:De', 0x0) 02:37:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x0f\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1940.859733][T20497] device bond_slave_1 entered promiscuous mode [ 1940.866208][T20497] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\v', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cxsgrVid:De', 0x0) 02:37:20 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x120) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000080)=""/135) getsockname$netlink(r0, &(0x7f00000011c0), &(0x7f0000001200)=0xc) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001140)={0x2, 0x0, [{0x40, 0x3, 0x0, 0x0, @adapter={0x5, 0x8, 0x8, 0x6650, 0x6}}, {0x80, 0x3, 0x0, 0x0, @msi={0x7, 0xbe4d, 0x81}}]}) fcntl$setstatus(r0, 0x4, 0x6000) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 1940.933326][T20540] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x06\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1941.026814][T20540] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1941.063324][T20558] bond0: Releasing backup interface bond_slave_1 02:37:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x05\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1941.075952][T20558] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1941.158859][T20558] device bond_slave_1 left promiscuous mode [ 1941.356792][T20569] device bond_slave_1 entered promiscuous mode [ 1941.363361][T20569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1941.397657][T20558] bond0: Releasing backup interface bond_slave_1 [ 1941.419506][T20558] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1941.476633][T20558] device bond_slave_1 left promiscuous mode 02:37:21 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x04\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x06\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusg%Vid:De', 0x0) 02:37:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x06\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1941.533230][T20569] device bond_slave_1 entered promiscuous mode [ 1941.539880][T20569] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 02:37:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\r', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1941.589938][T20604] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0e', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\a\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi#:De', 0x0) [ 1941.634279][T20604] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x02\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1941.682172][T20614] bond0: Releasing backup interface bond_slave_1 [ 1941.698955][T20614] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1941.778549][T20614] device bond_slave_1 left promiscuous mode [ 1942.010528][T20633] device bond_slave_1 entered promiscuous mode [ 1942.017417][T20633] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1942.078104][T20614] bond0: Releasing backup interface bond_slave_1 [ 1942.084594][T20614] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1942.127314][T20614] device bond_slave_1 left promiscuous mode 02:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x05\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1942.193303][T20633] device bond_slave_1 entered promiscuous mode [ 1942.200511][T20633] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) 02:37:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\n\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1942.240408][T20667] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1942.261101][T20665] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1942.275870][T20667] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1942.282810][T20665] CPU: 1 PID: 20665 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1942.293438][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1942.303497][T20665] Call Trace: [ 1942.306908][T20665] dump_stack+0x172/0x1f0 [ 1942.311259][T20665] dump_header+0x10f/0xb6c [ 1942.315691][T20665] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1942.321499][T20665] ? ___ratelimit+0x60/0x595 [ 1942.321514][T20665] ? do_raw_spin_unlock+0x57/0x270 [ 1942.321531][T20665] oom_kill_process.cold+0x10/0x15 02:37:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1942.321545][T20665] out_of_memory+0x79a/0x1280 [ 1942.321560][T20665] ? lock_downgrade+0x880/0x880 [ 1942.321575][T20665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1942.321588][T20665] ? oom_killer_disable+0x280/0x280 [ 1942.321599][T20665] ? find_held_lock+0x35/0x130 [ 1942.321622][T20665] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1942.321633][T20665] ? memcg_event_wake+0x230/0x230 [ 1942.321650][T20665] ? do_raw_spin_unlock+0x57/0x270 [ 1942.321664][T20665] ? _raw_spin_unlock+0x2d/0x50 [ 1942.321680][T20665] try_charge+0x102c/0x15c0 [ 1942.321690][T20665] ? find_held_lock+0x35/0x130 [ 1942.321709][T20665] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1942.321720][T20665] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1942.321732][T20665] ? find_held_lock+0x35/0x130 [ 1942.321747][T20665] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1942.321771][T20665] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1942.321784][T20665] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1942.321800][T20665] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1942.321817][T20665] __memcg_kmem_charge+0x136/0x300 [ 1942.321835][T20665] __alloc_pages_nodemask+0x437/0x7e0 [ 1942.321847][T20665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1942.321865][T20665] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1942.321881][T20665] ? copy_process.part.0+0x1d08/0x7980 [ 1942.321896][T20665] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1942.321911][T20665] ? trace_hardirqs_on+0x67/0x230 [ 1942.321926][T20665] ? kasan_check_read+0x11/0x20 [ 1942.321945][T20665] copy_process.part.0+0x3e0/0x7980 [ 1942.321960][T20665] ? psi_memstall_leave+0x11c/0x180 [ 1942.321978][T20665] ? sched_clock+0x2e/0x50 02:37:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1942.321993][T20665] ? psi_memstall_leave+0x12e/0x180 [ 1942.322007][T20665] ? find_held_lock+0x35/0x130 [ 1942.322021][T20665] ? psi_memstall_leave+0x12e/0x180 [ 1942.322047][T20665] ? __cleanup_sighand+0x60/0x60 [ 1942.322058][T20665] ? __lock_acquire+0x548/0x3fb0 [ 1942.322071][T20665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1942.322100][T20665] _do_fork+0x257/0xfd0 [ 1942.322118][T20665] ? fork_idle+0x1d0/0x1d0 [ 1942.322135][T20665] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1942.322147][T20665] ? lock_downgrade+0x880/0x880 02:37:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1942.322159][T20665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1942.322176][T20665] ? blkcg_exit_queue+0x30/0x30 [ 1942.322192][T20665] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1942.322205][T20665] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1942.322219][T20665] ? do_syscall_64+0x26/0x610 [ 1942.322240][T20665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1942.331930][T20665] ? do_syscall_64+0x26/0x610 [ 1942.341682][T20665] __x64_sys_clone+0xbf/0x150 [ 1942.341708][T20665] do_syscall_64+0x103/0x610 [ 1942.357951][T20665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1942.357963][T20665] RIP: 0033:0x45b5f9 [ 1942.357977][T20665] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1942.357982][T20665] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1942.357993][T20665] RAX: ffffffffffffffda RBX: 00007fb4599f6700 RCX: 000000000045b5f9 [ 1942.358000][T20665] RDX: 00007fb4599f69d0 RSI: 00007fb4599f5db0 RDI: 00000000003d0f00 02:37:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x11', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x12', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1942.358008][T20665] RBP: 0000000000a4fcb0 R08: 00007fb4599f6700 R09: 00007fb4599f6700 [ 1942.358015][T20665] R10: 00007fb4599f69d0 R11: 0000000000000202 R12: 0000000000000000 [ 1942.358022][T20665] R13: 0000000000a4fb5f R14: 00007fb4599f69c0 R15: 000000000073bf0c [ 1942.475083][T20665] memory: usage 307172kB, limit 307200kB, failcnt 1795 [ 1942.556035][T20665] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1942.605553][T20665] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1942.715836][T20665] Memory cgroup stats for /syz4: cache:4KB rss:242008KB rss_huge:210944KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:242220KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1942.738250][T20679] bond0: Releasing backup interface bond_slave_1 [ 1942.748589][T20665] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22163,uid=0 [ 1942.751745][T20679] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1942.777545][T20665] Memory cgroup out of memory: Killed process 22163 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1942.808478][T20679] device bond_slave_1 left promiscuous mode [ 1943.001906][T20707] device bond_slave_1 entered promiscuous mode [ 1943.010303][T20707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1943.019133][T20706] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1943.032105][T20706] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1943.045820][T20679] bond0: Releasing backup interface bond_slave_1 [ 1943.053797][T20679] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1943.070670][ C0] net_ratelimit: 20 callbacks suppressed [ 1943.070683][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1943.070731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1943.070797][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1943.070828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1943.146836][T20679] device bond_slave_1 left promiscuous mode 02:37:23 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x06\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi*:De', 0x0) [ 1943.207659][T20707] device bond_slave_1 entered promiscuous mode [ 1943.214175][T20707] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x0f\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) 02:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00/', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi+:De', 0x0) 02:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1943.327504][T20744] bond0: Releasing backup interface bond_slave_1 [ 1943.347535][T20744] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x009', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1943.456433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1943.462513][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1943.468441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1943.474244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1943.482035][T20744] device bond_slave_1 left promiscuous mode [ 1943.696735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1943.702792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1943.784330][T20752] device bond_slave_1 entered promiscuous mode [ 1943.792144][T20752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1943.800813][T20754] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1943.815472][T20754] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1943.851165][T20744] bond0: Releasing backup interface bond_slave_1 [ 1943.876703][T20744] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1943.927210][T20744] device bond_slave_1 left promiscuous mode 02:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\a\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006802}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi-:De', 0x0) 02:37:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) 02:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'H\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1943.985693][T20752] device bond_slave_1 entered promiscuous mode [ 1943.992463][T20752] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi.:De', 0x0) 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006803}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.070180][T20809] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006804}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.132859][T20809] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'L\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.186070][T20820] bond0: Releasing backup interface bond_slave_1 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006805}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.240421][T20820] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1944.297879][T20820] device bond_slave_1 left promiscuous mode [ 1944.516529][T20832] device bond_slave_1 entered promiscuous mode [ 1944.524873][T20832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1944.574003][T20820] bond0: Releasing backup interface bond_slave_1 [ 1944.596977][T20820] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1944.647322][T20820] device bond_slave_1 left promiscuous mode 02:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00H\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006806}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi0:De', 0x0) 02:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'h\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1944.702107][T20832] device bond_slave_1 entered promiscuous mode [ 1944.708804][T20832] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'l\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006807}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrViX:De', 0x0) [ 1944.772700][T20882] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006806}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.845191][T20882] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1944.873990][T20891] bond0: Releasing backup interface bond_slave_1 02:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000680a}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1944.886126][T20891] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1944.954288][T20891] device bond_slave_1 left promiscuous mode [ 1945.162888][T20904] device bond_slave_1 entered promiscuous mode [ 1945.181447][T20904] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1945.217641][T20891] bond0: Releasing backup interface bond_slave_1 [ 1945.224033][T20891] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1945.279806][T20891] device bond_slave_1 left promiscuous mode 02:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00L\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x12', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000680f}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'t\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVic:De', 0x0) 02:37:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1945.334761][T20904] device bond_slave_1 entered promiscuous mode [ 1945.341981][T20904] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'z\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006848}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVii:De', 0x0) [ 1945.400361][T20941] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1945.435027][T20941] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000684c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006848}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1945.481322][T20967] bond0: Releasing backup interface bond_slave_1 [ 1945.518893][T20967] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1945.590906][T20967] device bond_slave_1 left promiscuous mode [ 1945.777666][T20980] device bond_slave_1 entered promiscuous mode [ 1945.784205][T20980] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1945.822925][T20980] bond0: Error: Device is in use and cannot be enslaved [ 1945.833221][T20967] bond0: Releasing backup interface bond_slave_1 [ 1945.840020][T20967] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1945.886603][T20967] device bond_slave_1 left promiscuous mode 02:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00`\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000680f}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006868}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) 02:37:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x03\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVio:De', 0x0) 02:37:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000686c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x05\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) [ 1946.075715][T21029] device bond_slave_1 entered promiscuous mode [ 1946.087498][T21029] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1946.100550][T21020] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1946.116113][T21020] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1946.191798][T21029] bond0: Releasing backup interface bond_slave_1 [ 1946.240828][T21029] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1946.317455][T21029] device bond_slave_1 left promiscuous mode 02:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00h\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000687a}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVis:De', 0x0) 02:37:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1946.374551][T21050] device bond_slave_1 entered promiscuous mode [ 1946.381527][T21050] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\brist\xe3cusgrVid:De', 0x0) [ 1946.463977][T21092] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x0frist\xe3cusgrVid:De', 0x0) [ 1946.520481][T21092] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1946.553924][T21101] bond0: Releasing backup interface bond_slave_1 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) [ 1946.562405][T21101] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\t%ist\xe3cusgrVid:De', 0x0) 02:37:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) [ 1946.628718][T21101] device bond_slave_1 left promiscuous mode [ 1946.884240][T21111] device bond_slave_1 entered promiscuous mode [ 1946.891090][T21111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1946.931254][T21101] bond0: Releasing backup interface bond_slave_1 [ 1946.943687][T21101] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1947.007359][T21101] device bond_slave_1 left promiscuous mode 02:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00l\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c%sgrVid:De', 0x0) 02:37:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) 02:37:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrViu:De', 0x0) [ 1947.066947][T21111] device bond_slave_1 entered promiscuous mode [ 1947.073373][T21111] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c*sgrVid:De', 0x0) [ 1947.142022][T21172] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVix:De', 0x0) 02:37:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) 02:37:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c+sgrVid:De', 0x0) [ 1947.188796][T21172] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1947.252746][T21188] bond0: Releasing backup interface bond_slave_1 [ 1947.281789][T21188] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1947.287387][T21192] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1947.312600][T21192] CPU: 1 PID: 21192 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1947.320606][T21192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1947.330646][T21192] Call Trace: [ 1947.333933][T21192] dump_stack+0x172/0x1f0 [ 1947.338247][T21192] dump_header+0x10f/0xb6c [ 1947.342648][T21192] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1947.348449][T21192] ? ___ratelimit+0x60/0x595 [ 1947.353027][T21192] ? do_raw_spin_unlock+0x57/0x270 [ 1947.358130][T21192] oom_kill_process.cold+0x10/0x15 [ 1947.363222][T21192] out_of_memory+0x79a/0x1280 [ 1947.368500][T21192] ? lock_downgrade+0x880/0x880 [ 1947.373334][T21192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1947.379584][T21192] ? oom_killer_disable+0x280/0x280 [ 1947.384779][T21192] ? find_held_lock+0x35/0x130 [ 1947.389543][T21192] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1947.395160][T21192] ? memcg_event_wake+0x230/0x230 [ 1947.400182][T21192] ? do_raw_spin_unlock+0x57/0x270 [ 1947.405277][T21192] ? _raw_spin_unlock+0x2d/0x50 [ 1947.410120][T21192] try_charge+0x102c/0x15c0 [ 1947.414617][T21192] ? find_held_lock+0x35/0x130 [ 1947.419385][T21192] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1947.425015][T21192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1947.431241][T21192] ? kasan_check_read+0x11/0x20 [ 1947.436075][T21192] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1947.441692][T21192] mem_cgroup_try_charge+0x24d/0x5e0 [ 1947.446964][T21192] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1947.452579][T21192] wp_page_copy+0x408/0x1740 [ 1947.457147][T21192] ? find_held_lock+0x35/0x130 [ 1947.461893][T21192] ? pmd_pfn+0x1d0/0x1d0 [ 1947.466136][T21192] ? lock_downgrade+0x880/0x880 [ 1947.470973][T21192] ? swp_swapcount+0x540/0x540 [ 1947.475719][T21192] ? kasan_check_read+0x11/0x20 [ 1947.480551][T21192] ? do_raw_spin_unlock+0x57/0x270 [ 1947.485644][T21192] do_wp_page+0x48e/0x1500 [ 1947.490074][T21192] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1947.495434][T21192] __handle_mm_fault+0x22e8/0x3ec0 [ 1947.500703][T21192] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1947.506244][T21192] ? find_held_lock+0x35/0x130 [ 1947.510993][T21192] ? handle_mm_fault+0x322/0xb30 [ 1947.515938][T21192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1947.522161][T21192] ? kasan_check_read+0x11/0x20 [ 1947.526995][T21192] handle_mm_fault+0x43f/0xb30 [ 1947.531752][T21192] __do_page_fault+0x5ef/0xda0 [ 1947.536500][T21192] do_page_fault+0x71/0x581 [ 1947.540983][T21192] ? page_fault+0x8/0x30 [ 1947.545219][T21192] page_fault+0x1e/0x30 [ 1947.549354][T21192] RIP: 0033:0x40ee58 [ 1947.553228][T21192] Code: 48 8b 05 63 40 30 00 48 89 08 48 8b 15 61 40 30 00 48 89 42 08 48 8b 05 46 40 30 00 48 89 05 4f 40 30 00 49 8d 81 c0 02 00 00 <48> 89 05 51 16 64 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 1947.572822][T21192] RSP: 002b:0000000000a4fd28 EFLAGS: 00010246 [ 1947.578868][T21192] RAX: 0000000002078c00 RBX: 0000000000a4fd30 RCX: 0000000000712ea0 [ 1947.586823][T21192] RDX: 000000000040ec90 RSI: 0000000000712e90 RDI: 0000000002078c20 [ 1947.594863][T21192] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1947.602815][T21192] R10: 0000000002078c10 R11: 0000000000000202 R12: 0000000000000001 [ 1947.610853][T21192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1947.627735][T21192] memory: usage 307200kB, limit 307200kB, failcnt 1829 [ 1947.645414][T21192] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) [ 1947.648210][T21188] device bond_slave_1 left promiscuous mode [ 1947.658585][T21192] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1947.683725][T21192] Memory cgroup stats for /syz4: cache:4KB rss:240936KB rss_huge:208896KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:241000KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1947.715293][T21192] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22211,uid=0 [ 1947.737138][T21192] Memory cgroup out of memory: Killed process 22211 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1947.952697][T21199] device bond_slave_1 entered promiscuous mode [ 1947.977134][T21199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1947.999114][T21188] bond0: Releasing backup interface bond_slave_1 [ 1948.005660][T21188] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1948.059360][T21188] device bond_slave_1 left promiscuous mode 02:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x0f\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) 02:37:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c-sgrVid:De', 0x0) 02:37:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:D%', 0x0) [ 1948.123840][T21199] device bond_slave_1 entered promiscuous mode [ 1948.133506][T21199] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c.sgrVid:De', 0x0) 02:37:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) [ 1948.174893][T21230] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1948.196101][T21236] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1948.231737][T21236] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1948.240866][T21230] CPU: 1 PID: 21230 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1948.249288][T21230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.259342][T21230] Call Trace: [ 1948.259368][T21230] dump_stack+0x172/0x1f0 [ 1948.259387][T21230] dump_header+0x10f/0xb6c [ 1948.259411][T21230] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1948.267006][T21230] ? ___ratelimit+0x60/0x595 [ 1948.267021][T21230] ? do_raw_spin_unlock+0x57/0x270 [ 1948.267039][T21230] oom_kill_process.cold+0x10/0x15 [ 1948.277217][T21230] out_of_memory+0x79a/0x1280 [ 1948.277232][T21230] ? lock_downgrade+0x880/0x880 [ 1948.277250][T21230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.286925][T21230] ? oom_killer_disable+0x280/0x280 [ 1948.286938][T21230] ? find_held_lock+0x35/0x130 [ 1948.286968][T21230] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1948.286980][T21230] ? memcg_event_wake+0x230/0x230 [ 1948.286999][T21230] ? do_raw_spin_unlock+0x57/0x270 [ 1948.287019][T21230] ? _raw_spin_unlock+0x2d/0x50 [ 1948.296791][T21230] try_charge+0x102c/0x15c0 [ 1948.296806][T21230] ? find_held_lock+0x35/0x130 [ 1948.296826][T21230] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1948.296842][T21230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.296863][T21230] ? kasan_check_read+0x11/0x20 [ 1948.296881][T21230] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1948.307942][T21230] mem_cgroup_try_charge+0x24d/0x5e0 [ 1948.307971][T21230] mem_cgroup_try_charge_delay+0x1f/0xa0 02:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=""/144, 0x90, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast2}, 0xffff}], 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0xff, @rand_addr=0xffffffff80000001, 0x4e22, 0x801, 'sh\x00', 0x11, 0x8, 0x4}, 0x2c) 02:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {}, {0x20, 'posix_acl_access.'}], 0xa, "c29c19f5b329dc4bdeb9f7290a6cb7cc7cf8cf3f16e42ea9c3fdd7c7386f4bed702ff56c0cc8cb9a9f0a2389a84727b83f267d852151"}, 0x55) r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_WIE_ON(r1, 0x700f) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x37, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:37:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c0sgrVid:De', 0x0) [ 1948.307988][T21230] wp_page_copy+0x408/0x1740 [ 1948.308000][T21230] ? find_held_lock+0x35/0x130 [ 1948.308020][T21230] ? pmd_pfn+0x1d0/0x1d0 [ 1948.308038][T21230] ? lock_downgrade+0x880/0x880 [ 1948.400186][T21230] ? swp_swapcount+0x540/0x540 [ 1948.404979][T21230] ? kasan_check_read+0x11/0x20 [ 1948.409844][T21230] ? do_raw_spin_unlock+0x57/0x270 [ 1948.415416][T21230] do_wp_page+0x48e/0x1500 [ 1948.419847][T21230] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1948.425253][T21230] __handle_mm_fault+0x22e8/0x3ec0 02:37:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cXsgrVid:De', 0x0) [ 1948.430470][T21230] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1948.430485][T21230] ? find_held_lock+0x35/0x130 [ 1948.430502][T21230] ? handle_mm_fault+0x322/0xb30 [ 1948.440828][T21230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.440845][T21230] ? kasan_check_read+0x11/0x20 [ 1948.440866][T21230] handle_mm_fault+0x43f/0xb30 [ 1948.440887][T21230] __do_page_fault+0x5ef/0xda0 [ 1948.466499][T21230] do_page_fault+0x71/0x581 [ 1948.471012][T21230] ? page_fault+0x8/0x30 [ 1948.475259][T21230] page_fault+0x1e/0x30 [ 1948.479420][T21230] RIP: 0033:0x45727b [ 1948.483323][T21230] Code: 25 20 06 00 00 b8 a0 37 41 00 48 89 15 4e f5 5f 00 48 85 c0 74 08 4c 89 cf e8 31 c5 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 0a cd 2b 00 00 00 00 00 48 c7 05 ef cc 2b 00 00 00 00 00 [ 1948.502931][T21230] RSP: 002b:0000000000a4fd30 EFLAGS: 00010206 [ 1948.509023][T21230] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 00000000004137b3 [ 1948.517033][T21230] RDX: 0000041513d87f4a RSI: 0000000000000018 RDI: 0000000002078c20 [ 1948.525122][T21230] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1948.525131][T21230] R10: 0000000002078c10 R11: 0000000000000202 R12: 0000000000000001 [ 1948.525140][T21230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1948.537155][T21230] memory: usage 307200kB, limit 307200kB, failcnt 1860 [ 1948.544499][T21246] bond0: Releasing backup interface bond_slave_1 [ 1948.562994][T21230] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1948.564240][T21246] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1948.570988][T21230] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1948.594315][T21230] Memory cgroup stats for /syz4: cache:4KB rss:240948KB rss_huge:208896KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:240992KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1948.594393][T21230] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21224,uid=0 [ 1948.632115][T21230] Memory cgroup out of memory: Killed process 21224 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35792kB, shmem-rss:0kB [ 1948.648498][T21246] device bond_slave_1 left promiscuous mode [ 1948.670484][ T7511] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1948.682288][ T7511] CPU: 1 PID: 7511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1948.690554][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.700617][ T7511] Call Trace: [ 1948.703938][ T7511] dump_stack+0x172/0x1f0 [ 1948.708274][ T7511] dump_header+0x10f/0xb6c [ 1948.712693][ T7511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1948.718501][ T7511] ? ___ratelimit+0x60/0x595 [ 1948.723109][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1948.728237][ T7511] oom_kill_process.cold+0x10/0x15 [ 1948.733349][ T7511] out_of_memory+0x79a/0x1280 [ 1948.738033][ T7511] ? oom_killer_disable+0x280/0x280 [ 1948.743231][ T7511] ? find_held_lock+0x35/0x130 [ 1948.748002][ T7511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1948.753559][ T7511] ? memcg_event_wake+0x230/0x230 [ 1948.758591][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1948.763702][ T7511] ? _raw_spin_unlock+0x2d/0x50 [ 1948.768560][ T7511] try_charge+0xa87/0x15c0 [ 1948.772981][ T7511] ? find_held_lock+0x35/0x130 [ 1948.777843][ T7511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1948.783395][ T7511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.789638][ T7511] ? kasan_check_read+0x11/0x20 [ 1948.794490][ T7511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1948.800056][ T7511] mem_cgroup_try_charge+0x24d/0x5e0 [ 1948.805352][ T7511] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1948.810991][ T7511] wp_page_copy+0x408/0x1740 [ 1948.815583][ T7511] ? find_held_lock+0x35/0x130 [ 1948.820354][ T7511] ? pmd_pfn+0x1d0/0x1d0 [ 1948.824596][ T7511] ? lock_downgrade+0x880/0x880 [ 1948.829448][ T7511] ? swp_swapcount+0x540/0x540 [ 1948.834214][ T7511] ? kasan_check_read+0x11/0x20 [ 1948.839060][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1948.844173][ T7511] do_wp_page+0x48e/0x1500 [ 1948.848766][ T7511] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1948.854150][ T7511] __handle_mm_fault+0x22e8/0x3ec0 [ 1948.859269][ T7511] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1948.864828][ T7511] ? find_held_lock+0x35/0x130 [ 1948.869599][ T7511] ? handle_mm_fault+0x322/0xb30 [ 1948.874543][ T7511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1948.880787][ T7511] ? kasan_check_read+0x11/0x20 [ 1948.885649][ T7511] handle_mm_fault+0x43f/0xb30 [ 1948.890425][ T7511] __do_page_fault+0x5ef/0xda0 [ 1948.895196][ T7511] do_page_fault+0x71/0x581 [ 1948.899700][ T7511] ? page_fault+0x8/0x30 [ 1948.903949][ T7511] page_fault+0x1e/0x30 [ 1948.908102][ T7511] RIP: 0033:0x45735a [ 1948.912008][ T7511] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 1948.931619][ T7511] RSP: 002b:0000000000a4fd30 EFLAGS: 00010246 [ 1948.937867][ T7511] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1948.945845][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a54fc8 [ 1948.953834][ T7511] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1948.962079][ T7511] R10: 0000000002078c10 R11: 0000000000000246 R12: 00000000000000ca [ 1948.970140][ T7511] R13: 0000000000003d41 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1948.981745][ T7511] memory: usage 307180kB, limit 307200kB, failcnt 1860 [ 1948.991191][ T7511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1949.000829][ T7511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1949.008251][ T7511] Memory cgroup stats for /syz4: cache:4KB rss:240932KB rss_huge:208896KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:240956KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1949.030908][ T7511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22220,uid=0 [ 1949.050678][T21283] device bond_slave_1 entered promiscuous mode [ 1949.067403][ T7511] Memory cgroup out of memory: Killed process 22220 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1949.073412][T21283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1949.121444][T21290] bond0: Releasing backup interface bond_slave_1 [ 1949.149381][T21290] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1949.241197][T21290] device bond_slave_1 left promiscuous mode 02:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00z\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3ccsgrVid:De', 0x0) 02:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0xffffffffffffff16, 0x4) 02:37:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) 02:37:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1949.296212][T21291] device bond_slave_1 entered promiscuous mode [ 1949.302552][ C0] net_ratelimit: 20 callbacks suppressed [ 1949.302560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1949.302614][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1949.302699][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1949.302733][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1949.331939][T21291] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cdsgrVid:De', 0x0) 02:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) write$apparmor_exec(r1, &(0x7f00000016c0)={'stack ', 'asymmetric\x00'}, 0x11) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000080)="b696418971c9c36246d9153bb34801661f86987da4d9b59c758d785af60e9b02c412191bd4bd27501e459a51ab9bb2e150ce3aaab82dbb47cafdb40bfdaa4fddfd574085ed789dae786865fe246e57f22d10eb299c96bf6bcb4ad07928b279b429d42872b0703c44f96f381839b123aa7c32dcfe25115109d18727c3c8f9b6437964c155fd5e9e6e7afae94a06e9307dfba909d91577a558d4e87461c1623524925352f2c8821c1b9f69", 0xaa}, {&(0x7f0000000140)="8dc4dad7ab18b1cb40dc7267da1476345bbc7995d10c6b9ffd6e964e42cfe890064217a51e87eb2bc40538767d611ccb3b28e1530688229bb3e7d855a0ac8b6c7a3575ef19f7caddb7b6769783d2717126b162feb9eca800591e24af8692e889113274f9996aa5893a3aa32ffece92d8e93f6f101bb8861810b99819361514f29a39ad398bc0d3", 0x87}, {&(0x7f0000000200)="edfbba8dd0bc8d75f95ed502940893c1ed04392f18a339a1ecc48455dcfe6170c10800c3c1c59ff7c6e7429100e29a59449bfca362290129f87d0fefc9ccfa2768b157a3decf12a26a69ae65e8c570a7371b5da20e689d81b8b1d660d4f93be280b1ac88b44b287a34852a50aa224de4a962b43aa21f6f5d552af76bf922d0a2edee9f32f3", 0x85}, {&(0x7f00000002c0)="f871f0e2db4de436909c4325f3302c85c6e54c9e88636e3d857b7deb93e567cd7b87f10cf71b2130110141180126eec4d1297abfc748183908297466e249085d9623553f797b4dea080779db14e0ec20c513cbedc8ad8a3f720487dd036fe5cd2ea5e8fd2bfcbcb893c52967ef3f29b00f4eae037195a58d7886baa71ad9316e787992afaac0a5ae87693102d08f63eb2bc3f08df2fe4d52d8872cb9f068cae45882060dc6a6c1c3b69a1d3c770ac605174c80bf36d9", 0xb6}, {&(0x7f0000000380)="d113569970c503ed0b962bc487f44a46ae4ba84f7981f4f338a4581e1681b87135cf699fb8b77a7f0ff25c4e4d96ea5ae817aaad22a31ba8447154ec41e2b9b0f3322e62559924862953691c6a5e149c5d26b76ba54996322b4eef08ed9eed0817c307eeede670fe2ba6a29be701ddb77f65c7f27d16e5c92490ca226fc07a04f976a3d9635c1257257c6d87496434d87273d7ee6f0de235413c060aba58c052e31cef106f9c65b6971f368cc61b218eb4d4706d09b1fd734d2cd329ef02f42e112645322a680b0316d7d09e247c7ee319334614950fa65d92715c8c61761b460b3ca274f740c6e9e5b0988e4c1d72025f1a1543029b3fddf1edac9700e065f3b568b01460493515320506d74692304f05e7284834a9733d79cb6a4bfb0ce146003b1c65dcee7a53c83b3960b2d76ebdab64e80cd95aa43f0364ce5aafbd57f25bacd86f4d1a6a03ead67136869b2654ac969458647f92a296191c351691c7c6f30104867e47b300e19136b47994d60865b9d16f8b6e9e21d58b7b9bd7ca818f630819131bf74a6af4743bed70546adcb83419c249c1b13d4e90758f58ec522277a467feda25065425241754eff0e85c95080f1f3df5624b0335a89afb03a19c0ca06756d5d72d84645924ee4a1f13f67029276c20ef3a347ed59f19b75d85a85780158f1cf2a5cab3d1ead8da4b7f23c0e65182601706dab5d27945188c8f76893c1d8428d0cae4c5ee18a953b8742a1c1c57f03d115884c335769b7dd30bb70aad01027aa322ecd028762af1aa934b77020babc8c71a3e43552d37ad04b0f5e9645450d7bdb22746102a751c7374f1109723e2365232b683a90c4acebd6af8680230051d686c9d39c1dda32a60d875119c507e08723aeca439af4d3531060bd8ce59892706edae1432dac931c1256aa60eb63cb7379f8fdb48617dcf29045e0fe7966e5c6d48da90b7acdfee6c89af492e100c47715831a2142d04f2ddf9001f9df7fc06adf48ef1a5d1909bd9ba2101d492e46cbaa152152f7c93afc4240d6c13038bc833465fb1ec5de87eeb35f71b2f6f859dff28e606badca5309a9d623faff7c11fc6cd9efaec5f3f61391a444afaaa263626431711991707ab48e78551624f825948146e5b94d49b18fcb625ea50c196112101b45e2db5d7a10cf19e881a7702ec8fb1ffefdbe37a551f070f10ffa856ec169ba414f2a72b568166295ac0ab842b6b6765bc8a8153ddfe0d70df904b65ae91a5e569a30dd9b00ca7d8b02e012d6d83c60327dd996124a4eeb16fc0da33e4cb45f012e38d898689b480167f7d0356213a8a664c7fe718f57eb0f4a33ffbedee10dff4adedc271b5327cb04eb58f53fb7139c3d9c9a698c8e55eb9f00c826aa4cfc91a6d41a85a1d681e291be8aedcb72595c6501cece719a1dd4185d64c4c797194f0267cb5d5d00ead9c822d49aaa3534d0b1d0ecb9618f6336b4fcf35b68211d0d4a2865b4302d527e4b25080fd63aba87135886227be3e58af79ce7071937d9344fbad8bf89ea40ea5ffe0de89b6ebb58549058f232130b185d99cd71af36967d16821fc06e595904c2d83d026b6fb61932c9bfae3caac8346b2b1e99584f02b9a3225ff26e9b6171de192c508d07e750edfcefe8343571edbbcdacaf587c1095955154666d599d816c411b1f097f28b013d58aafcfb7bc4183a61b45589d8be3473974da583ede7b325a85c635a8c49a0d2501723492b441901ccbd018ee716737326fed79fd4be2d137a33885852e4fcf436726a7f870f2de0579fe57c4701de28cdeb16eb77b0c4d8f333ba9553014c9c066a225e7f58dbac8f75ba03d5f662382101a88f1815d1624bd5e2aa100376a5332134fe23d7fb7796bd3b9eb5c0d7edc838264bcbaa6bb20496a3b8f32e80a2e32c772e96c03d15847dddb19df16f62ee3529c18370617c9abc9ee892635331a882352029e08bf753b9f76ace0cfbab344642cb50fde596340a32aaf34cc06fcd3efcdc0ea068df78a4e60984dca3c4b76f0b75e2e03852bfc759a786b1e53dcf6a666de5aad7be1bfdc88c3b077ea868ae2b6325d585c4be8d20bdee9448b5c6744cb2f3cd77fe8a57ee0940f6ecaeab0023ca22db731a2e3a41c8910ff30cd54ba2c650447e07465effce4865c7897dbdfc1e009e8eabe3aec12006ad4d5d0fe6e1949c6c5403d3e022ca7448ae3a5f782055db2fa6913be2702c3d98cf2bdfbaca8eeed206dde5b67ab2742a70b74e8d3e9d1d4df2e325727560347c11f4dab052c8280d2f42fe510f154de455fd57b9fc85db32436b5e2f2131ffa80e7e2e854e20f5efbf30b2503eafb86606d98cec850b480e92db78511da2133f41830d5b058123ff77b306a69eaf3e38476efac6dca1eab4a049bd025ad2be0a25a853da903c2667b9d52adabac20e581a0639d64ffbfe32d75b8f42b4c4edcf3319a34c78d8e66b8736ae541110e989c76db5ec5e02ca10af0ac493276c7f4ed6baad2f447be9fd984de424c103d2eb6409533b203c9e660890b937f6f25a4aa21f337ab877e319d8ef5f393799de3a21e5abb569cf7b4f92fd60373aae13151aff5282c24b99f431734f3d715742b00bf62ab6599f4c1be680116d0ecc96701ea72ab90dc6ad4a2d49830befbc6112a4dee0f09cc978ece52375b9e7631699805c687a187bddb7dfd2e11933f62761e13080d7146735c6520b0694fb4eb22f0c39fbc1eaa9e343862999b3f0d363eb2d0abc34a6d12b8fb27c49a95e91debfda2b9a71f5726128c925c69bb3f7c32e6d14de7d9b14ac87e45491c8c24c26628ac2886ff679dc89292a1586ac82d0e87a6760e617c9d6cb01bb41e0fe055ca9f895acb1c96da333ef27aeaa9cac4822128d2ab9a4275c215058143dcb48b4b7283474b9a905e67624238e82c332f9d8f20bcd5fdddd4c69dd977d7ff7252e26f0e759f7685c9df34d1c544e417ba500c4c500764de4270c0e5fad9006036636bde041cd7daae3cb232cdf103b57325efa9c6426d80e643bf511f8452bf56aaf70b4c4c2843836ccf0b90497835babc5d4dfd588cff3ab84481bb55146718ff78dc0ea4b65023a3ba437c180476f7922e65bc73a5e07f6d527ac9c0e14244f74df07bb0efccfde5bd1b1ce59bfab7633bc31e496f7d1a5a5942854e7ccb3a0d2ad9b992c9d90046bb896a5d0777ab32c3c16af0e7b3f876f65a27c3229bfc2126c88c365673ac94d7f0761df903c3da417f25b8952b421437cac29097c5bb76ecb6667bbf5ca8f15f77a32cf00daa1cebe610ac4b5a738bed1b3654246b1012cf296574637c349d4a08beb8f8fe0aef594a5d3b8fa326c4cfe11af7cbac1c97bbb71f445f236e2bf5af3846f93d8eecb40111c62091b10eb5cdd64d50295a1d57d2d161c9ebb273d2b544b2fdf092f8b941b692e910087c8c950f13f469670c5c5276297d468e8dcf7975927a989229bedb77744eab21d20bcb5a4d04ddedf97c91014d5010b52241fabb78bca7537f453bff857d874bbc37e476ab5bdd545f68f24abfc11d5888478754288def41582022d72ad93d3575677be2ba01e2aaabf6638d899b75e830e98fe556c068daaf01d29bc693693ca7bc9c9b1c0716efb18cfb26351fcb4dceb694347dd00408a2482a9e403d0a15274698943f41c273d2b9146d1013d923161e9e73a12c5179a7c94527d6f100d8f4b90e16ce994ec8aa68a40579d259d665c74acbc4c2903e3dc08e62a986c4e5832176e3050b8478f1600b4cac567f092350feb5f2707fb6d94e04b8df3faea2404d4a8d342550d2f1f73ee13d18a2ef4d5e51e9e32baeb97358bc69db07cfb75f73ca5285f2a10c0df7c2e84f4eecd7e404c9bc5e0277f3cd9332e37ece36647473618f1e2803525a7a918817d8f0e41ab7d83deed10699b19d664ad7bf0bd59d1a02ec788f96deba242ed78d8b0cd0efb8e383f730f974c901a2e7237a1ae34abba340c699156018af8d837b93815ef9b2d9822706be7a2b84ab4485a22a15a7114be2a1490a11237bf1cd58194d50d0a0a0e59ba6fcf53794240554c40c5019604651964d2872a070457b8e5a9d95b0e52f2c0fc26d290a299e6caaa5147e1e2099db539a8e072ae4370a11f63fb644fac4a3d312a59164d780a78806d9fae64e9752da6d90928602b3792c4b743bfc490bf3763230403c4c546a60e04f67bf2e6959a59f3846652a6800b90e65fbbcfeac015bc3718db00f098908e10ffb8db1db071c875c954ba074a4ad5a80aa3739b8248d0ecb0c1b9c31246137d16d70bfc6ec22584812f604039fc81e3d99a5169f95571111b08d959ba31638bcdedcab133098c52ef2f16a12f037443f3d3535671bfd7dfc84a554af02f0f2ef4d96ee2974de046b0dd32dcf6b15a2faa26d3e756460808a523146532c96954eb2b84c936af78e4198ebab21ada0cabc4d3999559d120f17d784730c1c1ef78745524d704b2316b22ea6054fc38c65e2e324a26507bb6793304f558277372c1b56fcdd8f03e59586884a7944a0cb6129e01974b2487f3bd7385bdb2a8a6a2d2478e4fa6fca9cc50aeab8e041de3ccac6a53ef9ea3e2c35dd7606f38d11978de3e91d33e1b10cd03c72fdcb5bb5ef87fa235c8c67dd879c3e35e3505943e45c0cd0e781b6fc49dde1cd034a8d7e4d04272ebbd299ba07c101cb6ba26dee9797d59d0d6f691588081d2fb8407deae20300a0e3a667613300c8ec96345d81be6da8a3b096b4854400d0470f36ecc6dbe1e6fa056f1c1855e49e1c9b4978a71a118897cc601afdf4076f4486601de0b7a3763e7babd08aabe0f31a9a9e825517cbadf6f8dcea1c36376f2077020677afa04680f82bcfa751d180dda34149d575a68b89f470850650c588c6ac4112da80847cfc07adc31aaad29ace2c6e8e9974d7b133505fd65885a7be77a8a156b8d507b2d55e14166f9d09ee0504475cfc735138d4d5c8d54dd8ba4cf86a3dfdaf17c73428e3e1d7b4c3b261a15a8e62d3bcc982e061e3df423b282ec43896c9759f5887f929f3853d3e8a2e1e0957b4fe5e9c7bd64d253c4f49400776e5d3b326ed0d83929ba970b4d90985dd2ec1d986cbe1fe9e52cebd73f89fa6148d0ad8faec3f07dfdd68bb31841f0cebe3406b4dfebd5f57b9cc4b4e60ae078420aed930b557bb2dae5c05720f15c7ecda12033419648252e98edc695fcad3f484ad9eb9994708d33c6ff8d79a22bc14851604f77a9efddd6f2190adbbccdf63fb72ac5f786058e8c879e4f596eb27ba1d0f7db97fdf3735489b18ba98fc6b86694e0c3f642114fadcb5fcf8579d7f32fab4bd75a06c4d0522de6f39764f28941a541ad95256346d873ad080b56bea9c5deca534cb232e310662e5cd5a5a3aac2aaf2f2e34e6b9ac65142c5e7e02508a9f632133a2b3d16ce389ce11f23964d6fe5b35f1b91541aad03763587526b61e6a62e54aa4c0e6a0d67d6a7d85158c83987a87b91eb6155b1acaac451036c58974e65ebd56e91fff519465051f65dc003660beb85215dc1b3a4376530f726973368e8d70d89ae4b88d07718d7a2c35703d57fcf5371a05760940f00f7a28b77a28d23f5d1731fab979f0e54cd86a79cb5b61dce0e95199033c8b39f68249e97abd6419b670f1081558d367d8fcf62fae2a2af0255ce61db2d11925b4ab9c170614fb9323fb02280dd7b6c2232fc6cdf634f12c6d15f6fd4520f285c10b071cdbe55429807fdde038de1c4121563e3296dd60c735b9482f35eed98d909fe518570ab948a405f61a0a0c3", 0x1000}, {&(0x7f0000001380)="62c8a092be62c064b55993f8109e95b2be03e791e5b47a942e1fa1773a5853", 0x1f}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f00000013c0)="4ce088618a9a613738637ce838b1131dbe4b0ba77ad9a7bed41ee89338aee61b51ac5ff6b44f1f8602cdd3540f46051ff786a6103914e662dfe1808d7e3d61381f6abdc3a731c76a7dab3202ca3e68b63cfad5474db71258141b7fb89f0c2158b227643196e2232f4267198e39e1380f6a53909f551709c21936b5f156465ffccd9701decf04e30f3c3ade79554349e0b673fbb4b6d83203e77b54540f59cf26439f3d22fb278c08b6aeb78e574896c510946f50c07ec207aed22c7122dcf81e9a55abab3acaffc9f502ee9c9fda308fb2bb61d58adef4750bed5ab84a161a6fb5cca2b8395499855aedfa748ca089e646c13cd7da06f7b876baf8848f6a", 0xfe}, {&(0x7f00000014c0)="f9879c5222ec24bc6b01164b5b099866edcb858221e509c6eeb6dd15a09969468bf80e7f68edfa850b4628f998505c44e8c9f81997d0f97b805efb3dc13c7e2525e491d3d773134d3a12c2ea23d3734ba30b574ade09793297c28b16d23d0a8245758e30", 0x64}], 0x9) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r2 = creat(&(0x7f0000001600)='./file0\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001700)={0x9, 0x3ff, 0x0, 0xb01, 0x80000001, 0x2}) write$FUSE_INIT(r2, &(0x7f0000001640)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1d, 0x10001, 0x100, 0x6, 0x7, 0x2, 0x9}}, 0x50) [ 1949.388253][T21304] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1949.399280][T21304] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3ccsgrVid:De', 0x0) [ 1949.432728][T21312] bond0: Releasing backup interface bond_slave_1 02:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cisgrVid:De', 0x0) 02:37:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1949.463775][T21312] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3clsgrVid:De', 0x0) [ 1949.598529][T21312] device bond_slave_1 left promiscuous mode [ 1949.707037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1949.713069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1949.719420][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1949.725427][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1949.818209][T21328] device bond_slave_1 entered promiscuous mode [ 1949.827058][T21328] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1949.850746][T21328] bond0: Error: Device is in use and cannot be enslaved [ 1949.860472][T21312] bond0: Releasing backup interface bond_slave_1 [ 1949.868727][T21312] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1949.936426][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1949.936723][T21312] device bond_slave_1 left promiscuous mode [ 1949.942312][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\x03'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cosgrVid:De', 0x0) 02:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00H\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3clsgrVid:De', 0x0) 02:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00L\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cpsgrVid:De', 0x0) [ 1950.042292][T21383] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1950.076915][T21383] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000686c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1950.119107][T21399] device bond_slave_1 entered promiscuous mode 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cssgrVid:De', 0x0) [ 1950.179178][T21399] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000686c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/251, 0xfb}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/61, 0x3d}], 0x6, &(0x7f0000000540)=""/85, 0x55}, 0x5}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000640)=""/11, 0xb}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/94, 0x5e}, {&(0x7f0000001800)=""/70, 0x46}, {&(0x7f0000001880)=""/94, 0x5e}], 0x6, &(0x7f0000001980)=""/132, 0x84}, 0x69}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a40)=""/119, 0x77}, {&(0x7f0000001ac0)=""/162, 0xa2}, {&(0x7f0000001b80)=""/247, 0xf7}, {&(0x7f0000001c80)=""/96, 0x60}, {&(0x7f0000001d00)=""/101, 0x65}], 0x5, &(0x7f0000002000)=""/4096, 0x1000}}, {{&(0x7f0000001e00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/128, 0x80}], 0x1, &(0x7f0000003000)=""/4096, 0x1000}}], 0x4, 0x40000140, &(0x7f0000001f40)={0x77359400}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/vsock\x00', 0x40, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000004200)={r0}) r4 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004100)={{{@in=@multicast1, @in6=@local, 0x4e22, 0x3, 0x4e20, 0x4, 0xa, 0xa0, 0x80, 0x0, r1, r4}, {0x6, 0x2, 0x8, 0x1, 0x100, 0x8, 0x8, 0x6}, {0x4, 0x1f, 0xcb72, 0x7}, 0x7, 0x6e6bb5, 0x1, 0x0, 0x3}, {{@in, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="d019667f4301b966419190069b0b5ba5", 0x0, 0x5, 0x3, 0x1ff, 0x8, 0xb38, 0xcf3}}, 0xe8) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000004240)={0xffffffffffff9f16, 0x9, 0x7, 0x596b, 0xfff, 0x7}) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1950.322514][T21385] bond0: Releasing backup interface bond_slave_1 [ 1950.374431][T21385] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1950.437258][T21385] device bond_slave_1 left promiscuous mode 02:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\x05'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00L\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1950.617829][T21399] device bond_slave_1 entered promiscuous mode [ 1950.624413][T21399] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cxsgrVid:De', 0x0) 02:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000380)={"cbc958f2be9dc49361bf8c041414e4b71bc37a81f7620be59405a42ecdb38c66992c619910f7d62d1835e572bdd9e9389f8a39c5b3a5bdf8f3c283cd4ee69cec19f0c4741a97f530457c2e7cc21c59bac76b5acb947bd51ba3fb5499beecfc7f177c831001d3a211f1abfddb9239de5ba6be705ea5ee56529984d1d88783cbd898034273ac081c69a27b46cc607792dce15ef4da7a003bcfc8e7c89138135b556bae7a9761bf044871c233333cc6d0acd3b817cf573d857d866e74aa8fbb9a69b22c4bb2388ed3bc8176df03b4feab1531065baf34bb5f1f90829ef3956cc3181c1e97270fd9108c293e239e5c41df4e78d3968a2ae8c3b250443b2fca3fef7dccf2c9e0572dad8c8a46e11eff84f19989200940e547391c932f0ba87ce63c8791d4ba735058606c4b913650174e7e0fbba8fc8463f851c6aef9bd19e72c6eec1e53927e063d637546bb4d5402e244873bfaa75260ea8ca0c13d7bdf65cf4790ba2535c13f537b604fe31d84f28888b1d20224da96ba2ca775165f7357c84790929201e69c31519e6f86cef9df3cc5c6285801d71392b696b5cc3217be1ec4420d7213e97aa5acf4aa7cd8cd8f3e72336a714a4943695a2213705d815b870e535da3893135d6808637edb0063a9656a6c5581f17773100b5ccb0c3b4212a4e1f0b6e454bd20200e694df172701b5c64ad0f4d37459a365a62701d15926abde4ca6cda5059b8d91d6db2b0a3398de43e272742a6a606da64afb6b0a2aa94266ddc182879763eb93c1986770a367fe10af087607e503e144759fee97ea42755d79bc40b6652d84bd2d4d5d78f1300521229000f344cee6246232005b812d4ce7105194ec65ef247dee604e4190f44a87635335a62d234a380f65f412eb377fef21dd349b34d26ce744dd5a881d4d4000e61acc57b58b592a4461f3541cdf7b29deb7edcd1c6e08c3fc12e448f43418d88cad673da8644fc04feffe1697b98bbd89afee824c1ce67b4cce114befba3ae3b511cd022e1f8c29190b08c53789066fefa908cbcb20939aa231137d242bb307307e0048c04c0dd2c8ce5c704f3a5c0a31f84a8b35335eebd6685b340d1ff757b205bd9cfd42200a184550d69aee3348f50fbd2663f9332a27c0da6fbf29555898e41c31bc53c30a2444365b060f2a172ccda09e16be136d6eb3c38df42c22c3d54d52cbe04df1370e72888c42312083ee1459e14a727c72afa8141f5a061fe671305ad4d2ad2940111d6bf6bd7630d119380ea8f78583b684a09c442939b58eabcadab8ff2d2332963e9b746f4abb2d1e3aad4b5ef3eecf71ffae4756ff240365d85e3f2d06fba984398ec3aec47ca893b1e2287dfcdfaf10330d830820413d908cd4c81806498df0622e84a3b801ca764713b49f60712b98a0d901a4744ecd9847abdfde5ed6294f6e632a3b42f0f514"}) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00l\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1950.699334][T21450] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x400, &(0x7f0000000080)={0x2}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusg%Vid:De', 0x0) [ 1950.746095][T21450] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi#:De', 0x0) [ 1950.804159][T21446] bond0: Releasing backup interface bond_slave_1 [ 1950.828118][T21446] bond0: the permanent HWaddr of bond_slave_1 - 1a:59:ba:f5:8b:9f - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) [ 1950.877404][T21446] device bond_slave_1 left promiscuous mode 02:37:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi*:De', 0x0) [ 1951.227364][T21455] bond0: Releasing backup interface bond_slave_1 [ 1951.239060][T21455] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1951.299689][T21455] device bond_slave_1 left promiscuous mode [ 1951.489363][T21467] device bond_slave_1 entered promiscuous mode [ 1951.496133][T21467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1951.506850][T21469] device bond_slave_1 entered promiscuous mode [ 1951.513562][T21469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1951.564428][T21455] bond0: Releasing backup interface bond_slave_1 [ 1951.587964][T21455] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1951.636844][T21455] device bond_slave_1 left promiscuous mode 02:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\x06'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi+:De', 0x0) 02:37:31 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x0, 0x10}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) recvfrom(r2, &(0x7f0000000240)=""/143, 0x8f, 0x40000001, &(0x7f0000000380)=@isdn={0x22, 0x7, 0x0, 0x1, 0x7}, 0x80) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/98, 0x6}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f00000001c0)="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", 0x1000, 0x4080, 0x0, 0x0) 02:37:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00t\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1951.691429][T21467] device bond_slave_1 entered promiscuous mode [ 1951.698392][T21467] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi-:De', 0x0) [ 1951.744139][T21522] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x200002}) 02:37:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1951.794961][T21522] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi.:De', 0x0) 02:37:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) fstat(r1, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x1, @remote, 0x6}}, 0x2, 0x5, 0x0, 0x69fa, 0xf27}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7f, 0x80000001, 0xb, 0x10001, 0x2, 0x6, 0x10000, 0x7ff, r2}, 0x20) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) accept$alg(r3, 0x0, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000080)) [ 1951.852854][T21526] bond0: Releasing backup interface bond_slave_1 [ 1951.878165][T21526] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1951.953417][T21526] device bond_slave_1 left promiscuous mode [ 1952.226217][T21532] device bond_slave_1 entered promiscuous mode [ 1952.233293][T21532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1952.270147][T21526] bond0: Releasing backup interface bond_slave_1 [ 1952.277971][T21526] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1952.346878][T21526] device bond_slave_1 left promiscuous mode 02:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\a'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi0:De', 0x0) 02:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2e8ac, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1952.401061][T21532] device bond_slave_1 entered promiscuous mode [ 1952.408021][T21532] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1952.457714][T21572] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1952.495241][T21572] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrViX:De', 0x0) [ 1952.515676][T21575] device bridge1 entered promiscuous mode [ 1952.541993][T21588] bond0: Releasing backup interface bond_slave_1 02:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVic:De', 0x0) [ 1952.558794][T21588] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVii:De', 0x0) [ 1952.619230][T21588] device bond_slave_1 left promiscuous mode 02:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) [ 1952.961118][T21599] device bond_slave_1 entered promiscuous mode [ 1952.968441][T21599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1953.042820][T21588] bond0: Releasing backup interface bond_slave_1 [ 1953.050275][T21588] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1953.107205][T21588] device bond_slave_1 left promiscuous mode 02:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00 '}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVio:De', 0x0) 02:37:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2e8ac, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 02:37:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "a9b1c67a74d7"}, 0x7, 0x3) 02:37:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1953.165722][T21599] device bond_slave_1 entered promiscuous mode [ 1953.172405][T21599] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVip:De', 0x0) [ 1953.214699][T21641] device bridge2 entered promiscuous mode [ 1953.232048][T21638] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1953.244513][T21647] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1953.275001][T21647] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1953.276505][T21638] CPU: 0 PID: 21638 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1953.293105][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.303258][T21638] Call Trace: [ 1953.306566][T21638] dump_stack+0x172/0x1f0 [ 1953.310906][T21638] dump_header+0x10f/0xb6c [ 1953.315340][T21638] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1953.315361][T21638] ? ___ratelimit+0x60/0x595 [ 1953.325774][T21638] ? do_raw_spin_unlock+0x57/0x270 [ 1953.330912][T21638] oom_kill_process.cold+0x10/0x15 [ 1953.336048][T21638] out_of_memory+0x79a/0x1280 [ 1953.340763][T21638] ? lock_downgrade+0x880/0x880 [ 1953.345626][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1953.351888][T21638] ? oom_killer_disable+0x280/0x280 [ 1953.357097][T21638] ? find_held_lock+0x35/0x130 [ 1953.357126][T21638] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1953.357138][T21638] ? memcg_event_wake+0x230/0x230 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVis:De', 0x0) [ 1953.357153][T21638] ? do_raw_spin_unlock+0x57/0x270 [ 1953.357167][T21638] ? _raw_spin_unlock+0x2d/0x50 [ 1953.357182][T21638] try_charge+0x102c/0x15c0 [ 1953.357192][T21638] ? find_held_lock+0x35/0x130 [ 1953.357212][T21638] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1953.357227][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1953.357244][T21638] ? kasan_check_read+0x11/0x20 [ 1953.357262][T21638] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1953.357276][T21638] mem_cgroup_try_charge+0x24d/0x5e0 02:37:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2e8ac, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1953.357296][T21638] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1953.367612][T21638] __handle_mm_fault+0x1e1f/0x3ec0 [ 1953.367633][T21638] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1953.367654][T21638] ? find_held_lock+0x35/0x130 [ 1953.367666][T21638] ? handle_mm_fault+0x322/0xb30 [ 1953.367687][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1953.367705][T21638] ? kasan_check_read+0x11/0x20 [ 1953.367723][T21638] handle_mm_fault+0x43f/0xb30 [ 1953.367741][T21638] __do_page_fault+0x5ef/0xda0 [ 1953.367762][T21638] do_page_fault+0x71/0x581 [ 1953.367775][T21638] ? page_fault+0x8/0x30 [ 1953.367788][T21638] page_fault+0x1e/0x30 [ 1953.367798][T21638] RIP: 0033:0x43ff21 [ 1953.367813][T21638] Code: 8d 15 83 70 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1953.367820][T21638] RSP: 002b:0000000000a4fbd8 EFLAGS: 00010202 [ 1953.367832][T21638] RAX: 000000002000aff5 RBX: 0000000000740198 RCX: 0000000000000061 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrViu:De', 0x0) [ 1953.367839][T21638] RDX: 000000000000000b RSI: 00000000007401b8 RDI: 000000002000aff5 [ 1953.367848][T21638] RBP: 00000000007401a0 R08: 00000000d1550ac0 R09: 00000000001dcd9e [ 1953.367856][T21638] R10: 0000000000a4fca0 R11: 0000000000000246 R12: fffffffffffffffe [ 1953.367864][T21638] R13: 00000000001dcda8 R14: 00000000001dcdd5 R15: 000000000073bf0c [ 1953.402526][T21638] memory: usage 307168kB, limit 307200kB, failcnt 1875 [ 1953.474855][T21638] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1953.515691][T21650] bond0: Releasing backup interface bond_slave_1 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVix:De', 0x0) [ 1953.522740][T21638] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1953.564064][T21650] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:D%', 0x0) [ 1953.606695][T21638] Memory cgroup stats for /syz4: cache:4KB rss:239728KB rss_huge:206848KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:239756KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1953.643380][T21638] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22230,uid=0 [ 1953.674147][T21638] Memory cgroup out of memory: Killed process 22230 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1953.703637][T21650] device bond_slave_1 left promiscuous mode [ 1953.938197][T21667] device bond_slave_1 entered promiscuous mode [ 1953.944752][T21667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1953.975667][T21680] device bridge3 entered promiscuous mode [ 1953.987682][T21650] bond0: Releasing backup interface bond_slave_1 [ 1954.004599][T21650] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00?'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in=@loopback}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0xfffffffffffffffb, 0xfffffffffffffffb, 0x7}, 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") epoll_create(0x3) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_create1(0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x13\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:34 executing program 3: r0 = socket(0xa, 0x80005, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) [ 1954.076910][T21650] device bond_slave_1 left promiscuous mode [ 1954.085766][T21667] device bond_slave_1 entered promiscuous mode [ 1954.092600][T21667] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x03', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.138635][T21707] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1954.154483][T21707] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:34 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1954.205438][T21716] bond0: Releasing backup interface bond_slave_1 [ 1954.225643][T21716] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x202440, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)={0xb8, 0xffffffffffffffda, 0x6, [{{0x4, 0x2, 0x4, 0x36a52380, 0x9, 0x3, {0x5, 0xa97, 0x800, 0x0, 0xffffffffffff7fff, 0x8, 0x800, 0x9, 0x6, 0x5, 0x5, r2, r3, 0x418, 0x80000001}}, {0x1, 0x80000001, 0xb, 0x7fff, 'asymmetric\x00'}}]}, 0xb8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.320338][T21716] device bond_slave_1 left promiscuous mode [ 1954.353817][T21721] device bond_slave_1 entered promiscuous mode 02:37:34 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x400, "c838cf0fc8a060a7ae3463ab210f3878829364cf026bcff65084a842d37eca6f", 0x3, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = dup3(r1, r1, 0x80000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x24, 0x0, 0x21, &(0x7f0000ffc000/0x4000)=nil, 0x2}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x5000002102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='a\xf8w\x86\x95\xf2&k\x1d\xd7symmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x205, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x840) [ 1954.363194][T21721] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xfffffffffffffffb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2000) socket$inet_sctp(0x2, 0x5, 0x84) [ 1954.415607][T21716] bond0: Releasing backup interface bond_slave_1 [ 1954.443868][T21716] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1954.526960][T21716] device bond_slave_1 left promiscuous mode [ 1954.542540][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00@'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000040)='R\trist\xe3cusgrVid:De', 0x0) 02:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x05', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.618252][T21721] device bond_slave_1 entered promiscuous mode [ 1954.625061][T21721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1954.634240][T21757] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1954.651520][T21757] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0xfffffffffffffd9d) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0x210100) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x5) tee(r2, r2, 0x44, 0x5) request_key(&(0x7f000000aff5)='blacklist\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x2, 0x4c00000000006800}, &(0x7f0000000100)='\xf3q\x92\xe7\x02\x1d\x18\xdam\x96t\xef-\xf4\xecxr5\x1d\xfe^r\tv\x8b\x87f\xbdV\x9a\x88g2CVp\xfdrV', 0x0) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x7ff, 0x7, 0x80, 0x3, 0x9, 0x40}, 0x1ff}, 0xa) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000200)) 02:37:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:34 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.801604][T21769] bond0: Releasing backup interface bond_slave_1 [ 1954.831399][T21769] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102041ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.865321][T21769] device bond_slave_1 left promiscuous mode 02:37:34 executing program 2: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="c59131b83e2c27e1680628c399ac5d4e9d8268599376130cb65916323317687c122fbba1526d14529c6792d5", 0x2c) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x12) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x0, 0x5b, 0x0, "53ee3db54c1ca0fc1b70f9303b51caddb4042bfa7a4221806973b6d6733ea11097fc2ec3f859501aec7685a238b878aa428b69c94122102990312f05dd526bb6818e054be98317b0262df5db1c3e6a55"}, 0xd8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.923162][T21779] device bond_slave_1 entered promiscuous mode [ 1954.944432][T21779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1954.964565][T21769] bond0: Releasing backup interface bond_slave_1 02:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x101000) ioctl$TIOCNXCL(r1, 0x540d) ioctl(r0, 0x1000008912, &(0x7f0000000100)="b85b867c9d0c0011000008") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r3, 0xfffffffffffffff7, 0x18}, 0xc) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1954.982923][T21769] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x5, 0x32040) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x100) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000200)="3711dc3d4485722a5558281f1be52ddf627a9c816e5213b36a5cff2134b54a3a936a0084b603dcb12f450c52172737f6e62794e47790d532d11ef707ef928561f8a8bab9a2a5d0f75ac13d14bc9a77bad693bd35ff912f6728503668c497088b129120a493f8d133479c44ab07ae3dc58add9d75e6b86ea1cb688ddf3f37aa240112f5fb8ebf2339c43419ea3df0696d0fcc73f65c88562a65ddcd897b72acc82c57a776462d481ea8051fb6953c149659cd5762ac742314ff0b468293e1652aa605968714900555ba7de091c3d0", &(0x7f0000000300)=""/216}, 0x18) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000100)='R\trist\xe3cg>\f\x97e\xb7\x00\x00\x00\x00\x00', 0xfffffffffffffffa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x4, 0xe0, 0x5, 0x9, 0x4, 0xa3, 0x20000000000000, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xb9, 0x10000, 0x0, 0x7fff, 0x2}}, &(0x7f0000000680)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000580)={r4, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x200, 0x1f, 0x8200, 0x779b, 0x4, 0xffffffffffffff81, 0x5, 0x4af1d78, r5}, 0x20) [ 1955.066837][T21769] device bond_slave_1 left promiscuous mode [ 1955.092273][T21791] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1955.115405][T21791] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1955.129613][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1955.143815][T21779] device bond_slave_1 entered promiscuous mode [ 1955.152141][T21779] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00H'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\a', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x103c, 0x4) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:35 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1955.274325][T21836] bond0: Releasing backup interface bond_slave_1 [ 1955.287795][T21836] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1955.371660][T21836] device bond_slave_1 left promiscuous mode 02:37:35 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f133c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getpeername$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000540)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r2 = getpid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000500)={r1, r0, 0xa3c7}) timer_create(0x7, &(0x7f0000000080)={0x0, 0xb, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_getoverrun(r4) ioctl$VT_DISALLOCATE(r1, 0x5608) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000200)="ec1387689b4385271c3397ec8323269188689169779b1a22cd555e665bee0b227d8ee844f3d664ede79af151b0d6d6e50310dcfd371a806bd5ede5d8adde6c20fe697f6aaeccb327e7602e75cebd259066f67a5199a418", &(0x7f0000000380)="eabc7da802629b6417c5601e22850f5410930cc690fefd19dbf3cbf0ad29fddb15b323dd558794466b67216b0b516e8620400e144b654bd50498cda3512c24208108ed810f2ec7686ee465af7d5c88d461039c561b3093ad4147bf1bc85cbdd70188bf70756af756e4f253bf1b540d5ab980369e9dc0511d58f725fc1419a66906632cd5d53adb225461b74fbaa524c80ff5eaed795a0284e745411a7c1ff69c6978c18e23604d016eaf9f3f34e2393b2c207d3918cc6d6cac06527b9af5b7aa3efb0f70f827f33a54f506d8cb1779e97ccb74ac04f8f86bd56fc090e306a068ba"}}, &(0x7f00000002c0)) [ 1955.429780][T21845] device bond_slave_1 entered promiscuous mode [ 1955.454481][T21845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1955.477862][T21849] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x6) [ 1955.536370][ C0] net_ratelimit: 20 callbacks suppressed [ 1955.536378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1955.547969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1955.553813][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1955.559629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1955.574141][T21849] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1955.615463][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1955.632367][T21859] bond0: Error: Device is in use and cannot be enslaved [ 1955.650386][T21845] bond0: Releasing backup interface bond_slave_1 02:37:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\t', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:35 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1955.670109][T21845] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00L'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1955.787253][T21845] device bond_slave_1 left promiscuous mode 02:37:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="b190f4e81ded82629bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x9) 02:37:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\n', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1955.890487][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1955.921309][T21886] device bond_slave_1 entered promiscuous mode [ 1955.936455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1955.942422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1955.948336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1955.954138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1955.967757][T21886] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:36 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\v', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000280)="81a1465cf15065c9e3795320e87681a82afc15e3573e2ebb2a6971336a10aff4443ec8f97d25807de80bcca112ecbe1ce7194b8c2dd1f8e864edaf3350afa699f74fac9c192544a72d71d0817ed52a4b318079b2982a0d0a435217af8250cbd0aaab11ce26a3488304b744b075d02b", 0x6f) quotactl(0xfffffffffffffffe, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000240)="e5") r3 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) arch_prctl$ARCH_SET_GS(0x1001, 0x4) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xe8c, 0x2) setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000180)="95b5f86ed2f395ad2d1c1ddb918c5cb0a2a33f2091e95092c73d0eb1538bb47565ade2ba60a4694341c531ecf30964e77e357f27f3098a1ec7e50c2ba6b080792504", 0x42) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80) sync_file_range(r0, 0x98a, 0x0, 0x2) [ 1956.023039][T21898] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1956.113351][T21898] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1956.150193][T21886] bond0: Releasing backup interface bond_slave_1 02:37:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 1956.172607][T21886] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1956.189659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.189726][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:37:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xfe87) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) shutdown(r0, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) [ 1956.262166][T21886] device bond_slave_1 left promiscuous mode [ 1956.286117][T21912] device bond_slave_1 entered promiscuous mode [ 1956.295300][T21912] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1956.306932][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x20080, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffd55}, @in6={0xa, 0x4e20, 0x51, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r1, 0x100000000, 0x9, 0xe645, 0x10001, 0x3, 0x80000001, 0x6, {r2, @in6={{0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0xce65}}, 0x2, 0x2fe, 0x0, 0x8000, 0x401}}, &(0x7f0000000300)=0xb0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x81) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r4) 02:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00`'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xbc1, 0x0, 0x1c, 0x10, "a2b9fb4703040a5d283f79ce782e9f52cab3ddbdc3f146e1f4306acd362cf696ced89716b747d8b03a381bc70f6835e53e5460d67d648fa614553b3b6e0323bf", "80d3d9f592e074e253a9a39f8db3d51b8a3924e3ce36756842ae384cc0a2a077", [0x6, 0x7]}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x6, 0x4) 02:37:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:36 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1956.470775][T21948] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1956.527384][T21948] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1956.561812][T21951] bond0: Releasing backup interface bond_slave_1 02:37:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x400, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x40) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0xfffffffffffffd1e) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1956.582213][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1956.582894][T21951] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1956.626691][ T7504] CPU: 1 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1956.634647][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.644710][ T7504] Call Trace: [ 1956.648012][ T7504] dump_stack+0x172/0x1f0 [ 1956.652334][ T7504] dump_header+0x10f/0xb6c [ 1956.656743][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1956.662574][ T7504] ? ___ratelimit+0x60/0x595 [ 1956.667166][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1956.672263][ T7504] oom_kill_process.cold+0x10/0x15 [ 1956.677370][ T7504] out_of_memory+0x79a/0x1280 [ 1956.682037][ T7504] ? lock_downgrade+0x880/0x880 [ 1956.687141][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1956.693476][ T7504] ? oom_killer_disable+0x280/0x280 [ 1956.698665][ T7504] ? find_held_lock+0x35/0x130 [ 1956.703421][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1956.708963][ T7504] ? memcg_event_wake+0x230/0x230 [ 1956.713997][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1956.719109][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1956.723974][ T7504] try_charge+0x102c/0x15c0 [ 1956.728482][ T7504] ? find_held_lock+0x35/0x130 [ 1956.733249][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1956.738845][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1956.744392][ T7504] ? find_held_lock+0x35/0x130 [ 1956.749152][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1956.754697][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1956.760504][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1956.765719][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1956.771261][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1956.776366][ T7504] __alloc_pages_nodemask+0x437/0x7e0 [ 1956.781746][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1956.787477][ T7504] ? copy_page_range+0x125a/0x1f90 [ 1956.792582][ T7504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1956.798827][ T7504] alloc_pages_current+0x107/0x210 [ 1956.803944][ T7504] pte_alloc_one+0x1b/0x1a0 [ 1956.808448][ T7504] __pte_alloc+0x20/0x310 [ 1956.812768][ T7504] copy_page_range+0x1529/0x1f90 [ 1956.817709][ T7504] ? pmd_alloc+0x180/0x180 [ 1956.822136][ T7504] ? __rb_insert_augmented+0x231/0xdf0 [ 1956.827596][ T7504] ? validate_mm_rb+0xa3/0xc0 [ 1956.832276][ T7504] ? __vma_link_rb+0x279/0x370 [ 1956.837210][ T7504] copy_process.part.0+0x568b/0x7980 [ 1956.842598][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1956.847587][ T7504] _do_fork+0x257/0xfd0 [ 1956.851926][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1956.856365][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1956.861826][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1956.867278][ T7504] ? do_syscall_64+0x26/0x610 [ 1956.872131][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1956.878207][ T7504] ? do_syscall_64+0x26/0x610 [ 1956.883421][ T7504] __x64_sys_clone+0xbf/0x150 [ 1956.888102][ T7504] do_syscall_64+0x103/0x610 [ 1956.892687][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1956.898747][ T7504] RIP: 0033:0x4571fa [ 1956.902641][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1956.922564][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1956.930964][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1956.938927][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1956.947065][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1956.955034][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1956.963096][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 02:37:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6(0xa, 0x7, 0x7af0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x800, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0xfffffffffffffe65) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x1) r2 = socket(0x4, 0x2, 0xa356) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x9, 0x4) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x200100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000240)={0x0, 0x1, {0x2, 0x1, 0x8, 0x2, 0x81}}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r0}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f0000000140)=0x81) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x40800) setsockopt$inet_tcp_int(r5, 0x6, 0x1f, &(0x7f00000002c0)=0x45, 0x4) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5b07, 0x200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x81}, 0x4) [ 1956.980320][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 147 [ 1956.987198][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1956.995762][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1957.018040][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:255032KB rss_huge:229376KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:255044KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1957.022692][T21951] device bond_slave_1 left promiscuous mode 02:37:37 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\r', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='^,nodev\'lo\\&\x00', 0xfffffffffffffff9) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xe9, "cc807035acf17e5eba1beadd0abd3b0615f6b28871fed7aca18823eedc37b01ef33844221ce42102d1c147272bf54e33c43adec8134bdd49a7435ee5e969600576402ada91cb599856cd9dfdf75ad55d5dcd46ce39af37e8c452303e861f729c079624843a45ca673a20c733e0fe4ab3670213a25e2528382fd6dab6d6055a134f3675cef3b0565eb72c6f835fe227da5ad117526e9a9a6a2e9782baedc7069514f362ebb0991f9d8877f9dc2c67f0e8d9078dafe1cef8ae5264574abe18c9ac0aa772bf491da913096c120d222163c3e5c47bff0ec048b18150d6b5271223bb8dcf22b895fd63b7b9"}, &(0x7f0000000200)=0xf1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x4, 0x7, 0x4, r2}, 0x10) [ 1957.083521][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4306,uid=0 [ 1957.099096][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1957.113793][T21961] device bond_slave_1 entered promiscuous mode [ 1957.150867][T21961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1957.164257][ T7504] Memory cgroup out of memory: Killed process 4306 (syz-executor.1) total-vm:72580kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB 02:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x5, 0x3}]}, 0xc, 0x3) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='security&\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00\x00\x10'], &(0x7f0000000340)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='/dev/vga_arbiter\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)='/dev/vga_arbiter\x00']) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.224009][ T1043] oom_reaper: reaped process 4306 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1957.247165][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1957.320327][T21951] bond0: Releasing backup interface bond_slave_1 [ 1957.342841][T21951] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00h'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffff8, 0x408040) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, r3, 0x40}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r4 = syz_open_dev$sndpcmp(0xfffffffffffffffe, 0x7, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)=0x4) 02:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) mq_open(&(0x7f0000000100)='trusted\x00', 0x842, 0x1, &(0x7f0000000140)={0x74, 0x80, 0x4, 0x5, 0x7, 0x81, 0x2, 0x380dd3b}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x5) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:37 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1957.427252][T21951] device bond_slave_1 left promiscuous mode [ 1957.436489][T21961] device bond_slave_1 entered promiscuous mode [ 1957.443063][T21961] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0e', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.477685][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc180, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x100, 0x4) fcntl$setstatus(r0, 0x4, 0x4400) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.530514][T22023] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1957.545906][T22023] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:37 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xf9a, 0x3, 0xe8f, 0xdb, 0x0, 0x3, 0x5ba81ce8c534cc08, 0x0, 0x7, 0x800, 0x8001, 0x7, 0xa1, 0x715a1288, 0xffffffff, 0x0, 0x800, 0x60, 0x100000001, 0xffffffffffffff65, 0x10d, 0xfffffffffffffff9, 0x9, 0x9, 0x351, 0x4, 0x400, 0x0, 0x8000, 0x7, 0xfffffffffffffe01, 0x3, 0x1e8b, 0x75, 0x1000, 0x83c, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x7fff, 0x1f, 0xf, 0x1, 0x8, 0x2620}, r1, 0xa, r0, 0x8) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.591435][T22026] bond0: Releasing backup interface bond_slave_1 [ 1957.620042][T22026] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.688957][T22026] device bond_slave_1 left promiscuous mode 02:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asyometric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.744955][T22034] device bond_slave_1 entered promiscuous mode [ 1957.753246][T22034] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1957.775957][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x02\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.799706][T22063] bond0: Error: Device is in use and cannot be enslaved 02:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00l'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:37 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xbaa, 0x400) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) shutdown(r0, 0x0) 02:37:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:37 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x03\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4220, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.913891][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1957.953215][T22085] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x42) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @data}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1957.983696][T22085] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1958.015647][T22083] bond0: Releasing backup interface bond_slave_1 02:37:38 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8000, 0x82000) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x222, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) write$ppp(r0, &(0x7f0000000140)="edebf8b3c64181547c2b3f896c38f577cfc5322491a02d17c79bf539e9c797146e863429ccef9c004a86d928a0583e5c04efda4530c96c802ab6f12cfccb3a7ff0063bdd5a29fd5d09f6d9ed562f17cf4fd6dd7c4020fb4e1c2a3bc05a26f07dfa07ae7c555bb53dda6d6948dcbc842d43b80a3ad61a9b8ba2658adddde991526fbb099fabfe3b33acf30d62700315ca3918006c4b8654b10c", 0x99) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1958.045982][T22083] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x04\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1958.112956][T22083] device bond_slave_1 left promiscuous mode [ 1958.167331][T22094] device bond_slave_1 entered promiscuous mode [ 1958.199377][T22094] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x1, "521383fff1ead259"}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1958.213984][T22120] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1958.243340][T22083] bond0: Releasing backup interface bond_slave_1 [ 1958.295774][T22083] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1958.306401][T22120] CPU: 0 PID: 22120 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1958.320853][T22120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.330916][T22120] Call Trace: [ 1958.334232][T22120] dump_stack+0x172/0x1f0 [ 1958.338586][T22120] dump_header+0x10f/0xb6c [ 1958.343031][T22120] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1958.348857][T22120] ? ___ratelimit+0x60/0x595 [ 1958.353598][T22120] ? do_raw_spin_unlock+0x57/0x270 [ 1958.358856][T22120] oom_kill_process.cold+0x10/0x15 [ 1958.363975][T22120] out_of_memory+0x79a/0x1280 [ 1958.363993][T22120] ? lock_downgrade+0x880/0x880 [ 1958.364010][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1958.373517][T22120] ? oom_killer_disable+0x280/0x280 [ 1958.373531][T22120] ? find_held_lock+0x35/0x130 [ 1958.373552][T22120] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1958.395496][T22120] ? memcg_event_wake+0x230/0x230 [ 1958.400578][T22120] ? do_raw_spin_unlock+0x57/0x270 [ 1958.405715][T22120] ? _raw_spin_unlock+0x2d/0x50 [ 1958.410607][T22120] try_charge+0x102c/0x15c0 [ 1958.415117][T22120] ? find_held_lock+0x35/0x130 [ 1958.419885][T22120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1958.425522][T22120] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1958.431071][T22120] ? find_held_lock+0x35/0x130 [ 1958.435834][T22120] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1958.441389][T22120] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1958.446934][T22120] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1958.452162][T22120] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1958.457717][T22120] __memcg_kmem_charge+0x136/0x300 [ 1958.462862][T22120] __alloc_pages_nodemask+0x437/0x7e0 [ 1958.468239][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1958.474490][T22120] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1958.480204][T22120] ? copy_process.part.0+0x1d08/0x7980 [ 1958.485769][T22120] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1958.491049][T22120] ? trace_hardirqs_on+0x67/0x230 [ 1958.496072][T22120] ? kasan_check_read+0x11/0x20 [ 1958.500921][T22120] copy_process.part.0+0x3e0/0x7980 [ 1958.506117][T22120] ? psi_memstall_leave+0x11c/0x180 [ 1958.511320][T22120] ? sched_clock+0x2e/0x50 [ 1958.515768][T22120] ? psi_memstall_leave+0x12e/0x180 [ 1958.520964][T22120] ? find_held_lock+0x35/0x130 [ 1958.525726][T22120] ? psi_memstall_leave+0x12e/0x180 [ 1958.530930][T22120] ? __cleanup_sighand+0x60/0x60 [ 1958.535868][T22120] ? __lock_acquire+0x548/0x3fb0 [ 1958.540884][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1958.547145][T22120] _do_fork+0x257/0xfd0 [ 1958.551309][T22120] ? fork_idle+0x1d0/0x1d0 [ 1958.555755][T22120] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1958.561816][T22120] ? lock_downgrade+0x880/0x880 [ 1958.566663][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1958.572942][T22120] ? blkcg_exit_queue+0x30/0x30 [ 1958.577797][T22120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1958.583260][T22120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1958.588719][T22120] ? do_syscall_64+0x26/0x610 [ 1958.593418][T22120] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1958.599484][T22120] ? do_syscall_64+0x26/0x610 [ 1958.604261][T22120] __x64_sys_clone+0xbf/0x150 [ 1958.608948][T22120] do_syscall_64+0x103/0x610 [ 1958.613540][T22120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1958.619435][T22120] RIP: 0033:0x45b5f9 [ 1958.623339][T22120] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1958.642952][T22120] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1958.651368][T22120] RAX: ffffffffffffffda RBX: 00007fb4599f6700 RCX: 000000000045b5f9 [ 1958.659512][T22120] RDX: 00007fb4599f69d0 RSI: 00007fb4599f5db0 RDI: 00000000003d0f00 [ 1958.667486][T22120] RBP: 0000000000a4fcb0 R08: 00007fb4599f6700 R09: 00007fb4599f6700 [ 1958.675486][T22120] R10: 00007fb4599f69d0 R11: 0000000000000202 R12: 0000000000000000 [ 1958.683464][T22120] R13: 0000000000a4fb5f R14: 00007fb4599f69c0 R15: 000000000073bf0c [ 1958.693621][T22120] memory: usage 307180kB, limit 307200kB, failcnt 1909 [ 1958.701285][T22120] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1958.709005][T22120] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1958.716002][T22120] Memory cgroup stats for /syz4: cache:4KB rss:238396KB rss_huge:204800KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:238504KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1958.737842][T22120] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22333,uid=0 [ 1958.746894][T22083] device bond_slave_1 left promiscuous mode [ 1958.753577][T22120] Memory cgroup out of memory: Killed process 22333 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1958.782669][T22094] device bond_slave_1 entered promiscuous mode [ 1958.792721][T22094] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00t'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:38 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7, 0xfffffffffffffff9, 0x80000000, 0x4, 0x7fffffff, 0x5cc, 0x20, {0x0, @in6={{0xa, 0x4e24, 0x80000000, @loopback, 0x81}}, 0x1000, 0x4, 0x407c, 0x41, 0xb3a}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x48, "107ea24edcd5eec8a633edbbb91d8deff5a5d3531e581c60596b1566a159ba74204e7e42c1a30defcb5096edf2f05e01ffbc4e7dd2b2184dfff0c5d0e2924c8e7a6f135355b3d076"}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r3, 0xc5, "0676f94666b41b9302b478c1fb0a5ac596e7eba3e64bf429066bd7e367304a79bfa8692ef627edbd28dc31d00844f1e7d4439f3252a882de5f89d75dcab7a29584f852c3e91cad16219fc9149d46161ac6cf0816a13efe2463feec644e8ea1d3053931bc3efec1405f73fc88b0a9db2b25d05c875be9b0250f37031df9f5dbc0f1951313916245324b03c6865b3cf5e62e666e2e6078c58f7497d2cbb767f7a7eb83b28f141d1d571b68c8e01d54dd40ce5892554620b5b7a997cf2c6b5a38a76055b3f54b"}, &(0x7f0000000200)=0xcd) 02:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5a, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0xfffffffffffffdb6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x1, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmdt(r3) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000200)={0x4, 0x9023}) clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/47}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x05\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:38 executing program 2: setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x10000, 0x40c000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000001180)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000011c0)={r1, 0x23a}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x1, 0x3, {0x55, 0x1, 0x8000, {0x400, 0x5f7c}, {0x9e7, 0x78}, @period={0x5f, 0x8, 0x6, 0x2c9, 0x100, {0xd75, 0x7f, 0x3ff, 0x6}, 0x1, &(0x7f0000000040)=[0x0]}}, {0x56, 0x9, 0x6, {0xe4c, 0x4}, {0x7fff, 0x1}, @const={0x6, {0xffff, 0x100000000, 0x3, 0x80}}}}) [ 1958.862705][T22155] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1958.902571][T22155] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x06\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101002, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x80000001, 0x5}, 0x0, 0x4580000000, 0x0, {0x1}, 0x101, 0x9f1}) [ 1958.932109][T22159] bond0: Releasing backup interface bond_slave_1 [ 1958.949154][T22159] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1959.048841][T22159] device bond_slave_1 left promiscuous mode 02:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/183) request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)=']%vboxnet1!\xa7lo,\\)selinuxsystem[proc(}+GPLposix_acl_access*:\x00', r2) 02:37:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1959.090570][T22171] device bond_slave_1 entered promiscuous mode [ 1959.109783][T22171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1959.198459][T22204] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1959.228586][T22204] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1959.241309][T22159] bond0: Releasing backup interface bond_slave_1 [ 1959.254371][T22159] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\a\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:39 executing program 3: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00z'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1959.318370][T22159] device bond_slave_1 left promiscuous mode [ 1959.331224][T22171] device bond_slave_1 entered promiscuous mode [ 1959.338309][T22171] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000440)=0xee, 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r2 = msgget$private(0x0, 0x101) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x2, r3, r4, r5, r6, 0x10, 0x3}, 0x1, 0xca5b, 0x5, 0x29b6, 0x2, 0x20, r7, r8}) 02:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x8000) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\n\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:39 executing program 3: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=0xffffffffffffff9c) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) [ 1959.501002][T22235] bond0: Releasing backup interface bond_slave_1 [ 1959.526890][T22235] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1959.598935][T22235] device bond_slave_1 left promiscuous mode 02:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xff85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x400) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1959.640500][T22248] device bond_slave_1 entered promiscuous mode [ 1959.667062][T22248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1959.675757][T22253] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:39 executing program 3: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xff92) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1959.691867][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 1959.737287][T22253] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1959.775127][ T7504] CPU: 0 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1959.783060][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.793112][ T7504] Call Trace: [ 1959.797121][ T7504] dump_stack+0x172/0x1f0 [ 1959.801463][ T7504] dump_header+0x10f/0xb6c [ 1959.805894][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1959.811713][ T7504] ? ___ratelimit+0x60/0x595 [ 1959.812425][T22246] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1959.816481][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1959.816500][ T7504] oom_kill_process.cold+0x10/0x15 [ 1959.816514][ T7504] out_of_memory+0x79a/0x1280 [ 1959.816527][ T7504] ? lock_downgrade+0x880/0x880 [ 1959.816540][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1959.816552][ T7504] ? oom_killer_disable+0x280/0x280 [ 1959.816562][ T7504] ? find_held_lock+0x35/0x130 [ 1959.816583][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1959.816601][ T7504] ? memcg_event_wake+0x230/0x230 [ 1959.839320][T22246] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1959.841630][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1959.841648][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1959.841677][ T7504] try_charge+0x102c/0x15c0 [ 1959.897212][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1959.902762][ T7504] ? rcu_read_lock_sched_held+0x110/0x130 [ 1959.909118][ T7504] ? __alloc_pages_nodemask+0x599/0x7e0 [ 1959.914793][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1959.920355][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1959.925572][ T7504] ? cache_grow_begin+0x594/0x860 [ 1959.930640][ T7504] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1959.935931][ T7504] ? trace_hardirqs_on+0x67/0x230 [ 1959.940950][ T7504] cache_grow_begin+0x5c0/0x860 [ 1959.945791][ T7504] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1959.952022][ T7504] ? __cpuset_node_allowed+0x136/0x540 [ 1959.957476][ T7504] fallback_alloc+0x1fd/0x2d0 [ 1959.962237][ T7504] ____cache_alloc_node+0x1be/0x1e0 [ 1959.967451][ T7504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1959.973712][ T7504] kmem_cache_alloc+0x1e8/0x6f0 [ 1959.978555][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1959.983681][ T7504] copy_process.part.0+0x1fff/0x7980 [ 1959.988973][ T7504] ? __lock_acquire+0x548/0x3fb0 [ 1959.993914][ T7504] ? wp_page_reuse+0x159/0x1d0 [ 1959.998699][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1960.003622][ T7504] ? lock_downgrade+0x880/0x880 [ 1960.008484][ T7504] _do_fork+0x257/0xfd0 [ 1960.012642][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1960.017057][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1960.022498][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1960.027957][ T7504] ? do_syscall_64+0x26/0x610 [ 1960.032634][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1960.039616][ T7504] ? do_syscall_64+0x26/0x610 [ 1960.044305][ T7504] __x64_sys_clone+0xbf/0x150 [ 1960.048981][ T7504] do_syscall_64+0x103/0x610 [ 1960.053594][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1960.059495][ T7504] RIP: 0033:0x4571fa [ 1960.063379][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1960.082998][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1960.091424][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1960.099412][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1960.107480][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1960.115454][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1960.123417][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1960.132842][ T7504] memory: usage 307080kB, limit 307200kB, failcnt 165 [ 1960.140766][T22235] bond0: Releasing backup interface bond_slave_1 [ 1960.142935][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.147266][T22235] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1960.174171][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.182193][T22235] device bond_slave_1 left promiscuous mode [ 1960.186381][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:253552KB rss_huge:227328KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:253724KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1960.213719][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15776,uid=0 02:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002106001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x0f\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:40 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) delete_module(&(0x7f0000000040)='\x00\x00\x10', 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1960.229373][ T7504] Memory cgroup out of memory: Killed process 15776 (syz-executor.1) total-vm:72712kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB [ 1960.235839][T22248] device bond_slave_1 entered promiscuous mode [ 1960.257520][T22248] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00H\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1960.323050][T22310] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1960.342496][T22310] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1960.384204][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1960.419427][ T7504] CPU: 1 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1960.425705][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1960.427364][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.427370][ T7504] Call Trace: [ 1960.427395][ T7504] dump_stack+0x172/0x1f0 [ 1960.427414][ T7504] dump_header+0x10f/0xb6c [ 1960.427431][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1960.427446][ T7504] ? ___ratelimit+0x60/0x595 [ 1960.427461][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1960.427474][ T7504] oom_kill_process.cold+0x10/0x15 [ 1960.427492][ T7504] out_of_memory+0x79a/0x1280 [ 1960.446750][ T7504] ? lock_downgrade+0x880/0x880 [ 1960.446766][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1960.446781][ T7504] ? oom_killer_disable+0x280/0x280 [ 1960.446793][ T7504] ? find_held_lock+0x35/0x130 [ 1960.446815][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1960.446827][ T7504] ? memcg_event_wake+0x230/0x230 [ 1960.446845][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1960.446868][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1960.454503][ T7504] try_charge+0x102c/0x15c0 02:37:40 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000001c0)="94a8b30b710f5d62c0bbb16f57b38db3ca02189fb128fdbf52a2ddd12f7ea44c0fd547e8fcebfefc6f43c0c5ee621395ee5e42bad5e1") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0xffffffffffffffda, 0x4, {0x9}}, 0x18) [ 1960.454520][ T7504] ? find_held_lock+0x35/0x130 [ 1960.454541][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1960.454554][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1960.454572][ T7504] ? find_held_lock+0x35/0x130 [ 1960.464827][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1960.464852][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1960.464865][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1960.464882][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1960.464899][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1960.464921][ T7504] __alloc_pages_nodemask+0x437/0x7e0 02:37:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x9, 0x3f, 0x7, 0x7, @tick, {0x4, 0x100000001}, {0x5, 0xf6e}, @control={0x916, 0x7, 0x4}}, {0x9, 0x16, 0x8, 0x100000000, @time, {0x5, 0x8001}, {0x3, 0x7}, @control={0x0, 0x1fea, 0x1f}}, {0x8, 0x8001, 0x9, 0x7, @time={0x0, 0x1c9c380}, {0x3, 0x38a}, {0x2}, @raw32={[0x1f, 0xf8, 0x1f]}}, {0x8, 0x4, 0x2, 0x5, @time, {0xfffffffffffffff9, 0x7}, {0x8, 0x8}, @ext={0x3c, &(0x7f0000000000)="5103dac2c59a7f7fad279efb9fe866704f82d591ed7015e7d4de5f130d235d605724e2851fbacd593eb9e4c136abaf949ee9e558a77bedcbd8d286a4"}}], 0xc0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000280)=0x13d) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000002c0)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0x81, 0x7ff, 0xfffffffffffffff7, 0x7, 0x6, 0x9, 0x8b86}, &(0x7f0000000140)={0xfffffffffffff801, 0x3, 0x4, 0x4, 0x23f, 0x3, 0x6, 0x10001}, &(0x7f0000000180)={0x100, 0x20, 0x3ff, 0x4, 0x2, 0x0, 0x8000, 0x2}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={0x5}, 0x8}) [ 1960.489252][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1960.489276][ T7504] ? copy_page_range+0x125a/0x1f90 [ 1960.489295][ T7504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1960.489319][ T7504] alloc_pages_current+0x107/0x210 [ 1960.505509][ T7504] pte_alloc_one+0x1b/0x1a0 [ 1960.505528][ T7504] __pte_alloc+0x20/0x310 [ 1960.505546][ T7504] copy_page_range+0x1529/0x1f90 [ 1960.505559][ T7504] ? find_held_lock+0x35/0x130 [ 1960.505587][ T7504] ? pmd_alloc+0x180/0x180 [ 1960.521263][ T7504] ? __rb_insert_augmented+0x231/0xdf0 02:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x2000) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, 0x98, "f833cdf89e168e7d38f64473fb1b163918756545e5727aeb392d735a7755acf2120a14766f9869fad17dd04eea033052cf1919c76ed8ca4d164681f15c1eec51779923aa938d7c00cf46f664c0755a702b10aa66825da9d48576b106d5eece4ba404b3b87b46975104ffa4bc6a4dfb3abe3354f014dbe0d6ba1f93e8f5f35433fe1d36d3f6b6fcf81f4ff447d9b70332866e311b961fc8e6"}, 0x9e) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1960.521280][ T7504] ? validate_mm_rb+0xa3/0xc0 [ 1960.521295][ T7504] ? __vma_link_rb+0x279/0x370 [ 1960.521316][ T7504] copy_process.part.0+0x568b/0x7980 [ 1960.556816][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1960.556844][ T7504] _do_fork+0x257/0xfd0 [ 1960.573233][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1960.573261][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1960.573278][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1960.673344][ T7504] ? do_syscall_64+0x26/0x610 [ 1960.678040][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1960.684128][ T7504] ? do_syscall_64+0x26/0x610 [ 1960.688833][ T7504] __x64_sys_clone+0xbf/0x150 [ 1960.693530][ T7504] do_syscall_64+0x103/0x610 [ 1960.698146][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1960.704043][ T7504] RIP: 0033:0x4571fa [ 1960.707957][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1960.727820][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1960.727833][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1960.727839][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1960.727846][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1960.727854][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1960.727862][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1960.735171][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 178 [ 1960.738960][T22321] bond0: Releasing backup interface bond_slave_1 [ 1960.756355][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.787578][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.795239][T22321] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1960.800034][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:253592KB rss_huge:227328KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:253716KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1960.847056][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1155,uid=0 [ 1960.863140][ T7504] Memory cgroup out of memory: Killed process 1155 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB [ 1960.893998][T22321] device bond_slave_1 left promiscuous mode [ 1960.922618][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1960.946114][T22326] device bond_slave_1 entered promiscuous mode [ 1960.964064][T22326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1961.001670][T22321] bond0: Releasing backup interface bond_slave_1 [ 1961.016587][T22321] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000deffffffffffffff00000000003e33e75c0000"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0xfff, 0x2, {0xffffffffffffffff, 0x3, 0x1, 0x3, 0xfff}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0xa1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="5024f7651123011cc172debfdeee22495294c498f0ca427c93dd3a8ca698249ece89829ce2329972ca3fc7cd17a8a6c97fa6422778c961bd37b094138afae7598d8f3e06e16b36aefb9ae48741a2b9b7a5b77b76ce6038600d51f5f0bda7faef7825f783526e2bcd58d74ac0816765f8baa723b87f86f47279383522afbd350a6e87e14fc5b9660f5beffbee19ede6deacae3134e4de2a66b631b950bb08c0", 0x9f, 0xfffffffffffffffd) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000280)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000100)='R\xed\xc2mg\xa9\xccT\xd1\x9c\xbe+\x9d\xd7\x14.I\ry0\xab\xa2\xd4I\tr', r2) 02:37:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00L\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="a53b5c1f12200400920920abd8ad89b78f0800008349f6f9b0a9cc881b697664b5736089b55b63d57a5fb2267618ac9140a8dec70f10e3be80587de43998c1a2fe03f20e8b2c0271da439a8ec4197e64f0cf04") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1961.067512][T22321] device bond_slave_1 left promiscuous mode [ 1961.076680][T22326] device bond_slave_1 entered promiscuous mode [ 1961.083146][T22326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1961.108230][ T7507] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1961.137193][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1961.146444][ T7507] CPU: 0 PID: 7507 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1961.146452][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.146457][ T7507] Call Trace: [ 1961.146481][ T7507] dump_stack+0x172/0x1f0 [ 1961.146501][ T7507] dump_header+0x10f/0xb6c [ 1961.146516][ T7507] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1961.146530][ T7507] ? ___ratelimit+0x60/0x595 [ 1961.146553][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1961.157876][T22385] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1961.164502][ T7507] oom_kill_process.cold+0x10/0x15 [ 1961.180753][T22385] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1961.182308][ T7507] out_of_memory+0x79a/0x1280 [ 1961.182330][ T7507] ? lock_downgrade+0x880/0x880 [ 1961.202813][T22390] bond0: Error: Device is in use and cannot be enslaved [ 1961.207258][ T7507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1961.207277][ T7507] ? oom_killer_disable+0x280/0x280 [ 1961.207289][ T7507] ? find_held_lock+0x35/0x130 [ 1961.207318][ T7507] mem_cgroup_out_of_memory+0x1ca/0x230 02:37:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000080)="6ebbcd45e200808d7a4cd589b987f67012881661a6701100") r1 = semget(0x1, 0x7, 0x400) semop(r1, &(0x7f0000000040)=[{0x4, 0x7f, 0x1000}, {0x0, 0x6000000000000, 0x1800}, {0x3, 0x80000001, 0x800}, {0x3, 0x7f, 0x800}, {0xe78cde6f7de4cc3b, 0x1, 0x1800}, {0x1, 0x10c, 0x800}, {0x2, 0x7, 0x800}, {0x3, 0xfff, 0x1800}, {0x0, 0x3, 0x1800}], 0x9) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) tee(r0, r2, 0x4, 0xd) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x5, 0x8, 0x0, 0x6267e6ba, 0xc5c, 0x2, 0x6, 0x7fff, 0x6}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20001, 0x0) [ 1961.249893][ T7507] ? memcg_event_wake+0x230/0x230 [ 1961.249918][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1961.260494][ T7507] ? _raw_spin_unlock+0x2d/0x50 [ 1961.260511][ T7507] try_charge+0x102c/0x15c0 [ 1961.260523][ T7507] ? find_held_lock+0x35/0x130 [ 1961.260538][ T7507] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1961.260547][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1961.260558][ T7507] ? find_held_lock+0x35/0x130 [ 1961.260575][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1961.260596][ T7507] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1961.260607][ T7507] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1961.260622][ T7507] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1961.260638][ T7507] __memcg_kmem_charge+0x136/0x300 [ 1961.260656][ T7507] __alloc_pages_nodemask+0x437/0x7e0 [ 1961.260669][ T7507] ? __pud_alloc+0x1d3/0x250 [ 1961.260686][ T7507] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1961.260697][ T7507] ? __pud_alloc+0x1d3/0x250 [ 1961.260718][ T7507] ? lock_downgrade+0x880/0x880 [ 1961.260732][ T7507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1961.260749][ T7507] alloc_pages_current+0x107/0x210 [ 1961.270687][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1961.270705][ T7507] __pmd_alloc+0x41/0x460 [ 1961.270721][ T7507] ? pmd_val+0x100/0x100 [ 1961.291030][ T7507] pmd_alloc+0x10c/0x180 [ 1961.291047][ T7507] copy_page_range+0x62e/0x1f90 [ 1961.291072][ T7507] ? copy_process.part.0+0x3121/0x7980 [ 1961.306892][ T7507] ? copy_process.part.0+0x3121/0x7980 [ 1961.306914][ T7507] ? pmd_alloc+0x180/0x180 [ 1961.306924][ T7507] ? vma_compute_subtree_gap+0x158/0x230 [ 1961.306935][ T7507] ? validate_mm_rb+0xa3/0xc0 02:37:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00h\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1961.306948][ T7507] ? __vma_link_rb+0x279/0x370 [ 1961.306964][ T7507] copy_process.part.0+0x568b/0x7980 [ 1961.306998][ T7507] ? __cleanup_sighand+0x60/0x60 [ 1961.307025][ T7507] _do_fork+0x257/0xfd0 [ 1961.307042][ T7507] ? fork_idle+0x1d0/0x1d0 [ 1961.317778][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1961.317792][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1961.317806][ T7507] ? do_syscall_64+0x26/0x610 [ 1961.317819][ T7507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1961.317829][ T7507] ? do_syscall_64+0x26/0x610 [ 1961.317847][ T7507] __x64_sys_clone+0xbf/0x150 [ 1961.317862][ T7507] do_syscall_64+0x103/0x610 [ 1961.317875][ T7507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1961.317886][ T7507] RIP: 0033:0x4571fa [ 1961.317898][ T7507] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1961.317903][ T7507] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1961.317915][ T7507] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1961.317923][ T7507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1961.317930][ T7507] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000297f940 [ 1961.317936][ T7507] R10: 000000000297fc10 R11: 0000000000000246 R12: 0000000000000001 [ 1961.317943][ T7507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1961.360894][ T7507] memory: usage 307200kB, limit 307200kB, failcnt 41 02:37:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2003, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 1961.391084][ T7507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1961.420943][ T7507] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1961.442091][ T7507] Memory cgroup stats for /syz2: cache:56KB rss:247520KB rss_huge:217088KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:247640KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1961.445718][T22376] bond0: Releasing backup interface bond_slave_1 02:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1961.462276][ T7507] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19211,uid=0 [ 1961.474956][ T7507] Memory cgroup out of memory: Killed process 19211 (syz-executor.2) total-vm:72580kB, anon-rss:4260kB, file-rss:35808kB, shmem-rss:0kB [ 1961.521538][T22376] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1961.648683][T22376] device bond_slave_1 left promiscuous mode [ 1961.702208][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1961.719355][T22414] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1961.732367][T22414] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1961.775229][T22439] device bond_slave_1 entered promiscuous mode [ 1961.781594][ C0] net_ratelimit: 20 callbacks suppressed [ 1961.781602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.781655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1961.781739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.781776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1961.845546][T22439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1961.857804][T22390] bond0: Releasing backup interface bond_slave_1 [ 1961.864340][T22390] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00l\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) 02:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, [0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1000, 0xc67f, 0x3, 0x8001, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000, 0x8, 0x7, 0x3fe00000000000, 0xf8fc]}, &(0x7f00000001c0)=0x100) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000280)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1961.936756][T22390] device bond_slave_1 left promiscuous mode [ 1961.976200][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00t\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1962.022152][T22454] device bond_slave_1 entered promiscuous mode [ 1962.050959][T22454] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:42 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1962.097366][T22449] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1962.137075][T22473] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1962.157579][T22473] CPU: 0 PID: 22473 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1962.165775][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.170406][T22449] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1962.175925][T22473] Call Trace: [ 1962.175956][T22473] dump_stack+0x172/0x1f0 [ 1962.175977][T22473] dump_header+0x10f/0xb6c 02:37:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1962.175992][T22473] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1962.176012][T22473] ? ___ratelimit+0x60/0x595 [ 1962.208392][T22473] ? do_raw_spin_unlock+0x57/0x270 [ 1962.213524][T22473] oom_kill_process.cold+0x10/0x15 [ 1962.218641][T22473] out_of_memory+0x79a/0x1280 [ 1962.223343][T22473] ? lock_downgrade+0x880/0x880 [ 1962.228239][T22473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1962.234492][T22473] ? oom_killer_disable+0x280/0x280 [ 1962.237398][T22480] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1962.239709][T22473] ? find_held_lock+0x35/0x130 [ 1962.239738][T22473] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1962.239752][T22473] ? memcg_event_wake+0x230/0x230 [ 1962.239773][T22473] ? do_raw_spin_unlock+0x57/0x270 [ 1962.239793][T22473] ? _raw_spin_unlock+0x2d/0x50 [ 1962.250625][T22480] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1962.254690][T22473] try_charge+0x102c/0x15c0 [ 1962.254707][T22473] ? find_held_lock+0x35/0x130 02:37:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1962.254729][T22473] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1962.254742][T22473] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1962.254756][T22473] ? find_held_lock+0x35/0x130 [ 1962.254767][T22473] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1962.254790][T22473] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1962.294121][T22473] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1962.309961][T22473] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1962.309981][T22473] __memcg_kmem_charge+0x136/0x300 [ 1962.310002][T22473] __alloc_pages_nodemask+0x437/0x7e0 02:37:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1962.310026][T22473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1962.323770][T22484] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1962.326327][T22473] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1962.326348][T22473] ? copy_process.part.0+0x1d08/0x7980 [ 1962.326366][T22473] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1962.326382][T22473] ? trace_hardirqs_on+0x67/0x230 [ 1962.326401][T22473] copy_process.part.0+0x3e0/0x7980 [ 1962.326414][T22473] ? __lock_acquire+0x548/0x3fb0 [ 1962.326438][T22473] ? __might_fault+0x12b/0x1e0 [ 1962.333016][T22484] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1962.337088][T22473] ? __cleanup_sighand+0x60/0x60 [ 1962.337117][T22473] ? lock_downgrade+0x880/0x880 [ 1962.337145][T22473] _do_fork+0x257/0xfd0 [ 1962.337161][T22473] ? fork_idle+0x1d0/0x1d0 [ 1962.337186][T22473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1962.337197][T22473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1962.337216][T22473] ? do_syscall_64+0x26/0x610 [ 1962.391441][T22488] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1962.395277][T22473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.395297][T22473] ? do_syscall_64+0x26/0x610 [ 1962.395319][T22473] __x64_sys_clone+0xbf/0x150 [ 1962.395335][T22473] do_syscall_64+0x103/0x610 [ 1962.395353][T22473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.405528][T22488] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1962.409806][T22473] RIP: 0033:0x458c29 [ 1962.409823][T22473] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1962.409829][T22473] RSP: 002b:00007fb4599d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1962.409842][T22473] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1962.409849][T22473] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 4000002102001ffb [ 1962.409856][T22473] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 1962.409864][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4599d56d4 [ 1962.409873][T22473] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1962.410281][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.517232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.517327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.533517][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.580628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.586461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.596110][T22454] bond0: Releasing backup interface bond_slave_1 [ 1962.602569][T22454] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1962.624525][T22473] memory: usage 307200kB, limit 307200kB, failcnt 1941 [ 1962.631508][T22473] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1962.639390][T22473] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1962.646307][T22473] Memory cgroup stats for /syz4: cache:4KB rss:237184KB rss_huge:202752KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:237260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1962.668052][T22473] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22406,uid=0 [ 1962.683887][T22473] Memory cgroup out of memory: Killed process 22406 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1962.707826][T22466] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1962.724885][T22466] CPU: 1 PID: 22466 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1962.726661][T22454] device bond_slave_1 left promiscuous mode [ 1962.732892][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.732899][T22466] Call Trace: [ 1962.732927][T22466] dump_stack+0x172/0x1f0 [ 1962.732946][T22466] dump_header+0x10f/0xb6c [ 1962.732961][T22466] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1962.732987][T22466] ? ___ratelimit+0x60/0x595 [ 1962.771338][T22466] ? do_raw_spin_unlock+0x57/0x270 [ 1962.776461][T22466] oom_kill_process.cold+0x10/0x15 [ 1962.781743][T22466] out_of_memory+0x79a/0x1280 [ 1962.786413][T22466] ? oom_killer_disable+0x280/0x280 [ 1962.791620][T22466] ? find_held_lock+0x35/0x130 [ 1962.796393][T22466] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1962.801935][T22466] ? memcg_event_wake+0x230/0x230 [ 1962.807004][T22466] ? do_raw_spin_unlock+0x57/0x270 [ 1962.812118][T22466] ? _raw_spin_unlock+0x2d/0x50 [ 1962.816965][T22466] try_charge+0xa87/0x15c0 [ 1962.821394][T22466] ? find_held_lock+0x35/0x130 [ 1962.826158][T22466] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1962.831698][T22466] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1962.837319][T22466] ? find_held_lock+0x35/0x130 [ 1962.842103][T22466] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1962.847659][T22466] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1962.853195][T22466] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1962.858404][T22466] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1962.863942][T22466] __memcg_kmem_charge+0x136/0x300 [ 1962.869078][T22466] __alloc_pages_nodemask+0x437/0x7e0 [ 1962.874461][T22466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1962.880726][T22466] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1962.886443][T22466] ? copy_process.part.0+0x1d08/0x7980 [ 1962.891900][T22466] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1962.897188][T22466] ? trace_hardirqs_on+0x67/0x230 [ 1962.902226][T22466] ? kasan_check_read+0x11/0x20 [ 1962.907092][T22466] copy_process.part.0+0x3e0/0x7980 [ 1962.912294][T22466] ? psi_memstall_leave+0x11c/0x180 [ 1962.917482][T22466] ? sched_clock+0x2e/0x50 [ 1962.921906][T22466] ? psi_memstall_leave+0x12e/0x180 [ 1962.927106][T22466] ? find_held_lock+0x35/0x130 [ 1962.931866][T22466] ? psi_memstall_leave+0x12e/0x180 [ 1962.937080][T22466] ? __cleanup_sighand+0x60/0x60 [ 1962.942014][T22466] ? __lock_acquire+0x548/0x3fb0 [ 1962.946962][T22466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1962.953229][T22466] _do_fork+0x257/0xfd0 [ 1962.957399][T22466] ? fork_idle+0x1d0/0x1d0 [ 1962.961824][T22466] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1962.967894][T22466] ? lock_downgrade+0x880/0x880 [ 1962.972748][T22466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1962.978985][T22466] ? blkcg_exit_queue+0x30/0x30 [ 1962.983915][T22466] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1962.990498][T22466] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1962.995947][T22466] ? do_syscall_64+0x26/0x610 [ 1963.000643][T22466] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1963.006700][T22466] ? do_syscall_64+0x26/0x610 [ 1963.011381][T22466] __x64_sys_clone+0xbf/0x150 [ 1963.016056][T22466] do_syscall_64+0x103/0x610 [ 1963.020648][T22466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1963.026528][T22466] RIP: 0033:0x45b5f9 [ 1963.030498][T22466] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1963.057631][T22466] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1963.066054][T22466] RAX: ffffffffffffffda RBX: 00007fb4599b4700 RCX: 000000000045b5f9 [ 1963.074040][T22466] RDX: 00007fb4599b49d0 RSI: 00007fb4599b3db0 RDI: 00000000003d0f00 [ 1963.082024][T22466] RBP: 0000000000a4fcb0 R08: 00007fb4599b4700 R09: 00007fb4599b4700 [ 1963.090011][T22466] R10: 00007fb4599b49d0 R11: 0000000000000202 R12: 0000000000000000 [ 1963.097993][T22466] R13: 0000000000a4fb5f R14: 00007fb4599b49c0 R15: 000000000073c04c [ 1963.111731][T22474] device bond_slave_1 entered promiscuous mode [ 1963.115049][T22466] memory: usage 304880kB, limit 307200kB, failcnt 1941 [ 1963.120073][T22474] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1963.124859][T22466] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1963.124868][T22466] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x2, 0x2) clone(0x2443ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_ifreq(r0, 0x897f, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_ivalue=0x7fff}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 1963.124874][T22466] Memory cgroup stats for /syz4: cache:4KB rss:235088KB rss_huge:200704KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:235108KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1963.166556][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1963.170038][T22466] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22566,uid=0 02:37:43 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1963.227019][T22499] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1963.228737][T22466] Memory cgroup out of memory: Killed process 22566 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB 02:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1963.275036][T22499] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1963.341196][T22501] bond0: Releasing backup interface bond_slave_1 [ 1963.349622][T22501] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1963.427598][T22501] device bond_slave_1 left promiscuous mode [ 1963.443495][T22511] device bond_slave_1 entered promiscuous mode [ 1963.451352][T22511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1963.461085][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00z\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2001) write$P9_RWALK(r0, &(0x7f0000000380)={0x23, 0x6f, 0x2, {0x2, [{0x8c, 0x4, 0x1}, {0x4, 0x3, 0x1}]}}, 0x23) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0xfffffffffffffff8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="288c51f8115b7eda83436870a59c695bddac4f03973e30e4b8e79b922c53f31c890665d2339b7edeed03f73a5fc2da9aa79998acc9ab42aa92779f371a9acab222bfbf742f2ca294bb28ebfc224e16d4a0cd3791e127056050cfb4519468c4b90f0eaf872b8fcf7af9ffe6a13495912ab6c27b6404420ae1c6798fda2ef8759e", @ANYRES16=r2, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind$rds(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) 02:37:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) getsockname$packet(r1, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001980)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000019c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000001ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001b00)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xffffffffffffff38) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001d80)={0x0, @dev, @multicast2}, &(0x7f0000001dc0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001e00)={@broadcast, @remote, 0x0}, &(0x7f0000001e40)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005300)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000005400)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005440)={'team_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000005480)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f00000054c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000005540)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005840)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000005940)=0xe8) accept4(r0, &(0x7f0000005980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005a00)=0x80, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005a40)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000005b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005bc0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000005c00)={@rand_addr, 0x0}, &(0x7f0000005c40)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000005c80)={@empty, 0x0}, &(0x7f0000005cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000009d00)={'vcan0\x00', 0x0}) getsockname(r0, &(0x7f0000009d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009dc0)=0x80) accept$packet(r1, &(0x7f0000009e00)={0x11, 0x0, 0x0}, &(0x7f0000009e40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009e80)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000009f80)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f000000a400)={@multicast2, @rand_addr, 0x0}, &(0x7f000000a440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000a480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000a4c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000a500)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f000000a540)={@initdev, @loopback, 0x0}, &(0x7f000000a580)=0xc) getsockname$packet(r1, &(0x7f000000a5c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000a600)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f000000a640)={@initdev, @dev, 0x0}, &(0x7f000000a680)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000a6c0)={0x0, @multicast2, @multicast1}, &(0x7f000000a700)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000a740)={'vcan0\x00', 0x0}) accept$packet(r1, &(0x7f000000a780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a7c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000a840)={'bcsf0\x00', 0x0}) getsockname$packet(r1, &(0x7f000000a880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a8c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c0c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f000000c1c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000c300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000cf40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000cf00)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40b0000", @ANYRES16=r2, @ANYBLOB="02032abd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff7f000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="c400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff010000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040000f0ffff08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="f401020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="e80102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000180ffff08000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="c00002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000100080007000000000008000100", @ANYRES32=r20, @ANYBLOB="8401020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r22, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004005d9f0000080007000000000008000100", @ANYRES32=r25, @ANYBLOB="3801020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400ff07ff2098000000930000000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r26, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="08000100", @ANYRES32=r29, @ANYBLOB="c001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r30, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004001f00000008000600", @ANYRES32=r31, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400030000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040024000808010100000500010601040000020004ff000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r32, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000500fc2005000000070002ff090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r33, @ANYBLOB="08000100", @ANYRES32=r34, @ANYBLOB="7400020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r35, @ANYBLOB="bc00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r36, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r37, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r38], 0xbb4}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1963.497339][T22511] bond0: Error: Device is in use and cannot be enslaved [ 1963.521281][T22501] bond0: Releasing backup interface bond_slave_1 02:37:43 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1963.562198][T22501] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x59d, 0x0, 0x4, 0x8, 0x0, 0x5, 0x101, 0x9fd, r2}, &(0x7f0000000100)=0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x10f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x8}}, 0x10) write$FUSE_INTERRUPT(r1, &(0x7f0000000280)={0x10, 0x0, 0x4}, 0x10) [ 1963.688551][T22501] device bond_slave_1 left promiscuous mode [ 1963.707471][T22538] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x10, 0x70c000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1963.749363][T22538] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x11', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1963.791777][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1963.824917][T22552] device bond_slave_1 entered promiscuous mode 02:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:43 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1963.863825][T22552] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x101000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x5, 0x7f, r2, 0x0, r3, 0x0, 0x80, 0x1}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r4 = dup3(r0, r0, 0x80000) sched_setparam(r2, &(0x7f00000001c0)=0x100000001) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) [ 1963.923457][T22552] bond0: Releasing backup interface bond_slave_1 [ 1963.951061][T22552] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='i[\x02sw\xe2\xa0\xef=u|d\xd1De', 0x0) 02:37:44 executing program 2: sysfs$2(0x2, 0xfffffffffffffff8, &(0x7f0000000100)=""/168) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000000009, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, "d60700000000000000000032f101000080917149fd661837b011b15f24fc4d12", 0x0, 0x0, 0x0, 0x70effc, 0x100000001}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x3, 0x9, 0xb0a, 0x7, 0x100, "e0ac405356025391eeaf7aa3d008faac787d66", 0x3, 0x10001}) readv(r2, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/198, 0xc6}], 0x6) clone(0x4000002902001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x4000) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000000c0)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1964.018240][T22552] device bond_slave_1 left promiscuous mode [ 1964.042585][T22562] device bond_slave_1 entered promiscuous mode 02:37:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x12', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1964.077835][T22589] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1964.093579][T22562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1964.103288][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1964.139667][T22589] CPU: 0 PID: 22589 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1964.147697][T22589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.159001][T22589] Call Trace: [ 1964.162313][T22589] dump_stack+0x172/0x1f0 [ 1964.166657][T22589] dump_header+0x10f/0xb6c [ 1964.171086][T22589] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1964.176924][T22589] ? ___ratelimit+0x60/0x595 [ 1964.181701][T22589] ? do_raw_spin_unlock+0x57/0x270 [ 1964.186840][T22589] oom_kill_process.cold+0x10/0x15 [ 1964.191976][T22589] out_of_memory+0x79a/0x1280 [ 1964.196854][T22589] ? lock_downgrade+0x880/0x880 [ 1964.201720][T22589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1964.207977][T22589] ? oom_killer_disable+0x280/0x280 [ 1964.213206][T22589] ? find_held_lock+0x35/0x130 [ 1964.218004][T22589] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1964.223644][T22589] ? memcg_event_wake+0x230/0x230 [ 1964.228681][T22589] ? do_raw_spin_unlock+0x57/0x270 [ 1964.233799][T22589] ? _raw_spin_unlock+0x2d/0x50 [ 1964.233819][T22589] try_charge+0x102c/0x15c0 [ 1964.233834][T22589] ? find_held_lock+0x35/0x130 [ 1964.233852][T22589] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1964.247937][T22589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1964.247958][T22589] ? kasan_check_read+0x11/0x20 [ 1964.247979][T22589] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1964.248011][T22589] mem_cgroup_try_charge+0x24d/0x5e0 [ 1964.275561][T22589] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1964.281228][T22589] wp_page_copy+0x408/0x1740 [ 1964.285929][T22589] ? find_held_lock+0x35/0x130 [ 1964.290909][T22589] ? pmd_pfn+0x1d0/0x1d0 [ 1964.295261][T22589] ? lock_downgrade+0x880/0x880 [ 1964.300128][T22589] ? swp_swapcount+0x540/0x540 [ 1964.304913][T22589] ? kasan_check_read+0x11/0x20 [ 1964.309875][T22589] ? do_raw_spin_unlock+0x57/0x270 [ 1964.315005][T22589] do_wp_page+0x48e/0x1500 [ 1964.319454][T22589] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1964.324832][T22589] __handle_mm_fault+0x22e8/0x3ec0 [ 1964.329952][T22589] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1964.335682][T22589] ? find_held_lock+0x35/0x130 02:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:44 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1964.340450][T22589] ? handle_mm_fault+0x322/0xb30 [ 1964.345396][T22589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1964.351651][T22589] ? kasan_check_read+0x11/0x20 [ 1964.356515][T22589] handle_mm_fault+0x43f/0xb30 [ 1964.361275][T22589] __do_page_fault+0x5ef/0xda0 [ 1964.366037][T22589] do_page_fault+0x71/0x581 [ 1964.370537][T22589] ? page_fault+0x8/0x30 [ 1964.374783][T22589] page_fault+0x1e/0x30 [ 1964.378942][T22589] RIP: 0033:0x40ee86 [ 1964.382847][T22589] Code: 16 64 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 89 4a 08 49 8b 89 c8 02 00 00 48 89 11 48 c7 05 2a 16 64 00 00 00 00 00 <48> c7 05 07 40 30 00 90 2e 71 00 31 d2 48 c7 05 f2 3f 30 00 90 2e [ 1964.402464][T22589] RSP: 002b:0000000000a4fd28 EFLAGS: 00010246 [ 1964.408628][T22589] RAX: 00000000023a9c00 RBX: 0000000000a4fd30 RCX: 0000000000a504a0 [ 1964.416718][T22589] RDX: 0000000000a504a0 RSI: 0000000000712e90 RDI: 00000000023a9c20 [ 1964.424694][T22589] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1964.432769][T22589] R10: 00000000023a9c10 R11: 0000000000000202 R12: 0000000000000001 [ 1964.440739][T22589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1964.451264][T22587] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1964.456014][T22589] memory: usage 307200kB, limit 307200kB, failcnt 218 [ 1964.464396][T22587] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1964.475855][T22589] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x4000) [ 1964.486430][T22589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1964.493530][T22589] Memory cgroup stats for /syz1: cache:156KB rss:252348KB rss_huge:225280KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:252444KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1964.525357][T22601] bond0: Releasing backup interface bond_slave_1 02:37:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xfffffffffffffdff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1964.525801][T22589] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4051,uid=0 [ 1964.537482][T22601] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1964.563006][T22589] Memory cgroup out of memory: Killed process 4051 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB 02:37:44 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xe7c00000, 0x801) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8, @mcast1, 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0xffff}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x400}], 0x5c) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x6a1, 0x1, 0x80, 0x6, 0x7, 0x7fff, 0x6, 0xfffffffffffffffe, 0x4, 0xfffffffffffffff7}, 0xb) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1964.628716][T22601] device bond_slave_1 left promiscuous mode 02:37:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x4, 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1964.674291][T22609] device bond_slave_1 entered promiscuous mode [ 1964.685978][T22609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1964.696220][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1964.717735][T22637] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1964.737914][T22637] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1964.759868][T22601] bond0: Releasing backup interface bond_slave_1 02:37:44 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1964.777394][T22601] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xdbselinux!\x8c!keyring[++bdev@cgroup-user,\x11\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x2, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', r0) 02:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1964.857358][T22601] device bond_slave_1 left promiscuous mode [ 1964.868687][T22609] device bond_slave_1 entered promiscuous mode [ 1964.876192][T22609] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001fdb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00/', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/53) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) [ 1964.979035][T22676] bond0: Releasing backup interface bond_slave_1 02:37:45 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x1, 0x4c00000000006800}, &(0x7f0000001fee)='asymmetric\x00', r0) [ 1965.018858][T22676] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1965.108516][T22676] device bond_slave_1 left promiscuous mode [ 1965.112856][ T7507] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1965.133327][ T7507] CPU: 0 PID: 7507 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1965.141269][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.151326][ T7507] Call Trace: [ 1965.154620][ T7507] dump_stack+0x172/0x1f0 02:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = semget(0x0, 0x0, 0x0) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f00000000c0)=""/2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl(r2, 0x6, &(0x7f0000000040)="37a6e1e58dea3cb5f1ecdb42000fff21d2ce92ac37a2b6720ed7c8ba2ace099eb7c252ed395b9333e8e145f9c8ea6ba827c6f3bc12fd9ed775f512238547e5322ba9779803aeeca226aa3edc33243f68b65a1bbe477418") 02:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="9ecdc06ab71b2b6658635d5187fa2a7947db625b4a28446e8d45f20c5ad76a96ec2105f7ef945a3071474a40cc72ebe5791c9566152484f579ae52a7735c1400035195e354b6d02d480847743ece793f1ea265428a7c14ac1532ddb0920e648c306e64b42f515d93147c6667da79aa2823b90210afaea4d178980cf882004af6ccd52d266d484a25b6b733fc474b1492c3b613bf9875c1fbde2b60f6d99777bb5e4e199894666112360caf5a8e43985d9af696988357b235b6181c83024db0aad19b0923756b72718afc8d7a88a4da894ca84f9f854bd5bd680db0a92aab48784f22dbe95d4bdf24d2787b7859aa8c295ff093277295804d77d62f27949beeb1") request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1965.158974][ T7507] dump_header+0x10f/0xb6c [ 1965.163417][ T7507] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1965.169335][ T7507] ? ___ratelimit+0x60/0x595 [ 1965.173947][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1965.179074][ T7507] oom_kill_process.cold+0x10/0x15 [ 1965.184203][ T7507] out_of_memory+0x79a/0x1280 [ 1965.188895][ T7507] ? lock_downgrade+0x880/0x880 [ 1965.193798][ T7507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1965.200086][ T7507] ? oom_killer_disable+0x280/0x280 [ 1965.205299][ T7507] ? find_held_lock+0x35/0x130 [ 1965.210084][ T7507] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1965.215625][ T7507] ? memcg_event_wake+0x230/0x230 [ 1965.220651][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1965.220729][T22685] device bond_slave_1 entered promiscuous mode [ 1965.225768][ T7507] ? _raw_spin_unlock+0x2d/0x50 [ 1965.233432][T22685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1965.236774][ T7507] try_charge+0x102c/0x15c0 [ 1965.236789][ T7507] ? find_held_lock+0x35/0x130 [ 1965.236809][ T7507] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1965.236820][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1965.236831][ T7507] ? find_held_lock+0x35/0x130 [ 1965.236843][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1965.236864][ T7507] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1965.236882][ T7507] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1965.248210][T22705] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1965.249597][ T7507] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1965.254389][T22705] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1965.259972][ T7507] __memcg_kmem_charge+0x136/0x300 [ 1965.259991][ T7507] __alloc_pages_nodemask+0x437/0x7e0 [ 1965.260007][ T7507] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1965.260024][ T7507] ? save_stack+0x45/0xd0 [ 1965.260042][ T7507] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1965.286589][ T7507] ? kasan_slab_alloc+0xf/0x20 [ 1965.286601][ T7507] ? kmem_cache_alloc+0x11a/0x6f0 [ 1965.286614][ T7507] ? vm_area_dup+0x21/0x170 [ 1965.286626][ T7507] ? copy_process.part.0+0x3431/0x7980 02:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000040)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', r1) [ 1965.286641][ T7507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1965.286658][ T7507] alloc_pages_current+0x107/0x210 [ 1965.311903][ T7507] pte_alloc_one+0x1b/0x1a0 [ 1965.311929][ T7507] __pte_alloc+0x20/0x310 [ 1965.311946][ T7507] copy_page_range+0x1529/0x1f90 [ 1965.311960][ T7507] ? find_held_lock+0x35/0x130 [ 1965.311975][ T7507] ? percpu_ref_put_many+0x94/0x190 [ 1965.312003][ T7507] ? copy_process.part.0+0x3121/0x7980 [ 1965.322487][ T7507] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1965.322511][ T7507] ? pmd_alloc+0x180/0x180 [ 1965.332544][ T7507] ? __rb_insert_augmented+0x231/0xdf0 [ 1965.332566][ T7507] ? validate_mm_rb+0xa3/0xc0 [ 1965.378312][ T7507] ? __vma_link_rb+0x279/0x370 [ 1965.387980][ T7507] copy_process.part.0+0x568b/0x7980 [ 1965.388012][ T7507] ? __cleanup_sighand+0x60/0x60 [ 1965.388038][ T7507] _do_fork+0x257/0xfd0 [ 1965.388055][ T7507] ? fork_idle+0x1d0/0x1d0 [ 1965.443401][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1965.448862][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1965.454332][ T7507] ? do_syscall_64+0x26/0x610 [ 1965.459034][ T7507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.465092][ T7507] ? do_syscall_64+0x26/0x610 [ 1965.469761][ T7507] __x64_sys_clone+0xbf/0x150 [ 1965.474426][ T7507] do_syscall_64+0x103/0x610 [ 1965.479106][ T7507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.485436][ T7507] RIP: 0033:0x4571fa [ 1965.489335][ T7507] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 02:37:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x02', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:45 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1965.509023][ T7507] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1965.517457][ T7507] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1965.525427][ T7507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1965.533405][ T7507] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000297f940 [ 1965.541366][ T7507] R10: 000000000297fc10 R11: 0000000000000246 R12: 0000000000000001 [ 1965.549423][ T7507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1965.572698][T22676] bond0: Releasing backup interface bond_slave_1 [ 1965.591697][ T7507] memory: usage 307200kB, limit 307200kB, failcnt 99 [ 1965.599990][ T7507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1965.607878][ T7507] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1965.609711][T22676] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1965.614919][ T7507] Memory cgroup stats for /syz2: cache:56KB rss:246232KB rss_huge:215040KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:246352KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1965.660582][ T7507] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19234,uid=0 [ 1965.676646][ T7507] Memory cgroup out of memory: Killed process 19234 (syz-executor.2) total-vm:72580kB, anon-rss:4260kB, file-rss:35808kB, shmem-rss:0kB [ 1965.692171][T22676] device bond_slave_1 left promiscuous mode [ 1965.693682][ T1043] oom_reaper: reaped process 19234 (syz-executor.2), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1965.721913][T22685] device bond_slave_1 entered promiscuous mode [ 1965.732532][T22685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1965.761941][T22737] __nla_parse: 2 callbacks suppressed [ 1965.761950][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2c0000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x4, 0x1, 0x2}, 0x20, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x1, 0x7, 0x7ff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a440, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001180)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000001280)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={&(0x7f0000000040), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@delqdisc={0x3c, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, r3, {0x7, 0x3}, {0x0, 0xe}, {0xc, 0x8}}, [@TCA_RATE={0x8, 0x5, {0xff, 0xfffffffffffffff9}}, @TCA_RATE={0x8, 0x5, {0x1}}, @TCA_RATE={0x8, 0x5, {0x7, 0x10000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 02:37:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x03', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0xffffffffffffffff, 0xea90}, 0xc) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/218, 0xda}], 0x1) [ 1965.843058][ T7511] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1965.876213][T22762] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:45 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1965.903935][T22762] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1965.924629][ T7511] CPU: 0 PID: 7511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1965.932560][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.932566][ T7511] Call Trace: [ 1965.932589][ T7511] dump_stack+0x172/0x1f0 [ 1965.932611][ T7511] dump_header+0x10f/0xb6c [ 1965.954750][ T7511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1965.960569][ T7511] ? ___ratelimit+0x60/0x595 [ 1965.965176][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1965.970314][ T7511] oom_kill_process.cold+0x10/0x15 [ 1965.975432][ T7511] out_of_memory+0x79a/0x1280 [ 1965.980119][ T7511] ? lock_downgrade+0x880/0x880 [ 1965.980134][ T7511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1965.980156][ T7511] ? oom_killer_disable+0x280/0x280 [ 1965.991246][ T7511] ? find_held_lock+0x35/0x130 [ 1965.991269][ T7511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1965.991286][ T7511] ? memcg_event_wake+0x230/0x230 [ 1965.991305][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1965.991320][ T7511] ? _raw_spin_unlock+0x2d/0x50 [ 1965.991345][ T7511] try_charge+0x102c/0x15c0 [ 1966.006904][ T7511] ? find_held_lock+0x35/0x130 [ 1966.006928][ T7511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1966.006940][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1966.006953][ T7511] ? find_held_lock+0x35/0x130 [ 1966.006970][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1966.036751][ T7511] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1966.036766][ T7511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1966.036784][ T7511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1966.036801][ T7511] __memcg_kmem_charge+0x136/0x300 [ 1966.036820][ T7511] __alloc_pages_nodemask+0x437/0x7e0 [ 1966.036838][ T7511] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1966.036859][ T7511] ? copy_page_range+0x125a/0x1f90 [ 1966.047245][ T7511] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1966.047264][ T7511] alloc_pages_current+0x107/0x210 [ 1966.047287][ T7511] pte_alloc_one+0x1b/0x1a0 [ 1966.047302][ T7511] __pte_alloc+0x20/0x310 [ 1966.047319][ T7511] copy_page_range+0x1529/0x1f90 [ 1966.047332][ T7511] ? find_held_lock+0x35/0x130 [ 1966.047362][ T7511] ? pmd_alloc+0x180/0x180 [ 1966.124570][ T7511] ? __rb_insert_augmented+0x231/0xdf0 [ 1966.130017][ T7511] ? validate_mm_rb+0xa3/0xc0 [ 1966.135307][ T7511] ? __vma_link_rb+0x279/0x370 [ 1966.140062][ T7511] copy_process.part.0+0x568b/0x7980 [ 1966.145349][ T7511] ? __cleanup_sighand+0x60/0x60 [ 1966.150291][ T7511] _do_fork+0x257/0xfd0 [ 1966.154438][ T7511] ? fork_idle+0x1d0/0x1d0 [ 1966.159957][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1966.165404][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1966.170858][ T7511] ? do_syscall_64+0x26/0x610 [ 1966.175532][ T7511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.181584][ T7511] ? do_syscall_64+0x26/0x610 [ 1966.186265][ T7511] __x64_sys_clone+0xbf/0x150 [ 1966.190956][ T7511] do_syscall_64+0x103/0x610 [ 1966.195626][ T7511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.201504][ T7511] RIP: 0033:0x4571fa [ 1966.205386][ T7511] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1966.226293][ T7511] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1966.234697][ T7511] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1966.242678][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 02:37:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1966.250649][ T7511] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1966.258613][ T7511] R10: 0000000002078c10 R11: 0000000000000246 R12: 0000000000000001 [ 1966.266585][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1966.280085][ T7511] memory: usage 307200kB, limit 307200kB, failcnt 2003 [ 1966.292945][T22754] bond0: Releasing backup interface bond_slave_1 02:37:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x10200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf6, 0xff, 0x3f, 0x100000001, 0x0, 0x2, 0x20, 0x4, 0x0, 0x800, 0x81, 0x100000000, 0x8, 0x2545, 0xeb, 0x1, 0x81, 0x8, 0x8, 0x8, 0x1, 0x3, 0x9a64, 0x2, 0xfffffffffffffffb, 0x9c, 0xfffffffffffff621, 0x5, 0x40002c54, 0x2, 0x1, 0x8, 0x8, 0x9a42, 0xfffffffffffffffb, 0x8001, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000000), 0x9}, 0x20, 0x4, 0xd295, 0x7, 0xa, 0x80, 0x7}, r2, 0x10f, r0, 0x9) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x101) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'teql0\x00', 0x60ce}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1966.301742][ T7511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1966.325944][ T7511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1966.326820][T22754] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1966.335912][ T7511] Memory cgroup stats for /syz4: cache:4KB rss:237224KB rss_huge:202752KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:237264KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1966.385613][ T7511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22691,uid=0 02:37:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x10000) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x6}, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x63c) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000000) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1966.402310][ T7511] Memory cgroup out of memory: Killed process 22691 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1966.419658][T22754] device bond_slave_1 left promiscuous mode 02:37:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xf9, 0x200000) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8000, 0x2, 0x4, 0x2000040, {0x0, 0x2710}, {0x4, 0xc, 0xb16, 0xce, 0x7, 0x5, "6f74ea16"}, 0x800, 0x3, @userptr=0x8, 0x4}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200200, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) 02:37:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1966.476195][T22767] device bond_slave_1 entered promiscuous mode [ 1966.483590][T22767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1966.525309][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1966.570531][T22814] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1966.631358][T22814] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1966.643714][T22754] bond0: Releasing backup interface bond_slave_1 [ 1966.663515][T22754] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x04', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000080)=0x0) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_cancel(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000000c0)="d6c45decc1073fd983efcb9e015ad408edc8246a89bc45b3f8ca91838ef2e89ddf7d05759013b7a881fea38ac7e17230023a835ef3b783ffef2bf1db7ebbeacac7aac0b0d22de5e0ca289c7f1409d780292b07f8be1ec455afb99d558567a832c31facbce69fc8d7208047f3eb152a31401ba9bdb5972a92fa4f384a895e053126804f95364f3b9f4a4c6a6b824fb288d15be3d0b6b3aff82c408cfb70e5efd02d2ae427b5b6621cc0c3f6639a3f50f9bf13f3372f527d518ff477b7e7e29a02804a9a12e20a290522085d41f499b8528462b35f5ab9060e24988d8fb62025fac8a6ff6329431064c5cbf9bca7e6da577b946989ef2a0bb107f25fac317b61b9aa1e4707bcef9e5a3d34045b5e85064cfc96d2fc5960c83cd2562669e2ab94130f8ad826fe4240ebf57442aa513da03571e52bb5a0454aabcf9b0b4812fd8b4279a41b552417692cc04a48b1551a5c46407b2cc0319adcc721af94a1ffd859ee6cd0120d3718d021d4791d8a81e06824d81a9f8b3956576d0635bef4d486763fb189bf50e036ffe5b8c6d82536051be4d424ba044e3d634dd9cd4da9fa123890e0adb9ed264c860e2862104a39f3855ebf2ed4f46c247f68b5a87ce09cab79802941a870024614c067c518a9c03489eedc8481cc761ae40bfccce52b231f7489adfb0b3bc178103336c5d3f333a4afb431be89dc0699b8fb7a779fe0ddf334235efd26a202581ef206f45708a11dd1b95c86b918645025fb8ab1847c32f33c7928fb4c4cae772334e091cd3e5ca231d74014561cf9db8faded59efce55593910807a8dafcd398f223a9c13061f4a9eeb1d366fa8c4e5bb99c2369e1b0a1c16320a9e68eec870745fb7ed4d95fcd3e046b6913a9cc97dcbc9eb66fdab7c6a7e48a2de902f9ef0ffd96ba9c086d547b6797934e7b2076336ee11a9a156e121cfe28f95d58c32331e2e76764c61b2d19261bce8a6770beba136c8c6b895b1e126497e6bebbb9334fba0e9fc9b68f5c6dcba9cd3ff5d072dd90e10a010a107c565af6e2c19b71bb1ba2e586738677ad6a846e490ccc1ef70713d73c2c144d92274dcdf15e63f9368b578be71db391f2eecf336523455f47fa9aee77eac3eea3c1f5203f7989c238e554703e8f27815eb45c1dbdb5aa605b48548cd6d20835f819df97d3f7780600a405578e71597b530b1b4a4ea047dd9d8ea96149949448281034909643d2b97633ff8cdc791fca1116812c9dc9ac14e91ad47b6dd56304190e6f0d18fb838de0968c13e2d104ee81da0ef2ece933075e99ccf7477f2d2836189301d958a0cc97190f6385a5af7703d670f5ebb5607270efb3fdd0b174b390bbfff31cff5de90dc0c76b0e5503a761a06fe641ef62412eba102d5a7f170ee6c068e435b23df94061291d5e9c546a623aa3ad4283167f57fff94fba510327ab26688f49e7ef20e757f9aa0840dfa385f81340bb409526313d16b203a5177e599af1635dec2379c08401174ff276c73732afcd684c40eb7079a5214e91316988a75f3bde7171b1f15e7bc0da06153270e36ceb8071c7e191805bacc18c7f38ae95310b1ca8d06d5f8cbf18b6ba1ea61543a5fcfc37da27bbd5ecaa95244c4efdd8a900d1528493972c58dd8831cb3d37368270527acb2146db7551b2dfc66a8212d2069bb7d616a040bd66b877d121c224ca7678d3d4ff1840a532cd7766513876f72aec7a91e789c6eb22d2ba1131f1a5275916b6bbf5b5ca6f7dcae91cda4f462a8dcf44d951412c40dac952ec7b8a5e580c32b0e2b43caf4243a773fa668760639d0aab5639b13ad760a4807c2030c1423719b158addb0ac48605819bfdb5ea8ff9ff66f9d875fb4ba68bca3463ec1534be9353cc964751751b284a12f32d8229928f03ce0c07236f2ba4c518dec40d15a8489a9068c90535b7fcfe53a759cea15e39f46b0e7ce90c32ca752e62176dd8962e62081867fa7b37038aa8b2781a63e576860a031d10462b29cca59b0359e666c68bc2dfdbfba92faf9067b34706de5677ca70cbc54c2303c31c4b1965ad5d10b6d395639559b1f6fb5cc0093206b560ba5b9d5b2317dd81bbed417767c9a384e4889f8b025e42590835be2a4050b230549a449c9c31ee424edfd7aea44e391767024c27fb0e139849e68b12842d603154d38d89cd4c02d7e956eb0e4cf8565f526b1dd7296538b81219441cec30c45f26779a667e9265c2eb19290dae25d0d1e961a828829618962592d92b3445097a70c15d1d07707ed3a78cb4752dc13f7c15958315fc0063298ca7fcb4053c9c6f8027cb77c0c2af3df8cc91e99f6d0f6c9edf2aac3b83ab0fe7d1f3780d18d1368241dbc8ac7911bb298a41dff517d7dc21b7718a8cc24194bc6b262e325285b4d8483db43e57bc8335b4c2e896a3e26ec83fac124c20f8f4804254f9be96a879c98740f4f0547268b119f2d54ce803b1a8848349211fb272a5f83c3f5010ca84e7791c26a75b3bda9ac362e550c2d104bb1fcb8b6801939122054a59b17654d4cf4d18fc78a874dc102b085d375e93d90539d295da628ed04f5fb82385341332c9e452a7ae04880b62335b35b21399db15d26d5030de1030abf7e37853d8a39016b2c2f944d370d1f9021e53799c413c2b537599bc59b42647a1e33bd5915e3a177bdf3450d36107a9f8d83d754763a610e8d596728558b4bf94ca57d42f670ed398a7a097772a26da2c45df8d31c7648a5ee8232a219439f53c8d6f621eaa56efffb378adfbfde659c539ea2b480ade5f78a106c9641fa971996c1ca737f22c53333e18fb4863b379aeb46c67973cc6dbd1afb8ff6b8b75e369dc7affa0cd7a37b2979069773aec3f4b933f9946779100aa58f812408aeb6af276b9fc3f2948cf3bdb80d79b1556bd7d2ea0071e970ba864b0be462aaf7028d0244a63fccf4e34929505bda7e43acd80d72fed28c907cb597f54f5e06d8041206dab966453ee756a7ef9821f205f1073a687b69ce01aa262eabe07686bcac88414a270d9cda61fa8dd32e5cf21ad7d32a020243be0a0953542f899998b8320ee05c46e49a69a1dbb5f4438e85833cde8a2687da4f140707bb12a36b01d4fc9a3477a2486ac3825e76bef9398f53bb6a9b1bb20919acffc6315af8901157a9e56794f26b7a78af61ae071d9789208660372fb89a6a490fb8ddf79ac96584b857d16b17538cdbf18a79a5c320116b5003549c182c78cff21b93d2452bb0be7476569c5922f0b5fd94e6e975fded3c0a02ddb0d5dee9df1787b4e17b1c09fa5a90266dd46af885092f969a112b893608a2bb5712267ae67c2b7ebc615702a8a32f9c02730b7adb070e77016b031caf853b405ce7e67690efe30f5e70b15b042645add580e1b61bf57cb5f53667c347be5c0e15bf104b2d2dfe24eb7a564af70fd35563564477eaa94f7dcf10d2194edc68c23c7d7f814cc6c7b0b80124928f43ba150f631214508033374f60da7920651d7f6b10665b2d78bab71184947bf4ceda9e5974c8edbb23bdb976672fa18cf736683fe868a6dc873dbb162f7222d51ad305b571ae0a57829a32e66e0c6cd2277cb5ca3e34c9d480df0cab47dc63b1bf18da4abe03d2e6ceee531db1040a165bc815f951dacfd5ac88a5527fb6f78455a0c4a8245501ae124b6944950158419545d7ece647376542232b2590cae3e86ca6696a521ffd1e61a6a58554d505c69d5c639596db848ae5ad9df92673b1d25faca6e01fda7b0384ac9c1cd82207c6dbf830ad47695271a141879958e05ec6d5c1a1b4558c042e77574f80c6f89af6d01c455335e3d5f4a04044cd2d16ab1e60e2437ba3c2bd69a36eb749daf32a83977d2391783213be76afdf17c5e79725a9a668a679ac40bd28068de56e77af52c7f9dda19c32d2f60e78ec430fffe8d39bd892af2383d147b83c31ffa4b4f65eb3a4f98d8fc0c3115f3dadd5526fe1686d5bf35713a9f74c32f69e05e4d72f1e1b5a338d54d7afd2ac00484badc35cb3fcc25c0765cc527f365b8fc2ea09d77ee58dcf7c428e9e1166f042030efb85119867b0ef40722328f0bcc8ee45a13533ecc0428297caeef039f478ebb10494793cf4f9bdb88791811fcc9612f613afbbd43d5c7cbe08b9938b388d1739e11c61570265041840ee5ba137db99c4e11667699018b3dacf72815af513b1d7c8a13d256d1fb85eafbedd021742b0d049c6305aa13e2a621a53ad4db2cc28fa36f850c84453a3722f4d093a2ca5157e892f5582b7bc27b6c5da6ebb4df1073bb86ebf261c5c33e5141d7c468c47fd15294ec43c5d150f2ea5d0980f69f4332436443919c9b35d9fa3114345968c0db0cb904686ecc604bd6fd77006ea08229a60cbfef9bab3a7554192d38f6676b07a4f5054ea640145700ba9d9bcf271be350cdef151eb42412b4de520ab99d7b1107acdac8d4d31ef230947a407fd6810caa852f44cc60b008569b1bdde8c122af0bc1bef4252ed4b97875c3d0ac41f16c8ee98055b99e581d1bfb6ccdef47c23189223b1a72eef4c4c4fa6317fcc5c6b63a7ca830dd3fb6bd3d8eed427007b6786dc8e3e9a8903b694e23aa48a9f116923811c25dc00815d05dd1dd759eacfa44a02fdd448f8f29a0cc5a0ef4ac2c5fdf5dd500417236b11b3bbf451c50aceb700d6ae3fdc6b6f9117ba08bdbc8b597514c047aea67fd9b8d2ec0e7306c7b2cf274eb9dbb63d5a2c8fb26288f224ae52f447f139edee9340b1fe2c007794cf77994ab393f7d65b50da2838a14c7caa86b06222eb2c7c1425c942536116edf115732b6b92954a78d202ee5e455e586e2921f1e23a0881a545991a567a9ba6034de8fac76e4f7f535fd8353c5dbd27d7c0ed4c7017b29e595318ea0693999986091f9f6c7d922a15270f6fd01dbc21f78b1e9ea3bc18581d2fbf6f7896ee48baa20d98dbb6444f569235c2c828c99feb2d6c1a56cb329446bb3d2564597020b2087cd33cf162397d4065be70a810e7020885666454d6aefd0bdbfb204126255b8adf0c44b99430d745e1263c4e47d8bba580a114d4adfb24ce41d5970ad5ff3b2abfdaf1a150e4a93bd225995b25d3efad051f9f822009e0cd5bdcbc9db497392ddb239d73f0aa164a058b6ce84e699b0b2f0809d9b0530a4065f7a47e2d9479c0afff265e49418b42ca99db62ca0a21154cb764855c49a817751331a3dceb661ff5b2376927cf8562b4718b5c64a4c99dadb4f8c0280327a9a06b08cbc434d8520f3da15a7cb3e3c95ec1c3c2850a58bc16fe91bd68d56c4074f5907cb693d20705ec4b31094a474039061480935658854b608d277c4f50dbfbe680a6b4dbc9dbe9870a981d20dfdd4299636e1d90377bf615d8988a47ba4e001c8b4e9d8c0b1a9aa9180b82c5fb495b812da00d8391be32a990518d8f9bab1dcffb644ec33f42820fe0ae5db0b2b8b07b7a22aae6685eacdc00cda2d242ae18f0fcf346f47739b003f3e87b13a4ec93fccb075f7a952f0a2b28b5975cbbca05fadd32f31c219ce1de48e64420e421fb6db4610987098e81f7aecddd23fa5e2fd90de22a7dda486406931ac2b67637cad89b24c88a3d5b67e6eb2557bb0f3761e17102f1331b62e86047ef97845302d1d90c54486fba89b53229cdd690d9ac0cb223d9b07720cbe782912708e1a76e2fd33beed525bdf4f9e82753b2ae8fe15b8f81af2696a4407f12cfdca7d0ae291138443ece8c9bb728599fbc377773f7c8482dfc08a499561b62926bc3a06fcabed139487095182ab93e653064a0f4bab8d3181b", 0x1000, 0x7, 0x0, 0x1, r2}, &(0x7f0000001140)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) fstat(r0, &(0x7f0000000000)) 02:37:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 02:37:46 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1966.706626][T22754] device bond_slave_1 left promiscuous mode [ 1966.715518][T22767] device bond_slave_1 entered promiscuous mode [ 1966.722348][T22767] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x3, 0x8, 0x2, 0x47e, 0x6, [{0x1e3, 0x3, 0xfffffffffffff8b4, 0x0, 0x0, 0x1500}, {0x100000001, 0x100000000, 0x5a0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0xfff, 0x0, 0x0, 0x80}, {0x0, 0x80, 0x10000, 0x0, 0x0, 0x2004}, {0x91, 0x6, 0xfffffffffffffc00, 0x0, 0x0, 0x2100}, {0x1, 0x2, 0x80000000, 0x0, 0x0, 0x2000}]}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x05', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget(0x0, 0x1, 0x4) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/4096) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001040)=0x14, 0x80800) getsockname(r1, &(0x7f0000001080)=@tipc, &(0x7f0000001100)=0x80) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer\x00', 0xa00, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000011c0)={0x8, &(0x7f0000001180)=[{0xfffffffffffffffd, 0x100000000000000, 0x7, 0x100000000}, {0x5, 0x7, 0x9, 0x3}, {0x6, 0x2062, 0x9, 0x1}, {0x10f2, 0x2, 0x0, 0xfffffffffffffffb}, {0xc0000000, 0x8, 0x8, 0x2}, {0x75ea, 0x50, 0x0, 0x770}, {0x7d, 0x0, 0xff, 0x9}, {0x7, 0xf8, 0x1000, 0x757c}]}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1966.768707][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:37:46 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1966.846485][T22835] bond0: Releasing backup interface bond_slave_1 [ 1966.853004][T22835] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1966.929564][T22835] device bond_slave_1 left promiscuous mode [ 1966.971446][T22856] device bond_slave_1 entered promiscuous mode [ 1966.991327][T22856] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1967.007691][T22869] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1967.018331][T22869] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1967.028248][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1967.045751][T22857] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1967.063182][T22857] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1967.128555][T22835] bond0: Releasing backup interface bond_slave_1 [ 1967.143952][T22835] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f127c123f4bd625fd") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\a', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:47 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1967.196870][T22835] device bond_slave_1 left promiscuous mode [ 1967.206951][T22856] device bond_slave_1 entered promiscuous mode [ 1967.214720][T22856] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1967.271181][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1967.305640][T22919] bond0: Releasing backup interface bond_slave_1 02:37:47 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x400) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1000, "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"}, &(0x7f0000001080)=0x1008) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000010c0)={r1, 0x3ff}, 0x8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1967.338081][T22919] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:47 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x5, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1967.408825][T22919] device bond_slave_1 left promiscuous mode [ 1967.470675][T22949] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1967.471233][T22927] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1967.485517][T22949] CPU: 1 PID: 22949 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1967.494586][T22927] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1967.501555][T22949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.501562][T22949] Call Trace: [ 1967.501591][T22949] dump_stack+0x172/0x1f0 [ 1967.501610][T22949] dump_header+0x10f/0xb6c [ 1967.501626][T22949] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1967.501643][T22949] ? ___ratelimit+0x60/0x595 [ 1967.501656][T22949] ? do_raw_spin_unlock+0x57/0x270 [ 1967.501669][T22949] oom_kill_process.cold+0x10/0x15 [ 1967.501681][T22949] out_of_memory+0x79a/0x1280 [ 1967.501702][T22949] ? lock_downgrade+0x880/0x880 [ 1967.501715][T22949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1967.501727][T22949] ? oom_killer_disable+0x280/0x280 [ 1967.501737][T22949] ? find_held_lock+0x35/0x130 [ 1967.501757][T22949] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1967.501768][T22949] ? memcg_event_wake+0x230/0x230 [ 1967.501793][T22949] ? do_raw_spin_unlock+0x57/0x270 [ 1967.501807][T22949] ? _raw_spin_unlock+0x2d/0x50 [ 1967.501823][T22949] try_charge+0x102c/0x15c0 [ 1967.501833][T22949] ? find_held_lock+0x35/0x130 [ 1967.501851][T22949] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 02:37:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1967.501861][T22949] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1967.501877][T22949] ? find_held_lock+0x35/0x130 [ 1967.518163][T22922] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1967.521487][T22949] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1967.521514][T22949] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1967.521528][T22949] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1967.521546][T22949] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1967.526085][T22922] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1967.529167][T22949] __memcg_kmem_charge+0x136/0x300 [ 1967.529184][T22949] __alloc_pages_nodemask+0x437/0x7e0 [ 1967.529198][T22949] ? free_transhuge_page+0x230/0x310 [ 1967.529213][T22949] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1967.529223][T22949] ? __put_compound_page+0x96/0xe0 [ 1967.529240][T22949] ? put_page+0xe7/0x130 [ 1967.529256][T22949] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 1967.529270][T22949] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1967.529286][T22949] alloc_pages_current+0x107/0x210 [ 1967.529302][T22949] pte_alloc_one+0x1b/0x1a0 [ 1967.529315][T22949] __pte_alloc+0x20/0x310 [ 1967.529329][T22949] __handle_mm_fault+0x3391/0x3ec0 [ 1967.529348][T22949] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1967.559079][T22949] ? find_held_lock+0x35/0x130 [ 1967.564020][T22928] device bond_slave_1 entered promiscuous mode [ 1967.570151][T22949] ? handle_mm_fault+0x322/0xb30 [ 1967.570172][T22949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1967.570188][T22949] ? kasan_check_read+0x11/0x20 [ 1967.570201][T22949] handle_mm_fault+0x43f/0xb30 [ 1967.570220][T22949] __do_page_fault+0x5ef/0xda0 [ 1967.570239][T22949] do_page_fault+0x71/0x581 [ 1967.570253][T22949] ? page_fault+0x8/0x30 [ 1967.570264][T22949] page_fault+0x1e/0x30 [ 1967.570274][T22949] RIP: 0033:0x400590 [ 1967.570292][T22949] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 75 52 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 1967.593736][T22928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1967.596096][T22949] RSP: 002b:0000000000a4fba0 EFLAGS: 00010202 [ 1967.596108][T22949] RAX: ffffffffffffffff RBX: 0000000000740000 RCX: 0000000000000000 [ 1967.596117][T22949] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffffff [ 1967.596124][T22949] RBP: 0000000000740008 R08: 0000000000000000 R09: 0000000000000000 [ 1967.596132][T22949] R10: 0000000000000075 R11: 0000000000000246 R12: fffffffffffffffe [ 1967.596139][T22949] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1967.615159][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1967.644656][T22949] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 1967.661373][T22951] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1967.680823][T22951] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1967.714647][T22949] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1967.754416][T22949] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1967.775579][T22949] Memory cgroup stats for /syz2: cache:56KB rss:244956KB rss_huge:212992KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:245024KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1967.786930][T22949] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9421,uid=0 [ 1967.826914][T22949] Memory cgroup out of memory: Killed process 9421 (syz-executor.2) total-vm:72580kB, anon-rss:4260kB, file-rss:35800kB, shmem-rss:0kB [ 1967.974212][ T1043] oom_reaper: reaped process 9421 (syz-executor.2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1967.986134][T22928] bond0: Releasing backup interface bond_slave_1 [ 1967.988879][T22941] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1968.005752][T22941] CPU: 0 PID: 22941 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1968.009444][T22928] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1968.013764][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.013776][T22941] Call Trace: [ 1968.043870][T22941] dump_stack+0x172/0x1f0 [ 1968.048305][T22941] dump_header+0x10f/0xb6c [ 1968.057336][T22941] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1968.063152][T22941] ? ___ratelimit+0x60/0x595 [ 1968.067759][T22941] ? do_raw_spin_unlock+0x57/0x270 [ 1968.072887][T22941] oom_kill_process.cold+0x10/0x15 [ 1968.078012][T22941] out_of_memory+0x79a/0x1280 [ 1968.082709][T22941] ? oom_killer_disable+0x280/0x280 [ 1968.087906][T22941] ? find_held_lock+0x35/0x130 [ 1968.092766][T22941] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1968.098298][T22941] ? memcg_event_wake+0x230/0x230 [ 1968.103304][T22941] ? do_raw_spin_unlock+0x57/0x270 [ 1968.108397][T22941] ? _raw_spin_unlock+0x2d/0x50 [ 1968.113226][T22941] try_charge+0x102c/0x15c0 [ 1968.117725][T22941] ? find_held_lock+0x35/0x130 [ 1968.122490][T22941] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1968.128012][T22941] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1968.133534][T22941] ? find_held_lock+0x35/0x130 [ 1968.138273][T22941] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1968.143822][T22941] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1968.149364][T22941] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1968.154555][T22941] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1968.160201][T22941] __memcg_kmem_charge+0x136/0x300 [ 1968.166507][T22941] __alloc_pages_nodemask+0x437/0x7e0 [ 1968.171860][T22941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1968.178080][T22941] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1968.183875][T22941] ? copy_process.part.0+0x1d08/0x7980 [ 1968.189316][T22941] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1968.194587][T22941] ? trace_hardirqs_on+0x67/0x230 [ 1968.199597][T22941] ? kasan_check_read+0x11/0x20 [ 1968.204451][T22941] copy_process.part.0+0x3e0/0x7980 [ 1968.209632][T22941] ? __lock_acquire+0x548/0x3fb0 [ 1968.214572][T22941] ? __fget+0x35a/0x550 [ 1968.218715][T22941] ? __might_fault+0x12b/0x1e0 [ 1968.223473][T22941] ? __cleanup_sighand+0x60/0x60 [ 1968.228392][T22941] ? lock_downgrade+0x880/0x880 [ 1968.233240][T22941] _do_fork+0x257/0xfd0 [ 1968.237375][T22941] ? fork_idle+0x1d0/0x1d0 [ 1968.241788][T22941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1968.247310][T22941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1968.252757][T22941] ? do_syscall_64+0x26/0x610 [ 1968.257414][T22941] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.263474][T22941] ? do_syscall_64+0x26/0x610 [ 1968.268132][T22941] __x64_sys_clone+0xbf/0x150 [ 1968.272802][T22941] do_syscall_64+0x103/0x610 [ 1968.277373][T22941] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.283247][T22941] RIP: 0033:0x458c29 [ 1968.287125][T22941] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1968.306716][T22941] RSP: 002b:00007ff9f1d82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1968.315131][T22941] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1968.323090][T22941] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 4000002102001ffb [ 1968.331225][T22941] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 1968.339178][T22941] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9f1d836d4 [ 1968.347127][T22941] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1968.355579][ C0] net_ratelimit: 20 callbacks suppressed [ 1968.355589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.367096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1968.367196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.378692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1968.385911][T22941] memory: usage 307188kB, limit 307200kB, failcnt 259 [ 1968.392875][T22941] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1968.400415][T22941] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1968.407337][T22941] Memory cgroup stats for /syz1: cache:156KB rss:250976KB rss_huge:223232KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:251100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1968.429247][T22941] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4074,uid=0 [ 1968.446559][T22928] device bond_slave_1 left promiscuous mode [ 1968.452839][T22941] Memory cgroup out of memory: Killed process 4074 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB 02:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\t', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:48 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x1fffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000000)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='usermd5sumppp0\x00', 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x24100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000200)=0x73) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={r3, r4, r5}, 0xc) delete_module(&(0x7f0000000040)='\x00\x00\x10', 0xa00) flistxattr(r2, &(0x7f0000000400)=""/183, 0xb7) 02:37:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="2c0000002387eb327e1ae3c71afe5bfb6e376872c40db737b9ea363ae7b776953bc9e6e15b57c186db9de3f1c58a5739"], &(0x7f0000000080)=0x34) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x4}, 0x8) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1968.472940][ T1043] oom_reaper: reaped process 4074 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1968.486148][T22955] device bond_slave_1 entered promiscuous mode [ 1968.497396][T22955] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\n', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:48 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1968.559113][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1968.571586][T22981] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1968.590589][T22981] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:48 executing program 1: r0 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x2) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) prctl$PR_SET_FPEXC(0xc, 0x40080) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x80000001) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000140)={{0x9, 0x1}, 'port1\x00', 0x84, 0x40000, 0xd0, 0x9, 0x10001, 0x101, 0x7b, 0x0, 0x2, 0x3}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1968.634558][T22984] bond0: Releasing backup interface bond_slave_1 [ 1968.664247][T22984] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1968.736679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.738585][T22984] device bond_slave_1 left promiscuous mode [ 1968.742848][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:37:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\v', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @empty, 0x4e24, 0x100000001, 'nq\x00', 0x6, 0x3f, 0x66}, 0x2c) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', 'proc\x00'}, 0xa) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1968.785455][T22991] device bond_slave_1 entered promiscuous mode [ 1968.816386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.822201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1968.828118][ C0] protocol 88fb is buggy, dev hsr_slave_0 02:37:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1968.833886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1968.837119][T22991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1968.892216][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1968.894234][T23014] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 1968.924930][T22984] bond0: Releasing backup interface bond_slave_1 [ 1968.940662][T22984] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1969.002892][T22984] device bond_slave_1 left promiscuous mode [ 1969.004492][T23011] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1969.021711][T23011] CPU: 0 PID: 23011 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1969.029717][T23011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.039799][T23011] Call Trace: [ 1969.039825][T23011] dump_stack+0x172/0x1f0 [ 1969.039846][T23011] dump_header+0x10f/0xb6c 02:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bc, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:49 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1969.039863][T23011] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1969.039877][T23011] ? ___ratelimit+0x60/0x595 [ 1969.039890][T23011] ? do_raw_spin_unlock+0x57/0x270 [ 1969.039903][T23011] oom_kill_process.cold+0x10/0x15 [ 1969.039921][T23011] out_of_memory+0x79a/0x1280 [ 1969.045003][T22991] device bond_slave_1 entered promiscuous mode [ 1969.047613][T23011] ? lock_downgrade+0x880/0x880 [ 1969.047630][T23011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.047647][T23011] ? oom_killer_disable+0x280/0x280 [ 1969.047658][T23011] ? find_held_lock+0x35/0x130 [ 1969.047678][T23011] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1969.047690][T23011] ? memcg_event_wake+0x230/0x230 [ 1969.047719][T23011] ? do_raw_spin_unlock+0x57/0x270 [ 1969.053882][T22991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1969.057931][T23011] ? _raw_spin_unlock+0x2d/0x50 [ 1969.057951][T23011] try_charge+0x102c/0x15c0 [ 1969.057964][T23011] ? find_held_lock+0x35/0x130 [ 1969.057983][T23011] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1969.057994][T23011] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1969.058006][T23011] ? find_held_lock+0x35/0x130 [ 1969.058017][T23011] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1969.058039][T23011] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1969.171100][T23011] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1969.176289][T23011] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1969.181835][T23011] __memcg_kmem_charge+0x136/0x300 [ 1969.186944][T23011] __alloc_pages_nodemask+0x437/0x7e0 [ 1969.192395][T23011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.198624][T23011] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1969.204329][T23011] ? copy_process.part.0+0x1d08/0x7980 [ 1969.209787][T23011] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1969.215068][T23011] ? trace_hardirqs_on+0x67/0x230 [ 1969.220250][T23011] ? kasan_check_read+0x11/0x20 [ 1969.225266][T23011] copy_process.part.0+0x3e0/0x7980 [ 1969.230451][T23011] ? psi_memstall_leave+0x11c/0x180 [ 1969.235634][T23011] ? sched_clock+0x2e/0x50 [ 1969.240048][T23011] ? psi_memstall_leave+0x12e/0x180 [ 1969.245237][T23011] ? find_held_lock+0x35/0x130 [ 1969.249994][T23011] ? psi_memstall_leave+0x12e/0x180 [ 1969.255192][T23011] ? __cleanup_sighand+0x60/0x60 [ 1969.260110][T23011] ? __lock_acquire+0x548/0x3fb0 [ 1969.265046][T23011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.271292][T23011] _do_fork+0x257/0xfd0 [ 1969.275435][T23011] ? fork_idle+0x1d0/0x1d0 [ 1969.279842][T23011] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1969.285986][T23011] ? lock_downgrade+0x880/0x880 [ 1969.290833][T23011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.297075][T23011] ? blkcg_exit_queue+0x30/0x30 [ 1969.301915][T23011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1969.307357][T23011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1969.312807][T23011] ? do_syscall_64+0x26/0x610 [ 1969.317757][T23011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1969.323813][T23011] ? do_syscall_64+0x26/0x610 [ 1969.328533][T23011] __x64_sys_clone+0xbf/0x150 [ 1969.333195][T23011] do_syscall_64+0x103/0x610 [ 1969.337871][T23011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1969.343757][T23011] RIP: 0033:0x45b5f9 [ 1969.347656][T23011] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1969.367335][T23011] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1969.375751][T23011] RAX: ffffffffffffffda RBX: 00007fb4599d5700 RCX: 000000000045b5f9 [ 1969.383817][T23011] RDX: 00007fb4599d59d0 RSI: 00007fb4599d4db0 RDI: 00000000003d0f00 [ 1969.391781][T23011] RBP: 0000000000a4fcb0 R08: 00007fb4599d5700 R09: 00007fb4599d5700 [ 1969.400433][T23011] R10: 00007fb4599d59d0 R11: 0000000000000202 R12: 0000000000000000 [ 1969.408389][T23011] R13: 0000000000a4fb5f R14: 00007fb4599d59c0 R15: 000000000073bfac [ 1969.418284][T23023] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1969.438429][T23011] memory: usage 307192kB, limit 307200kB, failcnt 2049 02:37:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x1, 0x4c00000000006800}, &(0x7f00000000c0)='trusted@vmnet1\x99\x00', r0) [ 1969.445875][T23023] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1969.461940][T23011] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1969.471724][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1969.481540][T23011] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1969.496113][T23029] bond0: Releasing backup interface bond_slave_1 02:37:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r0) r1 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='R\trist\xe3cusgrVid:De', 0xfffffffffffffffd) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000180)='asymmetric\x00', r1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) [ 1969.506527][T23029] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1969.526904][T23011] Memory cgroup stats for /syz4: cache:4KB rss:235984KB rss_huge:200704KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:236048KB inactive_file:0KB active_file:0KB unevictable:0KB 02:37:49 executing program 3: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1969.568260][T23029] device bond_slave_1 left promiscuous mode 02:37:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1969.609187][T23011] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22724,uid=0 [ 1969.626597][T23011] Memory cgroup out of memory: Killed process 22724 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1969.652373][T23036] device bond_slave_1 entered promiscuous mode 02:37:49 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="abba499f3964b1daee52ab14906bae73ee96c4337763c7dd09bb4d472051c712804554479565220be1e508d4812558be52c1677601416d7b17149c94077692081d3d062ecf84f5dc6f4aa5651d9108aee6ac58680e02dce2c564a6ffac1d426f7206aaadcc8e913ac215b13f484834b03d7afd2f2e36a44a44a1744089ffd6bdbdba1acc3c27708113be2e55ab88043df170c02740", 0x95, 0xffffffffffffffff) r1 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00\x00\x10', 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='keyring\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1, ':chain\x00'}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000380)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000003c0)={0x3, 0x0, [{}, {}, {}]}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1969.696758][T23036] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1969.742523][T23068] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1969.789909][T23066] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1969.792077][T23068] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1969.807940][T23066] CPU: 1 PID: 23066 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1969.819825][T23066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.830065][T23066] Call Trace: [ 1969.833554][T23066] dump_stack+0x172/0x1f0 [ 1969.837898][T23066] dump_header+0x10f/0xb6c [ 1969.842351][T23066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1969.848158][T23066] ? ___ratelimit+0x60/0x595 [ 1969.852764][T23066] ? do_raw_spin_unlock+0x57/0x270 [ 1969.857876][T23066] oom_kill_process.cold+0x10/0x15 [ 1969.857890][T23066] out_of_memory+0x79a/0x1280 [ 1969.857906][T23066] ? lock_downgrade+0x880/0x880 [ 1969.857919][T23066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.857932][T23066] ? oom_killer_disable+0x280/0x280 [ 1969.857941][T23066] ? find_held_lock+0x35/0x130 [ 1969.857963][T23066] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1969.857975][T23066] ? memcg_event_wake+0x230/0x230 [ 1969.857993][T23066] ? do_raw_spin_unlock+0x57/0x270 [ 1969.858009][T23066] ? _raw_spin_unlock+0x2d/0x50 [ 1969.858023][T23066] try_charge+0x102c/0x15c0 [ 1969.858032][T23066] ? find_held_lock+0x35/0x130 [ 1969.858051][T23066] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1969.868465][T23066] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1969.868479][T23066] ? find_held_lock+0x35/0x130 [ 1969.868495][T23066] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1969.905397][T23066] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1969.905416][T23066] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1969.919511][T23066] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1969.930585][T23066] __memcg_kmem_charge+0x136/0x300 [ 1969.930605][T23066] __alloc_pages_nodemask+0x437/0x7e0 [ 1969.930619][T23066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.930634][T23066] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1969.930657][T23066] ? copy_process.part.0+0x1d08/0x7980 [ 1969.930672][T23066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1969.930686][T23066] ? trace_hardirqs_on+0x67/0x230 [ 1969.930703][T23066] copy_process.part.0+0x3e0/0x7980 [ 1969.930717][T23066] ? psi_memstall_leave+0x11c/0x180 [ 1969.930732][T23066] ? sched_clock+0x2e/0x50 [ 1969.930745][T23066] ? psi_memstall_leave+0x12e/0x180 [ 1969.930756][T23066] ? find_held_lock+0x35/0x130 [ 1969.930774][T23066] ? psi_memstall_leave+0x12e/0x180 [ 1969.946595][T23066] ? __cleanup_sighand+0x60/0x60 [ 1969.946608][T23066] ? __lock_acquire+0x548/0x3fb0 [ 1969.946623][T23066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.946656][T23066] _do_fork+0x257/0xfd0 [ 1969.946673][T23066] ? fork_idle+0x1d0/0x1d0 [ 1969.946693][T23066] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1970.062286][T23066] ? lock_downgrade+0x880/0x880 [ 1970.067119][T23066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1970.073367][T23066] ? blkcg_exit_queue+0x30/0x30 [ 1970.078215][T23066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1970.083674][T23066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1970.094095][T23066] ? do_syscall_64+0x26/0x610 [ 1970.098946][T23066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1970.105024][T23066] ? do_syscall_64+0x26/0x610 [ 1970.109800][T23066] __x64_sys_clone+0xbf/0x150 [ 1970.114472][T23066] do_syscall_64+0x103/0x610 [ 1970.119149][T23066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1970.125115][T23066] RIP: 0033:0x45b5f9 [ 1970.129019][T23066] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1970.149082][T23066] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1970.157576][T23066] RAX: ffffffffffffffda RBX: 00007ff9f1da4700 RCX: 000000000045b5f9 [ 1970.165641][T23066] RDX: 00007ff9f1da49d0 RSI: 00007ff9f1da3db0 RDI: 00000000003d0f00 [ 1970.173720][T23066] RBP: 0000000000a4fcb0 R08: 00007ff9f1da4700 R09: 00007ff9f1da4700 [ 1970.181773][T23066] R10: 00007ff9f1da49d0 R11: 0000000000000202 R12: 0000000000000000 [ 1970.191688][T23066] R13: 0000000000a4fb5f R14: 00007ff9f1da49c0 R15: 000000000073bf0c [ 1970.200651][T23029] bond0: Releasing backup interface bond_slave_1 [ 1970.209024][T23066] memory: usage 307184kB, limit 307200kB, failcnt 295 [ 1970.212612][T23029] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1970.216144][T23066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1970.241107][T23066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1970.248035][T23066] Memory cgroup stats for /syz1: cache:156KB rss:250996KB rss_huge:223232KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:251056KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1970.269880][T23066] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23042,uid=0 02:37:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:50 executing program 3: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:37:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x27b, 0x80) ioctl$RTC_PIE_OFF(r0, 0x7006) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1970.285314][T23066] Memory cgroup out of memory: Killed process 23042 (syz-executor.1) total-vm:72844kB, anon-rss:2236kB, file-rss:35800kB, shmem-rss:0kB [ 1970.301478][ T1043] oom_reaper: reaped process 23042 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1970.313246][T23029] device bond_slave_1 left promiscuous mode [ 1970.324502][T23036] device bond_slave_1 entered promiscuous mode [ 1970.332044][T23036] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDENABIO(r2, 0x4b36) fsetxattr$security_smack_entry(r2, &(0x7f0000000300)='security.SMACK64IPIN\x00', &(0x7f0000000380)='/proc/self/attr/current\x00', 0x18, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40096101, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x8, 0x227}]}, 0xc, 0x3) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000200)=""/254) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x5, 0x9, 0xfff}) 02:37:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x136) socket$key(0xf, 0x3, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="1dc47d80a5dd6285f2fb6f894027ee6f", 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000540)='R\trist\xe3cR\x18\xf5e\x00\x00\x00\x00\x00\x00\n;\xb4\x8d\xb6Z=\xb7\x92\x81\xe0\x96\xc7\x1aP\x0e\x83\n!\x97_\x19r\xd0\r\xeeX\xf9\xb6\xf3U\x19\x90\xa4\x040\xe8/\xe3\x8dz\xd3\x85\x96\x17\x1a\x15c\xc8\xe8\x9a\xd8\x91[\xe6\x9e\xd5\xa4\x1c\x90L\x8f\x94\xbe}\x15G\xd5\xe8\f}q\x1b\xd7\xd1\xa3,\xbf\xc0\xd5}\x06F\xc5\xca\xbd\x13\xae1\xa0t9\x8e\x82P\xc1N\x1c\x90\xd6\a\v\xee\x01\xe8\\\xca\xc7+\xc4\xfb8\xf7\xd3\xef\xba\x00\xae\xb5\x14\x91\xe1\x8b\xc0\xbc\x05!ipDL\xafn?FH\x04\x99\xf9e\x7f\x0e\xe9\x17\xa32\xfa\x05N\xa6V\x8cD\vr\x8e\\?\xe4\xa4\xe0\xe71\x15 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 1971.161652][T23175] RSP: 002b:0000000000a4faa8 EFLAGS: 00010202 [ 1971.167701][T23175] RAX: ffffffffffffffea RBX: 00007fb4599d5700 RCX: 00007fb4599d5700 [ 1971.175653][T23175] RDX: 00000000003d0f00 RSI: 00007fb4599d4db0 RDI: 000000000040fa30 [ 1971.183608][T23175] RBP: 0000000000a4fcb0 R08: 00007fb4599d59d0 R09: 00007fb4599d5700 [ 1971.191557][T23175] R10: 00007fb4599d4dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1971.199603][T23175] R13: 0000000000a4fb5f R14: 00007fb4599d59c0 R15: 000000000073bfac 02:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x80000) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000440)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={r0, r0, 0xc}, 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:37:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x31) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000200), &(0x7f00000001c0)=0xffffffffffffffa9) 02:37:51 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, 0x0, 0x0) [ 1971.217036][T23175] memory: usage 307200kB, limit 307200kB, failcnt 2098 [ 1971.223906][T23175] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.231491][T23175] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.238704][T23175] Memory cgroup stats for /syz4: cache:4KB rss:236012KB rss_huge:200704KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:235996KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1971.281787][T23175] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23148,uid=0 [ 1971.297424][T23175] Memory cgroup out of memory: Killed process 23148 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB [ 1971.314401][ T1043] oom_reaper: reaped process 23148 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1971.327302][T23188] Unknown ioctl -1062710494 02:37:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/26, 0x1a) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x0f', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1971.339916][T23181] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1971.352381][T23186] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1971.365241][T23186] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1971.381993][T23181] CPU: 0 PID: 23181 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1971.390000][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.400057][T23181] Call Trace: [ 1971.403361][T23181] dump_stack+0x172/0x1f0 [ 1971.407696][T23181] dump_header+0x10f/0xb6c [ 1971.412126][T23181] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1971.417955][T23181] ? ___ratelimit+0x60/0x595 [ 1971.422642][T23181] ? do_raw_spin_unlock+0x57/0x270 [ 1971.427760][T23181] oom_kill_process.cold+0x10/0x15 [ 1971.432963][T23181] out_of_memory+0x79a/0x1280 02:37:51 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, 0x0, 0x0) [ 1971.437659][T23181] ? oom_killer_disable+0x280/0x280 [ 1971.442862][T23181] ? find_held_lock+0x35/0x130 [ 1971.447703][T23181] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1971.453255][T23181] ? memcg_event_wake+0x230/0x230 [ 1971.458286][T23181] ? do_raw_spin_unlock+0x57/0x270 [ 1971.463406][T23181] ? _raw_spin_unlock+0x2d/0x50 [ 1971.468266][T23181] try_charge+0x102c/0x15c0 [ 1971.472771][T23181] ? find_held_lock+0x35/0x130 [ 1971.477561][T23181] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1971.483116][T23181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 02:37:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:51 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1971.489360][T23181] ? kasan_check_read+0x11/0x20 [ 1971.494206][T23181] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1971.499758][T23181] mem_cgroup_try_charge+0x24d/0x5e0 [ 1971.505059][T23181] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1971.510703][T23181] wp_page_copy+0x408/0x1740 [ 1971.515296][T23181] ? find_held_lock+0x35/0x130 [ 1971.520070][T23181] ? pmd_pfn+0x1d0/0x1d0 [ 1971.524317][T23181] ? lock_downgrade+0x880/0x880 [ 1971.529168][T23181] ? swp_swapcount+0x540/0x540 [ 1971.533926][T23181] ? kasan_check_read+0x11/0x20 [ 1971.538791][T23181] ? do_raw_spin_unlock+0x57/0x270 [ 1971.544005][T23181] do_wp_page+0x48e/0x1500 [ 1971.548501][T23181] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1971.548520][T23181] __handle_mm_fault+0x22e8/0x3ec0 [ 1971.548537][T23181] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1971.548556][T23181] ? find_held_lock+0x35/0x130 [ 1971.548567][T23181] ? handle_mm_fault+0x322/0xb30 [ 1971.548587][T23181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1971.548603][T23181] ? kasan_check_read+0x11/0x20 [ 1971.548619][T23181] handle_mm_fault+0x43f/0xb30 02:37:51 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1971.574754][T23202] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1971.580555][T23181] __do_page_fault+0x5ef/0xda0 [ 1971.580577][T23181] do_page_fault+0x71/0x581 [ 1971.580592][T23181] ? page_fault+0x8/0x30 [ 1971.580604][T23181] page_fault+0x1e/0x30 [ 1971.580613][T23181] RIP: 0033:0x40b6c8 [ 1971.580630][T23181] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 18 2c 00 00 8b 05 42 c9 32 00 48 8b 15 d3 4d 64 00 83 c0 01 <89> 05 32 c9 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 1971.596496][T23202] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1971.600357][T23181] RSP: 002b:0000000000a4fb70 EFLAGS: 00010202 [ 1971.600370][T23181] RAX: 0000000000000001 RBX: 0000001b30d20014 RCX: 0000001b31d20000 [ 1971.600378][T23181] RDX: 0000001b30d20000 RSI: 00000000000013f4 RDI: ffffffff1bcb73f4 [ 1971.600386][T23181] RBP: 0000001b30d20018 R08: 000000001bcb73f4 R09: 000000001bcb73f8 [ 1971.600393][T23181] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 0000001b30d2001c 02:37:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x11', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1971.600407][T23181] R13: 00000000001e1430 R14: 000000000073bf00 R15: 000000000073bf0c [ 1971.718051][T23209] bond0: Releasing backup interface bond_slave_1 [ 1971.733463][T23209] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1971.776091][T23181] memory: usage 307192kB, limit 307200kB, failcnt 159 [ 1971.786492][T23181] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.798267][T23209] device bond_slave_1 left promiscuous mode [ 1971.814214][T23181] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.825836][T23181] Memory cgroup stats for /syz2: cache:56KB rss:243620KB rss_huge:210944KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:243764KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1971.859550][T23181] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19194,uid=0 [ 1971.879984][T23221] device bond_slave_1 entered promiscuous mode [ 1971.890431][T23181] Memory cgroup out of memory: Killed process 19194 (syz-executor.2) total-vm:72580kB, anon-rss:4260kB, file-rss:35796kB, shmem-rss:0kB [ 1971.906759][T23221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1971.917357][ T1043] oom_reaper: reaped process 19194 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1971.955867][T23209] bond0: Releasing backup interface bond_slave_1 [ 1971.979583][T23209] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f199bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) init_module(&(0x7f0000000140)='\x00\x00\x10', 0x3, &(0x7f0000000180)='vboxnet1$/\x00') ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x10001, 0xf9, 0x4, 0x7, 0x5159, 0x200, 0x9, 0x4800]}) 02:37:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x12', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) membarrier(0x10, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 02:37:52 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1972.028288][T23209] device bond_slave_1 left promiscuous mode [ 1972.037353][T23221] device bond_slave_1 entered promiscuous mode [ 1972.043784][T23221] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="040007000000000008000600", @ANYRES32=r4, @ANYBLOB="08000100762a03f9230756bae57848dd1a6aa71cbd4561046ef36000bea9d9121599021e53282a4c89103edb0e37385aea73261982bbf6712d9d1f601b477c60406a00d1cb7ba2bbe073ffce32b0dc34067518fc71869a73c72ecee0b66045ebcf3651e0c7bc3c0270bfd2c1048f360ca3af89c066b812836af3fb542b0e8e9fe617f14c", @ANYRES32=r5, @ANYBLOB="10000000000000002000060000000000"], 0x44, 0x2) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xff1e) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1972.100282][T23250] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1972.119994][T23250] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:52 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0), 0x0) 02:37:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1972.206988][T23264] bond0: Releasing backup interface bond_slave_1 [ 1972.239438][T23264] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1972.347396][T23264] device bond_slave_1 left promiscuous mode [ 1972.384417][T23280] device bond_slave_1 entered promiscuous mode [ 1972.399306][T23280] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1972.414682][T23300] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1972.434966][T23300] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1972.447071][T23264] bond0: Releasing backup interface bond_slave_1 [ 1972.453478][T23264] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xffffffffffffff89) clone(0x206000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x880, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00/', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 02:37:52 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0), 0x0) [ 1972.526705][T23264] device bond_slave_1 left promiscuous mode [ 1972.536982][T23280] device bond_slave_1 entered promiscuous mode [ 1972.543511][T23280] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:52 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0), 0x0) [ 1972.652559][T23320] bond0: Releasing backup interface bond_slave_1 [ 1972.661528][T23320] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1972.731068][T23321] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1972.745314][T23321] CPU: 0 PID: 23321 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1972.753309][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.763366][T23321] Call Trace: [ 1972.766676][T23321] dump_stack+0x172/0x1f0 [ 1972.771028][T23321] dump_header+0x10f/0xb6c [ 1972.775458][T23321] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1972.781293][T23321] ? ___ratelimit+0x60/0x595 [ 1972.785896][T23321] ? do_raw_spin_unlock+0x57/0x270 [ 1972.791010][T23321] oom_kill_process.cold+0x10/0x15 [ 1972.796136][T23321] out_of_memory+0x79a/0x1280 [ 1972.800822][T23321] ? retint_kernel+0x2d/0x2d [ 1972.805421][T23321] ? oom_killer_disable+0x280/0x280 [ 1972.810632][T23321] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1972.816179][T23321] ? memcg_event_wake+0x230/0x230 [ 1972.821203][T23321] ? do_raw_spin_unlock+0x57/0x270 [ 1972.826311][T23321] ? _raw_spin_unlock+0x2d/0x50 [ 1972.831168][T23321] try_charge+0x102c/0x15c0 [ 1972.835675][T23321] ? find_held_lock+0x35/0x130 [ 1972.840446][T23321] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1972.845986][T23321] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1972.851557][T23321] ? find_held_lock+0x35/0x130 [ 1972.856339][T23321] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1972.861912][T23321] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1972.867456][T23321] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1972.872652][T23321] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1972.878552][T23321] __memcg_kmem_charge+0x136/0x300 [ 1972.883671][T23321] __alloc_pages_nodemask+0x437/0x7e0 [ 1972.889049][T23321] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1972.894760][T23321] ? policy_node+0x19/0x140 [ 1972.899253][T23321] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 1972.904789][T23321] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1972.911036][T23321] alloc_pages_current+0x107/0x210 [ 1972.916152][T23321] pte_alloc_one+0x1b/0x1a0 [ 1972.920671][T23321] __pte_alloc+0x20/0x310 [ 1972.925030][T23321] copy_page_range+0x1529/0x1f90 [ 1972.929972][T23321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1972.935429][T23321] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1972.941147][T23321] ? pmd_alloc+0x180/0x180 [ 1972.945567][T23321] ? __rb_insert_augmented+0x231/0xdf0 [ 1972.951034][T23321] ? validate_mm_rb+0xa3/0xc0 [ 1972.955734][T23321] ? __vma_link_rb+0x279/0x370 [ 1972.960513][T23321] copy_process.part.0+0x568b/0x7980 [ 1972.965823][T23321] ? __cleanup_sighand+0x60/0x60 [ 1972.970759][T23321] _do_fork+0x257/0xfd0 [ 1972.974915][T23321] ? fork_idle+0x1d0/0x1d0 [ 1972.979351][T23321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1972.984804][T23321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1972.990257][T23321] ? do_syscall_64+0x26/0x610 [ 1972.994938][T23321] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1973.001002][T23321] ? do_syscall_64+0x26/0x610 [ 1973.005672][T23321] __x64_sys_clone+0xbf/0x150 [ 1973.010349][T23321] do_syscall_64+0x103/0x610 [ 1973.014946][T23321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1973.020848][T23321] RIP: 0033:0x458c29 [ 1973.024744][T23321] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1973.044522][T23321] RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1973.055721][T23321] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1973.069032][T23321] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000206000 [ 1973.077011][T23321] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1973.084992][T23321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 [ 1973.092965][T23321] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1973.104662][T23321] memory: usage 307200kB, limit 307200kB, failcnt 187 [ 1973.111967][T23321] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1973.121935][T23320] device bond_slave_1 left promiscuous mode [ 1973.128219][T23321] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1973.135180][T23321] Memory cgroup stats for /syz2: cache:56KB rss:243792KB rss_huge:210944KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:243740KB inactive_file:4KB active_file:0KB unevictable:0KB 02:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="ec2867e2bcabde664349738e7968fe5c46dfe162aaa6621142e4360258943fe8171e805885fc047bd61a4447") request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1973.171206][T23321] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9443,uid=0 [ 1973.176551][T23334] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1973.187182][T23321] Memory cgroup out of memory: Killed process 9443 (syz-executor.2) total-vm:72580kB, anon-rss:4260kB, file-rss:35796kB, shmem-rss:0kB [ 1973.226690][T23334] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:53 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 02:37:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1973.258021][T23341] device bond_slave_1 entered promiscuous mode [ 1973.289952][T23341] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1973.339345][T23320] bond0: Releasing backup interface bond_slave_1 [ 1973.358801][T23320] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1973.427067][T23320] device bond_slave_1 left promiscuous mode [ 1973.444896][T23376] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1973.465868][T23376] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1973.498781][T23341] device bond_slave_1 entered promiscuous mode [ 1973.528070][T23341] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x7ff}, &(0x7f0000000100)=0x8) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:53 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 02:37:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00U', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ad6978152cde42cacf6af6af33b4b921ffc7294e949514fdbecddea09c0dfadc364a59e044e07ae8c3da0f423dfbb17869228a04a7b6940ed6e17a027fd6efd067f4b2333349a5e4f263039a926d01ce79a863e82e655204e0d5d4816e7f6560694035bed077b54e43c1eb585ac6e9ad5136b32a951886bdbd2b0251395066a60d1096a2a3892f55a2add9e86d79b86f36310e019bb4d3753512fef75d838a66c585deeffdc65f4ba49a448da7d171d7a20f12ef9098c18a4bc52fd201515b6fd2b88ba7d362fcb2b018d1909f", 0xcd, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f00000002c0)='R\trist\xe3cusgrVid:De', r1) 02:37:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006802}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xbb0000, 0x202334f2, 0x3, [], &(0x7f0000000040)={0x0, 0x4, [], @ptr=0xfffffffffffffffd}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000001c0)="a3a16055543cbf4f8d3f80819e7f6d67b1eb9ac43c407e8bb24c72f5ae635a0a71b476c752e573a363f170d51eec318bef1e816f5e038a33521b005455dcbc3cdce9bc5c679457420a8a0cbf4bd00355395f9c318b442f6f8c5e4874160b3c535e68c6aef37408fdc183bf01f92091d975ab2bedc6bb") request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000100)='R\trist\xe3cusgrVid:De', 0x0) [ 1973.628819][T23393] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x105, "b6b9534bc1baa765216f679e7ebd8997b503ebabdec9f7644c298023686c6534", 0x843, 0x3, 0x800, 0xf30a, 0x0, 0x80000000, 0x7f, 0x5, [0x2, 0x2, 0x7fe5360a, 0x3b4]}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_PIE_ON(r1, 0x7005) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x4000002}, 0xc) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000080)=0x1) 02:37:53 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) [ 1973.684046][T23393] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x100000001, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x283) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1973.755377][T23397] bond0: Releasing backup interface bond_slave_1 [ 1973.757143][T23405] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=1000 [ 1973.771779][T23397] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1973.802146][T23405] CPU: 0 PID: 23405 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1973.810258][T23405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.818693][T23397] device bond_slave_1 left promiscuous mode [ 1973.820315][T23405] Call Trace: [ 1973.820342][T23405] dump_stack+0x172/0x1f0 [ 1973.820363][T23405] dump_header+0x10f/0xb6c [ 1973.820380][T23405] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1973.820413][T23405] ? ___ratelimit+0x60/0x595 [ 1973.848661][T23405] ? do_raw_spin_unlock+0x57/0x270 [ 1973.853762][T23405] oom_kill_process.cold+0x10/0x15 [ 1973.858872][T23405] out_of_memory+0x79a/0x1280 [ 1973.863559][T23405] ? lock_downgrade+0x880/0x880 [ 1973.868409][T23405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1973.874639][T23405] ? oom_killer_disable+0x280/0x280 [ 1973.879838][T23405] ? find_held_lock+0x35/0x130 [ 1973.884601][T23405] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1973.890141][T23405] ? memcg_event_wake+0x230/0x230 [ 1973.895166][T23405] ? do_raw_spin_unlock+0x57/0x270 [ 1973.900270][T23405] ? _raw_spin_unlock+0x2d/0x50 [ 1973.905113][T23405] try_charge+0x102c/0x15c0 [ 1973.909616][T23405] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1973.915169][T23405] ? rcu_read_lock_sched_held+0x110/0x130 [ 1973.920878][T23405] ? __alloc_pages_nodemask+0x599/0x7e0 [ 1973.926434][T23405] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1973.931978][T23405] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1973.937162][T23405] ? cache_grow_begin+0x594/0x860 [ 1973.942185][T23405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1973.947503][T23405] ? trace_hardirqs_on+0x67/0x230 [ 1973.952528][T23405] cache_grow_begin+0x5c0/0x860 [ 1973.957376][T23405] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1973.963604][T23405] ? __cpuset_node_allowed+0x136/0x540 [ 1973.969057][T23405] fallback_alloc+0x1fd/0x2d0 [ 1973.973749][T23405] ____cache_alloc_node+0x1be/0x1e0 [ 1973.978965][T23405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1973.985301][T23405] kmem_cache_alloc_node+0xe3/0x710 [ 1973.990505][T23405] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1973.995779][T23405] ? trace_hardirqs_on+0x67/0x230 [ 1974.000819][T23405] copy_process.part.0+0x1d08/0x7980 [ 1974.006131][T23405] ? psi_memstall_leave+0x11c/0x180 [ 1974.011349][T23405] ? sched_clock+0x2e/0x50 [ 1974.015775][T23405] ? psi_memstall_leave+0x12e/0x180 [ 1974.020974][T23405] ? find_held_lock+0x35/0x130 [ 1974.025733][T23405] ? psi_memstall_leave+0x12e/0x180 [ 1974.030932][T23405] ? __cleanup_sighand+0x60/0x60 [ 1974.035854][T23405] ? __lock_acquire+0x548/0x3fb0 [ 1974.040777][T23405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.047016][T23405] _do_fork+0x257/0xfd0 [ 1974.051167][T23405] ? fork_idle+0x1d0/0x1d0 [ 1974.055587][T23405] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1974.061644][T23405] ? lock_downgrade+0x880/0x880 [ 1974.066479][T23405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.072704][T23405] ? blkcg_exit_queue+0x30/0x30 [ 1974.077548][T23405] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1974.082987][T23405] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1974.088434][T23405] ? do_syscall_64+0x26/0x610 [ 1974.093104][T23405] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1974.099159][T23405] ? do_syscall_64+0x26/0x610 [ 1974.103839][T23405] __x64_sys_clone+0xbf/0x150 [ 1974.108517][T23405] do_syscall_64+0x103/0x610 [ 1974.113107][T23405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1974.118983][T23405] RIP: 0033:0x45b5f9 [ 1974.122862][T23405] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1974.142456][T23405] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1974.150859][T23405] RAX: ffffffffffffffda RBX: 00007fb4599f6700 RCX: 000000000045b5f9 [ 1974.159867][T23405] RDX: 00007fb4599f69d0 RSI: 00007fb4599f5db0 RDI: 00000000003d0f00 [ 1974.167844][T23405] RBP: 0000000000a4fcb0 R08: 00007fb4599f6700 R09: 00007fb4599f6700 [ 1974.175833][T23405] R10: 00007fb4599f69d0 R11: 0000000000000202 R12: 0000000000000000 [ 1974.183800][T23405] R13: 0000000000a4fb5f R14: 00007fb4599f69c0 R15: 000000000073bf0c 02:37:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1f, 0x3, 0x1, 0x8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1974.214099][T23407] device bond_slave_1 entered promiscuous mode [ 1974.234636][T23407] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1974.292558][T23397] bond0: Releasing backup interface bond_slave_1 [ 1974.320386][T23397] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1974.362644][T23405] memory: usage 307200kB, limit 307200kB, failcnt 2142 [ 1974.369915][T23405] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1974.387325][T23405] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1974.394439][T23405] Memory cgroup stats for /syz4: cache:4KB rss:234640KB rss_huge:198656KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:234796KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1974.420592][T23397] device bond_slave_1 left promiscuous mode [ 1974.431185][T23405] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22758,uid=0 [ 1974.448003][T23405] Memory cgroup out of memory: Killed process 22758 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB 02:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\xff\xff'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:54 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1}, 0x0) 02:37:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="0ebfcd52ec2dcf0a4feb952fa11c6b0c998c658f1320c74a31c28d04f6186c90ad11abc6b884ddd933af2e2e6f87a097eb91e90731eae729d636d0df3b12ccba245019c78a8baf6fff224f6a96c23b2e15daef2d5dd5df63284aeb8dabd3c3c82fef2932d87476d202c2e579ec9f", 0x6e, r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:37:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006803}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1974.464683][T23407] device bond_slave_1 entered promiscuous mode [ 1974.477014][T23407] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1974.540258][T23450] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1974.564470][T23450] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1974.570148][T23445] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1974.580369][ C0] net_ratelimit: 20 callbacks suppressed [ 1974.580378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1974.595725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1974.599456][T23445] CPU: 1 PID: 23445 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1974.601595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1974.609403][T23445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.609409][T23445] Call Trace: [ 1974.609434][T23445] dump_stack+0x172/0x1f0 [ 1974.609452][T23445] dump_header+0x10f/0xb6c [ 1974.609472][T23445] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1974.615201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1974.625224][T23445] ? ___ratelimit+0x60/0x595 [ 1974.625238][T23445] ? do_raw_spin_unlock+0x57/0x270 [ 1974.625257][T23445] oom_kill_process.cold+0x10/0x15 [ 1974.625273][T23445] out_of_memory+0x79a/0x1280 [ 1974.632860][T23445] ? lock_downgrade+0x880/0x880 [ 1974.648750][T23445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.648767][T23445] ? oom_killer_disable+0x280/0x280 [ 1974.648778][T23445] ? find_held_lock+0x35/0x130 [ 1974.648799][T23445] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1974.648816][T23445] ? memcg_event_wake+0x230/0x230 [ 1974.679303][T23445] ? do_raw_spin_unlock+0x57/0x270 [ 1974.679323][T23445] ? _raw_spin_unlock+0x2d/0x50 [ 1974.689285][T23445] try_charge+0x102c/0x15c0 [ 1974.689299][T23445] ? find_held_lock+0x35/0x130 [ 1974.689315][T23445] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1974.689329][T23445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.689345][T23445] ? kasan_check_read+0x11/0x20 [ 1974.689369][T23445] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1974.689384][T23445] mem_cgroup_try_charge+0x24d/0x5e0 [ 1974.689402][T23445] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1974.689420][T23445] wp_page_copy+0x408/0x1740 [ 1974.689431][T23445] ? find_held_lock+0x35/0x130 [ 1974.689448][T23445] ? pmd_pfn+0x1d0/0x1d0 [ 1974.689464][T23445] ? lock_downgrade+0x880/0x880 [ 1974.689476][T23445] ? swp_swapcount+0x540/0x540 [ 1974.689490][T23445] ? kasan_check_read+0x11/0x20 [ 1974.689504][T23445] ? do_raw_spin_unlock+0x57/0x270 [ 1974.689526][T23445] do_wp_page+0x48e/0x1500 02:37:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1}, 0x8) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x708, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x8000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x20833, r4, 0x8000000) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1974.735843][T23445] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1974.735875][T23445] __handle_mm_fault+0x22e8/0x3ec0 [ 1974.752327][T23445] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1974.752342][T23445] ? find_held_lock+0x35/0x130 [ 1974.752368][T23445] ? handle_mm_fault+0x322/0xb30 [ 1974.815497][T23445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.821757][T23445] ? kasan_check_read+0x11/0x20 [ 1974.826717][T23445] handle_mm_fault+0x43f/0xb30 [ 1974.831496][T23445] __do_page_fault+0x5ef/0xda0 [ 1974.836280][T23445] do_page_fault+0x71/0x581 [ 1974.840780][T23445] ? page_fault+0x8/0x30 [ 1974.845024][T23445] page_fault+0x1e/0x30 [ 1974.849178][T23445] RIP: 0033:0x40bdab [ 1974.853071][T23445] Code: 74 28 41 8b 07 85 c0 0f 85 f8 00 00 00 41 83 c5 01 49 81 c4 a0 00 00 00 41 83 fd 10 75 d4 bf 05 e3 4b 00 31 c0 e8 85 5a ff ff <41> c6 44 24 f8 01 45 89 6c 24 f4 4c 89 e7 41 c6 44 24 15 00 41 c7 [ 1974.872774][T23445] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010246 [ 1974.878842][T23445] RAX: 0000000000000001 RBX: 000000000073bf0c RCX: 0000000000a4fc88 02:37:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) fchown(r0, r1, r2) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:54 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1}, 0x0) [ 1974.886820][T23445] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000088 [ 1974.894795][T23445] RBP: 000000000073bf00 R08: 0000000000a4fc90 R09: 0000000000740060 [ 1974.902786][T23445] R10: 0000000000000075 R11: 0000000000000246 R12: 000000000073bf0c [ 1974.910752][T23445] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000073bf0c [ 1974.925695][T23458] bond0: Releasing backup interface bond_slave_1 [ 1974.934991][T23458] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1974.938459][T23445] memory: usage 307200kB, limit 307200kB, failcnt 2167 02:37:55 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x400) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="021100030700000029bd7000fcdbdf2505001a0000000000000000000000000000000001ffffff71005baaae553ba2000000000008001414"], 0x38}}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x386) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0xa4000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x3, 0x7, 0x80, &(0x7f0000ffc000/0x3000)=nil, 0x2}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)) [ 1975.010903][T23445] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1975.033077][T23445] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1975.044760][T23458] device bond_slave_1 left promiscuous mode [ 1975.067060][T23445] Memory cgroup stats for /syz4: cache:4KB rss:234732KB rss_huge:198656KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:234780KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1975.103874][T23445] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4 [ 1975.113814][T23445] ,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22785,uid=0 [ 1975.117597][T23468] device bond_slave_1 entered promiscuous mode [ 1975.126394][T23445] Memory cgroup out of memory: Killed process 22785 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1975.143953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1975.144023][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1975.144136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1975.144184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1975.144268][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1975.144311][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1975.147470][T23468] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\xc3\xff'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:55 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x200, 0x5}, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:55 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1}, 0x0) 02:37:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x404000, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x5f5, 0x95b, 0x8, 0xfff, 0xfff, "a870bdcb789da78eab6e93ce759792b0c32e9c", 0x124e3281, 0xc8}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000380)) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x2) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000100)=0x8) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 02:37:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006804}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1975.237782][T23458] bond0: Releasing backup interface bond_slave_1 [ 1975.244191][T23458] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1975.276868][T23458] device bond_slave_1 left promiscuous mode 02:37:55 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 02:37:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x44080, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe39) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ipddp0\x00', @dev={[], 0x26}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x30, 0x1, 0x2, 0x400, 0x200, 0x3, 0x5, 0x0, r2}, 0x20) [ 1975.345343][T23518] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1975.366540][T23511] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1975.381629][T23518] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1975.422111][T23521] device bond_slave_1 entered promiscuous mode [ 1975.425360][T23511] CPU: 1 PID: 23511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1975.436338][T23511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.438926][T23521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1975.446420][T23511] Call Trace: [ 1975.446452][T23511] dump_stack+0x172/0x1f0 [ 1975.446470][T23511] dump_header+0x10f/0xb6c [ 1975.446482][T23511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1975.446495][T23511] ? ___ratelimit+0x60/0x595 [ 1975.446508][T23511] ? do_raw_spin_unlock+0x57/0x270 [ 1975.446523][T23511] oom_kill_process.cold+0x10/0x15 [ 1975.446535][T23511] out_of_memory+0x79a/0x1280 [ 1975.446548][T23511] ? lock_downgrade+0x880/0x880 [ 1975.446561][T23511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.446575][T23511] ? oom_killer_disable+0x280/0x280 [ 1975.446585][T23511] ? find_held_lock+0x35/0x130 [ 1975.446608][T23511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1975.472627][T23511] ? memcg_event_wake+0x230/0x230 [ 1975.472651][T23511] ? do_raw_spin_unlock+0x57/0x270 [ 1975.487688][T23511] ? _raw_spin_unlock+0x2d/0x50 [ 1975.497221][T23511] try_charge+0x102c/0x15c0 [ 1975.497237][T23511] ? find_held_lock+0x35/0x130 [ 1975.497254][T23511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1975.497270][T23511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.497285][T23511] ? kasan_check_read+0x11/0x20 [ 1975.497308][T23511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1975.497322][T23511] mem_cgroup_try_charge+0x24d/0x5e0 [ 1975.497337][T23511] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1975.497354][T23511] wp_page_copy+0x408/0x1740 [ 1975.497364][T23511] ? find_held_lock+0x35/0x130 [ 1975.497380][T23511] ? pmd_pfn+0x1d0/0x1d0 [ 1975.497393][T23511] ? lock_downgrade+0x880/0x880 [ 1975.497405][T23511] ? swp_swapcount+0x540/0x540 [ 1975.497417][T23511] ? kasan_check_read+0x11/0x20 [ 1975.497428][T23511] ? do_raw_spin_unlock+0x57/0x270 [ 1975.497442][T23511] do_wp_page+0x48e/0x1500 [ 1975.497457][T23511] ? finish_mkwrite_fault+0x4f0/0x4f0 02:37:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x8000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000001340)={0x0, 0x92, "bba3f15829fafb639be855fb8e73e4164ee45b2f927aaed7b6625d58437563f81ad1b8dd72fceea8fde05ed25c647ceccc02099ae6897affc85259e983a5236a584645f863b73259ca5ae4df91352f221e4e0bfbef751b465bdc480a0d4b23f831fa22c9b6d98c47f4652779855a13acb3a4ca91da7168693e327bf3b57baac7b0605b16a1f5df87abc1af2c30556fc46e7e"}, &(0x7f0000001400)=0x9a) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="44d3e076fe9b23d97a68260adabb63107b60018a2cb36fd976b7291d4c33cd6fb13e166eac135bb5dd6f86535e3e0245d5843ace4ac16f21d53230ffd0353be97ddd351b9990f05daef104f5b601c4d6761edb241352014418ea7e52aacd6d981fc3ab14394302d86476cbdecc128e4cf786bca1664bb44f6f1b9689debf075c458720ca84a7449c9994075fbf78e9de6099633be4119cf31dfa8cd210956db8102414af21c2c1d5d9451feb3db1430319cc8891879c4aa3d65a9bee1cfecd5b9a3029e7f4b321e3e8f46cefd38aee58393493f5d26a36e53c9531bbfc3fe5ed7e79d94b904e9b1e", 0xe8}, {&(0x7f0000000180)="9e1f6cc0f3332de4a877ad7b57b09c9314a1acdd3fd46110fc75e1a0bf732af1cf11e64db62cffdcfed54b69ce35f48cb76078b7bfa80528868964d23e442b16e2f4cdecfc27485f87a80dcbaa788853c23a6fdc208af483e3cc90da631ebdf92fe9ca15e268d16bee4f73f9ca4ba5374e0aed3e2d57584cce60b49f9ee4cf435837d5ff9679a66c6fe8dc6a022bce84ef81cdc3346fa0ff0f4779ffdb06545b948d7d087583cbdfb3621ddbe02440bcb50fe9def019018c2185e2c92056bdea32f5e91594935444825c54c78a9aaff55b0ce3e094340cbc69888a30c7e3fb21bbab9b246de5d385a811cc6a73bd493cdf37fefb24f159904338e8db82661e71e4b79364ba489a1c877c63d52914fe871f0abb12b56ccacd754485196c504c627030f31f8058d0802e5f6eea43cbd4cb78b0aa06ac72a78ac4584664f09ee08877d241c5221963df5aa04ad71f2289d0a3f89f2c07552bc90da4b6324c282a5d69d695f84c4193f9fb786a364dd33f1fa748b8b259b64948698a724c733371b0120a6efdba8d59e37881cf8d16560ded908c0444b1d58f14198244914772b221e22d831299b8a96f4ad0b69bd40d37532ccac8678552b9e77843527b89d1283672b7d3bf550ff425a0748727e10ad40f9500628134573f697ec65f2d2b00658ec16e9a2fd81af1ad22b53cdaa0e37985ff7ab3f86af4069e0a4f56680308c4a8fb5820dc5bbd54947555d5dbf87cf3f08179254c74df5c4a3d493e38af6e34e9c5d14ebe2c81f55c55128f28efc6eb3a7e6efd4fbab081b775e28152d33838c39f029e0240e0069c5d2f8f2ba086cf9c85b6b82e449bf2ae6fa83c684ad75d27f00fb99260353ad340bb200de2e8bc3efe15b3d5cdad528f6edc1929aa78c40f308d966fdf5893481db4f3418268bf29108ac12da6bfb5df6cdc530ed2416cf0e15d78016cf93417bd264eef0acfc5755c5209a49d8e3b8c3cdaab19b99107663df7dfabd057bda736ec3c1cc62f09774060f60016ad5bc2865414250cb14d2c476b00f9fbdac4ae515b306258f984550f8e31ce9f791a00f59bb418e0f43f0d127d82287b36d4b900282a368c43c47ab8e43611f55c4a7619581ff531b56725e56b8eb9dfc824dfa69210c8d35e638ff6a8b2e2f2383e5fe5df42560beae8a7e619936a348e3629c9414cf50f1d7417fb9dfec3f4997149d5460a1192bef7b454191a7377dfb7792bd27e657d495f7c32ab226eff2b02af18c5d48c5e2f4b2c6ff235332e9d2e80efddc75cf57e433dbfda9442e287e357a16419e3e062f036fb514fe4470a9f0f80b6b373305b1210e8818a805797c342bb73599b17342c2e4bf24a56e630873705a611f9edf9b1aeaff5a9396119a02732a839b05038df1b81af5eb08d6f90d34356e22a7b1a9fdeb94bb0b1ce8aefdd3196ed77d40b1b668392a0ca8748e864d1ac37882517486bd8dbe4087a351d4dfd52a3b407b57937328ba48b21e982eaeaa17f01ff06c5fd2648ecc3111e32a2a506bf3cc838ec25fe91d88afde3e6601422bae23a8570e7229911fe5f3a2c40791fa950fdd4c570701c795981492ee69faa22038e85ae792e7a658f52d429f5c36a0b2dd4b133244e80694ef0f48857c1a7eec353496aca9b6c41f0e4af55a463702f9b942d42e2405eddd423e8234186308fb969b0ff75edb480947f39b90eb8bc1efd4a8e83021fa113ebb5916b03fddb813c84d4732b44ffc7170438c0f6141ed0bb71b208e23c45658991f562bddb25eabb190f62efa642dc0470434efdb09664b46ce80a803b314d1cab03a2ac048085f747998078b98c373e58c3d5243f7dc6f01a2d7e8562b786b46038dd54393a6f6ae3112cba97288bbb397cab083ffec68cb34d330c682641e79ed6cd83fed56918354d8efcb33060770417e3dcfcc83a9ad779938364a5c18d3533f42d68a3553694c24e7d55a72e6fb6cbbf483ebe9f53b8f6ab94e4bd34445776b4d087d332de8c374129cd01635b872e536d3704fefaae3bf150e32fd7757f1ad91fe5b0663fb809453d803e21d26e9432f887914222786164548e0727f87337b3e5e136219b47a90ab5ad41101317b74183c9d268df6bcf01e21d7933f5b532b9afd4dc7bc639b5f0c8bdd1884710754c0321f409ca1e09455d41f627230f0f53ceb3630995107ef8f302c6b1a4b46e465e1f5e1b9d2b73c8cb6a03e31d6ee0fadacb5076b3e9ccdc2e7b0cf0e8ce005f0ffc72ebbfa3c22dae69f5d8192aca50ef5e222942a6522bec5718d810728db4fe1aeb4d3d2351b4118f54fbe7c0ec7cb588335160b21fe46b5e49ad3cc25381f2800b585deb0df98009f9334f5839b6aae9bec09e5a7df3d1dcd1804662891959d64710fb17795d3fbba68c603e6d8f678ff1e738801f2213e9f52e36b0ac5a523e8f0063137e79b659f998a21b9c7ad1a3a994d1a727db93cff39679cd9c2d764fed64f54c7acd5936168f00079f0f032bb896bb29d6999c4e5f6918a50bd71c2003770ff47b9830269ba5ab2f34b6d334b1ae737a1d7f3212c28aa65dc91e0c8bd26153239380189416b2663620724439a19a9f719f9f0ccb311be7552fd60ff89c0ce866f2ae1873e09682dd30be3b34e62d04cf05b2d3f146fa485d79c70085c3d7952bb1d3671ea5358414143ab97ea0e294d7a3c96d9ec69354ab9511bb324e246b8d31a44723e4fd0e749fa7ba2def763b6f18c890a895b46dcc0441f6a9b04a73ec8e8a5bf81eb81e1d2f0d172f405f4548a675116f1b1d9077224a8c30ca8cbeb113a287b8aa83636aa5d9c2f694c5942561fcce5d88694f6edbe5b99042fd4dc753bbc0500338eeef816cb54a81ccf02d8ea49b5a9971172f5b0d46072ab344f61a267dcc26d4e9327e2abccd864230193ab9186f486d1440612d3d6576d326d4df720e3a39bafdde11aeff42ad6da8fd2e492d59a529c91e77a43c16a280066e7281bd86fe27d11a0fdeaaec7363459e56ba6be9fc27a7f72a34e0303db14b0e1463f3c9186a0958b0487b648f58e71324a4d52dcf4aeaf25a735a179a3d0e08a06f337181e30134a66fdd0ca9020e38695f1f5414cccc0fd4aea32c18af19fd9cc7328581aedf371df4a018d2f3f1c5177ae174d12f2bacd12e28027d7e8397fdb704666a03de7df3d7d2c0812a3edd967e00d066e746b6eb9759ce4ef2b1a21ee205c891d7c2882486ce7750e157cbba249791d14a9a7808db43fc5a7de3698acd5f41e6f9b085bec39c38ef623363192e0f73fa5c85958dd1694ccdea56ae92f0131207ea89b0bb33d0e6f9477b4db0724102d1b388990b87fdeda7a2ba23cb877f43e9a530682d7acff4ac5da9dc080fd01cf016cddcf12cfeae638357c13687e1078fa757dcadfe6891deb12b698e4775b553bfc8d376bcd34dc6e37b7b933c39ebdf36800b659facfbb139afada8ac3a658c6939300bb5677918926801e682d300eb96aafdce0fe38a5a1d7e1eaf70b87980ca0c59ff1e7963f0671fa3987e9887a955433fe78bacc8e4125526606a55caf9beae738eaf0a21e4edb77082dea2e5ce755ce65da5c549448962c96aaf8b9a7dfea4c7ca1a307fc2c4cde555161db64af067ca86200a835ca0c689df9c3d7b5f7771d2cf4bf367c4ad144606a0e6baf75dc72a6e50c7fe116210b7aa614e9b7b5658659574c413e4460fce0971c2453ac0a20905c1d27fb997d048c766e219b500d48c767382f9a7f154c30285dbf6f1d9494b06aef985f1949c917a4ef62975a3e8b909eb63df6505860bdc9c82ae70509ed98176ff81bb6fe0a9c4c095de14a954f8afa1b54e7bb8a8212e6533398d5d83480fb6a1dbdc5d30bfbb526ccf27928ed431ae40213ca52b9381a339d1e48a22bca17b8209bcd87b43476eac68d194489eb242a24605f31bf69694dbd7adfbf354e36bbbb423f32521cfa233b6b29a84309501d2ddf85d87fe909d350c495d36c1bb6a330272b489e460378beee5759d39f8ae228801df37c341e302a87f3df465a9a10b7591038babc506714da13d14b2c2c71e15f1c2052f9ab02adf733ddf7dec64ec14f43b11c9f3a102948fd538abe448bd2cfd9c015b1627a7c9126585934f13ac715cdb546df112f8d652766ed61d70fac76f47422f828d61fe14fe54a3ecdad15c26e053367d1d9f5361f9e9a9617f63a6237692ab3143047f84451182737f9662ac2594b031ff8223505a3a75740e65055e341f66469d59fb777f6e3bd29a401ed2670fb9dbf6598c90ac5d997975c949ec37530e7f805a8b9e529fad3d5f3e5480b4a0c3a2d1fa6840e72bfe0a4be5d3468bf40ca3a2a21e4d5c975240788c2cfb777c376f4916b5d755b635df35ce236a91572263f9be344429b584c4a577079a5706982e97adfb672db18215b4c2f06249730d8967eb3fc2fe2371588711639f538c70de254ba7de1704a9981ce3afd9c22167e010574c84f69fbfccefcc19cdc326e0f754a20640843855de427a701f70215a0ed8cdef331aa1dc27e46e0c297fffed91d029dc556d64ea17b0eeb6a335ae5ca74062d9140402ef6a33ff1c3ef4bf5a12135cba8058d188f5f5793e5300e897350df573fc99a641236e93569afbc599b53dc7ce9f5f3878273579a5235872eb565da5cadd2e86de0f79f684b8cce117cf155f6f34f34a4f4ff3aeb90c28d6cf29d60b87c6c42f3bb5ac26c131774bb05e1072cab1db30c901809ac8d2260bfddaa81afa3ff91258b1623e8afbe6d59f910f6190c98cc868c767ec7cfab54d9c2d096e5bf65a8295eed068e6e3886a43afbc1e9dd9462fb8732b650ac126521d0d1332940414d9c013cb1f566362a7819e6bff3dc1212f986eee77cef8058668c3fafc214434eae2f6eab70b74aa1be7617f256f2d48cc63a446fa5fcf2fae9a9dbbb09c1a34ea504e03c5e3f1b5ffa1fdaad4f2af4db0e7372860fcb9404fd581b9dc6f2005ec209ba267d619a86edaaa2ee348ea6b70c3b11e35029edc2a4827173bdbcdf3022453f892a085778ff008f5b107c3c6d8e75e73201afb4a78125bd495e3b44675bdcee5565bdfa1d808cfabf95be10039a4491ab285f650de914db80be94920170363419f6c30e1e0e6f43435aba79c938ccd7aab2ac14ef45520eb9b00e2683906c705bb6d319b78f06e2772af4222598de0d3a4af72d7940ee652db6bfa71996f31ff5760813d5ec16723c909eabb4ab9f5e2ef8ae7bb850a7b5da0436677a6f43ee5f51225ff9eb5ff71f5634ff5b6ff96b9da1a54e8b8a54e4dbfe86d50ba25ebb6a99ab25c9f8cc0e8638eb31fdd836c32b29ea5131ce0b255f759e84e0c7cd704422ebfe020472a24c01df4585acb63151387463a037db3771e17628c4797a81f2a5f829ecabb1850f4914931dd1ad542ae35d634d337306bcfc50cc5b5431b5d905e0ebaa48b26b78f153c86ce6bb34823a95cc8390e15c41ff6f487425d13dc704c80bbea94ce1487ab4881993e39dde7c3c5a3cc374499fe12d92e7ba206c4ff63f7a366c46a7f5acff32db789f976bfc895086ba2c779ae3873725d0e390795d627bd87f31e581c8c462b3b9af0cbc82a878d3a3969811e0803fd13fb1b336ceb70bc5a1619dced69cf2edf6d5b2a62f0c7739bcbbe6dcdecbdd28aa5d0ff9fbda2bf2c68626deb982e9c092d5050c06ac00479aca0f27d68a38ddff14f8c8816014d95ba4cb192b87a18e77a6b4ed23b334648e44126460451de3a51b51a218731622165fdd9e64c602fefecdda27ffa8e30386877c9ed", 0x1000}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000001180)="9a596643fc5d4e5aec8a7d8220e2a9cc2fb1c024a4cb9284d53b7fc6804fb3eb7fbfeea3dd385a6109ee6550ba2838d6f115bf38af160c80c2b95088a34bd6bed5fb5731f2f448c4acfb3808a56e0b4e897db1bb92043708caaf18f6760d811d2a6245e6ea77b0fb6c849481ca5bfb0dcf27cc8fa5f9297ed009f7f6cada871d928167d385ca9a8bfe3904e6c77736c4429b373b131f3bb77daa5f2b595a6ccb94bb8d82c6525e89aeb3cd1c11bbdaf96c2a9bf0d5d9c5a7227ac0b583690ed570", 0xc1}, {&(0x7f0000001280)="2184e37f9b42d455860a071b6a003a343351876f36325e47e6edae659da88311d61bb2e599389d11d6d1e0fe32cfea1a7be38ecf", 0x34}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="30000000000000000000a90a0000020000000700000000000000fdffffff00"/44, @ANYRES32=r1, @ANYBLOB="18000000000000008400000006000000e60200000000000018000000000000008400000005000000200000000600000020000000000000008400000008000000ff010000000000000000000000000001180000000000000084000000000000000400ff03ff0709001800000000000000840000000600"/128], 0xb0, 0x800}, 0x4000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1975.497478][T23511] __handle_mm_fault+0x22e8/0x3ec0 [ 1975.497493][T23511] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1975.497503][T23511] ? find_held_lock+0x35/0x130 [ 1975.497515][T23511] ? handle_mm_fault+0x322/0xb30 [ 1975.497532][T23511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.497546][T23511] ? kasan_check_read+0x11/0x20 [ 1975.497561][T23511] handle_mm_fault+0x43f/0xb30 [ 1975.497579][T23511] __do_page_fault+0x5ef/0xda0 [ 1975.497600][T23511] do_page_fault+0x71/0x581 [ 1975.509023][T23511] ? page_fault+0x8/0x30 [ 1975.509036][T23511] page_fault+0x1e/0x30 [ 1975.509046][T23511] RIP: 0033:0x40bdab [ 1975.509060][T23511] Code: 74 28 41 8b 07 85 c0 0f 85 f8 00 00 00 41 83 c5 01 49 81 c4 a0 00 00 00 41 83 fd 10 75 d4 bf 05 e3 4b 00 31 c0 e8 85 5a ff ff <41> c6 44 24 f8 01 45 89 6c 24 f4 4c 89 e7 41 c6 44 24 15 00 41 c7 [ 1975.509066][T23511] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010246 [ 1975.509076][T23511] RAX: 0000000000000001 RBX: 000000000073bf0c RCX: 0000000000a4fc88 [ 1975.509082][T23511] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000088 [ 1975.509088][T23511] RBP: 000000000073bf00 R08: 0000000000a4fc90 R09: 0000000000740060 [ 1975.509095][T23511] R10: 0000000000000075 R11: 0000000000000246 R12: 000000000073bf0c [ 1975.509110][T23511] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000073bf0c [ 1975.661118][T23511] memory: usage 307200kB, limit 307200kB, failcnt 2202 [ 1975.671943][T23521] bond0: Releasing backup interface bond_slave_1 [ 1975.704105][T23511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1975.733381][T23511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 02:37:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="06b88133cf3a451dd4f5b9b42b1e", 0xe, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) r2 = dup2(r0, r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', r3}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1975.738374][T23521] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1975.764528][T23511] Memory cgroup stats for /syz4: cache:4KB rss:234708KB rss_huge:198656KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:234780KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1975.791762][T23511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22858,uid=0 [ 1975.846586][T23511] Memory cgroup out of memory: Killed process 22858 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1975.877393][T23521] device bond_slave_1 left promiscuous mode [ 1975.908388][T23531] device bond_slave_1 entered promiscuous mode [ 1975.915487][T23531] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:55 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) uname(&(0x7f0000000080)=""/249) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x4}, 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000580)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trisgrVid:De', 0xfffffffffffffff9) recvmsg(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/57, 0x39}], 0x2, &(0x7f00000004c0)=""/114, 0x72}, 0x1) 02:37:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006805}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:55 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r0, 0xffffffff80000000, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 02:37:55 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 02:37:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006806}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x8000) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@remote, @empty}, &(0x7f0000000080)=0x8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:56 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) [ 1976.074251][T23584] bond0: Releasing backup interface bond_slave_1 [ 1976.106661][T23584] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@remote, @dev={0xac, 0x14, 0x14, 0x22}}, 0x8) r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x80, 0xcf3, 0x2, 0x9, 0x5, 0x8, 0x20000000, 0x0, 0x1f, 0xfffffffffffffff8, 0x1, 0x80, 0x8001, 0x1000]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x3, 0x204, 0x6, 0x20, r2}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x4, 0x7, 0x9, 0x1, 0xff, 0x0, 0x6ea8]}, &(0x7f0000000080)=0x12) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000300)={0x7, 0x5839}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) 02:37:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006807}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1976.234309][T23584] device bond_slave_1 left promiscuous mode [ 1976.264020][T23599] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0xfffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1976.277285][T23599] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1976.302029][T23598] device bond_slave_1 entered promiscuous mode [ 1976.314446][T23598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1976.374693][T23584] bond0: Releasing backup interface bond_slave_1 02:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000680a}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x7, 0xffffffff, 0x7fff}) prctl$PR_GET_THP_DISABLE(0x2a) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000140)={0x100000001, 0xffff}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x3ff, 0xb, 0x5ec82a1f4b6e7e04}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x7fff, 0x8, 0x57ca, 0x4, 0x15, 0x0}, &(0x7f0000000240)=0x20) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x57, 0x4, 0x3, {0xfffffffffffffff9, 0x100000001}, {0xfffffffffffffeff, 0xc79}, @rumble={0x4, 0xe3cc}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x81}, 0x8) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000002c0)={0x3, r1}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:56 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, r1, 0xffdfffffffffffff, r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x41) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)) 02:37:56 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013", 0x39}], 0x1}, 0x0) 02:37:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1976.423831][T23584] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1976.457396][T23584] device bond_slave_1 left promiscuous mode 02:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x7) write$cgroup_int(r1, &(0x7f0000000180)=0x100000001, 0x12) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x3, 0x87b}, &(0x7f0000000100)=0x10) 02:37:56 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013", 0x39}], 0x1}, 0x0) [ 1976.516939][T23645] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1976.552744][T23645] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000680f}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1976.614140][T23649] device bond_slave_1 entered promiscuous mode [ 1976.651193][T23649] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") munlockall() r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x101, 0x3ff, &(0x7f00000000c0)=0x4}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xb) r2 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="e5d2d5ac091d0929935e17e8632c817ce89fbd7c2d288899545ef81ed5fa54bac83791", 0x23, 0xfffffffffffffffa) request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'\x00\x00\x10', 0x3, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', r2) 02:37:56 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013", 0x39}], 0x1}, 0x0) [ 1976.685812][T23666] bond0: Error: Device is in use and cannot be enslaved [ 1976.730360][T23649] bond0: Releasing backup interface bond_slave_1 [ 1976.751740][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1976.780134][T23649] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1976.784231][ T7504] CPU: 0 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1976.804833][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.814884][ T7504] Call Trace: [ 1976.814909][ T7504] dump_stack+0x172/0x1f0 [ 1976.814926][ T7504] dump_header+0x10f/0xb6c [ 1976.814940][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1976.814954][ T7504] ? ___ratelimit+0x60/0x595 [ 1976.814972][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1976.842553][ T7504] oom_kill_process.cold+0x10/0x15 [ 1976.847658][ T7504] out_of_memory+0x79a/0x1280 [ 1976.852329][ T7504] ? lock_downgrade+0x880/0x880 [ 1976.857161][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1976.864464][ T7504] ? oom_killer_disable+0x280/0x280 [ 1976.869654][ T7504] ? find_held_lock+0x35/0x130 [ 1976.874408][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1976.879938][ T7504] ? memcg_event_wake+0x230/0x230 [ 1976.884976][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1976.890226][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1976.895062][ T7504] try_charge+0x102c/0x15c0 [ 1976.899547][ T7504] ? find_held_lock+0x35/0x130 [ 1976.904299][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1976.909828][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1976.915373][ T7504] ? find_held_lock+0x35/0x130 [ 1976.920122][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1976.925668][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1976.931199][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1976.936405][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1976.941936][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1976.947038][ T7504] __alloc_pages_nodemask+0x437/0x7e0 [ 1976.952579][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1976.958293][ T7504] ? copy_page_range+0x125a/0x1f90 [ 1976.963390][ T7504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1976.969616][ T7504] alloc_pages_current+0x107/0x210 [ 1976.974722][ T7504] pte_alloc_one+0x1b/0x1a0 [ 1976.979226][ T7504] __pte_alloc+0x20/0x310 [ 1976.983561][ T7504] copy_page_range+0x1529/0x1f90 [ 1976.988481][ T7504] ? find_held_lock+0x35/0x130 [ 1976.993256][ T7504] ? pmd_alloc+0x180/0x180 [ 1976.997671][ T7504] ? __rb_insert_augmented+0x231/0xdf0 [ 1977.003113][ T7504] ? validate_mm_rb+0xa3/0xc0 [ 1977.007776][ T7504] ? __vma_link_rb+0x279/0x370 [ 1977.012530][ T7504] copy_process.part.0+0x568b/0x7980 [ 1977.017840][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1977.022777][ T7504] _do_fork+0x257/0xfd0 [ 1977.026934][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1977.031432][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1977.036877][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1977.042326][ T7504] ? do_syscall_64+0x26/0x610 [ 1977.046996][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.053043][ T7504] ? do_syscall_64+0x26/0x610 [ 1977.057717][ T7504] __x64_sys_clone+0xbf/0x150 [ 1977.062410][ T7504] do_syscall_64+0x103/0x610 [ 1977.066988][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.072866][ T7504] RIP: 0033:0x4571fa [ 1977.076760][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1977.100089][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1977.108489][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1977.116458][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1977.124422][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1977.132379][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1977.140426][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1977.149814][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 346 [ 1977.157120][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1977.164831][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1977.167805][T23649] device bond_slave_1 left promiscuous mode [ 1977.172062][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:249564KB rss_huge:221184KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:249660KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1977.199992][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4097,uid=0 [ 1977.215407][ T7504] Memory cgroup out of memory: Killed process 4097 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB 02:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x552, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001380)="1c288cc36773", 0x0, 0xf0, 0x10030, 0x3, &(0x7f00000014c0)}) 02:37:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006848}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:57 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d82", 0x43}], 0x1}, 0x0) [ 1977.279293][T23696] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) 02:37:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') readv(r1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/122, 0x118}], 0x1) [ 1977.331120][T23696] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ac91f1a3cd0fdacd0b7e6") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xf7, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000400)="193bf6962c308cca10436223da0e2512492f49dea8fb8b5a148e8a238cf069f55933b28551e3297bb356e9a810a43a2383cf366a8527eefb8800f891afef863bd91ffe5a4411516cc2ab79c0b2b85f7737b55f5e67bf09b517288268e0f694705f931f4502cc4f6a0ab5ea5a6995bae3918f37071d0c508b82c8c262605f64d97825941ac34cbddab00eaf6cc929e4430cdcc13a73e5204cf584a4dd9566bed48c1c985cf636e79e9b21818967357dbc2f2fe5f04ea5e871b94ad20feb22b6aac5f675f63e") r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x82100, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/142) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffffffffffc1, @mcast1, 0xffffffffffff8000}, {0xa, 0x4e24, 0x0, @mcast2, 0xff}, r4, 0xfffffffffffffff9}}, 0x48) signalfd4(r0, &(0x7f0000000140)={0xfff}, 0x8, 0x80000) [ 1977.402551][T23705] device bond_slave_1 entered promiscuous mode [ 1977.415146][T23705] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:57 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d82", 0x43}], 0x1}, 0x0) 02:37:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000684c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1977.469112][T23705] bond0: Releasing backup interface bond_slave_1 [ 1977.475522][T23705] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:37:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0}, 0x28) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffff9c, 0x10e, 0x6, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/13, 0xfffffffffffffdb4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) io_setup(0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x1, 0x5) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000140)={0x10}, 0xffffff7b) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, 0x0}, 0x0) [ 1977.544921][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1977.566237][T23705] device bond_slave_1 left promiscuous mode [ 1977.602901][T23726] device bond_slave_1 entered promiscuous mode [ 1977.610519][ T7504] CPU: 1 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1977.616930][T23726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1977.618445][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.618451][ T7504] Call Trace: [ 1977.618475][ T7504] dump_stack+0x172/0x1f0 [ 1977.618495][ T7504] dump_header+0x10f/0xb6c [ 1977.618515][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1977.654701][ T7504] ? ___ratelimit+0x60/0x595 [ 1977.659315][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1977.664454][ T7504] oom_kill_process.cold+0x10/0x15 [ 1977.669607][ T7504] out_of_memory+0x79a/0x1280 [ 1977.674301][ T7504] ? lock_downgrade+0x880/0x880 [ 1977.679161][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.685422][ T7504] ? oom_killer_disable+0x280/0x280 [ 1977.690625][ T7504] ? find_held_lock+0x35/0x130 [ 1977.695405][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 02:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 02:37:57 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d82", 0x43}], 0x1}, 0x0) [ 1977.701046][ T7504] ? memcg_event_wake+0x230/0x230 [ 1977.706095][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1977.706114][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1977.716049][ T7504] try_charge+0x102c/0x15c0 [ 1977.716074][ T7504] ? find_held_lock+0x35/0x130 [ 1977.721404][T23733] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1977.725329][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1977.725341][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1977.725360][ T7504] ? find_held_lock+0x35/0x130 [ 1977.751420][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1977.756995][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1977.762556][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1977.767778][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1977.773512][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1977.778504][T23733] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1977.778815][ T7504] __alloc_pages_nodemask+0x437/0x7e0 [ 1977.793725][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1977.799486][ T7504] ? copy_page_range+0x125a/0x1f90 [ 1977.804625][ T7504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1977.810892][ T7504] alloc_pages_current+0x107/0x210 [ 1977.816025][ T7504] pte_alloc_one+0x1b/0x1a0 [ 1977.816353][T23753] bond0: Error: Device is in use and cannot be enslaved [ 1977.820670][ T7504] __pte_alloc+0x20/0x310 [ 1977.820687][ T7504] copy_page_range+0x1529/0x1f90 [ 1977.820708][ T7504] ? find_held_lock+0x35/0x130 [ 1977.841648][ T7504] ? pmd_alloc+0x180/0x180 [ 1977.846080][ T7504] ? __rb_insert_augmented+0x231/0xdf0 [ 1977.851553][ T7504] ? validate_mm_rb+0xa3/0xc0 [ 1977.856284][ T7504] ? __vma_link_rb+0x279/0x370 [ 1977.861049][ T7504] copy_process.part.0+0x568b/0x7980 [ 1977.866353][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1977.871312][ T7504] _do_fork+0x257/0xfd0 [ 1977.875469][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1977.879906][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1977.885377][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1977.890847][ T7504] ? do_syscall_64+0x26/0x610 [ 1977.895536][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:37:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x51de9ce7) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1977.901616][ T7504] ? do_syscall_64+0x26/0x610 [ 1977.906308][ T7504] __x64_sys_clone+0xbf/0x150 [ 1977.911088][ T7504] do_syscall_64+0x103/0x610 [ 1977.915688][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.921571][ T7504] RIP: 0033:0x4571fa [ 1977.925459][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1977.945145][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 02:37:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006868}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1977.953653][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1977.961695][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1977.969671][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1977.977630][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1977.985596][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1977.996848][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 380 02:37:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000686c}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1978.019338][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1978.031697][T23749] bond0: Releasing backup interface bond_slave_1 [ 1978.054135][T23749] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1978.078339][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1978.085383][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:249736KB rss_huge:221184KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:249660KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1978.099213][T23767] syz-executor.2 (23767) used greatest stack depth: 21208 bytes left 02:37:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r1, 0x51de9ce7) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1978.107864][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4123,uid=0 [ 1978.131345][ T7504] Memory cgroup out of memory: Killed process 4123 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB [ 1978.160474][ T1043] oom_reaper: reaped process 4123 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1978.173405][T23749] device bond_slave_1 left promiscuous mode [ 1978.181925][ T7511] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1978.204877][ T7511] CPU: 1 PID: 7511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1978.212811][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.222868][ T7511] Call Trace: [ 1978.226179][ T7511] dump_stack+0x172/0x1f0 [ 1978.230525][ T7511] dump_header+0x10f/0xb6c [ 1978.234952][ T7511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1978.240751][ T7511] ? ___ratelimit+0x60/0x595 [ 1978.245332][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1978.250453][ T7511] oom_kill_process.cold+0x10/0x15 [ 1978.255575][ T7511] out_of_memory+0x79a/0x1280 [ 1978.260277][ T7511] ? oom_killer_disable+0x280/0x280 [ 1978.265484][ T7511] ? find_held_lock+0x35/0x130 [ 1978.270261][ T7511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1978.275906][ T7511] ? memcg_event_wake+0x230/0x230 [ 1978.280956][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1978.286080][ T7511] ? _raw_spin_unlock+0x2d/0x50 [ 1978.290947][ T7511] try_charge+0x102c/0x15c0 [ 1978.295478][ T7511] ? find_held_lock+0x35/0x130 [ 1978.300246][ T7511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1978.305812][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1978.311373][ T7511] ? find_held_lock+0x35/0x130 [ 1978.316158][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1978.321717][ T7511] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1978.327269][ T7511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1978.332482][ T7511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1978.338034][ T7511] __memcg_kmem_charge+0x136/0x300 [ 1978.343144][ T7511] __alloc_pages_nodemask+0x437/0x7e0 [ 1978.348523][ T7511] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1978.354256][ T7511] ? copy_page_range+0x125a/0x1f90 [ 1978.359364][ T7511] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1978.365772][ T7511] alloc_pages_current+0x107/0x210 [ 1978.370890][ T7511] pte_alloc_one+0x1b/0x1a0 [ 1978.375403][ T7511] __pte_alloc+0x20/0x310 [ 1978.379734][ T7511] copy_page_range+0x1529/0x1f90 [ 1978.384667][ T7511] ? find_held_lock+0x35/0x130 [ 1978.389466][ T7511] ? pmd_alloc+0x180/0x180 [ 1978.393974][ T7511] ? __rb_insert_augmented+0x231/0xdf0 [ 1978.399421][ T7511] ? validate_mm_rb+0xa3/0xc0 [ 1978.404093][ T7511] ? __vma_link_rb+0x279/0x370 [ 1978.408859][ T7511] copy_process.part.0+0x568b/0x7980 [ 1978.414164][ T7511] ? __cleanup_sighand+0x60/0x60 [ 1978.419113][ T7511] _do_fork+0x257/0xfd0 [ 1978.423279][ T7511] ? fork_idle+0x1d0/0x1d0 [ 1978.427706][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1978.433162][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1978.438608][ T7511] ? do_syscall_64+0x26/0x610 [ 1978.443274][ T7511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1978.449602][ T7511] ? do_syscall_64+0x26/0x610 [ 1978.454280][ T7511] __x64_sys_clone+0xbf/0x150 [ 1978.458956][ T7511] do_syscall_64+0x103/0x610 [ 1978.463551][ T7511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1978.469441][ T7511] RIP: 0033:0x4571fa [ 1978.473342][ T7511] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1978.493049][ T7511] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1978.501558][ T7511] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1978.509537][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1978.517602][ T7511] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1978.525571][ T7511] R10: 0000000002078c10 R11: 0000000000000246 R12: 0000000000000001 [ 1978.533627][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1978.546681][ T7511] memory: usage 307200kB, limit 307200kB, failcnt 2239 [ 1978.553857][ T7511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1978.561702][ T7511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1978.569203][ T7511] Memory cgroup stats for /syz4: cache:4KB rss:233392KB rss_huge:196608KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:233556KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1978.591592][ T7511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23490,uid=0 [ 1978.611472][ T7511] Memory cgroup out of memory: Killed process 23490 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB 02:37:58 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_open_pts(r0, 0xc8bfd) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={r2, 0x0, 0x8001, 0x3, 0x5}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1080008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000040)=""/161, &(0x7f0000000100)=0xa1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x2) 02:37:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:58 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 02:37:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1978.673438][T23753] device bond_slave_1 entered promiscuous mode [ 1978.681121][T23753] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1f, 0x4, 0x3, 0x4, r2}, 0x10) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x0, 0x2) clone(0x4000002112001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff04462019d9476a25"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2400201}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1978.748082][T23787] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:58 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) [ 1978.793011][T23787] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1978.835448][ T7511] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1978.878313][ T7511] CPU: 0 PID: 7511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1978.886251][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.896313][ T7511] Call Trace: [ 1978.896337][ T7511] dump_stack+0x172/0x1f0 [ 1978.896354][ T7511] dump_header+0x10f/0xb6c [ 1978.896373][ T7511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1978.904393][ T7511] ? ___ratelimit+0x60/0x595 [ 1978.919158][ T7511] ? do_raw_spin_unlock+0x57/0x270 02:37:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:37:58 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) [ 1978.924280][ T7511] oom_kill_process.cold+0x10/0x15 [ 1978.929379][ T7511] out_of_memory+0x79a/0x1280 [ 1978.929393][ T7511] ? lock_downgrade+0x880/0x880 [ 1978.929405][ T7511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1978.929417][ T7511] ? oom_killer_disable+0x280/0x280 [ 1978.929427][ T7511] ? find_held_lock+0x35/0x130 [ 1978.929447][ T7511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1978.929461][ T7511] ? memcg_event_wake+0x230/0x230 [ 1978.965887][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1978.971018][ T7511] ? _raw_spin_unlock+0x2d/0x50 [ 1978.975888][ T7511] try_charge+0x102c/0x15c0 [ 1978.980407][ T7511] ? find_held_lock+0x35/0x130 [ 1978.985231][ T7511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1978.990782][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1978.996313][ T7511] ? find_held_lock+0x35/0x130 [ 1979.001121][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1979.006659][ T7511] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1979.012253][ T7511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1979.017444][ T7511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1979.022983][ T7511] __memcg_kmem_charge+0x136/0x300 [ 1979.028099][ T7511] __alloc_pages_nodemask+0x437/0x7e0 [ 1979.033459][ T7511] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1979.039181][ T7511] ? copy_page_range+0x125a/0x1f90 [ 1979.044285][ T7511] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1979.050510][ T7511] alloc_pages_current+0x107/0x210 [ 1979.055625][ T7511] pte_alloc_one+0x1b/0x1a0 [ 1979.060120][ T7511] __pte_alloc+0x20/0x310 [ 1979.064532][ T7511] copy_page_range+0x1529/0x1f90 [ 1979.069459][ T7511] ? find_held_lock+0x35/0x130 [ 1979.074227][ T7511] ? pmd_alloc+0x180/0x180 [ 1979.078631][ T7511] ? vma_compute_subtree_gap+0x158/0x230 [ 1979.084254][ T7511] ? validate_mm_rb+0xa3/0xc0 [ 1979.088915][ T7511] ? __vma_link_rb+0x279/0x370 [ 1979.093668][ T7511] copy_process.part.0+0x568b/0x7980 [ 1979.098966][ T7511] ? __cleanup_sighand+0x60/0x60 [ 1979.103897][ T7511] _do_fork+0x257/0xfd0 [ 1979.108051][ T7511] ? fork_idle+0x1d0/0x1d0 [ 1979.112476][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1979.117919][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1979.123454][ T7511] ? do_syscall_64+0x26/0x610 [ 1979.128137][ T7511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1979.134196][ T7511] ? do_syscall_64+0x26/0x610 [ 1979.139118][ T7511] __x64_sys_clone+0xbf/0x150 [ 1979.143789][ T7511] do_syscall_64+0x103/0x610 [ 1979.148457][ T7511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1979.154336][ T7511] RIP: 0033:0x4571fa [ 1979.158215][ T7511] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1979.177831][ T7511] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1979.186255][ T7511] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1979.194236][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1979.202206][ T7511] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1979.210194][ T7511] R10: 0000000002078c10 R11: 0000000000000246 R12: 0000000000000001 [ 1979.218248][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1979.229139][ T7511] memory: usage 307200kB, limit 307200kB, failcnt 2273 [ 1979.234744][T23811] bond0: Releasing backup interface bond_slave_1 [ 1979.236557][ T7511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1979.245669][T23811] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1979.250464][ T7511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1979.274133][ T7511] Memory cgroup stats for /syz4: cache:4KB rss:233548KB rss_huge:196608KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:233544KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1979.299225][ T7511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24760,uid=0 [ 1979.316240][ T7511] Memory cgroup out of memory: Killed process 24760 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB 02:37:59 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1979.331190][ T1043] oom_reaper: reaped process 24760 (syz-executor.4), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1979.350805][T23811] device bond_slave_1 left promiscuous mode [ 1979.398199][T23815] device bond_slave_1 entered promiscuous mode [ 1979.404709][T23815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1979.436528][T23822] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:37:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c0000000000687a}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1979.447531][T23822] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:37:59 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:59 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 02:37:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x5}, &(0x7f0000000180)=0x90) [ 1979.496901][T23811] bond0: Releasing backup interface bond_slave_1 [ 1979.506747][T23811] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1979.587006][T23811] device bond_slave_1 left promiscuous mode [ 1979.609380][T23815] device bond_slave_1 entered promiscuous mode [ 1979.615814][T23815] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:37:59 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40080, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0xa63157e82173f3c8) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x2, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:37:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\brist\xe3cusgrVid:De', 0x0) [ 1979.641696][T23852] bond0: Releasing backup interface bond_slave_1 [ 1979.678918][T23848] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 02:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:37:59 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 02:37:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1979.709596][T23852] bond0: the permanent HWaddr of bond_slave_1 - fe:85:dc:a2:56:76 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1979.765731][T23848] CPU: 0 PID: 23848 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1979.773858][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.786699][T23848] Call Trace: [ 1979.789996][T23848] dump_stack+0x172/0x1f0 [ 1979.794320][T23848] dump_header+0x10f/0xb6c [ 1979.799008][T23848] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1979.804844][T23848] ? ___ratelimit+0x60/0x595 [ 1979.809445][T23848] ? do_raw_spin_unlock+0x57/0x270 [ 1979.814553][T23848] oom_kill_process.cold+0x10/0x15 [ 1979.819674][T23848] out_of_memory+0x79a/0x1280 [ 1979.824344][T23848] ? lock_downgrade+0x880/0x880 [ 1979.829288][T23848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1979.835523][T23848] ? oom_killer_disable+0x280/0x280 [ 1979.840794][T23848] ? find_held_lock+0x35/0x130 [ 1979.845575][T23848] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1979.851184][T23848] ? memcg_event_wake+0x230/0x230 [ 1979.856334][T23848] ? do_raw_spin_unlock+0x57/0x270 [ 1979.861455][T23848] ? _raw_spin_unlock+0x2d/0x50 [ 1979.866321][T23848] try_charge+0x102c/0x15c0 [ 1979.870841][T23848] ? find_held_lock+0x35/0x130 [ 1979.875616][T23848] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1979.881168][T23848] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1979.886727][T23848] ? find_held_lock+0x35/0x130 [ 1979.891508][T23848] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1979.897162][T23848] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1979.902716][T23848] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1979.907921][T23848] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1979.913479][T23848] __memcg_kmem_charge+0x136/0x300 [ 1979.918596][T23848] __alloc_pages_nodemask+0x437/0x7e0 [ 1979.923971][T23848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1979.930236][T23848] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1979.935971][T23848] ? copy_process.part.0+0x1d08/0x7980 [ 1979.941446][T23848] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1979.946742][T23848] ? trace_hardirqs_on+0x67/0x230 [ 1979.951768][T23848] ? kasan_check_read+0x11/0x20 [ 1979.956648][T23848] copy_process.part.0+0x3e0/0x7980 [ 1979.961870][T23848] ? psi_memstall_leave+0x11c/0x180 [ 1979.967073][T23848] ? sched_clock+0x2e/0x50 [ 1979.971483][T23848] ? psi_memstall_leave+0x12e/0x180 [ 1979.976679][T23848] ? find_held_lock+0x35/0x130 [ 1979.981447][T23848] ? psi_memstall_leave+0x12e/0x180 [ 1979.986686][T23848] ? __cleanup_sighand+0x60/0x60 [ 1979.991640][T23848] ? __lock_acquire+0x548/0x3fb0 [ 1979.996578][T23848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1980.002830][T23848] _do_fork+0x257/0xfd0 [ 1980.006981][T23848] ? fork_idle+0x1d0/0x1d0 [ 1980.011418][T23848] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1980.017774][T23848] ? lock_downgrade+0x880/0x880 [ 1980.022646][T23848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1980.028910][T23848] ? blkcg_exit_queue+0x30/0x30 [ 1980.033779][T23848] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1980.039273][T23848] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1980.044739][T23848] ? do_syscall_64+0x26/0x610 [ 1980.049855][T23848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1980.060529][T23848] ? do_syscall_64+0x26/0x610 [ 1980.065235][T23848] __x64_sys_clone+0xbf/0x150 [ 1980.069911][T23848] do_syscall_64+0x103/0x610 [ 1980.074499][T23848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1980.080415][T23848] RIP: 0033:0x45b5f9 [ 1980.084325][T23848] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1980.104035][T23848] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1980.112463][T23848] RAX: ffffffffffffffda RBX: 00007fce941de700 RCX: 000000000045b5f9 [ 1980.120544][T23848] RDX: 00007fce941de9d0 RSI: 00007fce941dddb0 RDI: 00000000003d0f00 [ 1980.128962][T23848] RBP: 0000000000a4fcb0 R08: 00007fce941de700 R09: 00007fce941de700 [ 1980.137359][T23848] R10: 00007fce941de9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1980.145443][T23848] R13: 0000000000a4fb5f R14: 00007fce941de9c0 R15: 000000000073bfac [ 1980.155361][T23848] memory: usage 307148kB, limit 307200kB, failcnt 241 [ 1980.164212][T23848] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1980.172139][T23848] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1980.179335][T23848] Memory cgroup stats for /syz2: cache:56KB rss:242364KB rss_huge:208896KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:242416KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1980.183930][T23852] device bond_slave_1 left promiscuous mode [ 1980.201668][T23848] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7834,uid=0 [ 1980.223356][T23848] Memory cgroup out of memory: Killed process 7834 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB [ 1980.239737][ T1043] oom_reaper: reaped process 7834 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 02:38:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1980.438220][T23877] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1980.458486][T23877] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:00 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 02:38:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1980.489400][T23884] bond0: Releasing backup interface bond_slave_1 [ 1980.500018][T23884] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x0frist\xe3cusgrVid:De', 0x0) [ 1980.578705][T23884] device bond_slave_1 left promiscuous mode [ 1980.599655][T23885] device bond_slave_1 entered promiscuous mode [ 1980.606095][T23885] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1980.624260][T23886] device bond_slave_1 entered promiscuous mode [ 1980.633942][T23886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1980.647977][T23901] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:00 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:00 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) [ 1980.690032][T23901] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1980.721491][T23880] bond0: Releasing backup interface bond_slave_1 [ 1980.743350][T23880] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1980.816389][ C0] net_ratelimit: 20 callbacks suppressed [ 1980.816395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1980.828106][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1980.833993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1980.839844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1980.846340][T23880] device bond_slave_1 left promiscuous mode [ 1980.856342][T23884] device bond_slave_1 entered promiscuous mode 02:38:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) 02:38:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1980.862836][T23884] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1980.910895][T23918] bond0: Releasing backup interface bond_slave_1 [ 1980.950652][T23918] bond0: the permanent HWaddr of bond_slave_1 - fe:85:dc:a2:56:76 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1980.993958][T23927] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1980.998222][T23918] device bond_slave_1 left promiscuous mode [ 1981.004726][T23927] CPU: 0 PID: 23927 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1981.018141][T23927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.028220][T23927] Call Trace: [ 1981.031508][T23927] dump_stack+0x172/0x1f0 [ 1981.035845][T23927] dump_header+0x10f/0xb6c [ 1981.040460][T23927] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1981.046289][T23927] ? ___ratelimit+0x60/0x595 [ 1981.050888][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1981.056006][T23927] oom_kill_process.cold+0x10/0x15 [ 1981.061135][T23927] out_of_memory+0x79a/0x1280 [ 1981.065843][T23927] ? lock_downgrade+0x880/0x880 [ 1981.070805][T23927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.077409][T23927] ? oom_killer_disable+0x280/0x280 [ 1981.082631][T23927] ? find_held_lock+0x35/0x130 [ 1981.087419][T23927] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1981.092981][T23927] ? memcg_event_wake+0x230/0x230 [ 1981.098033][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1981.103327][T23927] ? _raw_spin_unlock+0x2d/0x50 [ 1981.108205][T23927] try_charge+0x102c/0x15c0 [ 1981.112722][T23927] ? find_held_lock+0x35/0x130 [ 1981.117512][T23927] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1981.123096][T23927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.129477][T23927] ? kasan_check_read+0x11/0x20 [ 1981.134339][T23927] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1981.139966][T23927] mem_cgroup_try_charge+0x24d/0x5e0 [ 1981.145266][T23927] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1981.150906][T23927] wp_page_copy+0x408/0x1740 [ 1981.155513][T23927] ? find_held_lock+0x35/0x130 [ 1981.160284][T23927] ? pmd_pfn+0x1d0/0x1d0 [ 1981.164627][T23927] ? lock_downgrade+0x880/0x880 [ 1981.169476][T23927] ? __pte_alloc_kernel+0x220/0x220 [ 1981.174688][T23927] ? kasan_check_read+0x11/0x20 [ 1981.179544][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1981.184654][T23927] do_wp_page+0x48e/0x1500 [ 1981.189099][T23927] ? do_raw_spin_lock+0x12a/0x2e0 [ 1981.194127][T23927] ? rwlock_bug.part.0+0x90/0x90 [ 1981.199065][T23927] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1981.204456][T23927] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1981.210190][T23927] __handle_mm_fault+0x22e8/0x3ec0 [ 1981.215327][T23927] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1981.220887][T23927] ? find_held_lock+0x35/0x130 [ 1981.225661][T23927] ? handle_mm_fault+0x322/0xb30 [ 1981.230605][T23927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.236858][T23927] ? kasan_check_read+0x11/0x20 [ 1981.241720][T23927] handle_mm_fault+0x43f/0xb30 [ 1981.246582][T23927] __do_page_fault+0x5ef/0xda0 [ 1981.251360][T23927] do_page_fault+0x71/0x581 [ 1981.255960][T23927] ? page_fault+0x8/0x30 [ 1981.260219][T23927] page_fault+0x1e/0x30 [ 1981.264382][T23927] RIP: 0033:0x40de98 [ 1981.268274][T23927] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 2c e2 4b 00 31 c0 e8 83 3a ff ff 31 ff e8 cc 36 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ce 25 64 00 [ 1981.287884][T23927] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 1981.293942][T23927] RAX: 000000008a184b8d RBX: 00000000f3c45803 RCX: 0000001b31a20000 [ 1981.301927][T23927] RDX: 0000000000000000 RSI: 0000000000000b8d RDI: ffffffff8a184b8d [ 1981.309994][T23927] RBP: 0000000000000004 R08: 000000008a184b8d R09: 000000008a184b91 [ 1981.317980][T23927] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 1981.325957][T23927] R13: 0000000080000000 R14: 00007ff9f3da5008 R15: 0000000000000004 [ 1981.342150][T23927] memory: usage 307200kB, limit 307200kB, failcnt 419 [ 1981.350406][T23927] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1981.362963][T23927] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1981.371349][T23927] Memory cgroup stats for /syz1: cache:156KB rss:248272KB rss_huge:219136KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:248424KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1981.393506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1981.393566][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1981.393648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1981.393693][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1981.393798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1981.393843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1981.429629][T23927] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4175,uid=0 [ 1981.445228][T23927] Memory cgroup out of memory: Killed process 4175 (syz-executor.1) total-vm:72448kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB 02:38:01 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 02:38:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\t%ist\xe3cusgrVid:De', 0x0) [ 1981.618158][T23923] device bond_slave_1 entered promiscuous mode [ 1981.624727][T23923] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:01 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1981.662939][T23938] bond0: Releasing backup interface bond_slave_1 [ 1981.686489][T23938] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1981.759339][T23938] device bond_slave_1 left promiscuous mode [ 1981.774506][T23939] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1981.790791][T23939] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1981.802412][T23940] device bond_slave_1 entered promiscuous mode 02:38:01 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000080)={@empty, @dev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [], @empty}, r1}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1981.809542][T23940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1981.840208][T23956] bond0: Releasing backup interface bond_slave_1 02:38:01 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 02:38:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x40, 0x0, 0x10003, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x3, r2}) [ 1981.846957][T23956] bond0: the permanent HWaddr of bond_slave_1 - fe:85:dc:a2:56:76 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1981.937444][T23956] device bond_slave_1 left promiscuous mode 02:38:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1982.157676][T23938] bond0: Releasing backup interface bond_slave_1 [ 1982.164075][T23938] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c#sgrVid:De', 0x0) [ 1982.228614][T23938] device bond_slave_1 left promiscuous mode [ 1982.241080][T23959] device bond_slave_1 entered promiscuous mode [ 1982.247932][T23959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1982.262117][T23960] device bond_slave_1 entered promiscuous mode [ 1982.269186][T23960] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:02 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = getpgid(0x0) r3 = geteuid() lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) r6 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() fstat(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$vbi(&(0x7f0000001b80)='/dev/vbi#\x00', 0x3, 0x2) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket$netlink(0x10, 0x3, 0x12) r14 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0}, &(0x7f0000001c00)=0xc) getgroups(0x1, &(0x7f0000001c40)=[0xee00]) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000001c80)={0x2, 0x919fc177622cb54c, 0x1, 0xffffffffffffff9c}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/kvm\x00', 0x2, 0x0) r19 = socket$netlink(0x10, 0x3, 0x12) r20 = socket$l2tp(0x18, 0x1, 0x1) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00)=0xffffffffffffffff, 0x4) r22 = socket$key(0xf, 0x3, 0x2) r23 = accept$inet(0xffffffffffffff9c, &(0x7f0000001d40)={0x2, 0x0, @loopback}, &(0x7f0000001d80)=0x10) r24 = socket$nl_generic(0x10, 0x3, 0x10) r25 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/vcs\x00', 0x10900, 0x0) r26 = socket$l2tp(0x18, 0x1, 0x1) r27 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001e00)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000001f00)=0xe8) r29 = getegid() r30 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003680)='/dev/vsock\x00', 0x10200, 0x0) r31 = socket$inet6_sctp(0xa, 0x1, 0x84) r32 = socket$inet_udplite(0x2, 0x2, 0x88) r33 = syz_open_dev$vbi(&(0x7f00000036c0)='/dev/vbi#\x00', 0x3, 0x2) r34 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003700)='/dev/video1\x00', 0x2, 0x0) r35 = openat$full(0xffffffffffffff9c, &(0x7f0000003740)='/dev/full\x00', 0x3, 0x0) r36 = syz_open_dev$ndb(&(0x7f0000003c80)='/dev/nbd#\x00', 0x0, 0x108ffe) r37 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000037c0)='/dev/udmabuf\x00', 0x2) r38 = syz_open_dev$vbi(&(0x7f0000003800)='/dev/vbi#\x00', 0x2, 0x2) r39 = syz_open_dev$radio(&(0x7f0000003840)='/dev/radio#\x00', 0x1, 0x2) r40 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003880)='/dev/video0\x00', 0x2, 0x0) r41 = openat$autofs(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/autofs\x00', 0x0, 0x0) r42 = getpgrp(0x0) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r45 = eventfd(0xf2c) sendmmsg$unix(r0, &(0x7f0000003b40)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="bfae7d8d400db9ce218b3e5d88231bb94f5369b15fae0ee8716a2be19161f7be1e27800787953e2e09e3fa7806a571b37bc183f93f72c9773abf429d997ed829785b28cc15fe55685222de52625ccae90bb41a141ec5c7455c6a6246de0f87cff206273efe17da48fe545e075091961caa2fbf6856333f9aa570c10a1b541ed9fb027bcadf7e47e3e7660db96a3ed84f1b681f30612bbd8a29c3e2d28a95ebe6bd425d55bedb68b8d164874a210031af2ac29795e5fd12644cb1999ebbc50bba91714211988e72422d6298dcde69efed3c458f5f564c9ebf09", 0xd9}, {&(0x7f0000001240)="487c340c21f1a301be35d8d478a7620c21c4c94b43f6dbf268167213edbdbad132ce3e2bf38d39285b402071304aaeac786f4780f62bd686d74aeb9bdd83f74c029938f8151904ba2144c7f2b0ebe9a39babe8d1e835d81f915caa782eb1c22a4ae0a3b83d5dad8b13360f5f8676d1f049288e55fbfdf160033e039f4c593891287ce7edf7ed46916c4624816391f13d84faf2a074ccdc7f8f0e7138b2cb9d304e63b277e599476e6ab9e49d2bceac24e29bf277343bcfa2fbd736e12bb2c6941d5495ca77d59146cb13652050cd05e5", 0xd0}, {&(0x7f0000001340)="b7d23423fd1413317666f96278e4957eeae467f00e101bdb70147dc3cf41d6dbe9c4b5df37c355c571e095353043ceafe346dbc0c101bbf798b60489f22e13f0e05e4c53fbcf4c6d81f800c8095dd1c7856d541d08ada27270a1a2c1099d20e94b65c341eba24ad87c0c6878b831aa1f5635ed32edb47d4f86abe96807452caf416d61eedead86036458ef265f8cfbf63e963a2a73b2765cb590b231915c0744cb4bc0", 0xa3}, {&(0x7f0000001400)="d1980f698ff1240aef014d04788b326ebd0c252a8ab7c0b444363641619ea63f7a2f96ec8e73829f7cb810c8f4d36315cd3c7b1cad43a4d5c0162e38699387e034311f5c6d6c45a2bbc56bd25d08e5a050408904090429f0e83da07f91eaaf0b9258c28ab313e3f5348596bdfa722215ef5b2fcbc401b30a7ab1281aa4d046424fb580e1d588de245fb0d7ec3f80beb50a39", 0x92}], 0x5, 0x0, 0x0, 0x41}, {&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000015c0)="13871afaad23bba112d738043fe6804ae9098e80f24705e90306bf07bf213b417ccfa8da7abca8d4d979148d06dfa445562120975c9bc54d893a533d588cd7b9b0847939d0321163ac14865a7b0bbbfb482355463935712c9389258a49724a8464609b32375884e91841b242c95a183b69945170f878daff627d5a58e9a822d6b95aed3d4b50451bc0eb076de081d6310e2d874da145a01364c0c0456a2cded78e847979548be5f4a6bdef94b7952e5db66e3111c068c4bd0b23a4f08ce23c9a2da5d8d6358dc62356f62f14bb537cf198dde7d5f96299", 0xd7}], 0x1, &(0x7f00000019c0)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x78, 0x4000000}, {&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="3de40a8253ab929e309cdf972f3e866d9c14d48925d003dd375c86", 0x1b}, {&(0x7f0000001b00)="ebf35d15cae8c47459971c850d33f98207537bd3c55919ebdab48d527ad936fc952cec3454218449e698fa9a708b631a2f", 0x31}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="280000000000000001bf1db836305800", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x804}, {&(0x7f0000001f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f00000020c0)="2a7f5649d46211f1c6c3", 0xa}, {&(0x7f0000002100)="827fde", 0x3}, {&(0x7f0000002140)="a268eb5e5cebb443a6449b4f43437f740d8a51488c35295202bf227d53be97e46bfec1edd4c6bdcee79add22b9775580993ebcb7682db023ca5ec4a241ce74e99ff0210ef27629f28dab0f446b333402071c256ddc8dc1ae951fd961bc10eb384fa2697781cbf05812505dfb5507049deb6666e821a1c2cfcec8009d49fe612839b91f5a1682f0e7b91668f7f039567486211a713c", 0x95}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="a6c47e8789a315ad17d27b0a7b584c492fee0ab7b5c11851e2ec7c5e44d75342769adcd863df0ceb92fe199ba14384221babd0312989dee3135378080ee77b2d1d1ab3522e8a43a0a6ad0194cbb9b4c39fb07b99b7d7428396f80d05a1122d8bdba8", 0x62}, {&(0x7f0000003280)="cd7908c63b5d0afb0c29b0d3a2018df87b23655ca16c9a37cf9ffe7c3d128031048374684cd3e6d0bbade7241c5ee0fdb0e82d4ceb59d279a748fd7043eda71f7138ab6da06a069feea7d67f48f0abe8477c0b8100f81205d6d33815495f6211b5879f284ef4a80b98901189039f787a7c6968d9ebb33c74dacfad1d2a56c46521a2b050a3a6f7e7d66ffc7f3761e8b56e31ac1d629a48e4365058837b256c122ab343a92425096ed25325d23d1789e74d4f2ab3d0898804eae6424153ddfb5e9ccbac739d7f45e9df77", 0xca}, {&(0x7f0000003380)="1dc86e2b754dad68b0f2aa8c21f1a01bc0fbdf4895119c570967955e0063f40ca46ec261b2451941fd7806b9145a0bba02ce37a585c84c3cf571de714078b47794dcb2d35ef7d0f7b0fe4bdd205cfa95bfe77681aa956441594fb9a6006e7c50c357569198bf8619d07f90e0117f2f53260980818827a29ff9e6f0c0680141fe", 0x80}, {&(0x7f0000003400)="e755ebab1842004924aa0585c47bd16440d77e4abb766447130d40c045b530563ace9797f5277a305bbf795f33b95c6be45bf946bfcbe2bfcd217180600d871d31482080f6f37c69e1a2648315ff801198f727085f461ecfdd8a534a3801ecce588cbe5989de1d30be4d417b1d9173c839ba5848410bb414fba68696a619b8ba660b231ae02b36bad8257241f73cdbd8bc06ed85e35529fbc9718875b030f5f22a08f97eeddd679d7ec0a62772932d11d70fca18944b78d05303444816", 0xbd}], 0x8, 0x0, 0x0, 0x40004}, {&(0x7f0000003540)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003640)=[{&(0x7f00000035c0)="41cfff3c08cac6e8705464bee8dd49673735d31e8930a2f1e29a323f6c88ad9b3845a4b12faaeddee1c3051e20afa49bf81e4c44aafbae0f2836f01b2709233e0d72d57ea78752734d87a53420b655ad33", 0x51}], 0x1, &(0x7f0000003a80)=[@rights={0x28, 0x1, 0x1, [r30, r31, r32, r33, r34, r35]}, @rights={0x18, 0x1, 0x1, [r36]}, @rights={0x28, 0x1, 0x1, [r37, r38, r39, r40, r41]}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @rights={0x18, 0x1, 0x1, [r45]}], 0xa0, 0x4040041}], 0x5, 0x40001) r46 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r46, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1982.306842][T23978] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1982.336112][T23978] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:02 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) uname(&(0x7f0000000080)=""/249) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x4}, 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000580)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trisgrVid:De', 0xfffffffffffffff9) recvmsg(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/57, 0x39}], 0x2, &(0x7f00000004c0)=""/114, 0x72}, 0x1) 02:38:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xee9, 0x2540) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x20, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x2, 0x4) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'nr0\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x8, 0x2, 0x0, 0x7, 0x3f, 0x0, 0x200, [0x4]}}) 02:38:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x400) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="021100030700000029bd7000fcdbdf2505001a0000000000000000000000000000000001ffffff71005baaae553ba2000000000008001414"], 0x38}}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1982.427641][T23981] bond0: Releasing backup interface bond_slave_1 02:38:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="0ebfcd52ec2dcf0a4feb952fa11c6b0c998c658f1320c74a31c28d04f6186c90ad11abc6b884ddd933af2e2e6f87a097eb91e90731eae729d636d0df3b12ccba245019c78a8baf6fff224f6a96c23b2e15daef2d5dd5df63284aeb8dabd3c3c82fef2932d87476d202c2e579ec9f", 0x6e, r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:38:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x100000001, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x283) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1982.475705][T23981] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1982.518384][T23981] device bond_slave_1 left promiscuous mode 02:38:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c%sgrVid:De', 0x0) 02:38:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xffffffffffffff89) clone(0x206000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x880, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x896a, &(0x7f0000000000)="e2c84a1f3edb633101a9f7bac4101f5c0da6e6b66e7d56e1a03ddc4388838d4e2e40b0d6bc823291c855daaac04b7340dbf66c0c17d681f6483655c8420124b39f34148aca05a3073325fad65f1f97a2f4030530e45d1dc9") setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1982.578286][T23992] device bond_slave_1 entered promiscuous mode [ 1982.584820][T23992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1982.704929][T24024] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1982.717589][T24024] CPU: 1 PID: 24024 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1982.725571][T24024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.725577][T24024] Call Trace: [ 1982.725603][T24024] dump_stack+0x172/0x1f0 [ 1982.725623][T24024] dump_header+0x10f/0xb6c [ 1982.725642][T24024] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1982.747683][T24024] ? ___ratelimit+0x60/0x595 [ 1982.747704][T24024] ? do_raw_spin_unlock+0x57/0x270 [ 1982.763186][T24024] oom_kill_process.cold+0x10/0x15 [ 1982.763203][T24024] out_of_memory+0x79a/0x1280 [ 1982.763222][T24024] ? lock_downgrade+0x880/0x880 [ 1982.763236][T24024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.763253][T24024] ? oom_killer_disable+0x280/0x280 [ 1982.773215][T24024] ? find_held_lock+0x35/0x130 [ 1982.773243][T24024] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1982.773257][T24024] ? memcg_event_wake+0x230/0x230 [ 1982.773277][T24024] ? do_raw_spin_unlock+0x57/0x270 [ 1982.773294][T24024] ? _raw_spin_unlock+0x2d/0x50 [ 1982.773319][T24024] try_charge+0x102c/0x15c0 [ 1982.784396][T24024] ? find_held_lock+0x35/0x130 [ 1982.784423][T24024] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1982.784437][T24024] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1982.784450][T24024] ? find_held_lock+0x35/0x130 [ 1982.784461][T24024] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1982.784483][T24024] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1982.850951][T24024] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1982.856169][T24024] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1982.861740][T24024] __memcg_kmem_charge+0x136/0x300 [ 1982.866884][T24024] __alloc_pages_nodemask+0x437/0x7e0 [ 1982.872261][T24024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.878503][T24024] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1982.878522][T24024] ? copy_process.part.0+0x1d08/0x7980 [ 1982.878540][T24024] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1982.878554][T24024] ? trace_hardirqs_on+0x67/0x230 [ 1982.878567][T24024] ? kasan_check_read+0x11/0x20 [ 1982.878587][T24024] copy_process.part.0+0x3e0/0x7980 [ 1982.889733][T24024] ? psi_memstall_leave+0x11c/0x180 [ 1982.889756][T24024] ? sched_clock+0x2e/0x50 [ 1982.889772][T24024] ? psi_memstall_leave+0x12e/0x180 [ 1982.889784][T24024] ? find_held_lock+0x35/0x130 [ 1982.889798][T24024] ? psi_memstall_leave+0x12e/0x180 [ 1982.889822][T24024] ? __cleanup_sighand+0x60/0x60 [ 1982.889837][T24024] ? __lock_acquire+0x548/0x3fb0 [ 1982.944671][T24024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.950911][T24024] _do_fork+0x257/0xfd0 [ 1982.955061][T24024] ? fork_idle+0x1d0/0x1d0 [ 1982.959468][T24024] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1982.965525][T24024] ? lock_downgrade+0x880/0x880 [ 1982.970370][T24024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.976624][T24024] ? blkcg_exit_queue+0x30/0x30 [ 1982.981483][T24024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1982.986954][T24024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1982.993186][T24024] ? do_syscall_64+0x26/0x610 [ 1982.997856][T24024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.003916][T24024] ? do_syscall_64+0x26/0x610 [ 1983.008583][T24024] __x64_sys_clone+0xbf/0x150 [ 1983.013263][T24024] do_syscall_64+0x103/0x610 [ 1983.017858][T24024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.023736][T24024] RIP: 0033:0x45b5f9 [ 1983.027626][T24024] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1983.047215][T24024] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1983.055620][T24024] RAX: ffffffffffffffda RBX: 00007fce941ff700 RCX: 000000000045b5f9 [ 1983.063646][T24024] RDX: 00007fce941ff9d0 RSI: 00007fce941fedb0 RDI: 00000000003d0f00 [ 1983.071612][T24024] RBP: 0000000000a4fcb0 R08: 00007fce941ff700 R09: 00007fce941ff700 [ 1983.079849][T24024] R10: 00007fce941ff9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1983.087809][T24024] R13: 0000000000a4fb5f R14: 00007fce941ff9c0 R15: 000000000073bf0c [ 1983.098956][T24024] memory: usage 307140kB, limit 307200kB, failcnt 274 [ 1983.099987][T23981] bond0: Releasing backup interface bond_slave_1 [ 1983.106299][T24024] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1983.113358][T23981] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1983.129056][T24024] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1983.143269][T24024] Memory cgroup stats for /syz2: cache:56KB rss:242440KB rss_huge:208896KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:242440KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1983.165395][T24024] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8847,uid=0 [ 1983.182014][T24024] Memory cgroup out of memory: Killed process 8847 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB [ 1983.197915][ T1043] oom_reaper: reaped process 8847 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1983.207187][T23981] device bond_slave_1 left promiscuous mode [ 1983.230152][T23992] device bond_slave_1 entered promiscuous mode 02:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x136) socket$key(0xf, 0x3, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="1dc47d80a5dd6285f2fb6f894027ee6f", 0x10) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000540)='R\trist\xe3cR\x18\xf5e\x00\x00\x00\x00\x00\x00\n;\xb4\x8d\xb6Z=\xb7\x92\x81\xe0\x96\xc7\x1aP\x0e\x83\n!\x97_\x19r\xd0\r\xeeX\xf9\xb6\xf3U\x19\x90\xa4\x040\xe8/\xe3\x8dz\xd3\x85\x96\x17\x1a\x15c\xc8\xe8\x9a\xd8\x91[\xe6\x9e\xd5\xa4\x1c\x90L\x8f\x94\xbe}\x15G\xd5\xe8\f}q\x1b\xd7\xd1\xa3,\xbf\xc0\xd5}\x06F\xc5\xca\xbd\x13\xae1\xa0t9\x8e\x82P\xc1N\x1c\x90\xd6\a\v\xee\x01\xe8\\\xca\xc7+\xc4\xfb8\xf7\xd3\xef\xba\x00\xae\xb5\x14\x91\xe1\x8b\xc0\xbc\x05!ipDL\xafn?FH\x04\x99\xf9e\x7f\x0e\xe9\x17\xa32\xfa\x05N\xa6V\x8cD\vr\x8e\\?\xe4\xa4\xe0\xe71\x150x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x2, r3, r4, r5, r6, 0x10, 0x3}, 0x1, 0xca5b, 0x5, 0x29b6, 0x2, 0x20, r7, r8}) 02:38:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3c0sgrVid:De', 0x0) [ 1984.132723][T24143] device bond_slave_1 entered promiscuous mode [ 1984.180530][ T7507] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1984.204226][T24143] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1984.216515][ T7507] CPU: 0 PID: 7507 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1984.224453][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.234515][ T7507] Call Trace: [ 1984.237820][ T7507] dump_stack+0x172/0x1f0 [ 1984.242152][ T7507] dump_header+0x10f/0xb6c [ 1984.242181][ T7507] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1984.252469][ T7507] ? ___ratelimit+0x60/0x595 [ 1984.257066][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1984.257084][ T7507] oom_kill_process.cold+0x10/0x15 [ 1984.257099][ T7507] out_of_memory+0x79a/0x1280 [ 1984.257113][ T7507] ? lock_downgrade+0x880/0x880 [ 1984.257128][ T7507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.257141][ T7507] ? oom_killer_disable+0x280/0x280 [ 1984.257153][ T7507] ? find_held_lock+0x35/0x130 [ 1984.257182][ T7507] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1984.257195][ T7507] ? memcg_event_wake+0x230/0x230 [ 1984.257213][ T7507] ? do_raw_spin_unlock+0x57/0x270 [ 1984.257229][ T7507] ? _raw_spin_unlock+0x2d/0x50 [ 1984.257248][ T7507] try_charge+0x102c/0x15c0 [ 1984.267495][ T7507] ? find_held_lock+0x35/0x130 [ 1984.267517][ T7507] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1984.267528][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1984.267540][ T7507] ? find_held_lock+0x35/0x130 [ 1984.267553][ T7507] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1984.267577][ T7507] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1984.267591][ T7507] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1984.267604][ T7507] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1984.267619][ T7507] __memcg_kmem_charge+0x136/0x300 [ 1984.267637][ T7507] __alloc_pages_nodemask+0x437/0x7e0 [ 1984.267658][ T7507] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1984.277181][ T7507] ? save_stack+0x45/0xd0 [ 1984.277195][ T7507] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1984.277207][ T7507] ? kasan_slab_alloc+0xf/0x20 [ 1984.277218][ T7507] ? kmem_cache_alloc+0x11a/0x6f0 [ 1984.277232][ T7507] ? vm_area_dup+0x21/0x170 [ 1984.277245][ T7507] ? copy_process.part.0+0x3431/0x7980 [ 1984.277260][ T7507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1984.277276][ T7507] alloc_pages_current+0x107/0x210 [ 1984.277295][ T7507] pte_alloc_one+0x1b/0x1a0 [ 1984.277320][ T7507] __pte_alloc+0x20/0x310 [ 1984.299029][ T7507] copy_page_range+0x1529/0x1f90 [ 1984.314771][ T7507] ? find_held_lock+0x35/0x130 [ 1984.314787][ T7507] ? percpu_ref_put_many+0x94/0x190 [ 1984.314806][ T7507] ? copy_process.part.0+0x3121/0x7980 [ 1984.314820][ T7507] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1984.314838][ T7507] ? pmd_alloc+0x180/0x180 [ 1984.314854][ T7507] ? __rb_insert_augmented+0x231/0xdf0 [ 1984.314864][ T7507] ? validate_mm_rb+0xa3/0xc0 [ 1984.314875][ T7507] ? __vma_link_rb+0x279/0x370 [ 1984.314893][ T7507] copy_process.part.0+0x568b/0x7980 [ 1984.314928][ T7507] ? __cleanup_sighand+0x60/0x60 [ 1984.314953][ T7507] _do_fork+0x257/0xfd0 [ 1984.314968][ T7507] ? fork_idle+0x1d0/0x1d0 [ 1984.314992][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1984.505443][ T7507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1984.510929][ T7507] ? do_syscall_64+0x26/0x610 [ 1984.515622][ T7507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.521700][ T7507] ? do_syscall_64+0x26/0x610 [ 1984.526383][ T7507] __x64_sys_clone+0xbf/0x150 [ 1984.531076][ T7507] do_syscall_64+0x103/0x610 [ 1984.535662][ T7507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.541539][ T7507] RIP: 0033:0x4571fa [ 1984.545425][ T7507] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1984.565026][ T7507] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1984.573434][ T7507] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1984.581416][ T7507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1984.589386][ T7507] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000297f940 [ 1984.597356][ T7507] R10: 000000000297fc10 R11: 0000000000000246 R12: 0000000000000001 [ 1984.605322][ T7507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1984.614260][ T7507] memory: usage 307132kB, limit 307200kB, failcnt 320 [ 1984.621895][T24146] bond0: Releasing backup interface bond_slave_1 [ 1984.629018][ T7507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1984.631138][T24146] bond0: the permanent HWaddr of bond_slave_1 - 1a:59:ba:f5:8b:9f - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1984.639411][ T7507] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1984.662017][ T7507] Memory cgroup stats for /syz2: cache:56KB rss:242492KB rss_huge:208896KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:242476KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1984.684129][ T7507] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13071,uid=0 [ 1984.699681][ T7507] Memory cgroup out of memory: Killed process 13071 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB [ 1984.715361][T24146] device bond_slave_1 left promiscuous mode [ 1984.715802][ T1043] oom_reaper: reaped process 13071 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1984.734719][T24165] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1984.746058][T24165] CPU: 1 PID: 24165 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1984.754073][T24165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.764142][T24165] Call Trace: [ 1984.767453][T24165] dump_stack+0x172/0x1f0 [ 1984.771800][T24165] dump_header+0x10f/0xb6c [ 1984.776228][T24165] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1984.782044][T24165] ? ___ratelimit+0x60/0x595 [ 1984.786654][T24165] ? do_raw_spin_unlock+0x57/0x270 [ 1984.791778][T24165] oom_kill_process.cold+0x10/0x15 [ 1984.796899][T24165] out_of_memory+0x79a/0x1280 [ 1984.801593][T24165] ? oom_killer_disable+0x280/0x280 [ 1984.806793][T24165] ? find_held_lock+0x35/0x130 [ 1984.811576][T24165] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1984.817138][T24165] ? memcg_event_wake+0x230/0x230 [ 1984.822624][T24165] ? do_raw_spin_unlock+0x57/0x270 [ 1984.827766][T24165] ? _raw_spin_unlock+0x2d/0x50 [ 1984.832643][T24165] try_charge+0x102c/0x15c0 [ 1984.837167][T24165] ? find_held_lock+0x35/0x130 [ 1984.841949][T24165] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1984.847504][T24165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.853760][T24165] ? kasan_check_read+0x11/0x20 [ 1984.858624][T24165] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1984.864189][T24165] mem_cgroup_try_charge+0x24d/0x5e0 [ 1984.869662][T24165] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1984.875309][T24165] wp_page_copy+0x408/0x1740 [ 1984.879909][T24165] ? find_held_lock+0x35/0x130 [ 1984.884689][T24165] ? pmd_pfn+0x1d0/0x1d0 [ 1984.888940][T24165] ? lock_downgrade+0x880/0x880 [ 1984.893788][T24165] ? __pte_alloc_kernel+0x220/0x220 [ 1984.898991][T24165] ? kasan_check_read+0x11/0x20 [ 1984.903856][T24165] ? do_raw_spin_unlock+0x57/0x270 [ 1984.908970][T24165] do_wp_page+0x48e/0x1500 [ 1984.908987][T24165] ? do_raw_spin_lock+0x12a/0x2e0 [ 1984.909002][T24165] ? rwlock_bug.part.0+0x90/0x90 [ 1984.909015][T24165] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1984.909028][T24165] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1984.909047][T24165] __handle_mm_fault+0x22e8/0x3ec0 [ 1984.914783][T24152] device bond_slave_1 entered promiscuous mode [ 1984.918480][T24165] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1984.918495][T24165] ? find_held_lock+0x35/0x130 [ 1984.918507][T24165] ? handle_mm_fault+0x322/0xb30 [ 1984.918529][T24165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.918552][T24165] ? kasan_check_read+0x11/0x20 [ 1984.925722][T24152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1984.928851][T24165] handle_mm_fault+0x43f/0xb30 [ 1984.928873][T24165] __do_page_fault+0x5ef/0xda0 [ 1984.928895][T24165] do_page_fault+0x71/0x581 [ 1984.928910][T24165] ? page_fault+0x8/0x30 [ 1984.928923][T24165] page_fault+0x1e/0x30 [ 1984.928940][T24165] RIP: 0033:0x40de98 [ 1984.956255][T24165] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 2c e2 4b 00 31 c0 e8 83 3a ff ff 31 ff e8 cc 36 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ce 25 64 00 [ 1984.956264][T24165] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 1984.956275][T24165] RAX: 00000000c3676f1f RBX: 0000000069a09a76 RCX: 0000001b32220000 [ 1984.956282][T24165] RDX: 0000000000000000 RSI: 0000000000000f1f RDI: ffffffffc3676f1f [ 1984.956289][T24165] RBP: 0000000000000011 R08: 00000000c3676f1f R09: 00000000c3676f23 [ 1984.956296][T24165] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 1984.956304][T24165] R13: 0000000080000000 R14: 00007fb45b9f7008 R15: 0000000000000011 [ 1984.958254][T24143] bond0: Error: Device is in use and cannot be enslaved [ 1985.079960][T24165] memory: usage 307156kB, limit 307200kB, failcnt 2315 [ 1985.089703][T24125] bond0: Releasing backup interface bond_slave_1 [ 1985.094587][T24165] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1985.096057][T24125] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1985.124164][T24165] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1985.131103][T24165] Memory cgroup stats for /syz4: cache:4KB rss:232268KB rss_huge:194560KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:232308KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1985.154093][T24165] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24781,uid=0 [ 1985.166658][T24125] device bond_slave_1 left promiscuous mode 02:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:05 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x100010, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:05 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asyometric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1985.169860][T24165] Memory cgroup out of memory: Killed process 24781 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1985.191786][ T1043] oom_reaper: reaped process 24781 (syz-executor.4), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 02:38:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)=@random={'trusted.', '-\x00'}, &(0x7f0000000140)='asymmetric\x00', 0xb, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r1, 0x7004) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000000c0)=0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asyometric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cXsgrVid:De', 0x0) [ 1985.249900][T24187] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1985.268395][T24187] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1985.299506][T24188] bond0: Releasing backup interface bond_slave_1 [ 1985.321274][T24188] bond0: the permanent HWaddr of bond_slave_1 - 1a:59:ba:f5:8b:9f - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asyometric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1985.378596][T24188] device bond_slave_1 left promiscuous mode [ 1985.408215][T24202] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1985.443036][T24202] CPU: 0 PID: 24202 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1985.451073][T24202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.461668][T24202] Call Trace: [ 1985.464981][T24202] dump_stack+0x172/0x1f0 [ 1985.469317][T24202] dump_header+0x10f/0xb6c [ 1985.473739][T24202] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1985.479542][T24202] ? ___ratelimit+0x60/0x595 [ 1985.484138][T24202] ? do_raw_spin_unlock+0x57/0x270 [ 1985.489256][T24202] oom_kill_process.cold+0x10/0x15 [ 1985.494480][T24202] out_of_memory+0x79a/0x1280 [ 1985.499456][T24202] ? lock_downgrade+0x880/0x880 [ 1985.504306][T24202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.510549][T24202] ? oom_killer_disable+0x280/0x280 [ 1985.515773][T24202] ? find_held_lock+0x35/0x130 [ 1985.520551][T24202] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1985.526117][T24202] ? memcg_event_wake+0x230/0x230 [ 1985.531148][T24202] ? do_raw_spin_unlock+0x57/0x270 [ 1985.536276][T24202] ? _raw_spin_unlock+0x2d/0x50 [ 1985.541165][T24202] try_charge+0x102c/0x15c0 [ 1985.545660][T24202] ? find_held_lock+0x35/0x130 [ 1985.550534][T24202] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1985.556076][T24202] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1985.561628][T24202] ? find_held_lock+0x35/0x130 [ 1985.566394][T24202] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1985.571954][T24202] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1985.577499][T24202] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1985.582707][T24202] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1985.588259][T24202] __memcg_kmem_charge+0x136/0x300 [ 1985.593376][T24202] __alloc_pages_nodemask+0x437/0x7e0 [ 1985.598753][T24202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.604998][T24202] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1985.610730][T24202] ? copy_process.part.0+0x1d08/0x7980 [ 1985.616194][T24202] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1985.621476][T24202] ? trace_hardirqs_on+0x67/0x230 [ 1985.626533][T24202] ? kasan_check_read+0x11/0x20 [ 1985.631390][T24202] copy_process.part.0+0x3e0/0x7980 [ 1985.636609][T24202] ? psi_memstall_leave+0x11c/0x180 [ 1985.641814][T24202] ? sched_clock+0x2e/0x50 [ 1985.646230][T24202] ? psi_memstall_leave+0x12e/0x180 [ 1985.651425][T24202] ? find_held_lock+0x35/0x130 [ 1985.656189][T24202] ? psi_memstall_leave+0x12e/0x180 [ 1985.661398][T24202] ? __cleanup_sighand+0x60/0x60 [ 1985.666337][T24202] ? __lock_acquire+0x548/0x3fb0 [ 1985.671271][T24202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.677521][T24202] _do_fork+0x257/0xfd0 [ 1985.681688][T24202] ? fork_idle+0x1d0/0x1d0 [ 1985.686107][T24202] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1985.692168][T24202] ? lock_downgrade+0x880/0x880 [ 1985.697019][T24202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.703434][T24202] ? blkcg_exit_queue+0x30/0x30 [ 1985.708377][T24202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1985.713834][T24202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1985.719289][T24202] ? do_syscall_64+0x26/0x610 [ 1985.723962][T24202] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.730029][T24202] ? do_syscall_64+0x26/0x610 [ 1985.734725][T24202] __x64_sys_clone+0xbf/0x150 [ 1985.739575][T24202] do_syscall_64+0x103/0x610 [ 1985.744175][T24202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.750066][T24202] RIP: 0033:0x45b5f9 [ 1985.754055][T24202] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1985.773666][T24202] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1985.782097][T24202] RAX: ffffffffffffffda RBX: 00007fb4599d5700 RCX: 000000000045b5f9 02:38:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xf9a, 0x3, 0xe8f, 0xdb, 0x0, 0x3, 0x5ba81ce8c534cc08, 0x0, 0x7, 0x800, 0x8001, 0x7, 0xa1, 0x715a1288, 0xffffffff, 0x0, 0x800, 0x60, 0x100000001, 0xffffffffffffff65, 0x10d, 0xfffffffffffffff9, 0x9, 0x9, 0x351, 0x4, 0x400, 0x0, 0x8000, 0x7, 0xfffffffffffffe01, 0x3, 0x1e8b, 0x75, 0x1000, 0x83c, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x7fff, 0x1f, 0xf, 0x1, 0x8, 0x2620}, r1, 0xa, r0, 0x8) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1985.782105][T24202] RDX: 00007fb4599d59d0 RSI: 00007fb4599d4db0 RDI: 00000000003d0f00 [ 1985.782112][T24202] RBP: 0000000000a4fcb0 R08: 00007fb4599d5700 R09: 00007fb4599d5700 [ 1985.782117][T24202] R10: 00007fb4599d59d0 R11: 0000000000000202 R12: 0000000000000000 [ 1985.782124][T24202] R13: 0000000000a4fb5f R14: 00007fb4599d59c0 R15: 000000000073bfac [ 1985.822878][T24190] device bond_slave_1 entered promiscuous mode [ 1985.832554][T24190] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1985.844230][T24202] memory: usage 307184kB, limit 307200kB, failcnt 2337 [ 1985.862622][T24190] bond0: Releasing backup interface bond_slave_1 [ 1985.869933][T24202] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1985.882746][T24190] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1985.901033][T24202] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1985.918341][T24202] Memory cgroup stats for /syz4: cache:4KB rss:232220KB rss_huge:194560KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:232324KB inactive_file:0KB active_file:0KB unevictable:0KB 02:38:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xfe87) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) shutdown(r0, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) [ 1985.947585][T24202] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24193,uid=0 [ 1985.970025][T24202] Memory cgroup out of memory: Killed process 24193 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB [ 1985.986916][T24190] device bond_slave_1 left promiscuous mode [ 1986.003922][T24206] device bond_slave_1 entered promiscuous mode [ 1986.027611][T24206] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1986.047914][T24222] device bond_slave_1 entered promiscuous mode [ 1986.054452][T24222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1986.093515][T24233] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3ccsgrVid:De', 0x0) 02:38:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 02:38:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0xfe87) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) shutdown(r0, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 02:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 1986.131268][T24233] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1986.145155][T24228] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x8, @multicast1}, 0xc) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 1986.221884][T24228] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1986.243145][T24245] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1986.271602][T24258] bond0: Releasing backup interface bond_slave_1 [ 1986.286531][T24258] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1986.321496][T24245] CPU: 0 PID: 24245 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1986.329531][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.339783][T24245] Call Trace: [ 1986.343084][T24245] dump_stack+0x172/0x1f0 [ 1986.347522][T24245] dump_header+0x10f/0xb6c [ 1986.351952][T24245] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1986.357776][T24245] ? ___ratelimit+0x60/0x595 [ 1986.362384][T24245] ? do_raw_spin_unlock+0x57/0x270 [ 1986.367522][T24245] oom_kill_process.cold+0x10/0x15 02:38:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1986.372660][T24245] out_of_memory+0x79a/0x1280 [ 1986.377351][T24245] ? lock_downgrade+0x880/0x880 [ 1986.382214][T24245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.388456][T24245] ? oom_killer_disable+0x280/0x280 [ 1986.393681][T24245] ? find_held_lock+0x35/0x130 [ 1986.398453][T24245] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1986.404014][T24245] ? memcg_event_wake+0x230/0x230 [ 1986.409090][T24245] ? do_raw_spin_unlock+0x57/0x270 [ 1986.414203][T24245] ? _raw_spin_unlock+0x2d/0x50 [ 1986.419068][T24245] try_charge+0x102c/0x15c0 [ 1986.423564][T24245] ? find_held_lock+0x35/0x130 [ 1986.428330][T24245] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1986.433892][T24245] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1986.439521][T24245] ? find_held_lock+0x35/0x130 [ 1986.444290][T24245] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1986.449839][T24245] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1986.455395][T24245] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1986.460608][T24245] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1986.466444][T24245] __memcg_kmem_charge+0x136/0x300 [ 1986.471593][T24245] __alloc_pages_nodemask+0x437/0x7e0 [ 1986.476991][T24245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.483234][T24245] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1986.488964][T24245] ? copy_process.part.0+0x1d08/0x7980 [ 1986.494512][T24245] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1986.499803][T24245] ? trace_hardirqs_on+0x67/0x230 [ 1986.504828][T24245] ? kasan_check_read+0x11/0x20 [ 1986.509681][T24245] copy_process.part.0+0x3e0/0x7980 [ 1986.514881][T24245] ? psi_memstall_leave+0x11c/0x180 [ 1986.520077][T24245] ? sched_clock+0x2e/0x50 [ 1986.524542][T24245] ? psi_memstall_leave+0x12e/0x180 [ 1986.529735][T24245] ? find_held_lock+0x35/0x130 [ 1986.534503][T24245] ? psi_memstall_leave+0x12e/0x180 [ 1986.539736][T24245] ? __cleanup_sighand+0x60/0x60 [ 1986.544664][T24245] ? __lock_acquire+0x548/0x3fb0 [ 1986.549602][T24245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.555864][T24245] _do_fork+0x257/0xfd0 [ 1986.560044][T24245] ? fork_idle+0x1d0/0x1d0 [ 1986.564452][T24245] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1986.570516][T24245] ? lock_downgrade+0x880/0x880 [ 1986.575353][T24245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.581580][T24245] ? blkcg_exit_queue+0x30/0x30 [ 1986.586416][T24245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1986.591881][T24245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1986.597349][T24245] ? do_syscall_64+0x26/0x610 [ 1986.602039][T24245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1986.608102][T24245] ? do_syscall_64+0x26/0x610 [ 1986.612780][T24245] __x64_sys_clone+0xbf/0x150 [ 1986.617445][T24245] do_syscall_64+0x103/0x610 [ 1986.622034][T24245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1986.627918][T24245] RIP: 0033:0x45b5f9 [ 1986.631822][T24245] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1986.651429][T24245] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1986.659848][T24245] RAX: ffffffffffffffda RBX: 00007fb4599d5700 RCX: 000000000045b5f9 02:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 1986.667822][T24245] RDX: 00007fb4599d59d0 RSI: 00007fb4599d4db0 RDI: 00000000003d0f00 [ 1986.675887][T24245] RBP: 0000000000a4fcb0 R08: 00007fb4599d5700 R09: 00007fb4599d5700 [ 1986.683858][T24245] R10: 00007fb4599d59d0 R11: 0000000000000202 R12: 0000000000000000 [ 1986.691824][T24245] R13: 0000000000a4fb5f R14: 00007fb4599d59c0 R15: 000000000073bfac [ 1986.702162][T24245] memory: usage 307196kB, limit 307200kB, failcnt 2348 [ 1986.709099][T24245] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1986.718028][T24245] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1986.724904][T24245] Memory cgroup stats for /syz4: cache:4KB rss:232308KB rss_huge:194560KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:232336KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1986.729565][T24258] device bond_slave_1 left promiscuous mode [ 1986.747100][T24245] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25231,uid=0 [ 1986.747228][T24245] Memory cgroup out of memory: Killed process 25231 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1986.758668][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 02:38:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x5, 0x32040) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x100) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000200)="3711dc3d4485722a5558281f1be52ddf627a9c816e5213b36a5cff2134b54a3a936a0084b603dcb12f450c52172737f6e62794e47790d532d11ef707ef928561f8a8bab9a2a5d0f75ac13d14bc9a77bad693bd35ff912f6728503668c497088b129120a493f8d133479c44ab07ae3dc58add9d75e6b86ea1cb688ddf3f37aa240112f5fb8ebf2339c43419ea3df0696d0fcc73f65c88562a65ddcd897b72acc82c57a776462d481ea8051fb6953c149659cd5762ac742314ff0b468293e1652aa605968714900555ba7de091c3d0", &(0x7f0000000300)=""/216}, 0x18) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000000100)='R\trist\xe3cg>\f\x97e\xb7\x00\x00\x00\x00\x00', 0xfffffffffffffffa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x4, 0xe0, 0x5, 0x9, 0x4, 0xa3, 0x20000000000000, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xb9, 0x10000, 0x0, 0x7fff, 0x2}}, &(0x7f0000000680)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000580)={r4, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x200, 0x1f, 0x8200, 0x779b, 0x4, 0xffffffffffffff81, 0x5, 0x4af1d78, r5}, 0x20) [ 1986.821506][ T7504] CPU: 0 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1986.829442][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.829448][ T7504] Call Trace: [ 1986.829471][ T7504] dump_stack+0x172/0x1f0 [ 1986.829490][ T7504] dump_header+0x10f/0xb6c [ 1986.829504][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1986.829519][ T7504] ? ___ratelimit+0x60/0x595 [ 1986.829533][ T7504] ? do_raw_spin_unlock+0x57/0x270 02:38:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "a9b1c67a74d7"}, 0x7, 0x3) [ 1986.829548][ T7504] oom_kill_process.cold+0x10/0x15 [ 1986.829561][ T7504] out_of_memory+0x79a/0x1280 [ 1986.829580][ T7504] ? oom_killer_disable+0x280/0x280 [ 1986.829591][ T7504] ? find_held_lock+0x35/0x130 [ 1986.829620][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1986.829632][ T7504] ? memcg_event_wake+0x230/0x230 [ 1986.829650][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1986.829661][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1986.829679][ T7504] try_charge+0x102c/0x15c0 [ 1986.857978][ T7504] ? find_held_lock+0x35/0x130 [ 1986.858004][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1986.858022][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1986.858036][ T7504] ? find_held_lock+0x35/0x130 [ 1986.858049][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1986.858071][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1986.858082][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1986.858102][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1986.956055][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1986.961182][ T7504] __alloc_pages_nodemask+0x437/0x7e0 [ 1986.966560][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.972819][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1986.978550][ T7504] ? copy_process.part.0+0x1d08/0x7980 [ 1986.984020][ T7504] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1986.989474][ T7504] ? trace_hardirqs_on+0x67/0x230 [ 1986.994499][ T7504] ? kasan_check_read+0x11/0x20 [ 1986.999460][ T7504] copy_process.part.0+0x3e0/0x7980 [ 1987.004662][ T7504] ? __lock_acquire+0x548/0x3fb0 [ 1987.009624][ T7504] ? wp_page_reuse+0x159/0x1d0 [ 1987.014387][ T7504] ? __might_fault+0x12b/0x1e0 [ 1987.019155][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1987.024091][ T7504] ? lock_downgrade+0x880/0x880 [ 1987.028938][ T7504] _do_fork+0x257/0xfd0 [ 1987.033090][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1987.037501][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1987.042975][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1987.048450][ T7504] ? do_syscall_64+0x26/0x610 [ 1987.053112][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.059270][ T7504] ? do_syscall_64+0x26/0x610 [ 1987.063956][ T7504] __x64_sys_clone+0xbf/0x150 [ 1987.068629][ T7504] do_syscall_64+0x103/0x610 [ 1987.073217][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.079114][ T7504] RIP: 0033:0x4571fa [ 1987.083014][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1987.102623][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1987.111037][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1987.119021][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1987.126989][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1987.134977][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1987.142953][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1987.158398][ T7504] memory: usage 307056kB, limit 307200kB, failcnt 447 [ 1987.165204][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1987.165221][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1987.185415][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:247088KB rss_huge:217088KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:247204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1987.213510][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27889,uid=0 [ 1987.229059][ C0] net_ratelimit: 20 callbacks suppressed [ 1987.229067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.234779][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.246744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.252549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.258062][ T7504] Memory cgroup out of memory: Killed process 27889 (syz-executor.1) total-vm:72712kB, anon-rss:2228kB, file-rss:35788kB, shmem-rss:0kB [ 1987.295373][T24269] device bond_slave_1 entered promiscuous mode [ 1987.311752][T24269] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1987.322798][T24283] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1987.335429][T24283] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1987.367287][T24305] bond0: Releasing backup interface bond_slave_1 [ 1987.379714][T24305] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "a9b1c67a74d7"}, 0x7, 0x3) 02:38:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cdsgrVid:De', 0x0) 02:38:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b6aafd95721f0d006f76aa0d8c923460b593a4c06b8ba456643d31a5e141d841185ef000346ff659e9c27550e0a0a9c439956a379b7c80abba43caf0c60b94e2f0fc99ce0c044708be2b5b328f8436a9f60257c7b80dc981fb6e70aa"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000400)) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x14, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x2, 0x2}) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2000000080003, 0xc) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x0, r6}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 1987.457933][T24305] device bond_slave_1 left promiscuous mode [ 1987.467323][T24306] device bond_slave_1 entered promiscuous mode [ 1987.473778][T24306] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1987.523579][ T7504] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1987.566487][ T7504] CPU: 1 PID: 7504 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1987.574440][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.584581][ T7504] Call Trace: [ 1987.584607][ T7504] dump_stack+0x172/0x1f0 [ 1987.584624][ T7504] dump_header+0x10f/0xb6c [ 1987.584637][ T7504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1987.584651][ T7504] ? ___ratelimit+0x60/0x595 [ 1987.584664][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1987.584677][ T7504] oom_kill_process.cold+0x10/0x15 [ 1987.584690][ T7504] out_of_memory+0x79a/0x1280 [ 1987.584702][ T7504] ? lock_downgrade+0x880/0x880 [ 1987.584715][ T7504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.584729][ T7504] ? oom_killer_disable+0x280/0x280 [ 1987.584740][ T7504] ? find_held_lock+0x35/0x130 [ 1987.584761][ T7504] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1987.584771][ T7504] ? memcg_event_wake+0x230/0x230 [ 1987.584789][ T7504] ? do_raw_spin_unlock+0x57/0x270 [ 1987.602634][ T7504] ? _raw_spin_unlock+0x2d/0x50 [ 1987.602654][ T7504] try_charge+0x102c/0x15c0 [ 1987.602677][ T7504] ? find_held_lock+0x35/0x130 [ 1987.617579][ T7504] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1987.617593][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1987.617607][ T7504] ? find_held_lock+0x35/0x130 [ 1987.617618][ T7504] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1987.617640][ T7504] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1987.617653][ T7504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1987.617667][ T7504] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1987.617681][ T7504] __memcg_kmem_charge+0x136/0x300 [ 1987.617700][ T7504] __alloc_pages_nodemask+0x437/0x7e0 [ 1987.617718][ T7504] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1987.617739][ T7504] ? copy_page_range+0x125a/0x1f90 [ 1987.617755][ T7504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1987.617771][ T7504] alloc_pages_current+0x107/0x210 [ 1987.617790][ T7504] pte_alloc_one+0x1b/0x1a0 [ 1987.617808][ T7504] __pte_alloc+0x20/0x310 [ 1987.636703][ T7504] copy_page_range+0x1529/0x1f90 [ 1987.636718][ T7504] ? find_held_lock+0x35/0x130 [ 1987.636748][ T7504] ? pmd_alloc+0x180/0x180 [ 1987.636765][ T7504] ? __rb_insert_augmented+0x231/0xdf0 [ 1987.636777][ T7504] ? validate_mm_rb+0xa3/0xc0 [ 1987.636791][ T7504] ? __vma_link_rb+0x279/0x370 [ 1987.636812][ T7504] copy_process.part.0+0x568b/0x7980 [ 1987.636849][ T7504] ? __cleanup_sighand+0x60/0x60 [ 1987.636883][ T7504] _do_fork+0x257/0xfd0 [ 1987.647102][ T7504] ? fork_idle+0x1d0/0x1d0 [ 1987.647124][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c 02:38:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "a9b1c67a74d7"}, 0x7, 0x3) 02:38:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cisgrVid:De', 0x0) [ 1987.647138][ T7504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1987.647151][ T7504] ? do_syscall_64+0x26/0x610 [ 1987.647166][ T7504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.647176][ T7504] ? do_syscall_64+0x26/0x610 [ 1987.647192][ T7504] __x64_sys_clone+0xbf/0x150 [ 1987.647207][ T7504] do_syscall_64+0x103/0x610 [ 1987.647222][ T7504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.647234][ T7504] RIP: 0033:0x4571fa [ 1987.647248][ T7504] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1987.647255][ T7504] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1987.647269][ T7504] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1987.647277][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1987.647284][ T7504] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000023a9940 [ 1987.647301][ T7504] R10: 00000000023a9c10 R11: 0000000000000246 R12: 0000000000000001 [ 1987.677447][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1987.806395][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 458 [ 1987.858160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.858222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.858326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.858372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.858456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.858497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.862366][ T7504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1987.930611][ T7504] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1987.971393][ T7504] Memory cgroup stats for /syz1: cache:156KB rss:247116KB rss_huge:217088KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:247192KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1987.985767][ T7504] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14165,uid=0 [ 1988.023302][ T7504] Memory cgroup out of memory: Killed process 14165 (syz-executor.1) total-vm:72712kB, anon-rss:2228kB, file-rss:35788kB, shmem-rss:0kB [ 1988.045995][ T1043] oom_reaper: reaped process 14165 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1988.072008][T24329] bond0: Releasing backup interface bond_slave_1 [ 1988.115924][T24329] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:D%', 0x0) 02:38:08 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\x05'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1988.219226][T24329] device bond_slave_1 left promiscuous mode [ 1988.263377][T24335] device bond_slave_1 entered promiscuous mode [ 1988.272895][T24335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1988.285267][T24338] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1988.299998][T24338] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3clsgrVid:De', 0x0) 02:38:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi*:De', 0x0) [ 1988.318133][T24334] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1988.364881][T24334] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1988.402953][T24363] bond0: Releasing backup interface bond_slave_1 [ 1988.419002][T24363] bond0: the permanent HWaddr of bond_slave_1 - fe:85:dc:a2:56:76 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1988.472443][T24363] device bond_slave_1 left promiscuous mode [ 1988.663473][T24329] bond0: Releasing backup interface bond_slave_1 [ 1988.670509][T24329] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:08 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\xff', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1988.736720][T24329] device bond_slave_1 left promiscuous mode [ 1988.745841][T24335] device bond_slave_1 entered promiscuous mode [ 1988.752618][T24335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1988.762594][T24367] device bond_slave_1 entered promiscuous mode [ 1988.773442][T24367] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cosgrVid:De', 0x0) [ 1988.805456][T24382] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 1988.864252][T24382] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1988.901792][T24393] bond0: Releasing backup interface bond_slave_1 02:38:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cpsgrVid:De', 0x0) 02:38:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1988.928310][T24393] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cssgrVid:De', 0x0) [ 1989.028312][T24393] device bond_slave_1 left promiscuous mode [ 1989.086082][T24402] device bond_slave_1 entered promiscuous mode [ 1989.152507][T24402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1989.189751][T24393] bond0: Releasing backup interface bond_slave_1 [ 1989.205374][T24393] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:09 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) 02:38:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cxsgrVid:De', 0x0) [ 1989.248004][T24393] device bond_slave_1 left promiscuous mode [ 1989.258197][T24402] device bond_slave_1 entered promiscuous mode [ 1989.264611][T24402] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.305229][T24449] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1989.341784][T24449] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.390811][T24460] bond0: Releasing backup interface bond_slave_1 02:38:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.431999][T24460] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.523708][T24460] device bond_slave_1 left promiscuous mode [ 1989.573931][T24475] device bond_slave_1 entered promiscuous mode [ 1989.581786][T24475] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1989.597431][T24460] bond0: Releasing backup interface bond_slave_1 [ 1989.604115][T24460] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:09 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 1: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusg%Vid:De', 0x0) [ 1989.677056][T24460] device bond_slave_1 left promiscuous mode [ 1989.687670][T24475] device bond_slave_1 entered promiscuous mode [ 1989.694151][T24475] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_FP_MODE(0x2e) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0xe03}, 0x8) [ 1989.774283][T24513] bond0: Releasing backup interface bond_slave_1 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.806085][T24513] bond0: the permanent HWaddr of bond_slave_1 - 96:60:0c:86:28:e6 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1989.885209][T24513] device bond_slave_1 left promiscuous mode 02:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) read$alg(r1, &(0x7f0000000140)=""/4096, 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002440)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000001140)=""/162, 0xa2}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/167, 0xa7}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0) [ 1990.330186][T24525] bond0: Releasing backup interface bond_slave_1 [ 1990.337516][T24525] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1990.387458][T24525] device bond_slave_1 left promiscuous mode [ 1990.400472][T24529] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1990.422027][T24529] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1990.439780][T24530] device bond_slave_1 entered promiscuous mode [ 1990.447462][T24530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1990.457339][T24534] device bond_slave_1 entered promiscuous mode [ 1990.463882][T24534] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1990.475719][T24525] bond0: Releasing backup interface bond_slave_1 [ 1990.482270][T24525] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:10 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x1, 0x9, 0x2}) 02:38:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi#:De', 0x0) 02:38:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmet%ic\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1990.536696][T24525] device bond_slave_1 left promiscuous mode [ 1990.555292][T24534] device bond_slave_1 entered promiscuous mode [ 1990.566117][T24534] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi%:De', 0x0) [ 1990.631774][T24577] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1990.652284][T24577] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1990.679992][T24582] bond0: Releasing backup interface bond_slave_1 02:38:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi#:De', 0x0) 02:38:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xa9ca}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001140)=ANY=[@ANYRES32=r1, @ANYBLOB="e4000d2c0ee0c904a80155944fca17655f1f461490bb3f7503e9db30aca50b6bea803199f97aea61a921d365fd943198c3557501b34dcf4e7341a07c2d18d4983ff3ad74bf8d49a7279b0f2c543e4be4000020c123fd24a426c28ad73ec4fdd59aa5d96251b81b7878e75e32111f719ac49dacf49b0b872617e14bea9b103ca03832da259c26fba392326b98938b7c22fdeaf714dccb128c99f5ed6c23b17e41cc8f043051e6a0a6377d2ec276d5774bb72fde67000000002391361dc63ffc505fe246b57bb5a0769e8f9fd364de4e306a45ff9e0cf656c2a3a0f84ae6bf2c9235ebd0"], &(0x7f00000000c0)=0xec) 02:38:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1990.707656][T24582] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:10 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1990.768239][T24582] device bond_slave_1 left promiscuous mode 02:38:10 executing program 2 (fault-call:3 fault-nth:0): openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1990.852989][T24589] device bond_slave_1 entered promiscuous mode [ 1990.869727][T24589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1990.890605][T24609] FAULT_INJECTION: forcing a failure. [ 1990.890605][T24609] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.905241][T24582] bond0: Releasing backup interface bond_slave_1 [ 1990.934063][T24582] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1990.955225][T24609] CPU: 1 PID: 24609 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #66 [ 1990.963258][T24609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.967402][T24612] FAULT_INJECTION: forcing a failure. [ 1990.967402][T24612] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.973338][T24609] Call Trace: [ 1990.973380][T24609] dump_stack+0x172/0x1f0 [ 1990.973404][T24609] should_fail.cold+0xa/0x15 [ 1990.973433][T24609] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1991.004995][T24609] ? ___might_sleep+0x163/0x280 [ 1991.009865][T24609] __should_failslab+0x121/0x190 [ 1991.014819][T24609] should_failslab+0x9/0x14 [ 1991.019511][T24609] kmem_cache_alloc_node+0x264/0x710 [ 1991.024823][T24609] __alloc_skb+0xd5/0x5e0 [ 1991.029171][T24609] ? skb_trim+0x190/0x190 [ 1991.033518][T24609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.038538][T24613] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1991.039770][T24609] ? netlink_autobind.isra.0+0x228/0x310 [ 1991.039790][T24609] netlink_sendmsg+0x97b/0xd70 [ 1991.039810][T24609] ? netlink_unicast+0x720/0x720 [ 1991.039830][T24609] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1991.070798][T24609] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1991.076267][T24609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.082539][T24609] ? security_socket_sendmsg+0x93/0xc0 [ 1991.088005][T24609] ? netlink_unicast+0x720/0x720 [ 1991.092965][T24609] sock_sendmsg+0xdd/0x130 [ 1991.097407][T24609] ___sys_sendmsg+0x806/0x930 [ 1991.102193][T24609] ? copy_msghdr_from_user+0x430/0x430 [ 1991.107678][T24609] ? kasan_check_read+0x11/0x20 [ 1991.112554][T24609] ? __fget+0x381/0x550 [ 1991.116730][T24609] ? ksys_dup3+0x3e0/0x3e0 [ 1991.121163][T24609] ? __fget_light+0x1a9/0x230 [ 1991.125843][T24609] ? __fdget+0x1b/0x20 [ 1991.129922][T24609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1991.136447][T24609] __sys_sendmsg+0x105/0x1d0 [ 1991.141043][T24609] ? __ia32_sys_shutdown+0x80/0x80 [ 1991.146163][T24609] ? fput_many+0x12c/0x1a0 [ 1991.150596][T24609] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1991.156459][T24609] ? do_syscall_64+0x26/0x610 [ 1991.161142][T24609] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1991.167298][T24609] ? do_syscall_64+0x26/0x610 [ 1991.171988][T24609] __x64_sys_sendmsg+0x78/0xb0 [ 1991.176757][T24609] do_syscall_64+0x103/0x610 [ 1991.181361][T24609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1991.187254][T24609] RIP: 0033:0x458c29 [ 1991.191151][T24609] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1991.210754][T24609] RSP: 002b:00007f6b774c4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1991.219167][T24609] RAX: ffffffffffffffda RBX: 00007f6b774c4c90 RCX: 0000000000458c29 [ 1991.227141][T24609] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1991.235123][T24609] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1991.243101][T24609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b774c56d4 [ 1991.251075][T24609] R13: 00000000004c5e62 R14: 00000000004da658 R15: 0000000000000005 [ 1991.259078][T24613] CPU: 0 PID: 24613 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1991.267075][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.277260][T24613] Call Trace: [ 1991.280570][T24613] dump_stack+0x172/0x1f0 [ 1991.284906][T24613] dump_header+0x10f/0xb6c [ 1991.289336][T24613] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1991.295158][T24613] ? ___ratelimit+0x60/0x595 [ 1991.299756][T24613] ? do_raw_spin_unlock+0x57/0x270 [ 1991.305050][T24613] oom_kill_process.cold+0x10/0x15 [ 1991.310174][T24613] out_of_memory+0x79a/0x1280 [ 1991.314859][T24613] ? lock_downgrade+0x880/0x880 [ 1991.319706][T24613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.325950][T24613] ? oom_killer_disable+0x280/0x280 [ 1991.331149][T24613] ? find_held_lock+0x35/0x130 [ 1991.335925][T24613] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1991.341470][T24613] ? memcg_event_wake+0x230/0x230 [ 1991.346509][T24613] ? do_raw_spin_unlock+0x57/0x270 [ 1991.351618][T24613] ? _raw_spin_unlock+0x2d/0x50 [ 1991.356469][T24613] try_charge+0x102c/0x15c0 [ 1991.360967][T24613] ? find_held_lock+0x35/0x130 [ 1991.365744][T24613] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1991.371285][T24613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.377527][T24613] ? kasan_check_read+0x11/0x20 [ 1991.382458][T24613] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1991.388001][T24613] mem_cgroup_try_charge+0x24d/0x5e0 [ 1991.393378][T24613] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1991.399012][T24613] __handle_mm_fault+0x1e1f/0x3ec0 [ 1991.404121][T24613] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1991.409750][T24613] ? find_held_lock+0x35/0x130 [ 1991.414524][T24613] ? handle_mm_fault+0x322/0xb30 [ 1991.419480][T24613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.425725][T24613] ? kasan_check_read+0x11/0x20 [ 1991.431016][T24613] handle_mm_fault+0x43f/0xb30 [ 1991.435779][T24613] __do_page_fault+0x5ef/0xda0 [ 1991.440546][T24613] do_page_fault+0x71/0x581 [ 1991.445041][T24613] ? page_fault+0x8/0x30 [ 1991.449275][T24613] page_fault+0x1e/0x30 [ 1991.453428][T24613] RIP: 0033:0x4737fd [ 1991.457314][T24613] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 1991.477000][T24613] RSP: 002b:00007fce941fc4d0 EFLAGS: 00010246 [ 1991.483057][T24613] RAX: 00007fce941fc5f0 RBX: 0000000000712f20 RCX: 00000000ffffffff [ 1991.491018][T24613] RDX: 00007fce941feba0 RSI: 00000000004c9390 RDI: 0000000000712f20 [ 1991.498990][T24613] RBP: 00007fce941feb70 R08: 0000000000a54ef0 R09: 00000000004c9390 [ 1991.506951][T24613] R10: 00007fce941ff700 R11: 0000000000000000 R12: 00000000004c9390 [ 1991.514913][T24613] R13: 00007fce941feba0 R14: 00000000004d0020 R15: 00000000ffffffff [ 1991.522906][T24612] CPU: 1 PID: 24612 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1991.530915][T24612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.530921][T24612] Call Trace: [ 1991.530944][T24612] dump_stack+0x172/0x1f0 [ 1991.530962][T24612] should_fail.cold+0xa/0x15 [ 1991.530976][T24612] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1991.530997][T24612] ? ___might_sleep+0x163/0x280 [ 1991.548727][T24612] __should_failslab+0x121/0x190 [ 1991.563922][T24612] should_failslab+0x9/0x14 [ 1991.563939][T24612] __kmalloc_track_caller+0x2d8/0x740 [ 1991.563961][T24612] ? strndup_user+0x77/0xd0 [ 1991.573362][T24612] memdup_user+0x26/0xb0 [ 1991.573384][T24612] strndup_user+0x77/0xd0 [ 1991.585199][T24613] memory: usage 307200kB, limit 307200kB, failcnt 407 [ 1991.587475][T24612] __x64_sys_request_key+0x13b/0x430 [ 1991.587490][T24612] ? __ia32_sys_add_key+0x4f0/0x4f0 [ 1991.587517][T24612] do_syscall_64+0x103/0x610 [ 1991.587536][T24612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1991.587548][T24612] RIP: 0033:0x458c29 [ 1991.587559][T24612] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1991.587566][T24612] RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1991.587578][T24612] RAX: ffffffffffffffda RBX: 00007fce941fec90 RCX: 0000000000458c29 [ 1991.587585][T24612] RDX: 0000000020001fee RSI: 0000000020001ffb RDI: 000000002000aff5 [ 1991.587592][T24612] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1991.587599][T24612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 [ 1991.587611][T24612] R13: 00000000004c5bd3 R14: 00000000004da1f0 R15: 0000000000000004 [ 1991.592939][T24613] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1991.646806][T24582] device bond_slave_1 left promiscuous mode [ 1991.666562][T24613] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1991.712874][T24613] Memory cgroup stats for /syz2: cache:56KB rss:241328KB rss_huge:206848KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:241340KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1991.735128][T24613] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13221,uid=0 02:38:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi*:De', 0x0) 02:38:11 executing program 1 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:11 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:38:11 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1991.750630][T24613] Memory cgroup out of memory: Killed process 13221 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB [ 1991.755978][T24589] device bond_slave_1 entered promiscuous mode [ 1991.780750][T24589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1991.827879][T24624] FAULT_INJECTION: forcing a failure. [ 1991.827879][T24624] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.831961][T24629] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1991.846021][T24624] CPU: 0 PID: 24624 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #66 [ 1991.858952][T24624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.869010][T24624] Call Trace: [ 1991.869490][T24629] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1991.872322][T24624] dump_stack+0x172/0x1f0 [ 1991.872346][T24624] should_fail.cold+0xa/0x15 [ 1991.872364][T24624] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1991.872386][T24624] ? ___might_sleep+0x163/0x280 [ 1991.901631][T24624] __should_failslab+0x121/0x190 [ 1991.906583][T24624] should_failslab+0x9/0x14 [ 1991.911107][T24624] __kmalloc_track_caller+0x2d8/0x740 [ 1991.916503][T24624] ? strndup_user+0x77/0xd0 [ 1991.921024][T24624] memdup_user+0x26/0xb0 [ 1991.925274][T24624] strndup_user+0x77/0xd0 [ 1991.929621][T24624] __x64_sys_request_key+0x13b/0x430 [ 1991.929637][T24624] ? __ia32_sys_add_key+0x4f0/0x4f0 [ 1991.929663][T24624] do_syscall_64+0x103/0x610 [ 1991.940119][T24624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1991.940132][T24624] RIP: 0033:0x458c29 [ 1991.940147][T24624] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:38:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:11 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='.symmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1991.940154][T24624] RSP: 002b:00007ff9f1da3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1991.983921][T24624] RAX: ffffffffffffffda RBX: 00007ff9f1da3c90 RCX: 0000000000458c29 [ 1991.983937][T24624] RDX: 0000000020001fee RSI: 0000000020001ffb RDI: 000000002000aff5 [ 1991.999874][T24624] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.007942][T24624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9f1da46d4 [ 1992.015944][T24624] R13: 00000000004c5bd3 R14: 00000000004da1f0 R15: 0000000000000004 02:38:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi+:De', 0x0) [ 1992.026792][T24622] FAULT_INJECTION: forcing a failure. [ 1992.026792][T24622] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.028876][T24648] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1992.061722][T24648] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1992.085524][T24647] bond0: Releasing backup interface bond_slave_1 [ 1992.110890][T24622] CPU: 1 PID: 24622 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #66 [ 1992.118921][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.121448][T24647] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1992.128978][T24622] Call Trace: [ 1992.129013][T24622] dump_stack+0x172/0x1f0 [ 1992.129037][T24622] should_fail.cold+0xa/0x15 [ 1992.129053][T24622] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1992.129073][T24622] ? ___might_sleep+0x163/0x280 [ 1992.129094][T24622] __should_failslab+0x121/0x190 [ 1992.129107][T24622] should_failslab+0x9/0x14 [ 1992.129123][T24622] kmem_cache_alloc_node_trace+0x270/0x720 [ 1992.129148][T24622] __kmalloc_node_track_caller+0x3d/0x70 [ 1992.129164][T24622] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1992.129183][T24622] __alloc_skb+0x10b/0x5e0 [ 1992.201889][T24622] ? skb_trim+0x190/0x190 [ 1992.206239][T24622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.212498][T24622] ? netlink_autobind.isra.0+0x228/0x310 [ 1992.218157][T24622] netlink_sendmsg+0x97b/0xd70 [ 1992.222953][T24622] ? netlink_unicast+0x720/0x720 [ 1992.227891][T24622] ? aa_sock_msg_perm.isra.0+0xba/0x170 02:38:12 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymm%tric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1992.227907][T24622] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1992.227923][T24622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.227936][T24622] ? security_socket_sendmsg+0x93/0xc0 [ 1992.227948][T24622] ? netlink_unicast+0x720/0x720 [ 1992.227965][T24622] sock_sendmsg+0xdd/0x130 [ 1992.227981][T24622] ___sys_sendmsg+0x806/0x930 [ 1992.227997][T24622] ? copy_msghdr_from_user+0x430/0x430 [ 1992.228021][T24622] ? kasan_check_read+0x11/0x20 [ 1992.228037][T24622] ? __fget+0x381/0x550 [ 1992.228056][T24622] ? ksys_dup3+0x3e0/0x3e0 [ 1992.228077][T24622] ? __fget_light+0x1a9/0x230 [ 1992.228091][T24622] ? __fdget+0x1b/0x20 [ 1992.228104][T24622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1992.228121][T24622] __sys_sendmsg+0x105/0x1d0 [ 1992.228134][T24622] ? __ia32_sys_shutdown+0x80/0x80 [ 1992.228150][T24622] ? fput_many+0x12c/0x1a0 [ 1992.239131][T24622] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1992.239147][T24622] ? do_syscall_64+0x26/0x610 [ 1992.239162][T24622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.239172][T24622] ? do_syscall_64+0x26/0x610 [ 1992.239196][T24622] __x64_sys_sendmsg+0x78/0xb0 [ 1992.239211][T24622] do_syscall_64+0x103/0x610 [ 1992.239226][T24622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.239241][T24622] RIP: 0033:0x458c29 [ 1992.271520][T24662] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1992.275168][T24622] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.275183][T24622] RSP: 002b:00007f6b774c4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1992.275198][T24622] RAX: ffffffffffffffda RBX: 00007f6b774c4c90 RCX: 0000000000458c29 [ 1992.275206][T24622] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1992.275220][T24622] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.417314][T24622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b774c56d4 [ 1992.425300][T24622] R13: 00000000004c5e62 R14: 00000000004da658 R15: 0000000000000005 [ 1992.433312][T24662] CPU: 0 PID: 24662 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #66 [ 1992.441318][T24662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.451386][T24662] Call Trace: [ 1992.454689][T24662] dump_stack+0x172/0x1f0 [ 1992.459037][T24662] dump_header+0x10f/0xb6c [ 1992.463469][T24662] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1992.469294][T24662] ? ___ratelimit+0x60/0x595 [ 1992.473887][T24662] ? do_raw_spin_unlock+0x57/0x270 [ 1992.478993][T24662] oom_kill_process.cold+0x10/0x15 [ 1992.479008][T24662] out_of_memory+0x79a/0x1280 [ 1992.479022][T24662] ? lock_downgrade+0x880/0x880 [ 1992.479037][T24662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.479053][T24662] ? oom_killer_disable+0x280/0x280 [ 1992.505238][T24662] ? find_held_lock+0x35/0x130 [ 1992.510034][T24662] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1992.515685][T24662] ? memcg_event_wake+0x230/0x230 [ 1992.520725][T24662] ? do_raw_spin_unlock+0x57/0x270 [ 1992.525851][T24662] ? _raw_spin_unlock+0x2d/0x50 [ 1992.530715][T24662] try_charge+0x102c/0x15c0 02:38:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='.symmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1992.535234][T24662] ? find_held_lock+0x35/0x130 [ 1992.540010][T24662] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1992.545559][T24662] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1992.551111][T24662] ? find_held_lock+0x35/0x130 [ 1992.555865][T24662] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1992.561411][T24662] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1992.566940][T24662] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1992.572208][T24662] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1992.577737][T24662] __memcg_kmem_charge+0x136/0x300 [ 1992.582835][T24662] __alloc_pages_nodemask+0x437/0x7e0 [ 1992.588208][T24662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.594439][T24662] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1992.600144][T24662] ? copy_process.part.0+0x1d08/0x7980 [ 1992.605588][T24662] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1992.610875][T24662] ? trace_hardirqs_on+0x67/0x230 [ 1992.615898][T24662] ? kasan_check_read+0x11/0x20 [ 1992.620738][T24662] copy_process.part.0+0x3e0/0x7980 [ 1992.625939][T24662] ? __lock_acquire+0x548/0x3fb0 [ 1992.630860][T24662] ? find_held_lock+0x35/0x130 [ 1992.635604][T24662] ? kcov_ioctl+0x53/0x200 [ 1992.640001][T24662] ? __might_fault+0x12b/0x1e0 [ 1992.644754][T24662] ? __cleanup_sighand+0x60/0x60 [ 1992.649680][T24662] ? lock_downgrade+0x880/0x880 [ 1992.654525][T24662] _do_fork+0x257/0xfd0 [ 1992.658668][T24662] ? fork_idle+0x1d0/0x1d0 [ 1992.663077][T24662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1992.668519][T24662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1992.673960][T24662] ? do_syscall_64+0x26/0x610 [ 1992.678637][T24662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.684694][T24662] ? do_syscall_64+0x26/0x610 [ 1992.689379][T24662] __x64_sys_clone+0xbf/0x150 [ 1992.694039][T24662] do_syscall_64+0x103/0x610 [ 1992.698614][T24662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.705044][T24662] RIP: 0033:0x458c29 [ 1992.708922][T24662] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.728511][T24662] RSP: 002b:00007fce941ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1992.737008][T24662] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1992.744966][T24662] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 4000002102001ffb [ 1992.752920][T24662] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 1992.760874][T24662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941de6d4 [ 1992.768824][T24662] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1992.778963][T24662] memory: usage 307096kB, limit 307200kB, failcnt 424 [ 1992.785399][T24647] device bond_slave_1 left promiscuous mode [ 1992.802014][T24662] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1992.811841][T24662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1992.820734][T24657] device bond_slave_1 entered promiscuous mode [ 1992.841202][T24662] Memory cgroup stats for /syz2: cache:56KB rss:241340KB rss_huge:206848KB shmem:12KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:241272KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1992.849110][T24657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1992.877097][T24662] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18893,uid=0 [ 1992.895796][T24647] bond0: Releasing backup interface bond_slave_1 [ 1992.906539][T24647] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1992.913013][T24662] Memory cgroup out of memory: Killed process 18893 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB 02:38:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymm%tric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 3 (fault-call:3 fault-nth:2): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:38:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi-:De', 0x0) 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmet%ic\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.007303][T24647] device bond_slave_1 left promiscuous mode [ 1993.016014][T24681] device bond_slave_1 entered promiscuous mode [ 1993.022592][T24681] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmet%ic\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x02', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.069990][T24698] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1993.086483][T24698] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1993.109215][T24691] FAULT_INJECTION: forcing a failure. 02:38:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi.:De', 0x0) [ 1993.109215][T24691] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.152826][T24716] bond0: Releasing backup interface bond_slave_1 [ 1993.162443][T24691] CPU: 0 PID: 24691 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #66 [ 1993.171416][T24691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.181480][T24691] Call Trace: [ 1993.184787][T24691] dump_stack+0x172/0x1f0 [ 1993.189137][T24691] should_fail.cold+0xa/0x15 [ 1993.193754][T24691] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1993.199607][T24691] ? ___might_sleep+0x163/0x280 [ 1993.204483][T24691] __should_failslab+0x121/0x190 [ 1993.209444][T24691] should_failslab+0x9/0x14 [ 1993.213962][T24691] kmem_cache_alloc_node+0x264/0x710 [ 1993.219275][T24691] ? netdev_run_todo+0x5ea/0x7d0 [ 1993.219298][T24691] __alloc_skb+0xd5/0x5e0 [ 1993.228553][T24691] ? skb_trim+0x190/0x190 [ 1993.232888][T24691] ? rtnl_bridge_dellink+0x3cc/0x6d0 [ 1993.238184][T24691] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1993.244541][T24691] ? rtnl_bridge_setlink+0x6e0/0x6e0 [ 1993.249840][T24691] netlink_ack+0x25c/0xb50 [ 1993.254277][T24691] ? netlink_sendmsg+0xd70/0xd70 [ 1993.260011][T24691] ? netlink_deliver_tap+0x22d/0xc00 [ 1993.265317][T24691] ? find_held_lock+0x35/0x130 [ 1993.270186][T24691] netlink_rcv_skb+0x379/0x460 [ 1993.274971][T24691] ? rtnetlink_put_metrics+0x560/0x560 [ 1993.280441][T24691] ? netlink_ack+0xb50/0xb50 [ 1993.280629][T24716] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x02', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x03', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.285035][T24691] ? kasan_check_read+0x11/0x20 [ 1993.285055][T24691] ? netlink_deliver_tap+0x254/0xc00 [ 1993.285078][T24691] rtnetlink_rcv+0x1d/0x30 [ 1993.285091][T24691] netlink_unicast+0x536/0x720 [ 1993.285108][T24691] ? netlink_attachskb+0x770/0x770 [ 1993.285135][T24691] ? _copy_from_iter_full+0x25d/0x900 [ 1993.331762][T24691] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1993.337503][T24691] ? __check_object_size+0x3d/0x42f [ 1993.342728][T24691] netlink_sendmsg+0x8ae/0xd70 [ 1993.342751][T24691] ? netlink_unicast+0x720/0x720 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x04', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.342765][T24691] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1993.342782][T24691] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1993.352463][T24691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1993.352481][T24691] ? security_socket_sendmsg+0x93/0xc0 [ 1993.352496][T24691] ? netlink_unicast+0x720/0x720 [ 1993.352518][T24691] sock_sendmsg+0xdd/0x130 [ 1993.384898][T24691] ___sys_sendmsg+0x806/0x930 [ 1993.389600][T24691] ? copy_msghdr_from_user+0x430/0x430 [ 1993.395087][T24691] ? kasan_check_read+0x11/0x20 [ 1993.399952][T24691] ? __fget+0x381/0x550 [ 1993.404129][T24691] ? ksys_dup3+0x3e0/0x3e0 [ 1993.408563][T24691] ? __fget_light+0x1a9/0x230 [ 1993.413345][T24691] ? __fdget+0x1b/0x20 [ 1993.417435][T24691] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1993.423775][T24691] __sys_sendmsg+0x105/0x1d0 [ 1993.428728][T24691] ? __ia32_sys_shutdown+0x80/0x80 [ 1993.433855][T24691] ? fput_many+0x12c/0x1a0 [ 1993.438311][T24691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1993.443782][T24691] ? do_syscall_64+0x26/0x610 [ 1993.448469][T24691] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1993.454545][T24691] ? do_syscall_64+0x26/0x610 [ 1993.459252][T24691] __x64_sys_sendmsg+0x78/0xb0 [ 1993.464031][T24691] do_syscall_64+0x103/0x610 [ 1993.468643][T24691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1993.474547][T24691] RIP: 0033:0x458c29 [ 1993.478450][T24691] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1993.498417][T24691] RSP: 002b:00007f6b774c4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1993.498433][T24691] RAX: ffffffffffffffda RBX: 00007f6b774c4c90 RCX: 0000000000458c29 [ 1993.498442][T24691] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1993.498449][T24691] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1993.498458][T24691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b774c56d4 [ 1993.498465][T24691] R13: 00000000004c5e62 R14: 00000000004da658 R15: 0000000000000005 [ 1993.536414][ C0] net_ratelimit: 20 callbacks suppressed [ 1993.536422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.548010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.559457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.571059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.586762][T24716] device bond_slave_1 left promiscuous mode [ 1993.606970][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1993.622408][T24703] device bond_slave_1 entered promiscuous mode 02:38:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x05', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x03', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVi0:De', 0x0) 02:38:13 executing program 3 (fault-call:3 fault-nth:3): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1993.654966][T24703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1993.677256][T24716] bond0: Error: Device is in use and cannot be enslaved 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x06', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.729085][T24763] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 1993.743884][T24763] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\a', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrViX:De', 0x0) [ 1993.789087][T24770] bond0: Releasing backup interface bond_slave_1 [ 1993.795575][T24770] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x04', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\n', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x05', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1993.948796][T24770] device bond_slave_1 left promiscuous mode [ 1994.000522][T24762] FAULT_INJECTION: forcing a failure. [ 1994.000522][T24762] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.020013][T24762] CPU: 1 PID: 24762 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #66 [ 1994.028068][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.028080][T24762] Call Trace: [ 1994.028112][T24762] dump_stack+0x172/0x1f0 [ 1994.028131][T24762] should_fail.cold+0xa/0x15 [ 1994.028147][T24762] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1994.028167][T24762] ? ___might_sleep+0x163/0x280 [ 1994.028192][T24762] __should_failslab+0x121/0x190 [ 1994.028207][T24762] should_failslab+0x9/0x14 [ 1994.028223][T24762] kmem_cache_alloc_node_trace+0x270/0x720 [ 1994.028246][T24762] __kmalloc_node_track_caller+0x3d/0x70 [ 1994.048853][T24798] device bond_slave_1 entered promiscuous mode [ 1994.050716][T24762] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1994.050736][T24762] __alloc_skb+0x10b/0x5e0 [ 1994.050754][T24762] ? skb_trim+0x190/0x190 [ 1994.060469][T24798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1994.064962][T24762] ? rtnl_bridge_dellink+0x3cc/0x6d0 [ 1994.064981][T24762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1994.065000][T24762] ? rtnl_bridge_setlink+0x6e0/0x6e0 [ 1994.080221][T24762] netlink_ack+0x25c/0xb50 [ 1994.080239][T24762] ? netlink_sendmsg+0xd70/0xd70 [ 1994.080250][T24762] ? netlink_deliver_tap+0x22d/0xc00 [ 1994.080266][T24762] ? find_held_lock+0x35/0x130 [ 1994.080283][T24762] netlink_rcv_skb+0x379/0x460 [ 1994.080300][T24762] ? rtnetlink_put_metrics+0x560/0x560 [ 1994.080313][T24762] ? netlink_ack+0xb50/0xb50 [ 1994.080328][T24762] ? kasan_check_read+0x11/0x20 [ 1994.080340][T24762] ? netlink_deliver_tap+0x254/0xc00 [ 1994.080357][T24762] rtnetlink_rcv+0x1d/0x30 [ 1994.080368][T24762] netlink_unicast+0x536/0x720 [ 1994.080387][T24762] ? netlink_attachskb+0x770/0x770 [ 1994.092164][T24762] ? _copy_from_iter_full+0x25d/0x900 [ 1994.092190][T24762] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1994.092210][T24762] ? __check_object_size+0x3d/0x42f [ 1994.097758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1994.102065][T24762] netlink_sendmsg+0x8ae/0xd70 [ 1994.106808][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1994.114948][T24762] ? netlink_unicast+0x720/0x720 [ 1994.120341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1994.126443][T24762] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1994.126458][T24762] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1994.126474][T24762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1994.126488][T24762] ? security_socket_sendmsg+0x93/0xc0 [ 1994.126503][T24762] ? netlink_unicast+0x720/0x720 [ 1994.131802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1994.136157][T24762] sock_sendmsg+0xdd/0x130 [ 1994.141210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1994.146680][T24762] ___sys_sendmsg+0x806/0x930 [ 1994.146697][T24762] ? copy_msghdr_from_user+0x430/0x430 [ 1994.146722][T24762] ? kasan_check_read+0x11/0x20 [ 1994.151489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1994.157727][T24762] ? __fget+0x381/0x550 [ 1994.157743][T24762] ? ksys_dup3+0x3e0/0x3e0 [ 1994.157762][T24762] ? __fget_light+0x1a9/0x230 [ 1994.157779][T24762] ? __fdget+0x1b/0x20 [ 1994.172677][T24762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1994.172704][T24762] __sys_sendmsg+0x105/0x1d0 [ 1994.182381][T24762] ? __ia32_sys_shutdown+0x80/0x80 [ 1994.182396][T24762] ? fput_many+0x12c/0x1a0 [ 1994.182422][T24762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1994.342737][T24762] ? do_syscall_64+0x26/0x610 [ 1994.347403][T24762] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1994.353609][T24762] ? do_syscall_64+0x26/0x610 [ 1994.358375][T24762] __x64_sys_sendmsg+0x78/0xb0 [ 1994.363161][T24762] do_syscall_64+0x103/0x610 [ 1994.367854][T24762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1994.373732][T24762] RIP: 0033:0x458c29 [ 1994.377623][T24762] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1994.397266][T24762] RSP: 002b:00007f6b774c4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.405767][T24762] RAX: ffffffffffffffda RBX: 00007f6b774c4c90 RCX: 0000000000458c29 [ 1994.413901][T24762] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1994.421866][T24762] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.429824][T24762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b774c56d4 [ 1994.437830][T24762] R13: 00000000004c5e62 R14: 00000000004da658 R15: 0000000000000005 [ 1994.451836][T24770] bond0: Releasing backup interface bond_slave_1 [ 1994.459013][T24770] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:14 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x06', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:14 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x0f', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 1994.506662][T24770] device bond_slave_1 left promiscuous mode [ 1994.516590][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:38:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVic:De', 0x0) [ 1994.564341][T24818] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:14 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:38:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\a', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:14 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricH', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1994.618754][T24818] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 02:38:14 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricL', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:14 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetrich', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1994.701504][T24831] device bond_slave_1 entered promiscuous mode [ 1994.730277][T24831] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\n', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVii:De', 0x0) [ 1994.810452][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1994.870495][T24822] bond0: Releasing backup interface bond_slave_1 [ 1994.908830][T24822] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts 02:38:15 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\x02'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00^\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 02:38:15 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricl', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:38:15 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500070000006700000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x0f', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1994.997061][T24822] device bond_slave_1 left promiscuous mode [ 1995.008888][T24831] device bond_slave_1 entered promiscuous mode [ 1995.015430][T24831] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:38:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVil:De', 0x0) 02:38:15 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetrict', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricH', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1995.066938][T24882] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 02:38:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVio:De', 0x0) [ 1995.139886][T24882] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1995.175056][T24892] bond0: Releasing backup interface bond_slave_1 [ 1995.194980][T24892] bond0: the permanent HWaddr of bond_slave_1 - 76:2a:2d:54:c7:77 - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts [ 1995.211904][ T7511] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1995.211921][ T7511] CPU: 1 PID: 7511 Comm: syz-executor.4 Not tainted 5.1.0-rc4+ #66 [ 1995.211929][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.211933][ T7511] Call Trace: [ 1995.211957][ T7511] dump_stack+0x172/0x1f0 [ 1995.211977][ T7511] dump_header+0x10f/0xb6c [ 1995.211991][ T7511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1995.212013][ T7511] ? ___ratelimit+0x60/0x595 [ 1995.212028][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1995.212044][ T7511] oom_kill_process.cold+0x10/0x15 [ 1995.212060][ T7511] out_of_memory+0x79a/0x1280 [ 1995.212075][ T7511] ? lock_downgrade+0x880/0x880 [ 1995.212090][ T7511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1995.212113][ T7511] ? oom_killer_disable+0x280/0x280 [ 1995.212125][ T7511] ? find_held_lock+0x35/0x130 [ 1995.212148][ T7511] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1995.212161][ T7511] ? memcg_event_wake+0x230/0x230 [ 1995.212181][ T7511] ? do_raw_spin_unlock+0x57/0x270 [ 1995.212194][ T7511] ? _raw_spin_unlock+0x2d/0x50 [ 1995.212210][ T7511] try_charge+0x102c/0x15c0 [ 1995.212222][ T7511] ? find_held_lock+0x35/0x130 [ 1995.212242][ T7511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1995.212254][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1995.212268][ T7511] ? find_held_lock+0x35/0x130 [ 1995.212280][ T7511] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1995.212303][ T7511] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1995.212316][ T7511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1995.212332][ T7511] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1995.212350][ T7511] __memcg_kmem_charge+0x136/0x300 [ 1995.212367][ T7511] __alloc_pages_nodemask+0x437/0x7e0 [ 1995.212385][ T7511] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1995.212405][ T7511] ? copy_page_range+0x125a/0x1f90 [ 1995.212424][ T7511] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1995.212440][ T7511] alloc_pages_current+0x107/0x210 [ 1995.212457][ T7511] pte_alloc_one+0x1b/0x1a0 [ 1995.212472][ T7511] __pte_alloc+0x20/0x310 [ 1995.212489][ T7511] copy_page_range+0x1529/0x1f90 [ 1995.212499][ T7511] ? find_held_lock+0x35/0x130 [ 1995.212533][ T7511] ? pmd_alloc+0x180/0x180 [ 1995.212547][ T7511] ? __rb_insert_augmented+0x231/0xdf0 [ 1995.212559][ T7511] ? validate_mm_rb+0xa3/0xc0 [ 1995.212574][ T7511] ? __vma_link_rb+0x279/0x370 [ 1995.212593][ T7511] copy_process.part.0+0x568b/0x7980 [ 1995.212632][ T7511] ? __cleanup_sighand+0x60/0x60 [ 1995.212663][ T7511] _do_fork+0x257/0xfd0 [ 1995.212681][ T7511] ? fork_idle+0x1d0/0x1d0 [ 1995.212706][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1995.212725][ T7511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1995.472461][ T7511] ? do_syscall_64+0x26/0x610 [ 1995.477321][ T7511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1995.484292][ T7511] ? do_syscall_64+0x26/0x610 [ 1995.489052][ T7511] __x64_sys_clone+0xbf/0x150 [ 1995.493982][ T7511] do_syscall_64+0x103/0x610 [ 1995.498587][ T7511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1995.505197][ T7511] RIP: 0033:0x4571fa [ 1995.509101][ T7511] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1995.528961][ T7511] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1995.537369][ T7511] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1995.545332][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1995.553295][ T7511] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002078940 [ 1995.561280][ T7511] R10: 0000000002078c10 R11: 0000000000000246 R12: 0000000000000001 [ 1995.569255][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1995.579414][ T1042] INFO: task syz-executor.2:12987 blocked for more than 143 seconds. [ 1995.582039][ T7511] memory: usage 307200kB, limit 307200kB, failcnt 2389 02:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricL', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1995.592828][ T1042] Not tainted 5.1.0-rc4+ #66 [ 1995.599602][ T3875] kobject: 'loop1' (00000000001cb8a0): kobject_uevent_env [ 1995.601982][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1995.610967][ T7511] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1995.621927][ T1042] syz-executor.2 D29680 12987 12983 0x00000000 [ 1995.626117][ T3875] kobject: 'loop1' (00000000001cb8a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1995.630299][ T1042] Call Trace: 02:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetrich', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1995.651444][ T1042] __schedule+0x817/0x1cc0 [ 1995.657575][ T1042] ? __mutex_lock+0x721/0x1310 [ 1995.658703][ T7511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1995.662710][ T1042] ? __sched_text_start+0x8/0x8 [ 1995.688944][ T7511] Memory cgroup stats for /syz4: cache:4KB rss:230880KB rss_huge:192512KB shmem:84KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:231024KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1995.690651][ T1042] schedule+0x92/0x180 [ 1995.721765][ T1042] schedule_preempt_disabled+0x13/0x20 [ 1995.729215][ T1042] __mutex_lock+0x726/0x1310 [ 1995.734266][ T1042] ? mon_bin_read+0x60/0x640 [ 1995.743933][ T1042] ? mutex_trylock+0x1e0/0x1e0 02:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x77, 0xfff, 0x0, 0x9}, 0x20) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetricl', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 1995.750598][ T1042] ? fsnotify+0xbc0/0xbc0 [ 1995.750912][ T7511] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25348,uid=0 [ 1995.755168][ T1042] ? _copy_from_user+0xdd/0x150 [ 1995.781459][ T1042] mutex_lock_nested+0x16/0x20 [ 1995.786983][ T1042] ? mutex_lock_nested+0x16/0x20 [ 1995.792904][ T1042] mon_bin_read+0x60/0x640 [ 1995.794751][ T3875] kobject: 'loop1' (00000000001cb8a0): kobject_uevent_env [ 1995.802916][ T1042] do_iter_read+0x4a9/0x660 [ 1995.805195][ T3875] kobject: 'loop1' (00000000001cb8a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1995.809527][ T1042] ? dup_iter+0x260/0x260 [ 1995.824437][ T1042] vfs_readv+0xf0/0x160 [ 1995.829052][ T1042] ? lock_downgrade+0x880/0x880 [ 1995.834269][ T1042] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1995.840856][ T1042] ? kasan_check_read+0x11/0x20 [ 1995.845411][ T7511] Memory cgroup out of memory: Killed process 25348 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 1995.866331][ T3875] kobject: 'loop2' (00000000afe63fd4): kobject_uevent_env [ 1995.872192][ T1042] ? ksys_dup3+0x3e0/0x3e0 [ 1995.886389][ T3875] kobject: 'loop2' (00000000afe63fd4): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1995.890027][ T1042] ? kasan_check_read+0x11/0x20 [ 1995.906610][ T1043] oom_reaper: reaped process 25348 (syz-executor.4), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1995.936708][ T1042] ? _copy_to_user+0xc9/0x120 [ 1995.946666][ T1042] ? __fget_light+0x1a9/0x230 [ 1995.951428][ T1042] do_preadv+0x1c4/0x280 [ 1995.955695][ T1042] ? do_readv+0x370/0x370 [ 1995.964473][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1995.974102][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1995.977493][ T3875] kobject: 'loop1' (00000000001cb8a0): kobject_uevent_env [ 1995.982986][ T1042] ? do_syscall_64+0x26/0x610 [ 1995.990501][ T3875] kobject: 'loop1' (00000000001cb8a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1995.995823][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.014825][ T1042] ? do_syscall_64+0x26/0x610 [ 1996.020734][ T1042] __x64_sys_preadv+0x9a/0xf0 [ 1996.025702][ T1042] do_syscall_64+0x103/0x610 [ 1996.030896][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.037191][ T1042] RIP: 0033:0x458c29 [ 1996.041198][ T1042] Code: Bad RIP value. [ 1996.045350][ T1042] RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1996.055473][ T1042] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 1996.065472][ T1042] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000003 [ 1996.073695][ T1042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.082127][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 [ 1996.090532][ T1042] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 00000000ffffffff [ 1996.099244][ T1042] INFO: task syz-executor.2:12988 blocked for more than 144 seconds. [ 1996.107438][ T1042] Not tainted 5.1.0-rc4+ #66 [ 1996.112894][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1996.122855][ T1042] syz-executor.2 D29784 12988 12987 0x00000004 [ 1996.129426][ T1042] Call Trace: [ 1996.134464][ T1042] __schedule+0x817/0x1cc0 [ 1996.139081][ T1042] ? __mutex_lock+0x721/0x1310 [ 1996.144079][ T1042] ? __sched_text_start+0x8/0x8 [ 1996.149061][ T1042] schedule+0x92/0x180 [ 1996.153166][ T1042] schedule_preempt_disabled+0x13/0x20 [ 1996.159940][ T1042] __mutex_lock+0x726/0x1310 [ 1996.164698][ T1042] ? mon_bin_read+0x60/0x640 [ 1996.169413][ T1042] ? mutex_trylock+0x1e0/0x1e0 [ 1996.174601][ T1042] ? fsnotify+0xbc0/0xbc0 [ 1996.179505][ T1042] ? _copy_from_user+0xdd/0x150 [ 1996.184482][ T1042] mutex_lock_nested+0x16/0x20 [ 1996.189563][ T1042] ? mutex_lock_nested+0x16/0x20 [ 1996.194648][ T1042] mon_bin_read+0x60/0x640 [ 1996.199332][ T1042] do_iter_read+0x4a9/0x660 [ 1996.203956][ T1042] ? dup_iter+0x260/0x260 [ 1996.208487][ T1042] vfs_readv+0xf0/0x160 [ 1996.212666][ T1042] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1996.218909][ T1042] ? ksys_dup3+0x3e0/0x3e0 [ 1996.223345][ T1042] ? kasan_check_read+0x11/0x20 [ 1996.228474][ T1042] ? __fget_light+0x1a9/0x230 [ 1996.233184][ T1042] do_readv+0x15e/0x370 [ 1996.237531][ T1042] ? vfs_readv+0x160/0x160 [ 1996.242396][ T1042] ? do_syscall_64+0x26/0x610 [ 1996.248011][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.254256][ T1042] ? do_syscall_64+0x26/0x610 [ 1996.259236][ T1042] __x64_sys_readv+0x75/0xb0 [ 1996.263847][ T1042] do_syscall_64+0x103/0x610 [ 1996.268548][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.274540][ T1042] RIP: 0033:0x458c29 [ 1996.278527][ T1042] Code: Bad RIP value. [ 1996.282599][ T1042] RSP: 002b:00007fce941fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1996.291286][ T1042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 1996.299337][ T1042] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1996.307510][ T1042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.315584][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce941ff6d4 [ 1996.323633][ T1042] R13: 00000000004c5985 R14: 00000000004d9fe0 R15: 00000000ffffffff [ 1996.332169][ T1042] [ 1996.332169][ T1042] Showing all locks held in the system: [ 1996.340557][T24892] device bond_slave_1 left promiscuous mode [ 1996.347084][ T1042] 1 lock held by khungtaskd/1042: [ 1996.352131][ T1042] #0: 000000004394d1e3 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1996.362004][ T1042] 1 lock held by rsyslogd/7349: [ 1996.366991][ T1042] 2 locks held by getty/7462: [ 1996.371687][ T1042] #0: 000000007041aba1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.381340][ T1042] #1: 000000007e68feb4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.391153][ T1042] 2 locks held by getty/7463: [ 1996.395839][ T1042] #0: 0000000033f405b3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.404868][ T1042] #1: 00000000e3608716 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.414555][ T1042] 2 locks held by getty/7464: [ 1996.419329][ T1042] #0: 00000000b7d59708 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.428543][ T1042] #1: 0000000056cda1ef (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.438219][ T1042] 2 locks held by getty/7465: [ 1996.442900][ T1042] #0: 00000000cee05f76 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.451957][ T1042] #1: 00000000e792a773 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.461640][ T1042] 2 locks held by getty/7466: [ 1996.466404][ T1042] #0: 0000000095f80848 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.475406][ T1042] #1: 000000006b655212 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.485092][ T1042] 2 locks held by getty/7467: [ 1996.489932][ T1042] #0: 00000000a971a274 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.499070][ T1042] #1: 000000004bfed520 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.509260][ T1042] 2 locks held by getty/7468: [ 1996.513937][ T1042] #0: 00000000fb6f5280 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1996.523065][ T1042] #1: 000000009bdbdfa5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1996.532826][ T1042] 2 locks held by kworker/0:3/7518: [ 1996.538364][ T1042] #0: 00000000a6816edb ((wq_completion)rcu_gp){+.+.}, at: process_one_work+0x87e/0x1790 [ 1996.548565][ T1042] #1: 00000000c47a9a84 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x8b4/0x1790 [ 1996.559627][ T1042] 1 lock held by syz-executor.2/12983: [ 1996.565105][ T1042] #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 [ 1996.574014][ T1042] 1 lock held by syz-executor.2/12987: [ 1996.579557][ T1042] #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 [ 1996.588455][ T1042] 1 lock held by syz-executor.2/12988: [ 1996.594037][ T1042] #0: 00000000531b1404 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 [ 1996.603150][ T1042] 1 lock held by syz-executor.5/24882: [ 1996.608682][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.616772][ T1042] 1 lock held by syz-executor.3/24885: [ 1996.622251][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.630367][ T1042] 1 lock held by syz-executor.3/24898: [ 1996.635884][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1996.645533][ T1042] 2 locks held by syz-executor.0/24892: [ 1996.651218][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.659289][ T1042] #1: 000000004e0965b1 (rcu_state.exp_mutex){+.+.}, at: synchronize_rcu_expedited+0x4ab/0x5b0 [ 1996.669958][ T1042] 1 lock held by syz-executor.0/24899: [ 1996.675463][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.683744][ T1042] 1 lock held by syz-executor.0/24933: [ 1996.689288][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.697394][ T1042] 1 lock held by syz-executor.0/24934: [ 1996.702910][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.711044][ T1042] 1 lock held by syz-executor.4/24930: [ 1996.716756][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.724780][ T1042] 1 lock held by syz-executor.4/24937: [ 1996.730340][ T1042] #0: 00000000fa33a98c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1996.740132][T24898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1996.749578][ T1042] [ 1996.751940][ T1042] ============================================= [ 1996.751940][ T1042] [ 1996.757249][T24899] kobject: 'bonding_slave' (0000000037e7a46e): kobject_add_internal: parent: 'bond_slave_1', set: '' [ 1996.760790][ T1042] NMI backtrace for cpu 0 [ 1996.776327][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc4+ #66 [ 1996.778385][T24899] device bond_slave_1 entered promiscuous mode [ 1996.783877][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.783884][ T1042] Call Trace: [ 1996.783911][ T1042] dump_stack+0x172/0x1f0 [ 1996.783930][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1996.784045][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1996.784065][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 1996.791239][T24899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1996.800329][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1996.800342][ T1042] watchdog+0x9b7/0xec0 [ 1996.800364][ T1042] kthread+0x357/0x430 [ 1996.800377][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 1996.800388][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1996.800408][ T1042] ret_from_fork+0x3a/0x50 [ 1996.800505][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 1996.840991][ T3875] kobject: 'loop5' (00000000fd8b6789): kobject_uevent_env [ 1996.844366][ C1] NMI backtrace for cpu 1 [ 1996.844372][ C1] CPU: 1 PID: 3875 Comm: udevd Not tainted 5.1.0-rc4+ #66 [ 1996.844377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.844381][ C1] RIP: 0010:find_held_lock+0x22/0x130 [ 1996.844391][ C1] Code: e9 15 fd ff ff 0f 1f 00 55 48 89 e5 41 57 44 8d 7a ff 41 56 49 89 f6 49 63 c7 41 55 48 8d 04 80 41 54 4c 8d a4 c7 80 08 00 00 <53> 89 d3 48 83 ec 08 4c 89 e7 48 89 4d d0 e8 cb fa ff ff 85 c0 0f [ 1996.844394][ C1] RSP: 0018:ffff8880ae907c08 EFLAGS: 00000006 [ 1996.844401][ C1] RAX: 0000000000000014 RBX: 1ffff11015d20f8d RCX: ffff8880ae907c88 [ 1996.844407][ C1] RDX: 0000000000000005 RSI: ffffffff8a6d29c0 RDI: ffff8880987c44c0 [ 1996.844411][ C1] RBP: ffff8880ae907c28 R08: ffff8880987c44c0 R09: 0000000000000005 [ 1996.844416][ C1] R10: 0000000000000082 R11: 0000000000000003 R12: ffff8880987c4de0 [ 1996.844420][ C1] R13: ffffffff8331a8a4 R14: ffffffff8a6d29c0 R15: 0000000000000004 [ 1996.844425][ C1] FS: 00007f272c6d27a0(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1996.844429][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1996.844433][ C1] CR2: 0000000000ebb978 CR3: 00000000986ff000 CR4: 00000000001426e0 [ 1996.844437][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1996.844441][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1996.844443][ C1] Call Trace: [ 1996.844445][ C1] [ 1996.844448][ C1] ? debug_object_deactivate+0x1e4/0x360 [ 1996.844451][ C1] lock_release+0x262/0xa00 [ 1996.844453][ C1] ? kasan_check_write+0x14/0x20 [ 1996.844456][ C1] ? lock_downgrade+0x880/0x880 [ 1996.844459][ C1] ? debug_object_deactivate+0x104/0x360 [ 1996.844462][ C1] _raw_spin_unlock_irqrestore+0x1f/0xe0 [ 1996.844465][ C1] debug_object_deactivate+0x1e4/0x360 [ 1996.844468][ C1] ? __lock_acquire+0x548/0x3fb0 [ 1996.844471][ C1] ? debug_stats_show+0x100/0x100 [ 1996.844474][ C1] ? hrtimer_interrupt+0x13d/0x770 [ 1996.844477][ C1] __hrtimer_run_queues+0x1bc/0xde0 [ 1996.844480][ C1] ? trace_hardirqs_off+0x62/0x220 [ 1996.844483][ C1] ? hrtimer_start_range_ns+0xc80/0xc80 [ 1996.844486][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1996.844489][ C1] ? ktime_get_update_offsets_now+0x2d9/0x440 [ 1996.844492][ C1] hrtimer_interrupt+0x314/0x770 [ 1996.844495][ C1] smp_apic_timer_interrupt+0x120/0x570 [ 1996.844497][ C1] apic_timer_interrupt+0xf/0x20 [ 1996.844499][ C1] [ 1996.844502][ C1] RIP: 0010:vprintk_emit+0x5f8/0x6d0 [ 1996.844511][ C1] Code: 00 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 0f 85 95 00 00 00 48 83 3d 14 ba 37 07 00 74 29 e8 9d b2 15 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 c5 fe ff ff e8 89 b2 15 00 0f 0b e8 82 b2 15 00 [ 1996.844514][ C1] RSP: 0018:ffff8880987cf9e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 1996.844521][ C1] RAX: ffff8880987c44c0 RBX: 0000000000000293 RCX: 1ffff110130f89b6 [ 1996.844525][ C1] RDX: 0000000000000000 RSI: ffffffff815adc63 RDI: 0000000000000293 [ 1996.844529][ C1] RBP: ffff8880987cfa30 R08: ffff8880987c44c0 R09: ffff8880987c4db0 [ 1996.844533][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000037 [ 1996.844537][ C1] R13: 0000000000000200 R14: 1ffffffff11252ce R15: ffff8880a80cc700 [ 1996.844540][ C1] ? vprintk_emit+0x5f3/0x6d0 [ 1996.844542][ C1] vprintk_default+0x28/0x30 [ 1996.844545][ C1] vprintk_func+0x7e/0x189 [ 1996.844547][ C1] printk+0xba/0xed [ 1996.844550][ C1] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1996.844552][ C1] ? ksys_write+0x14f/0x2d0 [ 1996.844555][ C1] ? __lock_acquire+0x548/0x3fb0 [ 1996.844558][ C1] kobject_uevent_env+0x96/0x1030 [ 1996.844561][ C1] ? mark_held_locks+0xf0/0xf0 [ 1996.844563][ C1] kobject_synth_uevent.cold+0xa0/0x10d [ 1996.844566][ C1] ? uevent_net_rcv_skb+0x490/0x490 [ 1996.844569][ C1] uevent_store+0x26/0x60 [ 1996.844572][ C1] ? device_create_release+0x20/0x20 [ 1996.844574][ C1] dev_attr_store+0x5c/0x90 [ 1996.844577][ C1] ? component_bind_all.cold+0x139/0x139 [ 1996.844580][ C1] sysfs_kf_write+0x118/0x170 [ 1996.844583][ C1] ? sysfs_file_ops+0x1e0/0x1e0 [ 1996.844585][ C1] kernfs_fop_write+0x2ba/0x480 [ 1996.844588][ C1] __vfs_write+0x8d/0x110 [ 1996.844590][ C1] ? kernfs_fop_open+0xd90/0xd90 [ 1996.844593][ C1] vfs_write+0x20c/0x580 [ 1996.844595][ C1] ksys_write+0x14f/0x2d0 [ 1996.844598][ C1] ? __ia32_sys_read+0xb0/0xb0 [ 1996.844601][ C1] ? do_syscall_64+0x26/0x610 [ 1996.844604][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.844606][ C1] ? do_syscall_64+0x26/0x610 [ 1996.844609][ C1] __x64_sys_write+0x73/0xb0 [ 1996.844611][ C1] do_syscall_64+0x103/0x610 [ 1996.844615][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.844617][ C1] RIP: 0033:0x7f272bdda370 [ 1996.844626][ C1] Code: 73 01 c3 48 8b 0d c8 4a 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d 85 a2 2b 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 0e 8a 01 00 48 89 04 24 [ 1996.844629][ C1] RSP: 002b:00007fff5724ecd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1996.844635][ C1] RAX: ffffffffffffffda RBX: 00000000016aa870 RCX: 00007f272bdda370 [ 1996.844639][ C1] RDX: 0000000000000006 RSI: 000000000041f4f9 RDI: 000000000000000b [ 1996.844643][ C1] RBP: 00000000016a9e80 R08: 000000000041f4f1 R09: 00007f272be307d0 [ 1996.844647][ C1] R10: 7269762f73656369 R11: 0000000000000246 R12: 000000000000000b [ 1996.844651][ C1] R13: 0000000000000000 R14: 00000000016aa870 R15: 0000000001691250 [ 1996.874808][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 1996.883286][T24933] kobject: 'bonding_slave' (0000000037e7a46e): kobject_cleanup, parent 000000005fcd4c45 [ 1996.889098][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc4+ #66 [ 1996.889106][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.889111][ T1042] Call Trace: [ 1996.889136][ T1042] dump_stack+0x172/0x1f0 [ 1996.889156][ T1042] panic+0x2cb/0x65c [ 1996.889168][ T1042] ? __warn_printk+0xf3/0xf3 [ 1996.889191][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1996.901905][T24933] kobject: 'bonding_slave' (0000000037e7a46e): does not have a release() function, it is broken and must be fixed. See Documentation/kobject.txt. [ 1996.904639][ T1042] ? ___preempt_schedule+0x16/0x18 [ 1996.904658][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 1996.904676][ T1042] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 1996.924762][ T3875] kobject: 'loop5' (00000000fd8b6789): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1996.930406][ T1042] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 1996.930419][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 1996.930437][ T1042] watchdog+0x9c8/0xec0 [ 1996.930463][ T1042] kthread+0x357/0x430 [ 1996.938820][T24933] kobject: 'bonding_slave' (0000000037e7a46e): auto cleanup kobject_del [ 1996.946434][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 1996.946447][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1996.946463][ T1042] ret_from_fork+0x3a/0x50 [ 1996.955455][ T1042] Kernel Offset: disabled [ 1997.552273][ T1042] Rebooting in 86400 seconds..